$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: PxT8Q8nHev5820BDdblGq53DazRbrZ976mff/Htx1y8= Subject key identifier: DC:8E:46:4C:59:9D:BC:25:3B:A5:22:4D:5A:41:75:4B:CD:98:BF:02 Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 7A6568317A06A8655BA350FABFC2772AB7637210 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: 58 Signing time: Sat 13 Jun 2026 17:01:58 +0000 Manifest this update: Sat 13 Jun 2026 16:56:58 +0000 Manifest next update: Sun 14 Jun 2026 20:03:58 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: scpaylqByaMCctXxCRlceSIFuDcuGbOfYd8sXJ/cbok=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:65:68:31:7a:06:a8:65:5b:a3:50:fa:bf:c2:77:2a:b7:63:72:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Jun 13 16:56:58 2026 GMT Not After : Jun 14 20:03:58 2026 GMT Subject: CN=DC8E464C599DBC253BA5224D5A41754BCD98BF02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:c8:ce:15:b6:45:40:e5:8d:ce:d6:74:67: a9:17:d6:e5:4f:54:7d:7e:ed:df:12:49:fe:04:8e: 08:35:5e:d9:60:ee:93:4f:98:85:2f:b5:78:9e:c7: 9b:7b:2d:e6:8a:f5:72:a1:9e:0a:90:80:3c:67:1c: 0c:b9:69:87:87:7c:a3:23:24:60:4e:11:84:72:b0: 41:ec:f4:eb:3f:11:6f:a5:24:ce:4e:b2:af:d8:e5: d2:15:74:28:2c:e0:92:57:0b:7b:58:85:96:2d:5f: 78:96:05:35:f9:6e:f5:d7:ee:35:e1:e1:28:48:49: 06:a9:a7:f9:28:79:7c:6d:e0:16:f2:4e:37:f0:7d: 26:88:49:60:ab:08:e6:0b:a6:0e:d2:f1:5f:8f:ef: 7a:62:7a:ab:c3:52:3f:97:f2:07:17:c7:dc:1f:4e: e6:82:f3:fc:6a:4b:98:b3:fc:63:84:b7:8b:2b:7b: 41:87:35:4f:4e:6d:6b:6a:34:19:ea:01:ce:4e:cd: e3:37:43:0a:99:dc:b9:f5:94:f5:2a:15:08:61:41: f9:de:d1:93:40:64:c6:4f:02:86:34:e3:ec:a2:b3: 8d:33:a0:22:32:f5:f8:98:f6:4f:d0:2c:a0:45:8f: fc:85:9d:f4:79:1b:e8:48:f1:26:cf:b9:c9:94:35: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:46:4C:59:9D:BC:25:3B:A5:22:4D:5A:41:75:4B:CD:98:BF:02 X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e4:5c:a3:59:2f:78:d2:15:39:bf:33:df:46:26:3d:98:1b: 4e:4f:ae:c7:f5:e7:cc:99:c9:a1:4e:a2:3d:92:0f:3c:5f:92: 02:11:5a:77:48:23:10:3d:17:48:ee:4e:1b:0a:08:c7:de:12: ae:ad:9d:eb:41:27:32:b8:f7:29:7b:fb:fd:1f:82:e2:64:49: 1f:6d:30:00:bc:9e:e1:7b:24:df:a3:a3:62:34:29:c8:e2:23: d6:d2:fd:72:00:71:44:59:8d:e8:2b:a7:4b:f6:10:e2:7c:b2: 52:99:b6:c0:4e:63:68:43:7d:e1:05:a4:78:f0:5c:c9:b4:6f: 77:8e:d9:b2:fb:7a:77:c4:38:1b:fd:87:7d:29:6c:ae:8c:68: bc:1b:d7:78:a5:db:24:62:68:66:ab:4f:b5:be:24:40:6d:e3: b2:c3:62:c2:fe:61:1b:1b:ed:d9:2a:4d:a5:60:04:a4:4d:69: 85:d7:c0:ec:de:f4:1d:b5:c4:5e:6c:7d:87:22:77:60:2d:1e: e3:0e:16:b8:cc:35:28:db:0c:a7:02:89:d8:43:cd:da:ab:5b: 48:0d:f9:bf:34:ee:4c:a1:c9:c0:a0:12:d5:e5:58:9d:5b:e3: b6:51:a9:3a:2c:3e:8e:82:10:d0:df:36:a5:68:ec:01:ac:09: 53:c9:3f:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUemVoMXoGqGVbo1D6v8J3KrdjchAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA2MTMxNjU2NThaFw0yNjA2MTQyMDAzNThaMDMxMTAvBgNV BAMTKERDOEU0NjRDNTk5REJDMjUzQkE1MjI0RDVBNDE3NTRCQ0Q5OEJGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCw8jOFbZFQOWNztZ0Z6kX1uVP VH1+7d8SSf4Ejgg1Xtlg7pNPmIUvtXiex5t7LeaK9XKhngqQgDxnHAy5aYeHfKMj JGBOEYRysEHs9Os/EW+lJM5Osq/Y5dIVdCgs4JJXC3tYhZYtX3iWBTX5bvXX7jXh 4ShISQapp/koeXxt4BbyTjfwfSaISWCrCOYLpg7S8V+P73pieqvDUj+X8gcXx9wf TuaC8/xqS5iz/GOEt4sre0GHNU9ObWtqNBnqAc5OzeM3QwqZ3Ln1lPUqFQhhQfne 0ZNAZMZPAoY04+yis40zoCIy9fiY9k/QLKBFj/yFnfR5G+hI8SbPucmUNcxDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3I5GTFmdvCU7pSJNWkF1S82YvwIwHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeRco1kveNIV Ob8z30YmPZgbTk+ux/XnzJnJoU6iPZIPPF+SAhFad0gjED0XSO5OGwoIx94Srq2d 60EnMrj3KXv7/R+C4mRJH20wALye4Xsk36OjYjQpyOIj1tL9cgBxRFmN6CunS/YQ 4nyyUpm2wE5jaEN94QWkePBcybRvd47Zsvt6d8Q4G/2HfSlsroxovBvXeKXbJGJo ZqtPtb4kQG3jssNiwv5hGxvt2SpNpWAEpE1phdfA7N70HbXEXmx9hyJ3YC0e4w4W uMw1KNsMpwKJ2EPN2qtbSA35vzTuTKHJwKAS1eVYnVvjtlGpOiw+joIQ0N82pWjs AawJU8k/Jg== -----END CERTIFICATE-----Generated at Sun Jun 14 07:10:30 2026 by rpki-client