$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json) Hash identifier: k2J5sdRSb1t8nZ6A1GXsjSo8j1WwJdhMed/DMziH8lI= Subject key identifier: 44:3B:F6:DF:68:33:1D:25:7A:D6:6D:08:47:7D:B6:ED:9C:47:4B:E2 Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Certificate serial: 79D0F354B92FBB45212B05F94AF01DCB7F27F263 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft Manifest number: 28 Signing time: Wed 13 May 2026 07:06:01 +0000 Manifest this update: Wed 13 May 2026 07:01:01 +0000 Manifest next update: Thu 14 May 2026 09:07:01 +0000 Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: GZBEC+8gvIkLXEfWDKtBXgMMpNwdkA2nv43lIWDGgZw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d0:f3:54:b9:2f:bb:45:21:2b:05:f9:4a:f0:1d:cb:7f:27:f2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Validity Not Before: May 13 07:01:01 2026 GMT Not After : May 14 09:07:01 2026 GMT Subject: CN=443BF6DF68331D257AD66D08477DB6ED9C474BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ca:b2:d8:e2:84:90:71:14:92:42:05:c8:63: d9:c1:05:41:19:46:fa:7d:37:72:58:6a:2f:5e:3a: e3:02:ce:8d:34:07:c8:7c:46:62:fa:6b:b9:74:96: 1e:80:c6:04:e4:d3:41:a5:c6:f5:2c:fa:af:85:b0: d5:92:4b:59:78:ba:a3:79:a9:9f:85:c3:3f:05:64: 85:82:ac:25:23:d8:11:ba:68:37:69:0e:08:a8:bf: 41:fe:50:a3:ff:77:2f:42:81:e4:af:8c:c6:a4:98: 7d:b2:03:ce:13:bf:95:cc:1e:08:5f:42:43:53:5e: 37:52:26:3d:8c:32:fc:fd:5e:45:03:a6:bf:76:ac: d5:f8:7f:6a:b4:68:70:0f:e9:9b:e0:a3:c6:e8:11: f7:1a:ab:ab:b1:c5:31:f8:64:62:88:ad:ba:de:4b: 41:27:a1:c6:44:fd:16:3d:d3:dd:df:f9:b3:e0:11: b7:36:d2:25:ae:e4:25:f8:c6:f9:e1:06:15:fb:c2: 97:1c:3b:63:43:d2:4e:f0:23:91:78:0f:d2:ac:a9: a7:af:a7:3f:19:ef:dd:64:59:27:e5:06:32:fa:13: 35:5a:59:92:31:0b:ea:d0:89:67:aa:ff:9b:6f:c4: 57:17:63:18:19:5c:a6:72:19:58:88:ca:fb:f8:da: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3B:F6:DF:68:33:1D:25:7A:D6:6D:08:47:7D:B6:ED:9C:47:4B:E2 X509v3 Authority Key Identifier: keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b2:f3:83:3c:70:81:24:f5:75:91:23:74:13:d2:40:43:9e: a2:76:77:01:b2:00:5f:58:56:24:e1:70:8f:01:05:e8:de:5a: 5e:64:1b:d6:1a:b4:82:3c:c0:24:1b:65:d5:e8:01:a9:b7:e3: 68:31:d5:42:2a:42:41:9f:cd:c3:26:17:2c:72:11:cb:65:cb: 44:e0:58:4e:21:22:4c:e9:c9:07:ab:3b:54:0d:c6:8c:50:d6: 36:30:80:b5:c8:07:8f:3d:36:3b:76:75:f6:d8:dc:d3:7d:60: 64:b5:71:60:25:23:5e:34:42:bf:33:f4:16:73:aa:55:63:ff: c1:82:80:fe:5b:f4:5d:3a:db:89:3a:e9:b7:b8:be:be:d9:c8: 6b:30:97:3a:4d:a4:dc:9f:fd:36:59:a0:da:22:3f:82:06:f7: a0:8b:40:eb:1d:51:0d:6b:43:aa:c3:dc:be:8b:95:81:9e:f0: 3c:48:98:fa:48:9a:34:b0:ce:24:0c:93:63:db:83:62:e6:e7: 31:d1:39:43:f0:62:75:46:93:02:ca:e2:9f:ea:18:b5:83:88: 07:49:bc:97:e6:14:dc:ec:d1:2f:c9:41:ce:38:39:c8:a6:7a: cc:d7:88:24:9e:a0:91:96:23:12:b4:a6:55:29:67:a0:9d:5a: 68:21:83:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUedDzVLkvu0UhKwX5SvAdy38n8mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNG Mjk0MjVBRDAeFw0yNjA1MTMwNzAxMDFaFw0yNjA1MTQwOTA3MDFaMDMxMTAvBgNV BAMTKDQ0M0JGNkRGNjgzMzFEMjU3QUQ2NkQwODQ3N0RCNkVEOUM0NzRCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0yrLY4oSQcRSSQgXIY9nBBUEZ Rvp9N3JYai9eOuMCzo00B8h8RmL6a7l0lh6AxgTk00GlxvUs+q+FsNWSS1l4uqN5 qZ+Fwz8FZIWCrCUj2BG6aDdpDgiov0H+UKP/dy9CgeSvjMakmH2yA84Tv5XMHghf QkNTXjdSJj2MMvz9XkUDpr92rNX4f2q0aHAP6Zvgo8boEfcaq6uxxTH4ZGKIrbre S0EnocZE/RY9093f+bPgEbc20iWu5CX4xvnhBhX7wpccO2ND0k7wI5F4D9Ksqaev pz8Z791kWSflBjL6EzVaWZIxC+rQiWeq/5tvxFcXYxgZXKZyGViIyvv42pbzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURDv232gzHSV61m0IR3227ZxHS+IwHwYDVR0j BBgwFoAUBQPA3PI1mmOTXKQpePfpXPKUJa0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8wLzA1MDNDMERDRjIzNTlBNjM5MzVDQTQyOTc4RjdF OTVDRjI5NDI1QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMC8wNTAzQzBEQ0YyMzU5 QTYzOTM1Q0E0Mjk3OEY3RTk1Q0YyOTQyNUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrLzgzxwgST1 dZEjdBPSQEOeonZ3AbIAX1hWJOFwjwEF6N5aXmQb1hq0gjzAJBtl1egBqbfjaDHV QipCQZ/NwyYXLHIRy2XLROBYTiEiTOnJB6s7VA3GjFDWNjCAtcgHjz02O3Z19tjc 031gZLVxYCUjXjRCvzP0FnOqVWP/wYKA/lv0XTrbiTrpt7i+vtnIazCXOk2k3J/9 Nlmg2iI/ggb3oItA6x1RDWtDqsPcvouVgZ7wPEiY+kiaNLDOJAyTY9uDYubnMdE5 Q/BidUaTAsrin+oYtYOIB0m8l+YU3OzRL8lBzjg5yKZ6zNeIJJ6gkZYjErSmVSln oJ1aaCGDxA== -----END CERTIFICATE-----Generated at Wed May 13 16:48:02 2026 by rpki-client