$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft File: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft (raw, json) Hash identifier: DLsUHB2c0L/OERXbVk22eJGaGANS8Bz9SKSZw7frcow= Subject key identifier: EF:70:8C:78:90:3A:24:D6:3C:22:28:43:AE:A9:9A:32:80:9B:10:CA Authority key identifier: E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64 Certificate issuer: /CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64 Certificate serial: 2C1400870D695806289CC046B031DCEB4A95E3CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft Manifest number: 25 Signing time: Wed 13 May 2026 17:36:05 +0000 Manifest this update: Wed 13 May 2026 17:31:05 +0000 Manifest next update: Thu 14 May 2026 20:07:05 +0000 Files and hashes: 1: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl (hash: 4sU3cnxwGo6kqoKA6fprwtkOsnPsCL+9Ia25A43Osac=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:14:00:87:0d:69:58:06:28:9c:c0:46:b0:31:dc:eb:4a:95:e3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64 Validity Not Before: May 13 17:31:05 2026 GMT Not After : May 14 20:07:05 2026 GMT Subject: CN=EF708C78903A24D63C222843AEA99A32809B10CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:3a:7d:45:2b:be:6f:8d:09:88:d4:69:d6: d8:93:13:89:18:e7:0d:2e:d2:59:13:4b:e1:15:e2: 0e:53:ae:8b:78:a7:c2:80:05:e8:8c:7f:ef:a3:cf: 62:92:e1:5f:b6:28:b6:98:3c:2e:a5:70:ab:c7:ef: a0:17:8c:07:da:ea:f3:cb:92:47:de:d7:46:c8:e3: 32:ea:b0:df:cb:e8:65:cc:e0:89:90:13:2c:d9:56: 98:31:20:8d:cd:f5:15:14:79:5a:82:15:66:f2:a6: 7e:8c:04:90:12:48:b1:66:9f:cb:98:79:09:f7:eb: 31:7b:84:d6:d6:85:a4:ac:e7:6f:d9:8c:30:9f:85: b9:78:85:18:34:68:53:9a:f8:8a:18:ae:01:d7:9f: 44:78:1f:77:79:24:a5:3e:f8:c7:04:09:25:0c:0f: 68:4e:8e:21:d1:0e:89:4d:66:41:27:15:87:87:4e: ed:3f:f0:30:78:50:39:c0:e6:98:80:14:24:86:13: 85:13:ab:ad:39:d8:8d:1b:b9:d5:61:f5:a8:2c:20: 79:06:d9:1b:de:f2:5a:db:d6:60:2e:00:a3:51:c8: 24:b2:ce:6c:63:35:f0:0d:67:18:f3:e5:9f:63:88: 23:ea:b4:34:ab:fb:01:1c:56:ae:94:42:19:c0:60: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:70:8C:78:90:3A:24:D6:3C:22:28:43:AE:A9:9A:32:80:9B:10:CA X509v3 Authority Key Identifier: keyid:E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:35:b0:92:60:4b:06:2b:87:6d:11:19:5d:b2:de:0d:9a:4c: c7:23:6a:a6:cd:f7:41:8a:dc:00:1b:6e:71:e1:29:a6:f8:13: cf:ff:c6:66:d1:8d:bf:97:f6:1e:42:4b:4f:f3:a0:06:b1:74: 00:d9:9e:6a:63:2e:e9:53:cd:b6:31:c8:39:ba:ad:49:31:b1: 18:2b:0b:f7:06:af:e2:5c:54:19:3d:a1:52:d8:69:18:22:67: fb:a7:69:c8:e1:74:11:ac:a1:c5:ff:c8:c6:af:1a:32:d0:aa: 5d:d6:86:19:0e:5d:ae:5b:93:14:cb:82:2a:13:3a:96:bf:69: 50:4a:50:4b:d9:83:70:80:18:9d:a0:3a:6f:2a:fc:91:9a:d4: 6a:e3:28:e3:ff:7d:28:c1:16:16:a7:a0:8e:09:10:d0:0f:0e: 59:95:06:9f:bb:c6:bc:ce:fd:10:5a:f9:12:0e:b4:47:86:89: eb:e1:45:31:bf:b2:13:be:61:9c:e4:48:f3:c8:c7:6a:29:cd: 1c:ea:f8:f6:42:0e:46:f1:ee:1d:f0:f0:d3:56:10:19:da:df: 02:10:1a:69:9c:44:61:b9:5c:be:5a:77:d5:67:e9:c6:b1:8b: d0:0a:5a:34:ac:07:3d:4c:b1:7d:86:74:3e:95:7f:e2:09:1c: 17:45:ca:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULBQAhw1pWAYonMBGsDHc60qV48wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgwNkIxODdFRkQyMTRGMkUxQkVGRTYxRUY5NTZGRDVD OTQwNUU2NDAeFw0yNjA1MTMxNzMxMDVaFw0yNjA1MTQyMDA3MDVaMDMxMTAvBgNV BAMTKEVGNzA4Qzc4OTAzQTI0RDYzQzIyMjg0M0FFQTk5QTMyODA5QjEwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/zp9RSu+b40JiNRp1tiTE4kY 5w0u0lkTS+EV4g5Trot4p8KABeiMf++jz2KS4V+2KLaYPC6lcKvH76AXjAfa6vPL kkfe10bI4zLqsN/L6GXM4ImQEyzZVpgxII3N9RUUeVqCFWbypn6MBJASSLFmn8uY eQn36zF7hNbWhaSs52/ZjDCfhbl4hRg0aFOa+IoYrgHXn0R4H3d5JKU++McECSUM D2hOjiHRDolNZkEnFYeHTu0/8DB4UDnA5piAFCSGE4UTq6052I0budVh9agsIHkG 2Rve8lrb1mAuAKNRyCSyzmxjNfANZxjz5Z9jiCPqtDSr+wEcVq6UQhnAYF7pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU73CMeJA6JNY8IihDrqmaMoCbEMowHwYDVR0j BBgwFoAU6Aaxh+/SFPLhvv5h75Vv1clAXmQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQxMjg2NTMwNTg3MDMzNy8xL0U4MDZCMTg3RUZEMjE0RjJFMUJFRkU2MUVGOTU2 RkQ1Qzk0MDVFNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTgwNkIxODdFRkQyMTRGMkUxQkVGRTYxRUY5NTZGRDVDOTQwNUU2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MTI4NjUzMDU4NzAzMzcvMS9FODA2QjE4N0VGRDIx NEYyRTFCRUZFNjFFRjk1NkZENUM5NDA1RTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTWwkmBLBiuH bREZXbLeDZpMxyNqps33QYrcABtuceEppvgTz//GZtGNv5f2HkJLT/OgBrF0ANme amMu6VPNtjHIObqtSTGxGCsL9wav4lxUGT2hUthpGCJn+6dpyOF0Eayhxf/Ixq8a MtCqXdaGGQ5drluTFMuCKhM6lr9pUEpQS9mDcIAYnaA6byr8kZrUauMo4/99KMEW FqegjgkQ0A8OWZUGn7vGvM79EFr5Eg60R4aJ6+FFMb+yE75hnORI88jHainNHOr4 9kIORvHuHfDw01YQGdrfAhAaaZxEYblcvlp31WfpxrGL0ApaNKwHPUyxfYZ0PpV/ 4gkcF0XK0g== -----END CERTIFICATE-----Generated at Wed May 13 20:54:59 2026 by rpki-client