$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json) Hash identifier: 3TpaE5DUu5ZW3KQQA96Fnufz8SMxAc07EjDeKI0NP2E= Subject key identifier: F4:90:68:79:22:6A:DD:C4:67:CD:1E:BE:7A:01:89:43:2F:8C:75:76 Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Certificate serial: 7D6A2D38BE3A12BBC3BEC0DEC34672A742BB4A18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft Manifest number: 05 Signing time: Wed 13 May 2026 05:45:58 +0000 Manifest this update: Wed 13 May 2026 05:40:58 +0000 Manifest next update: Thu 14 May 2026 09:23:58 +0000 Files and hashes: 1: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: /8dLZCJSsJcsPlfBmxUfWak9vrMXqt5pc5NP2FOvzf0=) 2: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6a:2d:38:be:3a:12:bb:c3:be:c0:de:c3:46:72:a7:42:bb:4a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Validity Not Before: May 13 05:40:58 2026 GMT Not After : May 14 09:23:58 2026 GMT Subject: CN=F4906879226ADDC467CD1EBE7A0189432F8C7576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:24:e9:23:eb:2a:56:b1:2e:6c:10:0b:65: d9:7f:6e:73:d3:ab:e4:1d:8d:68:f6:d7:5a:c4:dc: e9:26:af:55:78:cf:7e:33:d4:96:0d:32:b3:8a:88: 9d:0b:39:90:7a:c7:5b:1d:1b:d7:e0:82:40:0f:dc: 20:a9:f2:10:e6:55:f4:fb:4c:d2:5c:68:d1:ab:0b: 81:a8:fb:13:99:09:ae:7e:4d:c4:b7:9e:ff:82:37: 93:8b:5b:0c:d7:b3:67:00:6c:09:65:e1:c1:aa:e9: 7d:91:45:2c:26:74:d6:49:b2:b8:3a:2e:a2:c5:9d: 64:77:b6:77:1d:6c:e1:40:52:cc:5e:ad:fb:5b:a5: 1a:ca:9a:7c:f5:ad:84:f0:dd:99:dd:5d:41:32:a5: ef:1e:e0:03:e0:0d:dd:4b:6c:c4:5d:70:b0:99:11: ed:16:e0:58:68:88:31:dc:ee:4d:f4:26:7b:12:00: 10:ef:84:68:dd:e9:2e:78:e5:25:18:be:ca:cc:cb: cf:d2:b9:20:da:a6:bd:4b:f5:b4:a8:f4:6a:bf:f6: 29:65:a3:c8:38:a4:f3:3e:e7:fb:b6:24:8f:28:5a: 71:53:53:47:6c:5e:ab:45:28:64:b1:ad:21:d5:18: 25:df:59:3a:4f:97:56:57:67:4f:d7:d1:64:b6:45: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:90:68:79:22:6A:DD:C4:67:CD:1E:BE:7A:01:89:43:2F:8C:75:76 X509v3 Authority Key Identifier: keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b1:3e:f0:62:9f:c0:19:2f:2b:a8:ff:72:e8:29:23:bf:54: 60:74:d6:b4:c3:99:2f:ff:71:a0:c6:cd:e4:2d:1c:e2:49:64: 2e:d5:75:f2:ee:56:55:92:a1:3f:c4:95:1c:67:25:31:26:97: 62:b2:25:03:3c:e6:bf:28:73:2b:0b:4e:5c:de:27:85:df:b5: 76:9a:41:e9:48:82:96:a6:63:33:f1:23:b8:b6:8c:f2:93:9e: 65:62:73:84:75:97:71:76:4d:71:33:09:d3:d7:5b:f8:4f:a1: 5a:00:fa:7b:13:a8:0d:ac:7e:c5:8f:77:b6:c2:d3:ab:3d:49: 12:f7:ce:fd:3d:76:7e:63:4f:7f:47:ed:5f:0c:19:e6:a7:97: a6:b8:cb:82:37:95:84:63:c3:a5:31:0d:90:d9:91:cd:02:a6: 2c:88:1c:ec:f3:8c:32:5d:f1:dd:91:aa:1d:cd:a5:ae:4f:4c: d4:19:b4:f8:9a:b5:b3:42:7b:46:f9:b7:cc:a2:78:21:d1:7c: 96:a3:9d:db:39:b7:0d:a8:72:27:b0:4c:ac:9d:16:8f:7b:db: 92:54:e6:bb:4c:31:b8:e7:8f:6b:ef:2d:5b:20:23:a4:b0:94: 8f:10:24:5a:a7:8e:59:08:74:33:ff:9a:ee:a0:b9:ea:58:38: ef:1c:d9:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfWotOL46ErvDvsDew0Zyp0K7ShgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODRE MTAzMUNDQjAeFw0yNjA1MTMwNTQwNThaFw0yNjA1MTQwOTIzNThaMDMxMTAvBgNV BAMTKEY0OTA2ODc5MjI2QUREQzQ2N0NEMUVCRTdBMDE4OTQzMkY4Qzc1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqTyTpI+sqVrEubBALZdl/bnPT q+QdjWj211rE3Okmr1V4z34z1JYNMrOKiJ0LOZB6x1sdG9fggkAP3CCp8hDmVfT7 TNJcaNGrC4Go+xOZCa5+TcS3nv+CN5OLWwzXs2cAbAll4cGq6X2RRSwmdNZJsrg6 LqLFnWR3tncdbOFAUsxerftbpRrKmnz1rYTw3ZndXUEype8e4APgDd1LbMRdcLCZ Ee0W4FhoiDHc7k30JnsSABDvhGjd6S545SUYvsrMy8/SuSDapr1L9bSo9Gq/9ill o8g4pPM+5/u2JI8oWnFTU0dsXqtFKGSxrSHVGCXfWTpPl1ZXZ0/X0WS2Rd7BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9JBoeSJq3cRnzR6+egGJQy+MdXYwHwYDVR0j BBgwFoAUKU9KN60tCkWWJJ65SOgrhNEDHMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1MDY3OTYyNzA1NTExOS8wLzI5NEY0QTM3QUQyRDBBNDU5NjI0OUVCOTQ4RTgy Qjg0RDEwMzFDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTA2Nzk2MjcwNTUxMTkvMC8yOTRGNEEzN0FEMkQw QTQ1OTYyNDlFQjk0OEU4MkI4NEQxMDMxQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLE+8GKfwBkv K6j/cugpI79UYHTWtMOZL/9xoMbN5C0c4klkLtV18u5WVZKhP8SVHGclMSaXYrIl AzzmvyhzKwtOXN4nhd+1dppB6UiClqZjM/EjuLaM8pOeZWJzhHWXcXZNcTMJ09db +E+hWgD6exOoDax+xY93tsLTqz1JEvfO/T12fmNPf0ftXwwZ5qeXprjLgjeVhGPD pTENkNmRzQKmLIgc7POMMl3x3ZGqHc2lrk9M1Bm0+Jq1s0J7Rvm3zKJ4IdF8lqOd 2zm3DahyJ7BMrJ0Wj3vbklTmu0wxuOePa+8tWyAjpLCUjxAkWqeOWQh0M/+a7qC5 6lg47xzZbg== -----END CERTIFICATE-----Generated at Wed May 13 17:09:24 2026 by rpki-client