$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft File: E597742A070B0180FE28980755EF35753C45FA58.mft (raw, json) Hash identifier: qU+eh4d6SbH5EKkNQO5ClJeH8/JSSNcHFv0K/35qNBU= Subject key identifier: 18:17:74:0A:1D:38:F9:7B:5C:F3:5D:75:25:B1:1E:6B:19:88:7A:E2 Authority key identifier: E5:97:74:2A:07:0B:01:80:FE:28:98:07:55:EF:35:75:3C:45:FA:58 Certificate issuer: /CN=E597742A070B0180FE28980755EF35753C45FA58 Certificate serial: 71A8418C3C1406397C4E722BED754DF7277C8801 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft Manifest number: 05 Signing time: Thu 04 Jun 2026 02:49:09 +0000 Manifest this update: Thu 04 Jun 2026 02:44:09 +0000 Manifest next update: Fri 05 Jun 2026 04:20:09 +0000 Files and hashes: 1: E597742A070B0180FE28980755EF35753C45FA58.crl (hash: moo4Q6KVDnaIllLc73I0CGZBnQhkS8UV/+kpv/ARjUI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.crl rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 04:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a8:41:8c:3c:14:06:39:7c:4e:72:2b:ed:75:4d:f7:27:7c:88:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E597742A070B0180FE28980755EF35753C45FA58 Validity Not Before: Jun 4 02:44:09 2026 GMT Not After : Jun 5 04:20:09 2026 GMT Subject: CN=1817740A1D38F97B5CF35D7525B11E6B19887AE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:f4:53:20:07:77:b4:71:53:8b:68:09:bf: 35:be:c1:1f:65:76:5f:93:5b:73:48:ea:5e:cd:29: 5a:f3:a5:4c:de:65:3f:00:cd:de:58:9a:17:58:e0: 86:20:11:29:da:e6:33:0d:5d:4f:62:c0:d5:24:dd: 8d:db:7e:31:83:e0:4e:08:82:79:a5:ae:12:3a:27: bf:fb:13:a4:d3:8f:32:72:18:f6:2a:af:cd:80:8f: d7:37:f3:51:76:9b:8f:1d:02:20:90:94:b2:34:ae: fb:87:a3:1c:75:6a:81:94:e1:7d:b8:e7:a8:cd:78: f6:33:ed:74:2e:22:21:f8:27:6b:20:48:0b:0e:26: a1:ea:14:5f:ca:d9:b2:c1:11:56:90:35:c7:9a:39: 34:28:7e:35:ce:c6:a7:e3:40:3d:72:86:ce:43:85: 6c:ec:06:ff:5e:b5:f4:f7:68:b0:46:40:50:f4:3f: b9:e4:0e:4c:fa:11:1d:e0:68:de:ae:8d:13:a1:1d: 2d:2f:5e:6f:d4:2b:fc:ca:bd:42:f8:1f:8f:64:2d: 10:81:24:d6:4c:dd:29:27:1e:c0:95:45:15:bd:9d: bc:78:bd:54:fe:68:ce:6b:13:0f:a4:9a:df:7a:09: 1f:94:2d:9f:3e:67:cb:80:23:ae:86:67:8f:fa:57: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:17:74:0A:1D:38:F9:7B:5C:F3:5D:75:25:B1:1E:6B:19:88:7A:E2 X509v3 Authority Key Identifier: keyid:E5:97:74:2A:07:0B:01:80:FE:28:98:07:55:EF:35:75:3C:45:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:18:b7:8f:a3:a1:c9:2a:5b:c2:a5:1c:89:ab:67:e6:23:ca: 2f:31:5d:a3:dd:20:8e:ed:69:a3:c2:19:d1:16:92:e1:06:31: 26:97:86:6f:e7:f0:54:0f:cb:cb:8d:36:39:90:8d:aa:27:7f: 7b:73:3e:a1:f4:33:73:a3:13:4e:78:3d:dc:ce:7a:56:9a:ba: 60:6d:da:32:ae:b4:d8:70:c6:97:4c:f9:ac:24:74:d7:50:3d: ad:ea:df:74:1a:fc:9e:b1:24:21:4b:34:02:75:1c:e1:da:d5: 29:73:57:17:e5:3f:29:30:cd:bb:e9:f5:dc:26:21:cf:4e:12: 71:f5:3a:a9:7e:12:ec:dc:5f:0c:8b:06:ca:b0:55:56:ba:28: 8b:f4:68:95:6b:e0:6c:3f:15:ce:41:f0:8c:35:97:c0:15:d6: 0a:67:f6:e9:e6:bc:f9:64:d7:bf:2e:c7:c8:cc:8e:12:ab:11: 27:cf:56:81:fe:ee:e4:05:bb:93:83:db:c1:fc:de:10:b9:36: 41:2b:47:3d:eb:7a:a6:5c:17:af:5d:28:4b:a0:03:2d:0f:07: 75:6e:55:98:30:98:5c:29:7a:d1:19:86:f5:41:ff:53:7a:61: da:e5:a5:ba:c1:6d:65:08:46:37:78:c5:6c:3c:22:a1:b6:59: c4:2c:04:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcahBjDwUBjl8TnIr7XVN9yd8iAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU5Nzc0MkEwNzBCMDE4MEZFMjg5ODA3NTVFRjM1NzUz QzQ1RkE1ODAeFw0yNjA2MDQwMjQ0MDlaFw0yNjA2MDUwNDIwMDlaMDMxMTAvBgNV BAMTKDE4MTc3NDBBMUQzOEY5N0I1Q0YzNUQ3NTI1QjExRTZCMTk4ODdBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKfRTIAd3tHFTi2gJvzW+wR9l dl+TW3NI6l7NKVrzpUzeZT8Azd5YmhdY4IYgESna5jMNXU9iwNUk3Y3bfjGD4E4I gnmlrhI6J7/7E6TTjzJyGPYqr82Aj9c381F2m48dAiCQlLI0rvuHoxx1aoGU4X24 56jNePYz7XQuIiH4J2sgSAsOJqHqFF/K2bLBEVaQNceaOTQofjXOxqfjQD1yhs5D hWzsBv9etfT3aLBGQFD0P7nkDkz6ER3gaN6ujROhHS0vXm/UK/zKvUL4H49kLRCB JNZM3SknHsCVRRW9nbx4vVT+aM5rEw+kmt96CR+ULZ8+Z8uAI66GZ4/6V8dZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGBd0Ch04+Xtc8111JbEeaxmIeuIwHwYDVR0j BBgwFoAU5Zd0KgcLAYD+KJgHVe81dTxF+lgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY0ODAyNjcyOTA1NDIyNy8wL0U1OTc3NDJBMDcwQjAxODBGRTI4OTgwNzU1RUYz NTc1M0M0NUZBNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTU5Nzc0MkEwNzBCMDE4MEZFMjg5ODA3NTVFRjM1NzUzQzQ1RkE1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NDgwMjY3MjkwNTQyMjcvMC9FNTk3NzQyQTA3MEIw MTgwRkUyODk4MDc1NUVGMzU3NTNDNDVGQTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhi3j6OhySpb wqUciatn5iPKLzFdo90gju1po8IZ0RaS4QYxJpeGb+fwVA/Ly402OZCNqid/e3M+ ofQzc6MTTng93M56Vpq6YG3aMq602HDGl0z5rCR011A9rerfdBr8nrEkIUs0AnUc 4drVKXNXF+U/KTDNu+n13CYhz04ScfU6qX4S7NxfDIsGyrBVVrooi/RolWvgbD8V zkHwjDWXwBXWCmf26ea8+WTXvy7HyMyOEqsRJ89Wgf7u5AW7k4PbwfzeELk2QStH Pet6plwXr10oS6ADLQ8HdW5VmDCYXCl60RmG9UH/U3ph2uWlusFtZQhGN3jFbDwi obZZxCwEuA== -----END CERTIFICATE-----Generated at Thu Jun 4 15:07:03 2026 by rpki-client