$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json) Hash identifier: k7MgzMyFjWULTPXE1g/OY1Q2j6bkr4fFopNHKyCuqrY= Subject key identifier: 87:EF:13:29:59:33:56:A9:A6:61:30:12:6D:6A:3B:BC:51:11:45:CA Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Certificate serial: 452BA71D8F196BC2255CF7F26F8A785B1F0E1EF6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft Manifest number: 84 Signing time: Wed 13 May 2026 07:36:02 +0000 Manifest this update: Wed 13 May 2026 07:31:02 +0000 Manifest next update: Thu 14 May 2026 08:54:02 +0000 Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: VpbJ5OxgebeLPoloQ+dClbLskikNE06rs+rLEHocrMQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2b:a7:1d:8f:19:6b:c2:25:5c:f7:f2:6f:8a:78:5b:1f:0e:1e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Validity Not Before: May 13 07:31:02 2026 GMT Not After : May 14 08:54:02 2026 GMT Subject: CN=87EF1329593356A9A66130126D6A3BBC511145CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:79:4e:b0:2a:64:5c:aa:98:fa:88:a3:da: 49:a6:64:dd:d8:d7:d3:55:27:4d:48:a8:b7:75:29: d8:78:ca:6b:28:ce:1c:cf:3f:2b:26:1f:dd:5f:e8: 00:a1:07:ce:94:9b:4d:3f:63:8c:09:1e:03:c3:b6: 03:92:94:40:3b:7b:6c:f9:2a:66:5c:48:2f:f0:e6: 9a:64:8e:ea:e7:0e:9d:6a:c4:7a:cb:50:8b:bc:39: 6a:4e:e4:86:c4:14:85:e6:66:48:20:5e:70:18:b2: 72:35:0f:02:09:d9:75:39:b6:bf:3c:e3:ec:99:fc: 53:e3:e5:2f:68:d9:99:ee:63:f5:a8:e1:2b:46:4e: 72:9f:a3:81:b6:30:c6:5b:a0:56:04:25:be:0d:70: ab:ef:16:68:5e:ed:bd:a9:a7:61:70:e8:17:96:21: 70:f9:0f:98:4f:74:73:06:d0:32:4f:ad:77:f3:c7: 3e:6a:3f:f5:8f:e8:94:46:e6:c0:68:42:81:22:39: b8:06:a2:bd:85:40:81:27:01:e0:bb:d2:b6:4c:40: 25:2c:35:89:a5:c2:d2:9e:45:9f:e2:0a:0f:db:47: 5d:67:40:24:98:10:31:49:d1:38:d4:79:5f:cd:19: 99:80:ae:64:0f:69:55:d8:14:c8:36:0b:ef:9d:71: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EF:13:29:59:33:56:A9:A6:61:30:12:6D:6A:3B:BC:51:11:45:CA X509v3 Authority Key Identifier: keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:61:af:0f:eb:57:03:3a:07:c5:be:7a:04:7d:60:4c:a9:b6: b5:cd:81:08:bb:48:2f:e5:e9:6c:c9:d8:fd:4b:e3:db:ad:d0: cd:24:37:d1:0d:bf:10:1e:5f:60:fe:86:ab:cd:86:e2:ce:fd: f1:d0:2c:f8:c2:33:e3:eb:84:9a:cf:f0:05:b5:be:e2:a0:87: 82:1f:9c:50:00:e2:aa:9f:67:62:bb:13:d5:6b:67:3f:ea:c9: a6:a0:04:bf:66:90:2e:a2:b8:23:c7:18:1a:0e:0c:1d:7d:50: f2:8d:ae:ae:27:3d:f8:5e:8b:3c:a4:03:4b:cf:5f:2b:43:84: 1b:74:ff:2e:d0:ac:ba:da:17:6c:69:4a:5c:a6:9e:8b:bb:81: ba:92:52:9f:bb:ca:f3:6a:0f:59:bb:8a:f4:b1:f0:96:ac:d1: 3e:11:1d:61:0d:26:0a:c3:c1:79:31:63:82:a8:94:20:0f:95: 02:9d:9e:9d:ea:c2:e1:13:a3:c3:3e:26:e7:61:a5:40:c7:b1: 4e:df:fa:8b:f1:57:ac:28:8e:15:65:87:31:9d:dd:51:ce:1b: 2e:65:e1:46:f2:b2:da:af:9f:ea:25:d5:61:e6:49:6e:f4:42: 32:50:ac:04:96:8c:36:85:01:68:21:e3:a9:40:0e:57:a5:16: 1e:a7:1f:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURSunHY8Za8IlXPfyb4p4Wx8OHvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdF NzVBNTc0QTAeFw0yNjA1MTMwNzMxMDJaFw0yNjA1MTQwODU0MDJaMDMxMTAvBgNV BAMTKDg3RUYxMzI5NTkzMzU2QTlBNjYxMzAxMjZENkEzQkJDNTExMTQ1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEXlOsCpkXKqY+oij2kmmZN3Y 19NVJ01IqLd1Kdh4ymsozhzPPysmH91f6AChB86Um00/Y4wJHgPDtgOSlEA7e2z5 KmZcSC/w5ppkjurnDp1qxHrLUIu8OWpO5IbEFIXmZkggXnAYsnI1DwIJ2XU5tr88 4+yZ/FPj5S9o2ZnuY/Wo4StGTnKfo4G2MMZboFYEJb4NcKvvFmhe7b2pp2Fw6BeW IXD5D5hPdHMG0DJPrXfzxz5qP/WP6JRG5sBoQoEiObgGor2FQIEnAeC70rZMQCUs NYmlwtKeRZ/iCg/bR11nQCSYEDFJ0TjUeV/NGZmArmQPaVXYFMg2C++dcVEpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh+8TKVkzVqmmYTASbWo7vFERRcowHwYDVR0j BBgwFoAU89IYnnnYyrqm5janBuOIJ+daV0owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzQ4MDE5NS8wL0YzRDIxODlFNzlEOENBQkFBNkU2MzZBNzA2RTM4 ODI3RTc1QTU3NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdFNzVBNTc0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM0ODAxOTUvMC9GM0QyMTg5RTc5RDhD QUJBQTZFNjM2QTcwNkUzODgyN0U3NUE1NzRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmGvD+tXAzoH xb56BH1gTKm2tc2BCLtIL+XpbMnY/Uvj263QzSQ30Q2/EB5fYP6Gq82G4s798dAs +MIz4+uEms/wBbW+4qCHgh+cUADiqp9nYrsT1WtnP+rJpqAEv2aQLqK4I8cYGg4M HX1Q8o2uric9+F6LPKQDS89fK0OEG3T/LtCsutoXbGlKXKaei7uBupJSn7vK82oP WbuK9LHwlqzRPhEdYQ0mCsPBeTFjgqiUIA+VAp2enerC4ROjwz4m52GlQMexTt/6 i/FXrCiOFWWHMZ3dUc4bLmXhRvKy2q+f6iXVYeZJbvRCMlCsBJaMNoUBaCHjqUAO V6UWHqcfNA== -----END CERTIFICATE-----Generated at Wed May 13 21:01:32 2026 by rpki-client