$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft File: 70B456FF624C0476CE9E190A89C23B97291210A4.mft (raw, json) Hash identifier: S/l96eWKCIDFLjC74YTHwRbwnIHbbNy8s1YhEDmf/As= Subject key identifier: 2E:BD:4D:B0:43:14:AF:48:6A:7F:D0:6B:64:8A:61:D1:83:61:0B:D9 Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 Certificate issuer: /CN=70B456FF624C0476CE9E190A89C23B97291210A4 Certificate serial: 056302F07F1A93587F0E30831C95FE0A68B4E587 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft Manifest number: 03 Signing time: Fri 29 May 2026 03:37:45 +0000 Manifest this update: Fri 29 May 2026 03:32:45 +0000 Manifest next update: Sat 30 May 2026 04:43:45 +0000 Files and hashes: 1: 70B456FF624C0476CE9E190A89C23B97291210A4.crl (hash: UjxA50Mkcp9PSLWEFEG3TdL+Cjs3Hvc8PD9qPSRZBEE=) 2: 3130332e3133382e31322e302f32342d3234203d3e20343030363139.roa (hash: bEH2bShlh//cZbtMb/m90zHRKZFjWC4M0DjyYPWcWas=) 3: 3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (hash: F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 04:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:63:02:f0:7f:1a:93:58:7f:0e:30:83:1c:95:fe:0a:68:b4:e5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4 Validity Not Before: May 29 03:32:45 2026 GMT Not After : May 30 04:43:45 2026 GMT Subject: CN=2EBD4DB04314AF486A7FD06B648A61D183610BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:3b:d2:d8:f6:12:f9:14:5e:aa:c6:9b:f3: f9:7a:98:38:04:6c:c2:e1:41:7d:33:01:9a:0d:cf: 44:a3:89:95:ae:cc:63:7a:70:54:dd:f9:37:8c:99: 5e:ee:6b:e2:b8:59:9e:49:f7:11:db:a3:f3:3a:3e: b2:6b:b6:b3:a8:b9:92:8c:83:eb:e6:bf:4d:08:d0: 3f:9c:30:f1:64:2b:4e:3f:82:21:3d:f4:fb:ab:3c: 94:2e:39:45:22:58:b0:20:73:da:c6:fe:73:82:39: 00:ec:57:72:71:9e:80:ca:56:c4:6d:54:4e:36:e1: 98:87:f2:ae:5a:d6:51:db:ca:25:14:78:87:30:25: 28:f0:36:d8:02:0a:9b:b7:91:73:0a:d7:ad:07:31: 7a:0b:ee:eb:ae:43:35:93:75:29:f7:41:39:61:2c: 2c:ce:96:05:70:bf:2a:e7:7b:69:64:d0:b4:ff:e2: a7:b4:db:8d:0a:f7:14:00:4a:0c:42:84:e0:1e:80: 7d:6d:fa:ff:8b:3d:16:ef:7d:c9:91:61:26:eb:1b: 91:f7:0e:45:89:a4:b3:bc:42:b8:b4:65:2d:a0:1a: d6:6a:05:23:25:83:30:6f:e9:06:a6:02:1b:ad:40: c2:cb:0f:1a:ec:6d:74:ad:7b:2f:bc:26:3c:92:02: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BD:4D:B0:43:14:AF:48:6A:7F:D0:6B:64:8A:61:D1:83:61:0B:D9 X509v3 Authority Key Identifier: keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:85:be:a4:58:20:58:86:f9:62:3b:bf:44:d9:c6:04:93:aa: 62:8a:77:21:b2:00:a2:2b:66:47:0a:c3:9c:1f:1d:7e:6c:a9: f2:4b:49:70:e6:e8:97:87:d7:30:30:20:95:bd:ff:ae:05:54: 4b:87:33:74:6d:f4:50:b3:29:b6:08:20:25:3e:ea:cd:47:fc: 46:e9:cc:98:e0:ff:3b:23:b7:ae:c8:45:ab:18:b7:e6:b2:85: 69:f6:c8:44:d8:be:f1:ea:f8:bd:33:37:bf:46:bb:a4:4b:4a: a1:4a:28:4a:97:a2:d8:d4:9d:eb:b2:af:3d:94:e8:79:81:dd: 86:31:3a:17:7f:d2:10:50:f7:08:67:49:13:5e:f5:e2:67:d0: 73:55:8b:b3:e2:84:ea:24:5d:3d:4a:38:77:39:b1:4e:1f:a2: 7c:9e:54:41:f3:9f:72:9a:dd:e1:cd:50:92:6d:80:5b:66:1a: f7:b8:4d:33:b8:fe:1a:73:e1:5d:e2:b2:fc:c0:c7:b0:1e:2f: e6:15:0a:2e:cb:9a:2e:12:9e:15:8c:a2:07:48:a9:dd:d8:a3: 03:41:f1:6d:7a:f2:8b:ab:3a:02:77:3c:5c:59:a2:c0:6e:ba: 90:2c:3e:7b:9c:f6:8c:1f:d6:3c:c2:11:fd:f9:4d:83:5c:9a: a2:96:9d:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBWMC8H8ak1h/DjCDHJX+Cmi05YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcy OTEyMTBBNDAeFw0yNjA1MjkwMzMyNDVaFw0yNjA1MzAwNDQzNDVaMDMxMTAvBgNV BAMTKDJFQkQ0REIwNDMxNEFGNDg2QTdGRDA2QjY0OEE2MUQxODM2MTBCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzTvS2PYS+RReqsab8/l6mDgE bMLhQX0zAZoNz0SjiZWuzGN6cFTd+TeMmV7ua+K4WZ5J9xHbo/M6PrJrtrOouZKM g+vmv00I0D+cMPFkK04/giE99PurPJQuOUUiWLAgc9rG/nOCOQDsV3JxnoDKVsRt VE424ZiH8q5a1lHbyiUUeIcwJSjwNtgCCpu3kXMK160HMXoL7uuuQzWTdSn3QTlh LCzOlgVwvyrne2lk0LT/4qe0240K9xQASgxChOAegH1t+v+LPRbvfcmRYSbrG5H3 DkWJpLO8Qri0ZS2gGtZqBSMlgzBv6QamAhutQMLLDxrsbXStey+8JjySAsAXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULr1NsEMUr0hqf9BrZIph0YNhC9kwHwYDVR0j BBgwFoAUcLRW/2JMBHbOnhkKicI7lykSEKQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU4Mjk5MTYwOTA2OTU4OS8wLzcwQjQ1NkZGNjI0QzA0NzZDRTlFMTkwQTg5QzIz Qjk3MjkxMjEwQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1ODI5OTE2MDkwNjk1ODkvMC83MEI0NTZGRjYyNEMw NDc2Q0U5RTE5MEE4OUMyM0I5NzI5MTIxMEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA04W+pFggWIb5 Yju/RNnGBJOqYop3IbIAoitmRwrDnB8dfmyp8ktJcObol4fXMDAglb3/rgVUS4cz dG30ULMptgggJT7qzUf8RunMmOD/OyO3rshFqxi35rKFafbIRNi+8er4vTM3v0a7 pEtKoUooSpei2NSd67KvPZToeYHdhjE6F3/SEFD3CGdJE1714mfQc1WLs+KE6iRd PUo4dzmxTh+ifJ5UQfOfcprd4c1Qkm2AW2Ya97hNM7j+GnPhXeKy/MDHsB4v5hUK LsuaLhKeFYyiB0ip3dijA0HxbXryi6s6Anc8XFmiwG66kCw+e5z2jB/WPMIR/flN g1yaopadeg== -----END CERTIFICATE-----Generated at Fri May 29 22:03:28 2026 by rpki-client