$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json) Hash identifier: W9NMOhHBhHJSyjuux4XMRksdfbwTscnHKCWD+ov7wV4= Subject key identifier: A0:C4:EE:1D:2E:22:26:5C:55:50:71:1D:C4:3C:24:FC:8B:93:08:96 Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Certificate serial: 6A5612A540FE626E01332778534BABD02EF31230 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft Manifest number: 2F Signing time: Wed 13 May 2026 02:45:54 +0000 Manifest this update: Wed 13 May 2026 02:40:54 +0000 Manifest next update: Thu 14 May 2026 03:54:54 +0000 Files and hashes: 1: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: Q34w8qZoi1K1IFy0BproJ7dSlLn7HDv7uaVg+Wm0/Yc=) 2: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:56:12:a5:40:fe:62:6e:01:33:27:78:53:4b:ab:d0:2e:f3:12:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Validity Not Before: May 13 02:40:54 2026 GMT Not After : May 14 03:54:54 2026 GMT Subject: CN=A0C4EE1D2E22265C5550711DC43C24FC8B930896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:fe:3c:93:a6:31:de:4f:99:d3:8c:8e:82: af:cf:94:94:05:6b:43:1d:1c:56:8b:37:12:b8:29: 0b:9e:b9:46:41:bb:71:c2:f8:e9:2c:42:ae:09:30: b2:6e:d3:e0:c1:d8:e6:74:3a:fd:92:45:17:f2:e0: cf:46:90:cf:cf:83:d1:c2:14:1d:60:3f:09:c7:ec: a4:2d:9d:2b:9b:09:3d:18:1c:25:27:88:6c:a2:e0: 6e:b3:a8:92:f0:e2:be:80:d8:7d:c6:cb:04:12:0f: aa:af:1e:3b:c1:fd:91:87:87:6a:b6:25:cb:4c:bd: 90:cf:6f:ce:91:46:d4:1d:d5:3a:e0:e2:68:66:2f: 76:f2:cb:62:15:07:e0:f8:2b:76:0b:a0:05:25:d9: b2:51:c4:76:a6:df:15:2c:28:f3:54:6f:09:f1:75: 84:53:cb:a9:d7:b5:cd:2b:50:33:9c:86:f9:a1:23: e5:a4:4b:e7:9b:3e:a2:3e:36:b3:7d:18:90:d7:9c: 87:83:76:28:1a:1b:1b:85:2f:37:aa:da:f3:fd:bb: f1:ef:ce:df:f8:98:ab:d4:ed:e3:cf:c9:a2:65:c5: 4a:71:05:ba:08:62:bd:24:c8:b7:9e:0b:08:9a:10: c1:76:d0:f3:68:87:1f:68:66:37:5e:c9:29:e5:32: 54:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C4:EE:1D:2E:22:26:5C:55:50:71:1D:C4:3C:24:FC:8B:93:08:96 X509v3 Authority Key Identifier: keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:67:ce:07:7c:18:0a:23:ab:f5:e6:64:d8:f2:f8:e9:70:57: 37:46:4b:6f:38:f2:b0:f7:90:ad:11:1e:e3:0a:75:f9:76:92: fb:26:ae:71:7a:da:27:84:26:04:c9:32:44:d3:17:34:80:0b: c9:18:31:0d:a8:d7:c5:69:19:7a:e6:1f:2b:c7:aa:51:ad:32: 1d:21:2b:1d:d3:cf:97:d9:92:d8:5c:9c:8b:a8:83:32:02:d7: 6a:a6:5b:0e:45:23:55:bf:95:ea:b5:cb:71:57:0b:11:d1:2f: 2c:f0:aa:04:6e:dd:91:16:8b:1c:4e:32:82:6f:62:30:de:8c: b4:38:22:b9:f9:72:65:0b:20:62:42:12:f4:df:eb:bd:a2:1d: 86:68:a6:20:4e:26:51:d1:37:be:4a:bf:81:5b:12:5c:dc:f5: ec:0f:c1:77:c5:79:fe:11:6a:ac:ab:bd:87:7a:29:53:9a:53: c7:48:e8:0b:b5:07:17:45:dd:f7:26:7c:09:fc:78:ca:4a:50: 29:53:54:a0:a2:7b:d2:14:71:b7:97:6e:25:53:0f:c9:1e:00: 63:65:0b:bb:73:04:32:91:a0:4b:04:f2:22:68:ce:01:9d:6c: 70:80:ad:33:3b:5d:e8:51:8f:94:51:88:c9:4a:34:9d:98:bb: 2c:f0:20:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUalYSpUD+Ym4BMyd4U0ur0C7zEjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx OUM1RkNGNzAeFw0yNjA1MTMwMjQwNTRaFw0yNjA1MTQwMzU0NTRaMDMxMTAvBgNV BAMTKEEwQzRFRTFEMkUyMjI2NUM1NTUwNzExREM0M0MyNEZDOEI5MzA4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eP48k6Yx3k+Z04yOgq/PlJQF a0MdHFaLNxK4KQueuUZBu3HC+OksQq4JMLJu0+DB2OZ0Ov2SRRfy4M9GkM/Pg9HC FB1gPwnH7KQtnSubCT0YHCUniGyi4G6zqJLw4r6A2H3GywQSD6qvHjvB/ZGHh2q2 JctMvZDPb86RRtQd1Trg4mhmL3byy2IVB+D4K3YLoAUl2bJRxHam3xUsKPNUbwnx dYRTy6nXtc0rUDOchvmhI+WkS+ebPqI+NrN9GJDXnIeDdigaGxuFLzeq2vP9u/Hv zt/4mKvU7ePPyaJlxUpxBboIYr0kyLeeCwiaEMF20PNohx9oZjdeySnlMlQXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoMTuHS4iJlxVUHEdxDwk/IuTCJYwHwYDVR0j BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4 QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2fOB3wYCiOr 9eZk2PL46XBXN0ZLbzjysPeQrREe4wp1+XaS+yaucXraJ4QmBMkyRNMXNIALyRgx DajXxWkZeuYfK8eqUa0yHSErHdPPl9mS2Fyci6iDMgLXaqZbDkUjVb+V6rXLcVcL EdEvLPCqBG7dkRaLHE4ygm9iMN6MtDgiuflyZQsgYkIS9N/rvaIdhmimIE4mUdE3 vkq/gVsSXNz17A/Bd8V5/hFqrKu9h3opU5pTx0joC7UHF0Xd9yZ8Cfx4ykpQKVNU oKJ70hRxt5duJVMPyR4AY2ULu3MEMpGgSwTyImjOAZ1scICtMztd6FGPlFGIyUo0 nZi7LPAgcQ== -----END CERTIFICATE-----Generated at Wed May 13 14:09:18 2026 by rpki-client