$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft File: C074E80FFDB9B886B42838EA88032DC68025A5B3.mft (raw, json) Hash identifier: JzE4l7dbaq83JLdgvQCOdltMQRLnCNce4m615zoilqQ= Subject key identifier: B2:A0:11:FE:62:3F:DF:CB:03:26:57:12:09:8A:42:5B:6E:1C:7B:36 Authority key identifier: C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 Certificate issuer: /CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Certificate serial: 7F0E73EF5F01C971FDC51855109CA18CC2949563 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft Manifest number: 2D Signing time: Wed 13 May 2026 10:11:03 +0000 Manifest this update: Wed 13 May 2026 10:06:03 +0000 Manifest next update: Thu 14 May 2026 12:28:03 +0000 Files and hashes: 1: C074E80FFDB9B886B42838EA88032DC68025A5B3.crl (hash: l0e53MHdBV0/BvFxCTLemZLrP2ACr8lwyNu9/ap0m8E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0e:73:ef:5f:01:c9:71:fd:c5:18:55:10:9c:a1:8c:c2:94:95:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Validity Not Before: May 13 10:06:03 2026 GMT Not After : May 14 12:28:03 2026 GMT Subject: CN=B2A011FE623FDFCB03265712098A425B6E1C7B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:8c:1e:20:b3:0b:46:06:a5:54:20:0c:05: c7:a0:13:18:c8:e4:25:e1:f5:32:d5:2f:23:1f:42: 6a:67:89:34:a7:48:7f:59:dd:f9:55:72:98:d7:bf: 26:fc:aa:3a:dc:a2:74:6f:c6:c7:1b:5c:07:a3:a8: 72:fa:e6:08:e5:d1:10:03:7c:47:2e:cb:2f:61:b6: ae:25:c1:dd:b1:54:b0:d5:2e:82:f5:75:f6:e6:0a: cf:02:b0:02:78:47:8a:9a:d1:d9:4f:54:eb:8f:58: a2:4e:89:ea:4a:ee:af:bb:86:45:be:3a:43:90:73: f4:cc:2b:c6:54:bf:ff:64:2c:b2:a0:3a:4b:47:4f: ac:dc:28:31:f3:8e:13:56:b6:09:00:e9:2d:9d:12: 03:6f:00:2d:22:6d:4d:1d:3c:50:22:b4:66:3a:57: 0d:b3:04:5b:76:fb:22:0b:74:43:c9:9e:67:df:07: c9:dd:50:72:f9:de:ad:cd:87:30:67:cc:21:a3:de: 71:9a:02:5c:60:30:e4:df:45:73:f6:a4:55:c8:d4: 25:22:5d:af:a1:9e:6a:38:a2:4c:e3:9f:3a:a2:46: ab:47:56:ab:e9:11:e2:a5:80:54:dc:4a:40:b7:97: 0e:e6:e8:47:4a:c9:46:3e:42:ba:c9:62:05:a7:66: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A0:11:FE:62:3F:DF:CB:03:26:57:12:09:8A:42:5B:6E:1C:7B:36 X509v3 Authority Key Identifier: keyid:C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:89:cc:0d:9f:34:7a:ec:27:4e:1a:ee:d8:a3:60:e0:d3:9c: 09:39:fb:40:3b:5f:6e:96:b0:ca:8d:b8:f4:23:15:6f:fc:83: 51:b4:44:8f:35:ab:04:a2:ae:a6:c3:4a:27:ba:1d:5d:70:2c: 76:1f:44:3d:6c:1d:c9:48:e9:ec:a5:c3:20:1c:46:3f:68:7a: 19:e6:13:a4:7c:d7:df:c8:f0:a0:23:cf:67:be:e5:a8:0b:64: 10:e1:62:aa:15:5d:51:d6:f8:78:8b:09:dd:93:1c:bb:f2:91: 8e:6e:85:1f:da:b8:75:e3:8b:3d:c9:db:d9:d2:59:55:6c:4e: 5e:5f:3f:b1:23:5e:c9:aa:6f:e0:78:9b:0d:06:6c:91:28:ab: e8:54:97:e0:55:4a:24:89:d9:0a:02:01:ec:55:a6:13:14:a9: 61:6b:32:9e:67:32:26:38:b2:3d:99:c0:72:2f:ec:ea:79:92: d5:fc:d1:f1:00:e4:de:6c:97:79:b7:cf:d7:ba:13:03:98:d9: a9:43:7a:31:d5:19:37:e8:be:a3:b9:b3:5e:77:7a:19:15:c0: 32:06:34:54:d3:92:ad:5c:97:d6:25:2d:6a:ad:24:f0:6d:17: 07:16:4b:51:f5:db:3d:4c:ab:26:ea:74:e1:df:7a:a1:ba:95: 9f:ab:06:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfw5z718ByXH9xRhVEJyhjMKUlWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4 MDI1QTVCMzAeFw0yNjA1MTMxMDA2MDNaFw0yNjA1MTQxMjI4MDNaMDMxMTAvBgNV BAMTKEIyQTAxMUZFNjIzRkRGQ0IwMzI2NTcxMjA5OEE0MjVCNkUxQzdCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ4weILMLRgalVCAMBcegExjI 5CXh9TLVLyMfQmpniTSnSH9Z3flVcpjXvyb8qjrconRvxscbXAejqHL65gjl0RAD fEcuyy9htq4lwd2xVLDVLoL1dfbmCs8CsAJ4R4qa0dlPVOuPWKJOiepK7q+7hkW+ OkOQc/TMK8ZUv/9kLLKgOktHT6zcKDHzjhNWtgkA6S2dEgNvAC0ibU0dPFAitGY6 Vw2zBFt2+yILdEPJnmffB8ndUHL53q3NhzBnzCGj3nGaAlxgMOTfRXP2pFXI1CUi Xa+hnmo4okzjnzqiRqtHVqvpEeKlgFTcSkC3lw7m6EdKyUY+QrrJYgWnZgAhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsqAR/mI/38sDJlcSCYpCW24cezYwHwYDVR0j BBgwFoAUwHToD/25uIa0KDjqiAMtxoAlpbMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTcwOTE4Ny8wL0MwNzRFODBGRkRCOUI4ODZCNDI4MzhFQTg4MDMy REM2ODAyNUE1QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4MDI1QTVCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU3MDkxODcvMC9DMDc0RTgwRkZEQjlC ODg2QjQyODM4RUE4ODAzMkRDNjgwMjVBNUIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYnMDZ80euwn Thru2KNg4NOcCTn7QDtfbpawyo249CMVb/yDUbREjzWrBKKupsNKJ7odXXAsdh9E PWwdyUjp7KXDIBxGP2h6GeYTpHzX38jwoCPPZ77lqAtkEOFiqhVdUdb4eIsJ3ZMc u/KRjm6FH9q4deOLPcnb2dJZVWxOXl8/sSNeyapv4HibDQZskSir6FSX4FVKJInZ CgIB7FWmExSpYWsynmcyJjiyPZnAci/s6nmS1fzR8QDk3myXebfP17oTA5jZqUN6 MdUZN+i+o7mzXnd6GRXAMgY0VNOSrVyX1iUtaq0k8G0XBxZLUfXbPUyrJup04d96 obqVn6sGBQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:07 2026 by rpki-client