$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json) Hash identifier: qy7GbqUr6MvK1yiKTt+HLl1m7wuioXOvYEtcDDEyDWc= Subject key identifier: BB:1A:EA:02:BC:3D:59:C3:1C:F1:5A:F0:7E:E4:58:88:46:BB:31:94 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 4597C19B18EE9891EC84CBA74F61CCCB0243BC54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft Manifest number: 29 Signing time: Wed 13 May 2026 00:35:49 +0000 Manifest this update: Wed 13 May 2026 00:30:49 +0000 Manifest next update: Thu 14 May 2026 02:25:49 +0000 Files and hashes: 1: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: fuPnNgt1joFuve0aY2zyD4N/jmJDQXRh13n9KMmrdpQ=) 2: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (hash: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:97:c1:9b:18:ee:98:91:ec:84:cb:a7:4f:61:cc:cb:02:43:bc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: May 13 00:30:49 2026 GMT Not After : May 14 02:25:49 2026 GMT Subject: CN=BB1AEA02BC3D59C31CF15AF07EE4588846BB3194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:d9:19:9b:24:4f:98:ce:69:4c:79:73:93: 1f:b7:9f:80:b7:f1:2a:83:52:7e:5a:92:60:01:89: 17:fa:58:74:b8:57:46:07:71:b8:42:cf:54:ef:d2: 4d:c4:51:42:84:1d:e2:62:1e:9e:0a:24:26:52:17: d5:49:ba:4c:81:45:f3:b3:80:d4:b0:c1:e8:09:92: 8a:2d:4f:fb:eb:8c:07:74:0a:df:b3:9e:ed:5e:4b: ce:12:f6:3c:cd:e7:8b:3d:59:16:49:af:b0:8a:64: 1b:e3:5b:e3:6a:4c:66:3a:c9:9c:72:06:50:ff:bb: 14:07:3e:49:f5:63:b9:2e:40:c3:ad:3b:7c:f4:19: a1:9b:78:32:8f:4c:08:c5:80:94:8a:53:5c:ae:a8: 98:b8:6c:82:53:34:6f:af:61:93:f1:6b:24:95:92: 03:95:54:0c:2e:b9:ed:05:e5:2b:16:42:36:fe:70: 7b:15:58:cb:a1:0d:b1:11:b9:28:bd:eb:31:88:aa: c7:02:25:0d:b9:33:2b:f1:2e:b7:c8:f7:60:2a:eb: 33:3d:15:f2:ae:3f:a0:5c:c7:aa:86:4f:15:98:da: ea:3f:5d:d2:0d:8c:0b:88:58:4f:8c:d4:bd:1b:c5: e9:17:af:48:e6:21:98:a1:a5:78:15:d8:2c:0c:54: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:EA:02:BC:3D:59:C3:1C:F1:5A:F0:7E:E4:58:88:46:BB:31:94 X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c2:6c:9c:bd:67:89:a5:e7:c2:d1:3c:26:9e:d2:18:91:e6: 3c:f1:27:1f:2f:e6:98:b6:95:c7:fd:42:93:2a:92:4d:82:7d: 17:f9:ef:48:c0:a8:71:b2:04:69:a0:1e:bb:24:b2:66:31:75: 1c:d5:9f:8f:81:be:a6:dc:d3:12:ec:46:a1:97:f3:22:14:2c: 88:51:37:26:40:de:39:e2:07:fa:9a:20:45:66:d0:e0:4a:c4: c8:de:bc:81:64:98:8c:ca:16:16:18:04:25:00:84:32:b1:48: 0a:aa:15:fb:c6:d0:2e:99:f8:f2:89:e2:83:e3:dd:9c:75:d2: 9c:a1:db:5b:83:1c:47:50:56:d4:ab:5b:73:16:6f:9f:97:d6: d3:3f:e7:23:ff:d0:38:8d:89:9f:e2:ba:fa:8e:77:cb:a7:6c: 4b:25:77:82:6c:f7:cd:a5:f2:f9:7e:db:a4:9d:98:da:e5:1f: 2c:ca:7b:4b:0a:60:72:be:99:2b:53:8a:8c:5c:e9:ec:07:03: 77:75:69:4f:32:17:29:ec:1b:b7:16:af:f6:85:3c:d5:5f:fe: 7c:18:f0:eb:19:e5:1e:d5:4e:2c:a9:41:27:41:01:44:35:8e: 9d:f8:9a:17:1e:6a:e5:c8:2a:ab:58:a1:38:fb:fe:16:c9:9c: f5:bb:2b:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURZfBmxjumJHshMunT2HMywJDvFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjA1MTMwMDMwNDlaFw0yNjA1MTQwMjI1NDlaMDMxMTAvBgNV BAMTKEJCMUFFQTAyQkMzRDU5QzMxQ0YxNUFGMDdFRTQ1ODg4NDZCQjMxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOtkZmyRPmM5pTHlzkx+3n4C3 8SqDUn5akmABiRf6WHS4V0YHcbhCz1Tv0k3EUUKEHeJiHp4KJCZSF9VJukyBRfOz gNSwwegJkootT/vrjAd0Ct+znu1eS84S9jzN54s9WRZJr7CKZBvjW+NqTGY6yZxy BlD/uxQHPkn1Y7kuQMOtO3z0GaGbeDKPTAjFgJSKU1yuqJi4bIJTNG+vYZPxaySV kgOVVAwuue0F5SsWQjb+cHsVWMuhDbERuSi96zGIqscCJQ25MyvxLrfI92Aq6zM9 FfKuP6Bcx6qGTxWY2uo/XdINjAuIWE+M1L0bxekXr0jmIZihpXgV2CwMVP+3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuxrqArw9WcMc8VrwfuRYiEa7MZQwHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTgwMTgxODIzNDg4MDEvMC8zNTE4QzFFNzBCMzBE NTAxRUMwODAzQjg1RTUyRjU5MDVFRTgyMDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcJsnL1niaXn wtE8Jp7SGJHmPPEnHy/mmLaVx/1CkyqSTYJ9F/nvSMCocbIEaaAeuySyZjF1HNWf j4G+ptzTEuxGoZfzIhQsiFE3JkDeOeIH+pogRWbQ4ErEyN68gWSYjMoWFhgEJQCE MrFICqoV+8bQLpn48onig+PdnHXSnKHbW4McR1BW1KtbcxZvn5fW0z/nI//QOI2J n+K6+o53y6dsSyV3gmz3zaXy+X7bpJ2Y2uUfLMp7Swpgcr6ZK1OKjFzp7AcDd3Vp TzIXKewbtxav9oU81V/+fBjw6xnlHtVOLKlBJ0EBRDWOnfiaFx5q5cgqq1ihOPv+ Fsmc9bsrig== -----END CERTIFICATE-----Generated at Wed May 13 13:31:24 2026 by rpki-client