$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: 6uKq4Hce+yQX7jzpnM5d4iL8myr9sQbMCqBze39PPdo= Subject key identifier: 23:7C:3B:29:13:55:36:22:2D:23:4B:9C:14:85:6C:C9:31:5D:2D:8F Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 487CC8F60763E86CB0E89EDA911645EFBD71CEA7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 9A Signing time: Wed 13 May 2026 09:11:03 +0000 Manifest this update: Wed 13 May 2026 09:06:03 +0000 Manifest next update: Thu 14 May 2026 10:18:03 +0000 Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) 2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: 51tH7DCMPdP+xSu+J0vS5oF2tb0c5WDyGvJsHcxjrrs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7c:c8:f6:07:63:e8:6c:b0:e8:9e:da:91:16:45:ef:bd:71:ce:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: May 13 09:06:03 2026 GMT Not After : May 14 10:18:03 2026 GMT Subject: CN=237C3B29135536222D234B9C14856CC9315D2D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:4a:83:30:01:b7:d8:b5:b5:c4:c7:69:7b: 3d:ba:d9:15:a7:9f:b0:9c:40:b6:f1:6c:e2:db:37: 1c:9d:98:62:07:18:df:b7:ee:c9:ae:c9:a2:3e:1e: 76:16:0c:b6:98:05:0b:7c:5d:cd:14:e9:c4:45:31: 11:c4:ad:60:5b:50:eb:17:f1:c6:aa:07:64:b2:c3: 45:11:3b:8a:00:3b:a2:8d:48:8c:e0:c6:b7:83:d5: 1d:a2:30:5c:ca:c5:86:94:2e:40:c7:99:8e:60:15: c6:66:2e:58:86:c8:b0:1e:0e:d6:99:69:f9:d8:76: 0b:85:3e:0a:6d:91:f1:89:19:4a:4f:69:4e:d9:51: 3e:f2:8b:ce:29:b8:bc:a1:cb:e8:03:30:3b:32:11: 08:0d:6d:8d:60:a7:dc:70:fc:1a:e2:54:83:a0:68: 8e:ff:4c:d5:a7:d7:bf:d1:f1:ee:e7:47:c6:15:1e: 4d:2a:1c:82:9c:b2:87:1c:38:5a:d2:6d:ec:a9:c0: 01:7d:ef:aa:ad:6e:f3:ca:de:c9:e8:8e:5f:2d:a6: e3:41:f4:28:0a:90:7b:12:8a:17:20:42:61:80:22: a7:fe:07:cc:42:4c:91:70:73:6a:73:66:06:92:14: e5:5f:4c:49:f0:ab:7f:54:cf:f0:95:7c:03:9f:0e: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7C:3B:29:13:55:36:22:2D:23:4B:9C:14:85:6C:C9:31:5D:2D:8F X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6c:d6:30:26:70:25:1c:79:82:62:db:10:8d:3a:97:eb:3a: 32:2a:14:0b:84:8d:fe:a2:3f:7c:0f:5e:a7:d6:6b:7b:4c:1b: 12:89:da:fe:63:2c:7c:1a:e6:a0:b7:76:2e:4e:76:24:21:73: da:3f:ae:ac:b6:2b:dc:01:22:04:67:87:c3:a5:8a:2e:30:8d: 36:57:4f:a9:92:4b:9e:25:08:07:1f:ca:66:3e:20:e4:6a:8b: 06:07:86:e7:90:bc:58:bb:10:23:6c:bc:c2:e8:52:f1:be:40: 24:3f:49:d1:b9:0e:87:2e:b5:87:90:06:9d:8a:82:19:23:4a: 1e:38:36:cd:a8:ad:ed:55:97:78:a0:fe:1a:b7:fd:72:7e:b9: 9a:56:0c:22:c8:d1:6d:42:e6:2b:45:8b:dd:44:14:7d:69:ff: bc:f9:f5:b6:50:e8:91:d2:e1:f5:9e:5a:f7:79:e3:dc:f7:9b: 82:49:15:3e:6a:7e:f3:fc:7b:3e:d8:b2:92:c3:bb:e6:39:d3: 10:10:b2:e4:07:ff:d9:ad:33:30:6c:93:2e:e9:19:36:07:0f: b3:39:1f:39:70:24:3e:e2:48:c2:72:82:c3:fb:b9:95:63:a3: 30:11:b0:9f:2d:8a:07:1b:ca:35:1d:c7:cf:5e:1c:7e:39:e9: b7:ae:0a:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSHzI9gdj6Gyw6J7akRZF771xzqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjA1MTMwOTA2MDNaFw0yNjA1MTQxMDE4MDNaMDMxMTAvBgNV BAMTKDIzN0MzQjI5MTM1NTM2MjIyRDIzNEI5QzE0ODU2Q0M5MzE1RDJEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNekqDMAG32LW1xMdpez262RWn n7CcQLbxbOLbNxydmGIHGN+37smuyaI+HnYWDLaYBQt8Xc0U6cRFMRHErWBbUOsX 8caqB2Syw0URO4oAO6KNSIzgxreD1R2iMFzKxYaULkDHmY5gFcZmLliGyLAeDtaZ afnYdguFPgptkfGJGUpPaU7ZUT7yi84puLyhy+gDMDsyEQgNbY1gp9xw/BriVIOg aI7/TNWn17/R8e7nR8YVHk0qHIKcsoccOFrSbeypwAF976qtbvPK3snojl8tpuNB 9CgKkHsSihcgQmGAIqf+B8xCTJFwc2pzZgaSFOVfTEnwq39Uz/CVfAOfDoqTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI3w7KRNVNiItI0ucFIVsyTFdLY8wHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImzWMCZwJRx5 gmLbEI06l+s6MioUC4SN/qI/fA9ep9Zre0wbEona/mMsfBrmoLd2Lk52JCFz2j+u rLYr3AEiBGeHw6WKLjCNNldPqZJLniUIBx/KZj4g5GqLBgeG55C8WLsQI2y8wuhS 8b5AJD9J0bkOhy61h5AGnYqCGSNKHjg2zait7VWXeKD+Grf9cn65mlYMIsjRbULm K0WL3UQUfWn/vPn1tlDokdLh9Z5a93nj3PebgkkVPmp+8/x7PtiyksO75jnTEBCy 5Af/2a0zMGyTLukZNgcPszkfOXAkPuJIwnKCw/u5lWOjMBGwny2KBxvKNR3Hz14c fjnpt64K5w== -----END CERTIFICATE-----Generated at Wed May 13 19:42:33 2026 by rpki-client