$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft File: 9FEF44F113313B4929575EF55ED937D41AA80334.mft (raw, json) Hash identifier: a0ITVmZ7DSrXx162Ta7E26xFSy5fAzzpsRnWCPiKJWw= Subject key identifier: EA:C0:88:5A:01:F1:D8:66:04:08:A7:D4:82:B3:59:52:8D:70:2C:9C Authority key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 Certificate issuer: /CN=9FEF44F113313B4929575EF55ED937D41AA80334 Certificate serial: 180AFAFE0B2AE20110C888077EF2AA4B71DE0F2F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft Manifest number: 29 Signing time: Wed 13 May 2026 04:10:55 +0000 Manifest this update: Wed 13 May 2026 04:05:55 +0000 Manifest next update: Thu 14 May 2026 06:48:55 +0000 Files and hashes: 1: 9FEF44F113313B4929575EF55ED937D41AA80334.crl (hash: p5it3FBCSSqJnYScPIhOw7ZbWHG3/2QpIwxW1Pcv5B0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0a:fa:fe:0b:2a:e2:01:10:c8:88:07:7e:f2:aa:4b:71:de:0f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEF44F113313B4929575EF55ED937D41AA80334 Validity Not Before: May 13 04:05:55 2026 GMT Not After : May 14 06:48:55 2026 GMT Subject: CN=EAC0885A01F1D8660408A7D482B359528D702C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:d4:77:46:4a:42:24:dc:8d:68:cb:cc:3d: 20:4b:27:a1:e9:48:5c:dd:e5:10:e6:76:ed:bc:a1: b9:b8:5f:d9:04:4c:7e:2d:db:b2:06:51:f7:c9:9d: 07:e6:15:f1:56:6d:b4:18:77:8f:d3:5c:8c:ab:fc: 52:53:27:dc:2e:be:e6:a5:ea:97:ff:b2:b9:36:2e: f2:eb:19:09:3a:f5:61:d1:4b:8a:da:8f:12:cd:a1: d4:6a:89:9a:38:6e:9d:2b:fc:3e:cf:75:2d:51:dc: 10:38:f2:8d:ca:a7:90:23:9c:de:0d:cb:1a:bc:c7: 7e:f6:bf:82:15:06:52:ca:8b:94:f5:03:88:57:20: dc:8a:e0:86:dc:0d:0c:ef:ba:cc:49:a5:ba:5f:54: 8d:7f:9f:7d:b3:85:6d:8a:0d:b9:68:12:15:d3:a1: b8:02:26:c7:5a:65:4a:0e:16:ca:50:d4:0b:43:82: d9:eb:a7:45:56:59:ed:55:9c:09:c9:7a:9c:4b:70: 9d:42:51:ee:ce:ea:21:83:4c:cc:1c:ac:1c:65:b4: 77:33:90:bf:ee:47:10:b8:96:dc:2c:3b:1b:4f:22: 54:5d:56:96:f4:1b:dc:38:fa:f5:df:85:e7:c6:81: 3f:32:b4:ae:a8:48:fb:bf:51:ea:5b:ec:2f:23:f3: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:88:5A:01:F1:D8:66:04:08:A7:D4:82:B3:59:52:8D:70:2C:9C X509v3 Authority Key Identifier: keyid:9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ec:d7:1e:0b:bd:95:66:cd:2c:78:9d:07:84:3e:67:4d:79: be:90:81:9f:45:c9:02:31:32:a5:b5:cd:19:68:b6:c3:4f:fc: 87:fb:37:41:b0:48:e0:a9:99:9e:a0:4d:1d:dc:86:92:05:6c: 95:cf:92:ac:da:32:61:f3:52:7d:e6:37:2c:23:d7:fc:97:6e: ae:0d:17:85:6c:fb:9f:06:8b:72:00:60:b2:15:f4:6f:2c:26: 59:bd:60:f4:04:a0:12:06:62:47:98:47:53:f8:5b:fd:ad:88: 14:cd:43:92:62:f3:3a:41:bf:a4:f6:03:01:d5:0b:12:f4:e9: 5f:b9:24:ca:c9:af:aa:fc:a1:f2:92:0a:d6:c7:97:d0:68:22: 23:47:f4:48:93:4d:09:78:ff:95:8c:b0:ab:d2:47:4a:0d:90: a8:aa:74:8c:96:d8:86:20:a8:3c:be:6a:df:ca:0f:4a:6d:0c: d4:b1:18:b5:4c:45:ea:0f:0a:83:f1:3a:d0:5c:35:e6:b3:2b: fb:df:38:95:0c:1b:c1:2e:22:ad:85:13:8a:68:1d:89:06:a2: 60:96:50:1f:2e:1a:1f:5a:28:db:6d:97:a3:13:2f:14:8f:b3: e4:df:6b:ff:8d:f9:97:31:7b:cb:96:c6:3c:54:47:30:6b:09: 41:02:58:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGAr6/gsq4gEQyIgHfvKqS3HeDy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQx QUE4MDMzNDAeFw0yNjA1MTMwNDA1NTVaFw0yNjA1MTQwNjQ4NTVaMDMxMTAvBgNV BAMTKEVBQzA4ODVBMDFGMUQ4NjYwNDA4QTdENDgyQjM1OTUyOEQ3MDJDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD19R3RkpCJNyNaMvMPSBLJ6Hp SFzd5RDmdu28obm4X9kETH4t27IGUffJnQfmFfFWbbQYd4/TXIyr/FJTJ9wuvual 6pf/srk2LvLrGQk69WHRS4rajxLNodRqiZo4bp0r/D7PdS1R3BA48o3Kp5AjnN4N yxq8x372v4IVBlLKi5T1A4hXINyK4IbcDQzvusxJpbpfVI1/n32zhW2KDbloEhXT obgCJsdaZUoOFspQ1AtDgtnrp0VWWe1VnAnJepxLcJ1CUe7O6iGDTMwcrBxltHcz kL/uRxC4ltwsOxtPIlRdVpb0G9w4+vXfhefGgT8ytK6oSPu/Uepb7C8j8xXNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6sCIWgHx2GYECKfUgrNZUo1wLJwwHwYDVR0j BBgwFoAUn+9E8RMxO0kpV171Xtk31BqoAzQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk5Nzg0Nzg3NjE0MTA1Ny8wLzlGRUY0NEYxMTMzMTNCNDkyOTU3NUVGNTVFRDkz N0Q0MUFBODAzMzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQxQUE4MDMzNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5OTc4NDc4NzYxNDEwNTcvMC85RkVGNDRGMTEzMzEz QjQ5Mjk1NzVFRjU1RUQ5MzdENDFBQTgwMzM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQezXHgu9lWbN LHidB4Q+Z015vpCBn0XJAjEypbXNGWi2w0/8h/s3QbBI4KmZnqBNHdyGkgVslc+S rNoyYfNSfeY3LCPX/Jdurg0XhWz7nwaLcgBgshX0bywmWb1g9ASgEgZiR5hHU/hb /a2IFM1DkmLzOkG/pPYDAdULEvTpX7kkysmvqvyh8pIK1seX0GgiI0f0SJNNCXj/ lYywq9JHSg2QqKp0jJbYhiCoPL5q38oPSm0M1LEYtUxF6g8Kg/E60Fw15rMr+984 lQwbwS4irYUTimgdiQaiYJZQHy4aH1oo222XoxMvFI+z5N9r/435lzF7y5bGPFRH MGsJQQJYQw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:07 2026 by rpki-client