$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: c1hH5DtX1vqT47rXxHeNrGQihmvJ8hTW3eMXvGrzhPo= Subject key identifier: 20:2C:82:97:9C:36:B1:E9:31:AD:3F:28:89:E7:D7:61:FC:5D:6C:CD Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 7F9AAE14184AF2AF5E2F57C12F683D4E6A8F61D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: 38 Signing time: Wed 13 May 2026 12:01:04 +0000 Manifest this update: Wed 13 May 2026 11:56:04 +0000 Manifest next update: Thu 14 May 2026 15:14:04 +0000 Files and hashes: 1: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: x0sZ59hFJ502BBXtcax4lNA0euKP6FBcNatYvZJ0+2M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9a:ae:14:18:4a:f2:af:5e:2f:57:c1:2f:68:3d:4e:6a:8f:61:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: May 13 11:56:04 2026 GMT Not After : May 14 15:14:04 2026 GMT Subject: CN=202C82979C36B1E931AD3F2889E7D761FC5D6CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:74:ed:19:b6:01:88:95:ea:31:d8:77:c3: b1:4d:32:ab:9b:12:0b:4e:1a:b7:49:b5:33:5b:8e: 54:c6:b8:8a:87:f3:aa:45:7b:f4:ce:f9:66:06:cb: a0:a2:d4:28:2c:55:94:38:c6:6d:67:0e:29:d1:b8: eb:14:aa:ff:d2:46:a0:c6:19:27:74:8f:4f:c4:a0: 86:0c:0e:b7:91:e2:ee:41:e2:a1:fa:6a:a7:67:9e: d2:0c:e9:b5:f5:70:21:9d:1d:74:2d:ae:bd:fa:6f: eb:f3:c1:b1:50:70:8b:23:3e:f0:0b:0d:63:74:75: 6d:7d:ca:90:6e:22:47:ac:ea:af:6b:c4:05:a0:2d: bb:f5:02:a4:17:58:c2:fa:b0:73:ad:0e:6b:ec:23: a3:78:ce:34:f1:4a:c7:4b:5a:b1:99:93:ef:f0:4f: 8b:24:de:c8:d6:d0:aa:aa:70:79:88:3f:d7:3c:b3: e5:00:a3:70:05:36:32:00:e8:38:a9:e7:49:06:7c: dd:2e:b5:25:af:4a:ad:fa:af:a9:57:31:21:8e:50: f3:19:62:21:3c:8f:14:1d:0b:71:41:53:68:01:6d: d9:a0:ba:de:c2:97:60:9f:63:1f:50:6b:b5:ed:54: 71:82:07:72:8a:c1:ff:2a:8e:d6:9b:9f:30:20:8d: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:82:97:9C:36:B1:E9:31:AD:3F:28:89:E7:D7:61:FC:5D:6C:CD X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:42:cd:06:20:f9:2f:75:26:3b:f4:0b:0d:0b:4e:04:35:67: a1:e4:8f:da:4b:87:3f:ff:4f:61:37:cf:ba:62:89:25:55:0f: 69:be:e1:37:26:1d:c1:d7:49:93:6b:b2:ac:ea:5e:4d:34:80: 3f:b8:44:5f:c4:8d:b3:fc:4a:2a:5e:0d:44:75:2c:30:69:9b: 83:24:6e:7d:83:87:35:73:92:f8:bb:c0:4c:72:7b:cd:de:b4: e2:1c:49:fb:4d:70:eb:a2:57:cd:11:08:0f:8f:db:74:a8:35: 65:00:1f:5d:e0:69:87:08:f8:28:d9:2e:52:96:53:ee:ea:a1: 08:f4:09:30:3f:7f:d4:4b:1c:f3:20:8a:36:b9:41:d1:29:b6: 03:fd:89:00:a0:bc:90:8a:7e:ba:c6:79:0d:2f:25:f5:9e:23: 0e:0e:7f:9c:6c:03:29:d7:a2:ca:c1:53:96:52:a9:6d:63:03: 16:74:c9:6e:26:d3:d7:55:b4:43:f5:3c:2b:a3:3e:ec:f8:00: ed:6f:58:d7:ea:56:7a:f9:a6:d9:d7:56:8f:a1:84:46:74:7f: 4f:4b:95:98:24:29:99:04:db:f0:db:51:0d:ba:3c:fd:ab:24: 63:56:fa:23:43:7a:e8:f6:0a:39:6d:ba:38:dd:bc:71:70:26: 60:33:2f:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf5quFBhK8q9eL1fBL2g9TmqPYdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA1MTMxMTU2MDRaFw0yNjA1MTQxNTE0MDRaMDMxMTAvBgNV BAMTKDIwMkM4Mjk3OUMzNkIxRTkzMUFEM0YyODg5RTdENzYxRkM1RDZDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuHTtGbYBiJXqMdh3w7FNMqub EgtOGrdJtTNbjlTGuIqH86pFe/TO+WYGy6Ci1CgsVZQ4xm1nDinRuOsUqv/SRqDG GSd0j0/EoIYMDreR4u5B4qH6aqdnntIM6bX1cCGdHXQtrr36b+vzwbFQcIsjPvAL DWN0dW19ypBuIkes6q9rxAWgLbv1AqQXWML6sHOtDmvsI6N4zjTxSsdLWrGZk+/w T4sk3sjW0KqqcHmIP9c8s+UAo3AFNjIA6Dip50kGfN0utSWvSq36r6lXMSGOUPMZ YiE8jxQdC3FBU2gBbdmgut7Cl2CfYx9Qa7XtVHGCB3KKwf8qjtabnzAgjVrrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUICyCl5w2sekxrT8oiefXYfxdbM0wHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0LNBiD5L3Um O/QLDQtOBDVnoeSP2kuHP/9PYTfPumKJJVUPab7hNyYdwddJk2uyrOpeTTSAP7hE X8SNs/xKKl4NRHUsMGmbgyRufYOHNXOS+LvATHJ7zd604hxJ+01w66JXzREID4/b dKg1ZQAfXeBphwj4KNkuUpZT7uqhCPQJMD9/1Esc8yCKNrlB0Sm2A/2JAKC8kIp+ usZ5DS8l9Z4jDg5/nGwDKdeiysFTllKpbWMDFnTJbibT11W0Q/U8K6M+7PgA7W9Y 1+pWevmm2ddWj6GERnR/T0uVmCQpmQTb8NtRDbo8/askY1b6I0N66PYKOW26ON28 cXAmYDMvUA== -----END CERTIFICATE-----Generated at Wed May 13 20:54:59 2026 by rpki-client