$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: SP6jfEPshw1hx5GB9sI7VsOZJGOBsVk/08mvlk4prTc= Subject key identifier: 15:69:99:43:58:6D:92:1B:5D:F4:81:28:DA:11:A6:37:61:32:A2:DE Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 501234A08BACEA58665A53ADCC152D308E8026EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: 8D Signing time: Wed 13 May 2026 04:10:55 +0000 Manifest this update: Wed 13 May 2026 04:05:55 +0000 Manifest next update: Thu 14 May 2026 05:48:55 +0000 Files and hashes: 1: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (hash: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=) 2: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: uTgoZpJfaebqxOB4wutaU1/tzrNy/eueWnh+syezZRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:12:34:a0:8b:ac:ea:58:66:5a:53:ad:cc:15:2d:30:8e:80:26:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: May 13 04:05:55 2026 GMT Not After : May 14 05:48:55 2026 GMT Subject: CN=15699943586D921B5DF48128DA11A6376132A2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:9b:b0:44:96:24:31:0f:dc:60:1d:8b:64: 3a:1a:ce:b9:88:20:db:f7:28:d1:f3:c8:0e:64:9a: 78:4e:60:3b:7c:b5:3a:e2:70:3d:13:36:fc:f8:6c: 94:d5:34:9e:e3:b1:e4:7d:2e:fb:61:3e:37:3b:fd: 77:52:2f:7d:a7:e5:f3:92:5d:b4:9a:7e:f5:ab:c3: 53:af:55:68:89:9a:31:73:58:84:97:17:ed:dc:b0: 05:bd:8b:b3:8a:ba:b4:ee:f6:5c:a2:72:75:25:bc: c7:f1:04:de:8e:48:30:b7:3c:8d:1d:8a:e8:96:0d: 16:c5:83:fc:4b:d6:9d:79:ad:6a:a8:bb:2c:75:69: e1:d0:cb:21:d3:85:b9:38:f2:17:ae:26:fa:6b:0e: 95:70:1a:b9:03:e5:61:fd:a2:4c:a4:fb:fb:f7:e7: d0:f9:4d:e0:8c:62:9c:23:14:20:f6:21:1d:cc:98: 85:4f:a5:c2:ef:27:ff:ca:1d:02:35:98:17:27:40: 80:4d:14:ed:49:c4:16:76:3c:89:43:ec:70:95:3e: e7:1b:09:b3:ac:28:df:16:45:0f:a4:54:c5:24:52: b8:79:c3:3d:b2:2d:1c:8f:8f:e3:01:9b:0b:8c:bb: 43:63:7b:ec:c2:9e:bc:83:e6:13:e0:ad:a7:45:75: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:69:99:43:58:6D:92:1B:5D:F4:81:28:DA:11:A6:37:61:32:A2:DE X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e7:2d:21:33:42:b9:b0:5e:61:15:a1:78:f0:88:3e:50:ea: 15:95:27:b3:09:cf:53:66:98:84:47:1a:71:73:62:18:eb:3a: a8:55:31:c3:03:b6:8c:73:5b:2f:36:11:93:a2:3e:6c:53:ca: c2:02:d2:f1:2d:63:d7:cc:fb:8c:97:11:06:a0:ad:f4:ae:e6: c4:d8:e9:68:06:9c:f9:df:88:c7:78:10:fa:e9:54:9b:6d:92: 25:07:b6:d9:39:1a:a8:67:df:f9:90:cf:36:81:0c:42:b1:fc: 98:44:9b:0d:81:80:14:8c:fa:e3:1c:55:90:52:e9:e7:a6:36: ca:86:0a:f0:55:8b:bc:f4:7c:0f:fa:c1:28:76:b8:07:6e:27: 70:44:ac:80:34:db:36:88:f1:eb:36:89:8f:d3:b8:a5:c4:33: 60:6c:8c:ca:b4:2f:ac:88:9a:1f:df:e2:d8:47:ef:2d:ce:af: 3d:4b:d8:a5:68:e5:cc:57:5d:d1:0a:8a:94:fc:f0:d0:a5:e2: 20:e6:f3:7d:86:a8:05:4e:04:90:1b:ad:50:1a:27:7c:cc:ba: a8:03:8b:be:02:28:e5:68:da:e8:91:72:dd:2c:85:47:63:a0: 40:f1:ec:50:21:f2:7e:49:ac:8c:af:f4:c4:32:dc:1d:e4:09: 7c:cb:a1:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUBI0oIus6lhmWlOtzBUtMI6AJu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjA1MTMwNDA1NTVaFw0yNjA1MTQwNTQ4NTVaMDMxMTAvBgNV BAMTKDE1Njk5OTQzNTg2RDkyMUI1REY0ODEyOERBMTFBNjM3NjEzMkEyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4JuwRJYkMQ/cYB2LZDoazrmI INv3KNHzyA5kmnhOYDt8tTricD0TNvz4bJTVNJ7jseR9LvthPjc7/XdSL32n5fOS XbSafvWrw1OvVWiJmjFzWISXF+3csAW9i7OKurTu9lyicnUlvMfxBN6OSDC3PI0d iuiWDRbFg/xL1p15rWqouyx1aeHQyyHThbk48heuJvprDpVwGrkD5WH9okyk+/v3 59D5TeCMYpwjFCD2IR3MmIVPpcLvJ//KHQI1mBcnQIBNFO1JxBZ2PIlD7HCVPucb CbOsKN8WRQ+kVMUkUrh5wz2yLRyPj+MBmwuMu0Nje+zCnryD5hPgradFddBVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFWmZQ1htkhtd9IEo2hGmN2Eyot4wHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOctITNCubBe YRWhePCIPlDqFZUnswnPU2aYhEcacXNiGOs6qFUxwwO2jHNbLzYRk6I+bFPKwgLS 8S1j18z7jJcRBqCt9K7mxNjpaAac+d+Ix3gQ+ulUm22SJQe22TkaqGff+ZDPNoEM QrH8mESbDYGAFIz64xxVkFLp56Y2yoYK8FWLvPR8D/rBKHa4B24ncESsgDTbNojx 6zaJj9O4pcQzYGyMyrQvrIiaH9/i2EfvLc6vPUvYpWjlzFdd0QqKlPzw0KXiIObz fYaoBU4EkButUBonfMy6qAOLvgIo5Wja6JFy3SyFR2OgQPHsUCHyfkmsjK/0xDLc HeQJfMuhxA== -----END CERTIFICATE-----Generated at Wed May 13 17:49:51 2026 by rpki-client