$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.mft File: 9A2D314750263BD27FBA266C8599F3E64F26E3C7.mft (raw, json) Hash identifier: t71OVvAiXR7YB08iBzuP+qSYkv584wGqPRlzQ4OgDEI= Subject key identifier: D0:2C:71:29:B1:02:84:6B:8E:15:DD:B3:17:74:FE:E0:50:F7:20:3A Authority key identifier: 9A:2D:31:47:50:26:3B:D2:7F:BA:26:6C:85:99:F3:E6:4F:26:E3:C7 Certificate issuer: /CN=9A2D314750263BD27FBA266C8599F3E64F26E3C7 Certificate serial: 7DE2B1E8823D06184353201E43B38E3560BACFFD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.mft Manifest number: 0F Signing time: Fri 29 May 2026 04:22:32 +0000 Manifest this update: Fri 29 May 2026 04:17:32 +0000 Manifest next update: Sat 30 May 2026 05:49:32 +0000 Files and hashes: 1: 3134342e34382e36342e302f32322d3232203d3e2034383337.roa (hash: IwCCOYlLY/AIXfyQB/6pxqM4NVmHgGV47rpBHcTjBxE=) 2: 323430313a613665303a3a2f33322d3332203d3e2030.roa (hash: nOvIMdHhTRhb5sUMtQwcziF2554ZM2h0OdA2vT3YEJc=) 3: 9A2D314750263BD27FBA266C8599F3E64F26E3C7.crl (hash: 66t/gVawhAL1z52CPTe0qzObb+oQ/jjeaFG35vKIfRw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.crl rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e2:b1:e8:82:3d:06:18:43:53:20:1e:43:b3:8e:35:60:ba:cf:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2D314750263BD27FBA266C8599F3E64F26E3C7 Validity Not Before: May 29 04:17:32 2026 GMT Not After : May 30 05:49:32 2026 GMT Subject: CN=D02C7129B102846B8E15DDB31774FEE050F7203A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:f9:da:ed:95:54:15:d1:45:8b:c9:02:4f: 76:9a:ca:e4:79:40:df:1b:1a:a1:d2:fd:06:0a:e4: 0b:a0:64:9f:dc:88:76:e9:43:fd:6d:40:c2:b2:fb: ac:85:86:37:06:6f:05:0d:a3:9f:6d:bd:f4:2d:cc: 00:eb:4a:c0:c9:bd:35:b8:03:cd:03:48:db:bd:ee: c5:16:ff:78:e8:62:a1:6e:ef:41:16:8b:72:a8:04: df:a8:0d:07:10:31:6a:67:d2:52:db:a2:a9:48:ce: f1:0a:db:bf:04:98:8c:fd:87:7f:06:8b:d8:d9:fd: e6:a7:de:cc:6f:50:88:5b:eb:e8:1e:30:9c:31:bf: 59:62:21:59:e1:97:b0:f7:ce:01:83:0d:95:37:c0: 38:2a:95:fb:22:55:54:85:47:21:1e:61:ac:fb:e0: 36:7e:a6:ff:6a:7c:4f:1b:a9:45:89:d2:91:91:a1: 5a:0d:66:c2:6c:8b:1c:22:81:23:bb:8f:4a:8d:ee: ae:03:08:a2:ec:af:b5:4a:3c:4a:1a:4f:3b:49:b0: 5b:8f:ef:ba:8c:e0:6a:0a:db:36:47:ff:4d:46:45: a6:eb:81:ac:3d:82:ab:62:b7:de:cb:f6:10:51:cf: eb:06:7a:a7:d8:55:aa:67:91:1d:df:35:93:ba:e4: f3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2C:71:29:B1:02:84:6B:8E:15:DD:B3:17:74:FE:E0:50:F7:20:3A X509v3 Authority Key Identifier: keyid:9A:2D:31:47:50:26:3B:D2:7F:BA:26:6C:85:99:F3:E6:4F:26:E3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6d:6e:bc:5a:93:e1:7d:14:ed:c7:72:f7:bd:38:e0:84:cf: 53:b4:b3:03:52:2a:c9:8d:ca:1c:53:09:65:67:4a:1c:b0:f4: e7:55:73:98:34:88:5f:cd:a7:81:65:4c:cf:3b:35:ec:9a:ba: 6a:df:97:38:98:6c:06:b6:dc:60:5b:e5:a5:c7:3f:5a:9c:be: 62:d8:c0:7e:9c:6f:12:2a:d3:4a:0b:55:9c:ab:59:f4:78:9c: 88:d4:ea:10:4e:5b:3d:64:89:4e:66:e0:ba:57:b4:8a:f7:40: 32:b3:14:45:dd:d1:8c:89:25:1a:69:08:38:6e:1a:9f:64:7b: 5b:c4:96:35:16:3e:b7:ba:d1:be:3c:f4:e5:50:bf:7d:6a:26: 0c:10:39:37:62:7d:09:44:38:39:92:39:a3:f9:8e:32:3d:b6: d2:80:78:47:0b:0d:10:58:d8:37:e0:88:d2:be:29:5d:17:38: 1e:84:45:96:4f:cb:fd:f9:fe:87:dd:8a:59:da:90:e3:a1:4f: 52:1e:fa:b0:7e:22:3b:86:0e:ef:da:5e:14:38:60:04:20:bd: 8f:0e:de:29:bf:6f:b6:6e:96:32:9d:b6:ee:aa:b6:8c:f4:45: 40:31:fc:30:ea:8e:7a:6d:3d:44:28:f6:e0:06:5d:c1:be:6f: b3:1d:64:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfeKx6II9BhhDUyAeQ7OONWC6z/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRDMxNDc1MDI2M0JEMjdGQkEyNjZDODU5OUYzRTY0 RjI2RTNDNzAeFw0yNjA1MjkwNDE3MzJaFw0yNjA1MzAwNTQ5MzJaMDMxMTAvBgNV BAMTKEQwMkM3MTI5QjEwMjg0NkI4RTE1RERCMzE3NzRGRUUwNTBGNzIwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/vna7ZVUFdFFi8kCT3aayuR5 QN8bGqHS/QYK5AugZJ/ciHbpQ/1tQMKy+6yFhjcGbwUNo59tvfQtzADrSsDJvTW4 A80DSNu97sUW/3joYqFu70EWi3KoBN+oDQcQMWpn0lLboqlIzvEK278EmIz9h38G i9jZ/ean3sxvUIhb6+geMJwxv1liIVnhl7D3zgGDDZU3wDgqlfsiVVSFRyEeYaz7 4DZ+pv9qfE8bqUWJ0pGRoVoNZsJsixwigSO7j0qN7q4DCKLsr7VKPEoaTztJsFuP 77qM4GoK2zZH/01GRabrgaw9gqtit97L9hBRz+sGeqfYVapnkR3fNZO65PMLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0CxxKbEChGuOFd2zF3T+4FD3IDowHwYDVR0j BBgwFoAUmi0xR1AmO9J/uiZshZnz5k8m48cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg0MjA4NjMwMDE1NTkyNS8xLzlBMkQzMTQ3NTAyNjNCRDI3RkJBMjY2Qzg1OTlG M0U2NEYyNkUzQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyRDMxNDc1MDI2M0JEMjdGQkEyNjZDODU5OUYzRTY0RjI2RTNDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4NDIwODYzMDAxNTU5MjUvMS85QTJEMzE0NzUwMjYz QkQyN0ZCQTI2NkM4NTk5RjNFNjRGMjZFM0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW1uvFqT4X0U 7cdy97044ITPU7SzA1IqyY3KHFMJZWdKHLD051VzmDSIX82ngWVMzzs17Jq6at+X OJhsBrbcYFvlpcc/Wpy+YtjAfpxvEirTSgtVnKtZ9HiciNTqEE5bPWSJTmbgule0 ivdAMrMURd3RjIklGmkIOG4an2R7W8SWNRY+t7rRvjz05VC/fWomDBA5N2J9CUQ4 OZI5o/mOMj220oB4RwsNEFjYN+CI0r4pXRc4HoRFlk/L/fn+h92KWdqQ46FPUh76 sH4iO4YO79peFDhgBCC9jw7eKb9vtm6WMp227qq2jPRFQDH8MOqOem09RCj24AZd wb5vsx1k0Q== -----END CERTIFICATE-----Generated at Fri May 29 22:02:55 2026 by rpki-client