$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft File: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft (raw, json) Hash identifier: HFLxmkp7NB+LbtqBpNgGZYLlntxhTd4gOy9/Y+S87m4= Subject key identifier: 1A:3C:34:AD:30:39:F7:B8:C7:79:13:72:B9:31:FE:31:F0:6A:3F:1E Authority key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D Certificate issuer: /CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Certificate serial: 127268BC2DD99FB674D5682299573BEAD9BB0FCB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft Manifest number: 26 Signing time: Fri 29 May 2026 03:33:31 +0000 Manifest this update: Fri 29 May 2026 03:28:31 +0000 Manifest next update: Sat 30 May 2026 06:15:31 +0000 Files and hashes: 1: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl (hash: nufi+WI0ZhKcCgTRV+4QifRboXvAdqqyLEG1iIyDuEM=) 2: AS131562.roa (hash: rgC1CPivUHcPOlUWaVVB1FPcpFO7Ul/jwyyf2lMstXM=) 3: AS0.roa (hash: 28mAZTz2GnuHbhtlI5VtdU5qKVbmobViaTukwaHnXc8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:72:68:bc:2d:d9:9f:b6:74:d5:68:22:99:57:3b:ea:d9:bb:0f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Validity Not Before: May 29 03:28:31 2026 GMT Not After : May 30 06:15:31 2026 GMT Subject: CN=1A3C34AD3039F7B8C7791372B931FE31F06A3F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:69:11:9c:ca:ab:0e:ed:4e:2e:46:62:26: f0:70:11:97:83:71:3c:a8:03:33:9e:1e:a7:64:16: 59:c4:fb:0f:e2:ca:5f:f3:66:df:18:b3:d4:22:b3: 88:fe:6b:ed:64:a3:7b:58:cc:80:72:2f:10:39:d5: 16:5d:c2:f2:51:33:92:6a:17:99:7e:6e:b5:32:65: 1a:b0:67:1d:b6:9f:13:b6:04:ef:3e:91:85:8d:e3: 92:4c:52:60:4c:60:b7:e9:0e:72:e5:57:5f:d0:a4: 1c:1c:2d:af:62:5d:30:c6:53:f1:b4:18:23:88:d3: 18:4d:d9:ea:dc:b5:2a:28:f7:7a:5a:5f:52:df:fb: 34:ac:89:72:99:22:27:cf:c2:62:4a:00:0a:f0:f9: c2:84:94:86:75:24:16:8d:e3:9d:cb:b6:77:d2:bd: f5:19:8b:cf:53:50:c5:50:d6:c0:e0:eb:19:97:2d: 50:22:85:ab:9b:a3:57:62:66:cc:5e:8a:2c:de:06: 73:e4:64:15:7f:58:0d:3c:65:fe:a5:20:ca:5d:6c: cc:24:b4:87:5c:74:c6:13:38:95:85:e4:d8:87:5a: 71:bc:ee:13:ab:5a:12:d5:9c:1f:d4:23:2d:02:8b: d7:39:03:78:7e:f0:aa:76:f0:87:fc:e1:a9:c8:d2: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3C:34:AD:30:39:F7:B8:C7:79:13:72:B9:31:FE:31:F0:6A:3F:1E X509v3 Authority Key Identifier: keyid:F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ee:0c:e5:1c:0e:a5:d2:a4:87:a7:e4:17:36:8c:95:99:32: 45:c1:a4:eb:83:26:c1:f9:1b:56:51:85:b0:66:ec:63:9e:19: 2f:a4:9f:43:77:43:cc:d5:e5:91:2e:0e:14:55:37:bf:80:41: c8:5b:59:15:f8:0f:94:9c:88:ce:05:f9:ca:83:d1:7d:5e:9c: 74:c7:58:a1:48:d4:fd:64:a2:93:38:91:a0:7b:e5:b3:0f:07: 77:b2:c0:39:5d:d3:b8:f7:8d:f6:ce:5c:59:c8:af:b5:bf:b2: 45:54:05:b2:b6:1b:2e:83:8f:a9:45:aa:92:13:60:95:1a:0a: 48:ca:e0:0c:a0:9c:fe:e3:cc:02:b6:41:e6:4d:d3:90:80:2a: e2:3e:40:af:df:40:bf:49:46:83:20:85:6a:9a:3d:81:19:03: 04:1e:5e:1e:60:8e:32:ab:b5:bc:a5:70:bd:d9:03:9a:0c:40: 6b:53:2d:95:31:73:f8:0d:7b:29:7e:dc:0f:2c:72:a0:15:03: e4:5c:8e:c5:87:29:ef:1e:5b:04:e3:93:c1:0e:53:a8:a3:ad: f6:35:1b:c4:a7:7e:42:3a:d7:f7:2b:3c:85:44:60:aa:3f:8f: b5:b7:e9:80:3d:d5:97:7d:c7:f9:6c:0c:bd:4e:cc:7e:6a:dc: 9c:fc:23:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEnJovC3Zn7Z01WgimVc76tm7D8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzND MzNBMEI4RDAeFw0yNjA1MjkwMzI4MzFaFw0yNjA1MzAwNjE1MzFaMDMxMTAvBgNV BAMTKDFBM0MzNEFEMzAzOUY3QjhDNzc5MTM3MkI5MzFGRTMxRjA2QTNGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuGkRnMqrDu1OLkZiJvBwEZeD cTyoAzOeHqdkFlnE+w/iyl/zZt8Ys9Qis4j+a+1ko3tYzIByLxA51RZdwvJRM5Jq F5l+brUyZRqwZx22nxO2BO8+kYWN45JMUmBMYLfpDnLlV1/QpBwcLa9iXTDGU/G0 GCOI0xhN2erctSoo93paX1Lf+zSsiXKZIifPwmJKAArw+cKElIZ1JBaN453LtnfS vfUZi89TUMVQ1sDg6xmXLVAihaubo1diZsxeiizeBnPkZBV/WA08Zf6lIMpdbMwk tIdcdMYTOJWF5NiHWnG87hOrWhLVnB/UIy0Ci9c5A3h+8Kp28If84anI0oh3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGjw0rTA597jHeRNyuTH+MfBqPx4wHwYDVR0j BBgwFoAU8HG9z9APF7DSy3oE459/w8M6C40wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTQ2OTI0MjIxMDg0NDY5My8wL0YwNzFCRENGRDAwRjE3QjBEMkNCN0EwNEUzOUY3 RkMzQzMzQTBCOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzNDMzNBMEI4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE0NjkyNDIyMTA4NDQ2OTMvMC9GMDcxQkRDRkQwMEYx N0IwRDJDQjdBMDRFMzlGN0ZDM0MzM0EwQjhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae4M5RwOpdKk h6fkFzaMlZkyRcGk64MmwfkbVlGFsGbsY54ZL6SfQ3dDzNXlkS4OFFU3v4BByFtZ FfgPlJyIzgX5yoPRfV6cdMdYoUjU/WSikziRoHvlsw8Hd7LAOV3TuPeN9s5cWciv tb+yRVQFsrYbLoOPqUWqkhNglRoKSMrgDKCc/uPMArZB5k3TkIAq4j5Ar99Av0lG gyCFapo9gRkDBB5eHmCOMqu1vKVwvdkDmgxAa1MtlTFz+A17KX7cDyxyoBUD5FyO xYcp7x5bBOOTwQ5TqKOt9jUbxKd+QjrX9ys8hURgqj+PtbfpgD3Vl33H+WwMvU7M fmrcnPwj3A== -----END CERTIFICATE-----Generated at Fri May 29 22:02:47 2026 by rpki-client