$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json) Hash identifier: sg11RbClUG/xQ77/UQeKzA5CFJNGZwfUItTiTgaKCis= Subject key identifier: 38:CC:C4:C7:14:4E:17:38:8A:45:BA:6E:E2:CC:C6:3F:3B:66:04:33 Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09 Certificate issuer: /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09 Certificate serial: 42925D00ADC7EBE55355AA7D9C405DC449DA336A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft Manifest number: 0D Signing time: Wed 13 May 2026 01:30:50 +0000 Manifest this update: Wed 13 May 2026 01:25:50 +0000 Manifest next update: Thu 14 May 2026 02:07:50 +0000 Files and hashes: 1: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: Vs4C9oYA74FYKHQlCQaYjgzimZx289fCusssjn/fMOM=) 2: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:92:5d:00:ad:c7:eb:e5:53:55:aa:7d:9c:40:5d:c4:49:da:33:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09 Validity Not Before: May 13 01:25:50 2026 GMT Not After : May 14 02:07:50 2026 GMT Subject: CN=38CCC4C7144E17388A45BA6EE2CCC63F3B660433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:46:1c:73:18:cb:d3:ff:94:e1:4c:b6:f2:4d: 50:b0:5c:85:d8:b5:28:e1:7a:69:0a:27:44:e7:e8: ab:3f:55:51:e5:9c:a0:81:83:4d:82:a8:4e:8e:6d: df:d4:8a:d8:bf:1e:d2:92:6f:bc:ad:f7:f1:aa:d5: 1c:1b:81:4b:de:5b:f1:fa:63:21:b0:2c:37:e5:76: 45:04:0f:0c:e8:9a:dd:86:41:f4:6b:6b:7b:91:e8: f1:e5:4e:df:96:94:17:43:59:88:43:df:4f:16:88: 32:14:0e:f2:3a:f9:53:78:c2:b7:da:9c:82:9e:c4: 86:ec:ef:0f:f9:eb:17:ea:16:5a:99:6e:05:bd:17: 98:b7:4c:e4:5b:fc:f9:57:3f:aa:ec:aa:d6:40:6a: 7f:c7:50:c6:f0:a7:36:43:a7:bd:5f:02:ef:21:1e: 0a:7d:df:d2:1b:8b:04:c6:04:93:5a:23:76:4e:a1: ce:46:c0:9c:5d:0d:33:58:3c:59:e0:57:1d:bd:83: 6a:7b:af:b6:24:ec:75:5c:c4:52:cc:db:99:7d:ed: c2:35:57:ad:0a:2c:2f:41:c3:02:80:3a:b5:f2:c5: 66:31:44:34:d5:ed:e8:93:2f:fd:a7:c3:4a:7e:f6: f8:fb:f9:ec:13:dc:18:56:db:9b:a2:6b:ea:d3:8f: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CC:C4:C7:14:4E:17:38:8A:45:BA:6E:E2:CC:C6:3F:3B:66:04:33 X509v3 Authority Key Identifier: keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:65:c6:2b:ba:91:ce:c7:ba:74:f2:07:c9:c3:c0:23:ec:d9: d4:1a:d5:df:cd:90:14:89:af:c5:d7:b0:b0:d7:4b:cf:7e:8f: 0c:a3:70:df:d7:f5:5c:41:dd:87:e9:c5:7d:95:2e:c2:a3:72: 97:eb:20:fa:46:92:b4:cc:4b:05:0b:dd:00:01:2f:09:68:c2: 79:91:48:7b:d8:3f:15:df:e3:31:b0:47:d9:3c:aa:34:86:f2: c7:a3:4b:c1:d0:f4:c8:67:c9:e7:42:c0:a7:89:b7:d5:7c:80: ee:5e:65:af:f3:b6:c1:ad:2e:fc:e2:03:48:77:3c:13:e5:5a: f3:c1:03:dc:79:bc:14:71:05:68:b2:97:04:e1:2f:f6:25:c0: 04:49:e6:d5:88:c9:ea:09:77:86:24:08:1c:c1:55:42:d2:fc: 73:fb:3d:1b:04:7c:f7:92:22:45:c8:e5:8c:19:ff:78:30:d0: 86:e3:91:6d:4d:c7:d4:f1:a5:12:81:da:d0:f9:de:47:fe:84: 94:fc:8d:48:c7:77:c7:71:f0:3a:bd:26:1b:e9:4f:f9:dc:5b: 58:bf:b0:87:db:02:45:ec:13:7e:3f:58:55:f8:2e:01:1a:5c: 89:1b:e0:e1:ea:df:f1:f9:1c:48:5f:f0:cb:a4:d8:15:10:63: 73:fb:40:c7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQpJdAK3H6+VTVap9nEBdxEnaM2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5 RjdFRUQwOTAeFw0yNjA1MTMwMTI1NTBaFw0yNjA1MTQwMjA3NTBaMDMxMTAvBgNV BAMTKDM4Q0NDNEM3MTQ0RTE3Mzg4QTQ1QkE2RUUyQ0NDNjNGM0I2NjA0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVRhxzGMvT/5ThTLbyTVCwXIXY tSjhemkKJ0Tn6Ks/VVHlnKCBg02CqE6Obd/Uiti/HtKSb7yt9/Gq1RwbgUveW/H6 YyGwLDfldkUEDwzomt2GQfRra3uR6PHlTt+WlBdDWYhD308WiDIUDvI6+VN4wrfa nIKexIbs7w/56xfqFlqZbgW9F5i3TORb/PlXP6rsqtZAan/HUMbwpzZDp71fAu8h Hgp939IbiwTGBJNaI3ZOoc5GwJxdDTNYPFngVx29g2p7r7Yk7HVcxFLM25l97cI1 V60KLC9BwwKAOrXyxWYxRDTV7eiTL/2nw0p+9vj7+ewT3BhW25uia+rTjxKpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOMzExxROFziKRbpu4szGPztmBDMwHwYDVR0j BBgwFoAUGyx3Ew16raGEb/7+QW9QWZ9+7QkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAwODYyMzM2MjI0NDYxNS8wLzFCMkM3NzEzMEQ3QUFEQTE4NDZGRkVGRTQxNkY1 MDU5OUY3RUVEMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5RjdFRUQwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMDg2MjMzNjIyNDQ2MTUvMC8xQjJDNzcxMzBEN0FB REExODQ2RkZFRkU0MTZGNTA1OTlGN0VFRDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxmXGK7qRzse6 dPIHycPAI+zZ1BrV382QFImvxdewsNdLz36PDKNw39f1XEHdh+nFfZUuwqNyl+sg +kaStMxLBQvdAAEvCWjCeZFIe9g/Fd/jMbBH2TyqNIbyx6NLwdD0yGfJ50LAp4m3 1XyA7l5lr/O2wa0u/OIDSHc8E+Va88ED3Hm8FHEFaLKXBOEv9iXABEnm1YjJ6gl3 hiQIHMFVQtL8c/s9GwR895IiRcjljBn/eDDQhuORbU3H1PGlEoHa0PneR/6ElPyN SMd3x3HwOr0mG+lP+dxbWL+wh9sCRewTfj9YVfguARpciRvg4erf8fkcSF/wy6TY FRBjc/tAxw== -----END CERTIFICATE-----Generated at Wed May 13 17:09:30 2026 by rpki-client