$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: ZEzToM1ixUnR4KiBo/7+ILyJOljO/wxy/KL0to7QM9w= Subject key identifier: A3:F3:A5:CC:21:93:53:BC:81:E7:9B:B1:24:51:5B:FF:1F:E3:EE:22 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 6B6C5570ED9938E61901D1C3B214D9126730444E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 98 Signing time: Wed 13 May 2026 01:05:50 +0000 Manifest this update: Wed 13 May 2026 01:00:50 +0000 Manifest next update: Thu 14 May 2026 01:38:50 +0000 Files and hashes: 1: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: 7w2UYOKrRk/YBCj8wD1XQ3Go8pooysm3sdWNed1CLGE=) 2: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6c:55:70:ed:99:38:e6:19:01:d1:c3:b2:14:d9:12:67:30:44:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: May 13 01:00:50 2026 GMT Not After : May 14 01:38:50 2026 GMT Subject: CN=A3F3A5CC219353BC81E79BB124515BFF1FE3EE22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:ce:a1:f1:42:98:4b:9f:e8:f9:52:40:7d: d5:b3:52:72:10:cd:99:ac:40:ca:21:10:f1:e7:25: 01:ba:2a:a0:2f:53:94:6e:03:94:87:ca:4a:34:fa: 91:b3:d6:43:27:b2:37:00:9b:27:43:fd:69:38:64: a1:1c:89:4a:b4:db:be:08:09:3a:cc:5e:b7:44:0b: c6:42:09:a9:71:67:fa:a3:a5:44:c5:e6:d6:41:a2: a1:8b:30:b7:f8:0e:e9:a3:2c:a4:d4:0d:e5:fd:d2: 00:77:b8:70:27:07:43:31:cb:5d:c4:05:56:48:8c: 07:0f:8a:b0:7b:78:12:12:44:49:de:46:eb:a4:e5: f0:d6:cb:90:b4:83:17:a9:9a:bd:bf:e7:92:e1:c0: 68:6f:37:c7:d0:bb:a7:f4:33:70:71:1a:f4:b9:47: 42:ab:11:10:3a:78:4a:8d:b7:12:7b:54:39:f8:ed: c0:3e:2a:56:17:ab:a7:07:21:02:99:69:3c:b6:9a: f0:14:37:30:07:bb:b4:77:1c:76:af:53:2a:23:1f: 3e:c8:f2:b2:59:ff:17:75:0a:a1:4d:3d:91:3a:d1: 3a:72:f0:dd:c7:20:69:83:ea:89:a8:c3:6d:4f:40: b3:0f:d7:55:1a:aa:e1:cd:b4:c3:83:fa:2a:e9:96: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F3:A5:CC:21:93:53:BC:81:E7:9B:B1:24:51:5B:FF:1F:E3:EE:22 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f1:ab:8e:ed:53:6d:0c:9b:72:34:d8:97:23:88:93:a2:bc: e7:6a:b4:21:06:41:9f:ac:fe:55:58:22:94:3b:40:04:75:ce: ad:bd:b7:20:0a:cc:4c:b4:33:31:bc:d3:20:be:a9:2f:36:14: cc:8f:f1:cd:da:4e:d3:00:2e:17:7e:29:05:eb:4d:d0:3a:6b: fa:d2:ae:b6:9f:04:ab:2d:34:5a:37:60:28:5b:ce:43:47:9a: 19:c8:06:fa:5d:03:33:f1:17:c6:46:94:4a:41:7a:cf:d2:c7: ea:3f:9b:81:b2:f3:e0:dd:22:08:30:b4:a2:bd:d0:77:7d:af: a4:91:91:fc:f7:ce:76:9f:57:4d:8b:17:f7:4c:25:1f:88:59: 81:9b:cf:1e:cd:fd:f7:e7:03:84:73:b6:2f:84:15:fc:74:e1: bf:f2:eb:51:95:8a:42:98:9f:7f:ca:2c:96:3f:5a:61:60:1a: 0c:06:77:18:e1:08:3b:cc:21:c6:a5:34:18:1b:a2:ea:c8:2c: e0:ec:3c:36:96:ef:cb:b5:fa:a8:0c:66:21:0d:ea:c5:9f:b2: ad:c5:d1:11:1d:79:64:c3:99:55:97:e8:84:fd:aa:fb:4c:4a: 58:47:3f:4d:eb:f4:a1:67:86:73:c0:06:15:f0:43:25:60:69: 73:39:83:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa2xVcO2ZOOYZAdHDshTZEmcwRE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA1MTMwMTAwNTBaFw0yNjA1MTQwMTM4NTBaMDMxMTAvBgNV BAMTKEEzRjNBNUNDMjE5MzUzQkM4MUU3OUJCMTI0NTE1QkZGMUZFM0VFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwy86h8UKYS5/o+VJAfdWzUnIQ zZmsQMohEPHnJQG6KqAvU5RuA5SHyko0+pGz1kMnsjcAmydD/Wk4ZKEciUq0274I CTrMXrdEC8ZCCalxZ/qjpUTF5tZBoqGLMLf4DumjLKTUDeX90gB3uHAnB0Mxy13E BVZIjAcPirB7eBISREneRuuk5fDWy5C0gxepmr2/55LhwGhvN8fQu6f0M3BxGvS5 R0KrERA6eEqNtxJ7VDn47cA+KlYXq6cHIQKZaTy2mvAUNzAHu7R3HHavUyojHz7I 8rJZ/xd1CqFNPZE60Tpy8N3HIGmD6omow21PQLMP11UaquHNtMOD+irplhMpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUo/OlzCGTU7yB55uxJFFb/x/j7iIwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/Grju1TbQyb cjTYlyOIk6K852q0IQZBn6z+VVgilDtABHXOrb23IArMTLQzMbzTIL6pLzYUzI/x zdpO0wAuF34pBetN0Dpr+tKutp8Eqy00WjdgKFvOQ0eaGcgG+l0DM/EXxkaUSkF6 z9LH6j+bgbLz4N0iCDC0or3Qd32vpJGR/PfOdp9XTYsX90wlH4hZgZvPHs399+cD hHO2L4QV/HThv/LrUZWKQpiff8oslj9aYWAaDAZ3GOEIO8whxqU0GBui6sgs4Ow8 Npbvy7X6qAxmIQ3qxZ+yrcXRER15ZMOZVZfohP2q+0xKWEc/Tev0oWeGc8AGFfBD JWBpczmDfA== -----END CERTIFICATE-----Generated at Wed May 13 09:05:08 2026 by rpki-client