$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft File: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft (raw, json) Hash identifier: YeCnXSWD7R3MUoks47ucFwEqW7+K8NAMC50C2a5bhdE= Subject key identifier: 07:32:7F:45:93:5B:94:EB:E0:63:0D:4B:08:81:EA:A6:E4:0E:89:B3 Authority key identifier: FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 Certificate issuer: /CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Certificate serial: 656A113B4BA7CC00EAF1A763E2C918EE82DE765F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft Manifest number: 31 Signing time: Tue 12 May 2026 21:05:47 +0000 Manifest this update: Tue 12 May 2026 21:00:47 +0000 Manifest next update: Wed 13 May 2026 23:01:47 +0000 Files and hashes: 1: FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl (hash: WXUz947c4ipc4vCbAaZ9TMVvfkozvOYRUhCULYyxBtY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6a:11:3b:4b:a7:cc:00:ea:f1:a7:63:e2:c9:18:ee:82:de:76:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF8B9A59A05607D978FA20C15FFB05172F86ECC2 Validity Not Before: May 12 21:00:47 2026 GMT Not After : May 13 23:01:47 2026 GMT Subject: CN=07327F45935B94EBE0630D4B0881EAA6E40E89B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:0f:cd:a4:d0:8b:ce:14:46:7c:e0:43:18: 84:1c:8b:db:3e:d5:11:0e:99:c8:14:04:bf:bc:77: 00:55:77:f7:ca:77:24:bc:6b:5f:71:40:5a:78:42: c6:9c:4f:e4:36:5d:87:28:06:a2:38:65:1f:90:44: 49:cb:fd:6c:a4:ab:81:82:ff:2b:86:55:12:26:3d: 46:c7:bc:02:8e:87:75:16:e1:8d:de:ae:12:ad:93: 61:10:0d:0d:37:91:2c:88:93:e4:96:e3:c5:36:fa: c2:e7:c5:4f:56:25:d4:76:ab:0c:81:da:cb:27:d5: df:59:1b:f2:75:f2:65:0b:92:ef:53:2f:8c:f6:e6: 31:cd:17:f8:ec:ac:d3:d0:10:a8:25:40:dc:74:23: d1:9d:38:83:d4:86:2d:13:93:e8:8f:1e:f0:55:07: 4c:c0:27:ef:d2:e5:fd:1b:ad:40:dc:cc:4c:9d:ec: 03:55:6a:ec:7e:2d:98:c6:5f:76:e9:5c:64:90:07: df:c8:7a:51:07:be:73:17:45:e1:1f:15:52:8c:cd: 42:f5:70:31:b2:e7:f2:4b:c6:ff:2f:51:76:64:a0: 4e:10:56:72:cf:99:d5:7c:ad:ad:ee:a0:c0:84:8a: a0:0d:75:a1:c8:8c:dc:8c:01:21:cb:d2:29:a1:df: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:32:7F:45:93:5B:94:EB:E0:63:0D:4B:08:81:EA:A6:E4:0E:89:B3 X509v3 Authority Key Identifier: keyid:FF:8B:9A:59:A0:56:07:D9:78:FA:20:C1:5F:FB:05:17:2F:86:EC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/0/FF8B9A59A05607D978FA20C15FFB05172F86ECC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:11:19:a9:f4:c5:84:fb:40:ec:53:64:f1:84:60:2c:7f:11: 6c:04:3d:5a:c8:a9:68:ea:42:47:98:e3:ef:25:bf:88:e0:52: 2d:3f:be:38:4f:4b:0b:e9:10:05:9d:82:71:d8:c6:ce:9e:58: 2b:45:c4:50:d5:61:be:29:73:d8:92:ea:96:af:35:f1:ac:22: 28:9d:78:22:d3:91:3f:64:ab:29:27:31:49:8f:72:20:26:79: 62:35:fe:fe:2b:65:f2:83:24:e5:0e:c0:b5:4d:79:c1:a4:30: e4:b6:f1:e5:de:e1:af:b3:47:b2:a3:c4:0a:cb:78:b3:92:8f: ab:14:48:ee:ea:1a:f5:c1:d1:35:fb:71:b9:ab:f0:e7:c6:c5: ab:40:92:44:16:86:c9:1f:62:5e:76:41:c5:65:ea:6f:d4:1a: 52:85:56:70:1b:d2:db:be:94:31:97:4a:35:d0:f7:a5:c2:7e: 21:59:fb:68:78:86:78:18:20:7c:01:ce:d4:42:44:7f:a3:ea: ea:05:58:3f:e7:56:36:b8:f3:e5:a7:8b:fb:9d:31:86:af:38: f9:26:02:ee:ef:5b:21:30:ff:00:d5:55:08:94:d0:d4:8f:19: 76:a7:ab:44:25:b0:62:7b:df:b4:dd:b3:52:6c:91:bd:a5:ae: 0a:69:78:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZWoRO0unzADq8adj4skY7oLedl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcy Rjg2RUNDMjAeFw0yNjA1MTIyMTAwNDdaFw0yNjA1MTMyMzAxNDdaMDMxMTAvBgNV BAMTKDA3MzI3RjQ1OTM1Qjk0RUJFMDYzMEQ0QjA4ODFFQUE2RTQwRTg5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmw/NpNCLzhRGfOBDGIQci9s+ 1REOmcgUBL+8dwBVd/fKdyS8a19xQFp4QsacT+Q2XYcoBqI4ZR+QREnL/Wykq4GC /yuGVRImPUbHvAKOh3UW4Y3erhKtk2EQDQ03kSyIk+SW48U2+sLnxU9WJdR2qwyB 2ssn1d9ZG/J18mULku9TL4z25jHNF/jsrNPQEKglQNx0I9GdOIPUhi0Tk+iPHvBV B0zAJ+/S5f0brUDczEyd7ANVaux+LZjGX3bpXGSQB9/IelEHvnMXReEfFVKMzUL1 cDGy5/JLxv8vUXZkoE4QVnLPmdV8ra3uoMCEiqANdaHIjNyMASHL0imh372BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBzJ/RZNblOvgYw1LCIHqpuQOibMwHwYDVR0j BBgwFoAU/4uaWaBWB9l4+iDBX/sFFy+G7MIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8wL0ZGOEI5QTU5QTA1NjA3RDk3OEZBMjBDMTVGRkIw NTE3MkY4NkVDQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRkY4QjlBNTlBMDU2MDdEOTc4RkEyMEMxNUZGQjA1MTcyRjg2RUNDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMC9GRjhCOUE1OUEwNTYw N0Q5NzhGQTIwQzE1RkZCMDUxNzJGODZFQ0MyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbREZqfTFhPtA 7FNk8YRgLH8RbAQ9WsipaOpCR5jj7yW/iOBSLT++OE9LC+kQBZ2CcdjGzp5YK0XE UNVhvilz2JLqlq818awiKJ14ItORP2SrKScxSY9yICZ5YjX+/itl8oMk5Q7AtU15 waQw5Lbx5d7hr7NHsqPECst4s5KPqxRI7uoa9cHRNftxuavw58bFq0CSRBaGyR9i XnZBxWXqb9QaUoVWcBvS276UMZdKNdD3pcJ+IVn7aHiGeBggfAHO1EJEf6Pq6gVY P+dWNrjz5aeL+50xhq84+SYC7u9bITD/ANVVCJTQ1I8ZdqerRCWwYnvftN2zUmyR vaWuCml4iA== -----END CERTIFICATE-----Generated at Wed May 13 18:42:50 2026 by rpki-client