$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: QMHVxIpOWpGU1+P5EITcq4uMaMS8K1NjXoU4/p7vLHk= Subject key identifier: 29:83:56:91:E3:BE:D1:36:93:56:A1:49:57:CB:85:EE:C1:5B:29:34 Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 4ED5C367D2FB2CBEE4E68D932DE8FE63AD73CCBD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: 2E Signing time: Wed 13 May 2026 08:31:02 +0000 Manifest this update: Wed 13 May 2026 08:26:02 +0000 Manifest next update: Thu 14 May 2026 09:06:02 +0000 Files and hashes: 1: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: 7749l9eEK93UZtX9Z7qsjYiPgvLBgMhSpxw3q/egQdE=) 2: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d5:c3:67:d2:fb:2c:be:e4:e6:8d:93:2d:e8:fe:63:ad:73:cc:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: May 13 08:26:02 2026 GMT Not After : May 14 09:06:02 2026 GMT Subject: CN=29835691E3BED1369356A14957CB85EEC15B2934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:81:c6:79:d7:4b:8f:06:11:56:87:3e:0e: 1e:81:6f:e6:ac:94:56:df:65:00:00:64:a0:f2:00: a1:f3:05:f2:c2:18:9d:0a:49:92:1e:16:f6:e2:44: 9a:97:c9:63:8c:7f:b5:8e:1c:fe:e3:ff:3a:86:3e: bf:2a:39:50:8d:53:83:26:cd:a7:e1:87:55:3f:82: 1b:36:ba:e6:ae:db:ac:54:8b:ad:a3:1e:29:2a:dd: d7:04:1e:62:46:89:04:57:83:a9:79:a2:90:0e:87: 3e:47:f3:18:33:c4:f5:c0:1a:15:3a:cb:38:f6:34: 9f:4f:f9:ad:91:b0:19:83:24:a3:0e:c0:94:d0:1c: 4a:fd:98:3e:cd:61:70:64:12:56:54:d2:90:29:4c: 31:b2:d2:e3:61:c1:48:e2:e7:df:9a:da:c0:f6:a9: 6b:b8:17:e9:e9:d5:da:5b:38:79:b3:e9:2a:f8:0b: 4e:7b:2e:c2:61:3b:73:67:d6:d5:18:52:15:1d:83: ee:fe:04:8c:38:a7:bd:f0:df:96:28:33:e3:6a:65: 55:41:c4:19:71:93:31:fe:68:8f:bd:1c:f8:2b:21: 0e:54:87:3d:6f:be:83:69:b7:d3:dd:6e:14:04:eb: cb:8a:66:c5:13:ad:1c:fb:d2:7e:88:9d:f9:39:56: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:83:56:91:E3:BE:D1:36:93:56:A1:49:57:CB:85:EE:C1:5B:29:34 X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e8:aa:5e:de:5d:3b:41:32:3a:1f:bc:f8:e0:c7:17:d0:90: 80:61:95:52:6c:93:e0:72:79:c2:e3:ec:58:a6:8e:66:2c:bb: e2:a2:b1:85:58:07:ca:3c:85:95:b6:a4:d7:bd:8b:c8:95:88: d2:80:e1:05:0b:ba:9f:95:66:bb:41:49:40:b7:39:99:60:6f: f1:f5:b7:7b:3f:66:a6:db:93:97:45:5e:2c:3a:07:57:11:c2: 2d:d6:02:4c:c9:c5:27:e0:8b:78:b0:18:30:e0:94:ea:bb:9c: 4a:e4:c5:1a:6c:cf:58:57:85:05:81:0a:45:ed:11:a4:65:f3: f5:6b:1e:7b:25:d7:7e:69:23:e7:c5:96:b0:b0:6d:19:cc:16: ca:d2:47:43:10:83:ea:ce:69:95:47:08:cc:0e:a9:de:52:f4: 75:19:ca:d7:2d:2a:e0:d2:9b:dd:07:ce:ba:e3:d3:da:b0:00: f9:70:38:f9:54:c9:a5:d1:1b:37:a0:2a:f2:8c:61:69:66:2f: fc:ca:16:77:ee:ff:ae:a0:3d:20:86:e6:02:98:a0:5d:9f:76: ba:31:1a:01:66:fd:cf:7b:ef:bc:fc:1c:6d:23:71:a6:1f:eb: 99:67:76:0c:7e:e7:c4:99:db:76:15:0f:1a:68:63:5c:c0:ce: 47:f1:32:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTtXDZ9L7LL7k5o2TLej+Y61zzL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjA1MTMwODI2MDJaFw0yNjA1MTQwOTA2MDJaMDMxMTAvBgNV BAMTKDI5ODM1NjkxRTNCRUQxMzY5MzU2QTE0OTU3Q0I4NUVFQzE1QjI5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYyIHGeddLjwYRVoc+Dh6Bb+as lFbfZQAAZKDyAKHzBfLCGJ0KSZIeFvbiRJqXyWOMf7WOHP7j/zqGPr8qOVCNU4Mm zafhh1U/ghs2uuau26xUi62jHikq3dcEHmJGiQRXg6l5opAOhz5H8xgzxPXAGhU6 yzj2NJ9P+a2RsBmDJKMOwJTQHEr9mD7NYXBkElZU0pApTDGy0uNhwUji59+a2sD2 qWu4F+np1dpbOHmz6Sr4C057LsJhO3Nn1tUYUhUdg+7+BIw4p73w35YoM+NqZVVB xBlxkzH+aI+9HPgrIQ5Uhz1vvoNpt9PdbhQE68uKZsUTrRz70n6Infk5VhhxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKYNWkeO+0TaTVqFJV8uF7sFbKTQwHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuiqXt5dO0Ey Oh+8+ODHF9CQgGGVUmyT4HJ5wuPsWKaOZiy74qKxhVgHyjyFlbak172LyJWI0oDh BQu6n5Vmu0FJQLc5mWBv8fW3ez9mptuTl0VeLDoHVxHCLdYCTMnFJ+CLeLAYMOCU 6rucSuTFGmzPWFeFBYEKRe0RpGXz9WseeyXXfmkj58WWsLBtGcwWytJHQxCD6s5p lUcIzA6p3lL0dRnK1y0q4NKb3QfOuuPT2rAA+XA4+VTJpdEbN6Aq8oxhaWYv/MoW d+7/rqA9IIbmApigXZ92ujEaAWb9z3vvvPwcbSNxph/rmWd2DH7nxJnbdhUPGmhj XMDOR/EyBw== -----END CERTIFICATE-----Generated at Wed May 13 17:09:25 2026 by rpki-client