$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft File: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft (raw, json) Hash identifier: oDzRUIzPl8oWgyt0spjmKyluOBB3Tb/FbfXoMooC02E= Subject key identifier: 72:E8:95:90:9B:89:B0:A8:5F:E3:B7:CC:B7:4C:28:56:41:83:2E:E2 Authority key identifier: D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 Certificate issuer: /CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Certificate serial: 4398693A4CD1CD4689F5EDAC0E30A80C0B6855B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft Manifest number: 2D Signing time: Wed 13 May 2026 06:31:00 +0000 Manifest this update: Wed 13 May 2026 06:26:00 +0000 Manifest next update: Thu 14 May 2026 09:20:00 +0000 Files and hashes: 1: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl (hash: L73LL3WgP0Zlyhiob5nOrumt/u1pw4VLXzxpU6CyFkU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:98:69:3a:4c:d1:cd:46:89:f5:ed:ac:0e:30:a8:0c:0b:68:55:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Validity Not Before: May 13 06:26:00 2026 GMT Not After : May 14 09:20:00 2026 GMT Subject: CN=72E895909B89B0A85FE3B7CCB74C285641832EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:e1:af:8c:ec:f8:3e:13:4a:63:0c:5c:7f: 53:a4:e8:15:b0:9e:c5:9f:db:2d:36:4e:09:86:df: f1:d2:ef:f7:e1:71:ec:7d:97:f9:73:42:25:7f:ea: 5a:fb:dd:62:ed:d5:f2:df:f6:84:a9:df:60:aa:8e: 2e:96:01:ca:af:63:dc:b6:fc:bc:08:d2:da:36:36: 2d:bd:c9:4c:3a:eb:76:63:15:03:4f:43:e1:4a:38: 4a:30:67:5e:13:e0:a9:89:84:d9:2a:04:15:61:40: 07:56:f6:d2:b7:bc:3b:ae:1b:19:61:6a:dd:30:e9: bc:b4:6d:c5:bc:bc:e8:17:62:6d:50:bc:ed:3b:13: 8e:1f:f8:47:f3:6b:0b:0c:eb:7a:13:b4:12:3e:c7: fc:c9:d0:2b:55:0d:40:8c:eb:2d:72:cb:19:5b:5e: f4:82:9a:c8:04:fa:73:60:52:ca:94:ee:39:e8:2e: 02:81:1b:35:57:1d:93:a0:91:36:9e:15:f3:8b:3c: e5:cc:33:f2:46:40:a7:d2:f7:46:58:69:0f:05:0f: fe:e1:17:7b:90:25:aa:f5:07:c0:8e:75:31:58:78: 96:45:ed:90:15:52:d4:ab:41:ae:ca:54:03:ee:ca: a6:db:20:3c:70:13:c6:50:c2:2f:37:dd:a9:ea:5d: bb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E8:95:90:9B:89:B0:A8:5F:E3:B7:CC:B7:4C:28:56:41:83:2E:E2 X509v3 Authority Key Identifier: keyid:D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e1:1b:9f:2f:24:a6:6a:ab:0e:1a:ab:5f:fc:7a:1f:99:14: cd:62:d6:1a:65:96:86:09:d8:44:00:69:aa:f4:a3:9e:c9:19: 0c:00:0b:0a:42:60:eb:4e:3a:05:c3:ab:a2:64:3a:88:c7:5c: fb:e4:c6:2d:40:f5:d5:d2:32:60:c1:6b:89:66:a8:2e:68:64: ae:9f:43:c8:41:04:ac:09:77:5a:cc:5a:ff:83:2d:49:23:52: 4b:30:77:17:a5:90:fc:7d:3c:c0:a9:54:cb:77:9d:60:0b:ae: ae:b2:48:f6:0c:3b:0b:e7:11:17:d7:6c:0e:c3:b7:43:05:a4: 15:c0:c1:44:8c:59:c3:3e:3d:12:82:44:a9:d2:a1:d5:49:18: b8:80:e9:0a:6b:3c:88:0c:fe:60:e6:a9:c6:43:7d:64:01:31: 6b:71:3e:16:46:cc:8c:60:aa:ed:9f:4d:c7:5f:56:1d:91:8d: 4a:d3:76:1b:77:4e:b8:2e:0f:99:76:f3:2e:66:ec:06:34:13: cc:b0:c1:9f:30:03:c6:8d:a1:7a:9e:2f:ed:fe:63:d3:1c:d7: f3:a9:81:fb:dd:24:c7:4c:79:24:f3:b6:fa:7a:2d:b0:bb:90: 9a:b6:43:72:18:48:5a:c9:d9:84:a3:52:1c:30:35:56:bb:38: 12:be:1c:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ5hpOkzRzUaJ9e2sDjCoDAtoVbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0 RkRCNEE1MjAeFw0yNjA1MTMwNjI2MDBaFw0yNjA1MTQwOTIwMDBaMDMxMTAvBgNV BAMTKDcyRTg5NTkwOUI4OUIwQTg1RkUzQjdDQ0I3NEMyODU2NDE4MzJFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41+GvjOz4PhNKYwxcf1Ok6BWw nsWf2y02TgmG3/HS7/fhcex9l/lzQiV/6lr73WLt1fLf9oSp32Cqji6WAcqvY9y2 /LwI0to2Ni29yUw663ZjFQNPQ+FKOEowZ14T4KmJhNkqBBVhQAdW9tK3vDuuGxlh at0w6by0bcW8vOgXYm1QvO07E44f+EfzawsM63oTtBI+x/zJ0CtVDUCM6y1yyxlb XvSCmsgE+nNgUsqU7jnoLgKBGzVXHZOgkTaeFfOLPOXMM/JGQKfS90ZYaQ8FD/7h F3uQJar1B8COdTFYeJZF7ZAVUtSrQa7KVAPuyqbbIDxwE8ZQwi833anqXbvxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcuiVkJuJsKhf47fMt0woVkGDLuIwHwYDVR0j BBgwFoAU1Z79k7AiwFboC9u1t1YrMk/bSlIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MzA4MDgyNjE0MjcyMi8wL0Q1OUVGRDkzQjAyMkMwNTZFODBCREJCNUI3NTYy QjMyNEZEQjRBNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0RkRCNEE1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODMwODA4MjYxNDI3MjIvMC9ENTlFRkQ5M0IwMjJD MDU2RTgwQkRCQjVCNzU2MkIzMjRGREI0QTUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuEbny8kpmqr DhqrX/x6H5kUzWLWGmWWhgnYRABpqvSjnskZDAALCkJg6046BcOromQ6iMdc++TG LUD11dIyYMFriWaoLmhkrp9DyEEErAl3Wsxa/4MtSSNSSzB3F6WQ/H08wKlUy3ed YAuurrJI9gw7C+cRF9dsDsO3QwWkFcDBRIxZwz49EoJEqdKh1UkYuIDpCms8iAz+ YOapxkN9ZAExa3E+FkbMjGCq7Z9Nx19WHZGNStN2G3dOuC4PmXbzLmbsBjQTzLDB nzADxo2hep4v7f5j0xzX86mB+90kx0x5JPO2+notsLuQmrZDchhIWsnZhKNSHDA1 Vrs4Er4cYw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:06 2026 by rpki-client