$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: n9TJYNR1dUuk2n9cOMoT+IHPH2dMll+Gs4plQRre2hE= Subject key identifier: B5:59:79:82:B1:A4:1E:42:34:E2:5F:FC:08:46:82:23:DF:F8:2F:AC Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 66D563C742B5F2BB6A75F9AEFB2DE6BF4B98DFD1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: 2D Signing time: Tue 12 May 2026 16:35:37 +0000 Manifest this update: Tue 12 May 2026 16:30:37 +0000 Manifest next update: Wed 13 May 2026 18:57:37 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: GhxEvPpXG/AAlU/XQCy8WWERYmaZWDbJw6IHNoQDWCc=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d5:63:c7:42:b5:f2:bb:6a:75:f9:ae:fb:2d:e6:bf:4b:98:df:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: May 12 16:30:37 2026 GMT Not After : May 13 18:57:37 2026 GMT Subject: CN=B5597982B1A41E4234E25FFC08468223DFF82FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:9b:aa:77:97:a4:59:fb:f1:0d:31:ca:38: 08:5f:b1:b2:5e:80:21:3b:d4:3b:af:f5:17:73:02: 34:a6:0b:e7:c4:c1:da:62:ab:e7:b1:f0:7f:42:1e: 78:45:55:cc:f2:d9:59:0a:e5:d4:d6:81:91:d6:49: c5:9a:88:8b:f1:27:7b:a2:27:ba:1f:73:c0:ae:a0: f5:45:27:9b:4f:ac:81:1d:ca:fc:83:b4:53:da:d4: 05:05:6f:aa:bf:6b:88:18:07:cb:01:d1:6f:fb:ed: cd:51:43:fe:92:66:fa:a6:ef:3b:8d:01:65:64:f7: 51:15:e3:c0:b8:02:9d:ee:c9:9d:7d:c3:f0:4c:7b: 58:51:c2:3f:3f:c1:3f:6e:60:e0:1d:90:92:66:ec: 75:ca:ec:a2:22:eb:37:06:99:58:8e:98:bd:e6:74: 8b:e1:9b:ef:cf:85:87:e7:3a:f7:95:55:7c:f0:b7: 94:79:a8:39:35:ab:5e:2e:0e:c3:63:a1:b6:ae:f0: 99:03:50:d2:a7:ee:33:18:43:db:61:da:42:b7:c6: 68:9e:6c:79:f2:3a:54:03:90:76:36:d8:d6:02:47: 0f:7a:ef:5b:49:a1:4a:e7:8b:d4:73:ac:da:95:0d: 2f:94:e0:94:d2:b3:75:91:96:a3:ab:7c:8a:8b:0b: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:79:82:B1:A4:1E:42:34:E2:5F:FC:08:46:82:23:DF:F8:2F:AC X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:79:88:aa:30:2e:23:8e:93:d1:4a:98:73:6c:03:2e:fa:ae: ec:e1:2e:cb:34:e0:64:ca:ac:25:f5:48:9b:e5:0e:67:cf:6a: 0b:7c:3c:4c:03:9e:5a:2c:80:a4:b6:fd:bc:c4:07:8d:50:97: 71:a7:12:6b:bc:32:de:e7:b4:65:e0:a9:d5:18:3e:c9:f1:bd: 09:bb:f2:d4:e0:ce:a2:fb:31:5d:1c:dd:47:6a:9c:21:35:80: 5a:d7:84:f0:32:9a:03:94:22:55:f5:eb:e7:f3:01:45:01:5c: 03:62:f9:64:bd:b1:82:2b:10:76:60:49:6a:3c:60:df:c3:92: f6:9a:4e:0d:1a:da:ed:e9:7e:90:4f:14:f3:f2:97:b1:e5:6f: 2f:d7:53:35:7f:6c:58:61:87:88:0c:56:02:2a:24:7a:a3:1b: 0f:81:38:a1:62:21:04:12:b2:33:95:50:e2:9b:df:c9:da:39: 1f:a1:7c:be:16:aa:82:27:6d:80:32:25:4c:70:a9:48:b1:f5: fd:34:65:10:65:3a:8e:66:0d:26:17:96:74:eb:b1:1b:90:31: f1:f6:98:86:e0:c3:d0:d3:41:03:1d:d0:48:99:3b:49:4c:53: ec:86:bb:d2:b5:1b:44:b5:3e:f4:98:f3:e5:bf:4c:b7:fb:c2: b8:48:cf:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZtVjx0K18rtqdfmu+y3mv0uY39EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA1MTIxNjMwMzdaFw0yNjA1MTMxODU3MzdaMDMxMTAvBgNV BAMTKEI1NTk3OTgyQjFBNDFFNDIzNEUyNUZGQzA4NDY4MjIzREZGODJGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWpuqd5ekWfvxDTHKOAhfsbJe gCE71Duv9RdzAjSmC+fEwdpiq+ex8H9CHnhFVczy2VkK5dTWgZHWScWaiIvxJ3ui J7ofc8CuoPVFJ5tPrIEdyvyDtFPa1AUFb6q/a4gYB8sB0W/77c1RQ/6SZvqm7zuN AWVk91EV48C4Ap3uyZ19w/BMe1hRwj8/wT9uYOAdkJJm7HXK7KIi6zcGmViOmL3m dIvhm+/PhYfnOveVVXzwt5R5qDk1q14uDsNjobau8JkDUNKn7jMYQ9th2kK3xmie bHnyOlQDkHY22NYCRw9671tJoUrni9RzrNqVDS+U4JTSs3WRlqOrfIqLC06rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtVl5grGkHkI04l/8CEaCI9/4L6wwHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHmIqjAuI46T 0UqYc2wDLvqu7OEuyzTgZMqsJfVIm+UOZ89qC3w8TAOeWiyApLb9vMQHjVCXcacS a7wy3ue0ZeCp1Rg+yfG9Cbvy1ODOovsxXRzdR2qcITWAWteE8DKaA5QiVfXr5/MB RQFcA2L5ZL2xgisQdmBJajxg38OS9ppODRra7el+kE8U8/KXseVvL9dTNX9sWGGH iAxWAiokeqMbD4E4oWIhBBKyM5VQ4pvfydo5H6F8vhaqgidtgDIlTHCpSLH1/TRl EGU6jmYNJheWdOuxG5Ax8faYhuDD0NNBAx3QSJk7SUxT7Ia70rUbRLU+9Jjz5b9M t/vCuEjPAg== -----END CERTIFICATE-----Generated at Wed May 13 05:35:55 2026 by rpki-client