$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft File: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft (raw, json) Hash identifier: XdlInjLs5b+0X34qqa9LRisoRoEw33O71+vpcqZdPBo= Subject key identifier: E3:A1:4E:F6:68:2D:00:7E:1B:B9:EB:0E:8F:05:08:B1:A3:B0:5F:65 Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC Certificate serial: 6318DA8DB07C3D500813B23B64B87317F1F1510E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft Manifest number: 01 Signing time: Fri 29 May 2026 07:31:25 +0000 Manifest this update: Fri 29 May 2026 07:26:25 +0000 Manifest next update: Sat 30 May 2026 09:42:25 +0000 Files and hashes: 1: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl (hash: 2RDjPxKUWkgdDjY/LGsIbRtVkqDB7pLb6HUVEc2Pxf8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:18:da:8d:b0:7c:3d:50:08:13:b2:3b:64:b8:73:17:f1:f1:51:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC Validity Not Before: May 29 07:26:25 2026 GMT Not After : May 30 09:42:25 2026 GMT Subject: CN=E3A14EF6682D007E1BB9EB0E8F0508B1A3B05F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9a:04:d8:d7:1b:aa:69:45:29:ea:52:7d:5c: 3c:7f:ba:29:58:43:5e:90:24:b2:43:ae:fa:9f:0e: 1b:29:99:d2:6f:a5:0a:ef:7a:7d:8c:c7:c0:05:29: 0c:6c:b9:37:b4:e2:9e:ab:10:a3:06:28:fc:d6:1a: fd:51:7f:86:04:f2:17:07:7f:21:c0:ca:f1:d5:ec: 79:eb:54:f7:fb:34:2b:fe:67:5e:76:c3:fb:b8:42: 17:34:b4:aa:0a:50:ac:f0:13:84:62:31:aa:b5:23: 0c:83:7f:86:42:d4:db:d4:65:92:f8:90:7a:be:2d: bd:d4:8f:0f:a7:48:17:81:34:47:11:6f:70:01:f1: f0:e9:3c:19:92:b9:63:0c:d7:bd:16:f4:ae:ea:74: 3c:ac:e3:67:5d:45:8f:6b:5b:15:b8:9f:8d:09:7a: e9:3d:a8:d7:16:06:e5:5b:a3:e0:bf:d3:16:12:07: 10:1b:53:57:78:1f:c2:9c:94:09:92:66:89:a0:a2: 5c:ea:f3:1a:92:45:8e:34:72:8c:56:43:78:9b:dd: f8:9f:71:08:14:1f:11:89:e3:33:63:43:d5:2a:7b: 8b:94:88:98:24:66:f1:0f:6b:ca:b3:15:b6:bd:7f: 12:93:58:33:b5:2b:df:51:04:05:fd:47:57:a0:82: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:4E:F6:68:2D:00:7E:1B:B9:EB:0E:8F:05:08:B1:A3:B0:5F:65 X509v3 Authority Key Identifier: keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1a:e5:a1:93:91:09:98:1c:6b:c1:eb:f6:41:4a:ea:59:3a: 55:6c:41:01:48:c2:5d:fb:00:01:e2:63:a9:8e:b6:eb:e3:ba: 96:3c:e8:a3:49:b6:4e:94:ff:a1:d8:51:e8:b3:e5:90:c2:5e: 57:36:dc:07:14:bc:79:23:6a:22:78:8e:17:99:1b:22:76:c9: c0:2a:41:16:74:81:7e:56:5f:2a:59:1f:c9:c5:11:40:7c:84: 6e:9f:9b:28:2e:e9:01:22:53:90:50:ef:ac:55:16:b4:1c:4e: 9e:27:85:9a:10:24:35:1f:18:fe:0b:97:15:2c:3d:b7:87:09: 5b:15:00:ae:7a:84:52:76:f5:9f:aa:d0:c7:c0:bb:9d:4f:51: 85:7d:a0:da:48:86:a1:d7:9f:d0:d3:8d:89:21:17:7b:30:39: 66:8b:f2:c4:8b:73:dd:71:8e:66:71:18:98:46:5b:a0:0b:23: bb:ab:d1:df:9b:91:93:60:69:65:43:d8:f1:ff:14:46:fe:be: c3:76:42:96:13:22:d6:80:07:71:d2:ba:2d:20:ca:a8:8d:92: 39:99:62:44:07:58:ba:bf:e7:88:81:e8:34:59:fb:66:e4:72: a7:5b:7c:02:75:15:48:9a:c1:d1:81:d5:19:47:4d:ac:f7:70: 4d:02:61:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYxjajbB8PVAIE7I7ZLhzF/HxUQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBF NDJDQzJFQzAeFw0yNjA1MjkwNzI2MjVaFw0yNjA1MzAwOTQyMjVaMDMxMTAvBgNV BAMTKEUzQTE0RUY2NjgyRDAwN0UxQkI5RUIwRThGMDUwOEIxQTNCMDVGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmgTY1xuqaUUp6lJ9XDx/uilY Q16QJLJDrvqfDhspmdJvpQrven2Mx8AFKQxsuTe04p6rEKMGKPzWGv1Rf4YE8hcH fyHAyvHV7HnrVPf7NCv+Z152w/u4Qhc0tKoKUKzwE4RiMaq1IwyDf4ZC1NvUZZL4 kHq+Lb3Ujw+nSBeBNEcRb3AB8fDpPBmSuWMM170W9K7qdDys42ddRY9rWxW4n40J euk9qNcWBuVbo+C/0xYSBxAbU1d4H8KclAmSZomgolzq8xqSRY40coxWQ3ib3fif cQgUHxGJ4zNjQ9Uqe4uUiJgkZvEPa8qzFba9fxKTWDO1K99RBAX9R1egglnhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU46FO9mgtAH4buesOjwUIsaOwX2UwHwYDVR0j BBgwFoAUcYtr0x1A42IcfVI/DpzFEOQswuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY0MTg0NDQyMTkxODc0MS8wLzcxOEI2QkQzMUQ0MEUzNjIxQzdENTIzRjBFOUND NTEwRTQyQ0MyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBFNDJDQzJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2NDE4NDQ0MjE5MTg3NDEvMC83MThCNkJEMzFENDBF MzYyMUM3RDUyM0YwRTlDQzUxMEU0MkNDMkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixrloZORCZgc a8Hr9kFK6lk6VWxBAUjCXfsAAeJjqY626+O6ljzoo0m2TpT/odhR6LPlkMJeVzbc BxS8eSNqIniOF5kbInbJwCpBFnSBflZfKlkfycURQHyEbp+bKC7pASJTkFDvrFUW tBxOnieFmhAkNR8Y/guXFSw9t4cJWxUArnqEUnb1n6rQx8C7nU9RhX2g2kiGodef 0NONiSEXezA5ZovyxItz3XGOZnEYmEZboAsju6vR35uRk2BpZUPY8f8URv6+w3ZC lhMi1oAHcdK6LSDKqI2SOZliRAdYur/niIHoNFn7ZuRyp1t8AnUVSJrB0YHVGUdN rPdwTQJhxg== -----END CERTIFICATE-----Generated at Fri May 29 22:03:30 2026 by rpki-client