$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json) Hash identifier: hKeRcFwLDUkk8kk+PHHn5vC7gC2DMeHqjSVwVfc+A4Y= Subject key identifier: 68:F0:66:17:20:E8:82:7D:9B:B6:D9:48:7D:85:4C:AA:39:3F:C1:B4 Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Certificate serial: D9098BCB3B4CDE58FFA0A2170B20506E0E7AB3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft Manifest number: 97 Signing time: Tue 12 May 2026 21:35:47 +0000 Manifest this update: Tue 12 May 2026 21:30:47 +0000 Manifest next update: Thu 14 May 2026 00:22:47 +0000 Files and hashes: 1: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=) 2: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=) 3: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=) 4: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: aFjhH0c8hKCMyY4omMYSvDvtMwawRFIgc825ArMLqIM=) 5: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d9:09:8b:cb:3b:4c:de:58:ff:a0:a2:17:0b:20:50:6e:0e:7a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Validity Not Before: May 12 21:30:47 2026 GMT Not After : May 14 00:22:47 2026 GMT Subject: CN=68F0661720E8827D9BB6D9487D854CAA393FC1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:94:82:d5:f6:8a:3c:a7:21:9d:bb:a5:62: a5:dd:c5:99:5a:1f:4f:44:8f:52:00:2c:9e:48:d6: d3:ea:8a:1a:58:2d:12:df:5e:f4:c9:d7:37:5d:94: 0e:18:1f:09:0e:a5:51:f6:0b:6c:c5:a6:0c:8b:3b: 92:67:1a:72:07:a6:6e:d8:e3:c5:52:00:e3:48:5c: d2:db:5b:5e:8b:99:63:59:19:dd:87:ea:0d:c2:a2: 56:1d:7f:c6:ad:e9:13:5a:2b:52:36:db:15:35:e2: c0:fc:01:a9:2d:bb:10:84:03:5f:a7:69:cf:b2:76: ca:45:41:f8:7d:e3:ce:ed:e5:eb:e7:5c:71:ec:0f: 39:73:4c:8b:1d:d9:6b:f8:90:ae:52:c3:8d:25:18: c2:96:a5:a5:58:b7:e4:15:b8:7a:67:57:8a:07:8c: ab:37:d2:ff:ed:83:c5:75:39:11:3d:08:af:eb:cb: cd:54:dd:eb:07:6e:82:7e:80:5b:c0:00:b0:bf:69: d5:d1:9c:7a:bc:39:c6:9c:cd:03:b5:04:62:90:dd: 00:25:8f:bc:ea:0c:af:ae:f5:92:26:bf:52:28:00: 55:74:00:3c:a7:b5:bf:6d:bf:01:c0:e8:6a:46:8c: 55:8c:d6:7f:c8:5c:e8:3a:6b:9a:5d:f2:f3:68:3c: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:66:17:20:E8:82:7D:9B:B6:D9:48:7D:85:4C:AA:39:3F:C1:B4 X509v3 Authority Key Identifier: keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8e:9f:e9:ab:07:08:d8:80:6f:f4:f7:22:90:4f:ca:2d:d3: 52:a5:42:a0:92:18:75:9f:40:90:fa:7c:d8:6a:ff:90:47:45: 69:8d:08:b1:da:d2:5a:13:8a:ce:a3:7f:00:87:99:84:92:39: 7b:32:25:f5:5f:e7:cd:24:b1:39:ca:a6:76:ea:6d:65:b6:ed: 3b:62:70:7f:ee:c9:35:36:4f:ec:c0:26:96:8e:cc:ab:7c:dd: d1:1d:84:42:00:8a:ed:34:19:9f:2b:02:73:69:b6:ad:5a:f6: fb:c0:c8:86:a6:29:8a:07:03:05:ea:86:62:78:f1:48:e6:0a: 83:60:76:79:d0:85:13:29:ba:b5:6c:4b:09:79:4b:73:b3:24: d4:79:d6:15:65:42:8d:3f:ef:46:3d:aa:7b:87:f9:f1:42:ca: b9:a3:27:07:fc:22:1d:3e:22:aa:b5:42:ee:d0:04:73:e2:ea: b2:26:2e:3e:93:f1:f3:fc:8b:9c:09:e9:0c:45:97:ff:e9:31: 7f:69:2e:ec:d8:52:12:e1:f8:17:9a:73:d8:83:b2:ab:8b:e1: 6b:ae:fd:dc:a2:3a:d0:79:a3:29:59:53:7c:66:58:ba:e9:a6: d3:43:70:a5:db:c6:7a:46:8c:7c:8b:2c:71:44:02:d3:87:56: 0a:c8:58:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUANkJi8s7TN5Y/6CiFwsgUG4OerMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3 NkVFMUU3NjAeFw0yNjA1MTIyMTMwNDdaFw0yNjA1MTQwMDIyNDdaMDMxMTAvBgNV BAMTKDY4RjA2NjE3MjBFODgyN0Q5QkI2RDk0ODdEODU0Q0FBMzkzRkMxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcuJSC1faKPKchnbulYqXdxZla H09Ej1IALJ5I1tPqihpYLRLfXvTJ1zddlA4YHwkOpVH2C2zFpgyLO5JnGnIHpm7Y 48VSAONIXNLbW16LmWNZGd2H6g3ColYdf8at6RNaK1I22xU14sD8AaktuxCEA1+n ac+ydspFQfh9487t5evnXHHsDzlzTIsd2Wv4kK5Sw40lGMKWpaVYt+QVuHpnV4oH jKs30v/tg8V1ORE9CK/ry81U3esHboJ+gFvAALC/adXRnHq8OcaczQO1BGKQ3QAl j7zqDK+u9ZImv1IoAFV0ADyntb9tvwHA6GpGjFWM1n/IXOg6a5pd8vNoPIp/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaPBmFyDogn2bttlIfYVMqjk/wbQwHwYDVR0j BBgwFoAU4M+ccxgXDilJrWNeO/Rw4nbuHnYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODIwNjA4My8wL0UwQ0Y5QzczMTgxNzBFMjk0OUFENjM1RTNCRjQ3 MEUyNzZFRTFFNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3NkVFMUU3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyMDYwODMvMC9FMENGOUM3MzE4MTcw RTI5NDlBRDYzNUUzQkY0NzBFMjc2RUUxRTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhI6f6asHCNiA b/T3IpBPyi3TUqVCoJIYdZ9AkPp82Gr/kEdFaY0IsdrSWhOKzqN/AIeZhJI5ezIl 9V/nzSSxOcqmduptZbbtO2Jwf+7JNTZP7MAmlo7Mq3zd0R2EQgCK7TQZnysCc2m2 rVr2+8DIhqYpigcDBeqGYnjxSOYKg2B2edCFEym6tWxLCXlLc7Mk1HnWFWVCjT/v Rj2qe4f58ULKuaMnB/wiHT4iqrVC7tAEc+LqsiYuPpPx8/yLnAnpDEWX/+kxf2ku 7NhSEuH4F5pz2IOyq4vha6793KI60HmjKVlTfGZYuumm00NwpdvGekaMfIsscUQC 04dWCshYVQ== -----END CERTIFICATE-----Generated at Wed May 13 15:34:45 2026 by rpki-client