$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: dFrVqCkr383+i2UPzti+fHqVi9w5F5maiOyUwUWFpcQ= Subject key identifier: A9:99:42:27:F0:4E:88:25:7D:F9:BC:3A:55:26:B0:A8:BE:F7:EE:4B Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 6B0131101C6A9C624851608F11CF5BA836555795 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: C2 Signing time: Wed 13 May 2026 09:59:07 +0000 Manifest this update: Wed 13 May 2026 09:54:07 +0000 Manifest next update: Thu 14 May 2026 12:01:07 +0000 Files and hashes: 1: AS133111.roa (hash: Ah0t+o3oIOs5pNYtiHY2DaI+WVsJKaziuR7m/5YNkBg=) 2: AS4808.roa (hash: iG/MocT0rD+fs0wrEHij1NNqRlIJoelAUHt9HbymLbs=) 3: AS54994.roa (hash: OQXio6PNusOo9pxVEz9Hsxs3Prp+H4pyyBg7njo33mY=) 4: AS23724.roa (hash: /F6ynpxiG0Y9J4j6nd4tFn4qsuryhr8Bp985PA0jKK8=) 5: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: s107u4r1Tzor8z1V33HHWoskdpU7E6566wbSpMmC73A=) 6: AS9808.roa (hash: PF0tuc+UqF4UFdfT0S0FfL2/H+rN5kCGUBMXMK+u9Uw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:01:31:10:1c:6a:9c:62:48:51:60:8f:11:cf:5b:a8:36:55:57:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: May 13 09:54:07 2026 GMT Not After : May 14 12:01:07 2026 GMT Subject: CN=A9994227F04E88257DF9BC3A5526B0A8BEF7EE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:5d:51:0e:87:bd:eb:f1:79:cd:e5:5f:fb: fb:76:d7:f3:e8:f9:d4:c4:a5:d2:3a:3b:05:19:b7: f1:d8:9b:4f:2a:e9:74:de:14:a9:08:a7:9e:29:f6: 30:3b:3b:8a:68:0d:7d:f0:2a:48:46:cb:6f:7d:4f: b5:bc:67:5f:d3:58:cb:31:fa:60:99:6e:b4:ea:61: 85:ad:c2:98:f2:09:84:25:0c:0e:67:9d:c5:16:70: 2d:7c:e4:8b:84:61:39:94:3d:2c:6f:9c:5e:23:95: 0c:de:3f:d1:a4:f9:4b:89:20:f4:4d:3c:c6:20:49: 3f:d0:7d:73:bc:ca:3e:2e:49:24:27:67:df:7f:7d: 7a:5d:26:e5:b5:6e:aa:dc:86:98:07:8c:95:5f:49: ac:ac:82:f1:c0:f5:da:e3:74:0d:c8:53:d3:48:e7: b9:a0:3b:1d:cf:12:21:17:d8:dd:a3:cc:2c:69:8d: 87:bd:a7:a1:90:f3:80:7f:fc:f4:f2:3b:0e:f6:12: 8e:ad:f9:af:42:10:c8:d5:f9:fd:66:95:a3:92:b9: fe:91:4d:01:32:62:84:04:7e:a7:ff:df:7a:03:b1: 5e:ac:c8:0a:8e:c1:c2:87:09:db:85:47:8b:80:fe: a6:e4:83:de:24:38:80:9e:b6:56:18:26:a8:c8:69: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:99:42:27:F0:4E:88:25:7D:F9:BC:3A:55:26:B0:A8:BE:F7:EE:4B X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f4:c4:01:77:33:0e:d4:b2:4f:a8:a8:be:09:68:58:a8:de: 3c:33:85:95:e5:86:f9:f5:9c:6e:35:dd:f4:1f:76:22:72:7b: fe:98:cd:13:e3:73:6e:47:51:ef:c7:93:83:e8:9a:2a:ea:92: 44:2b:84:e0:d6:92:c9:93:fc:58:a8:7b:1b:b7:1e:e7:fd:36: b2:93:02:45:8f:14:63:ac:22:bf:11:81:13:3e:c3:89:fb:e9: 7f:c8:b1:0e:f4:99:7c:cf:8d:67:2c:e6:6e:37:f3:c8:c7:83: 0a:29:70:7f:32:2f:4e:1b:74:2f:12:db:d4:f4:80:4b:84:b5: 11:15:89:3c:00:28:9a:f8:d9:ba:86:0b:22:01:30:67:31:63: f7:29:76:ab:a3:34:32:1d:26:ef:ba:f7:7b:4b:5f:65:71:09: 27:f4:b0:5b:af:2a:7b:07:20:19:e7:99:29:b1:64:ed:6b:fa: 7a:e7:b5:89:78:ee:8b:b5:cb:31:dc:04:7b:55:ca:42:4f:fb: b3:f3:a2:55:5c:f8:ae:95:e1:de:09:91:b0:53:ef:53:a3:bd: 30:54:52:43:f9:b6:80:79:42:f7:57:d5:e6:64:77:18:3a:01: 2d:25:79:4b:ae:ec:d3:19:f2:d5:4c:42:f0:99:2f:24:b9:d9: d6:3d:f5:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUawExEBxqnGJIUWCPEc9bqDZVV5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA1MTMwOTU0MDdaFw0yNjA1MTQxMjAxMDdaMDMxMTAvBgNV BAMTKEE5OTk0MjI3RjA0RTg4MjU3REY5QkMzQTU1MjZCMEE4QkVGN0VFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsl1RDoe96/F5zeVf+/t21/Po +dTEpdI6OwUZt/HYm08q6XTeFKkIp54p9jA7O4poDX3wKkhGy299T7W8Z1/TWMsx +mCZbrTqYYWtwpjyCYQlDA5nncUWcC185IuEYTmUPSxvnF4jlQzeP9Gk+UuJIPRN PMYgST/QfXO8yj4uSSQnZ99/fXpdJuW1bqrchpgHjJVfSaysgvHA9drjdA3IU9NI 57mgOx3PEiEX2N2jzCxpjYe9p6GQ84B//PTyOw72Eo6t+a9CEMjV+f1mlaOSuf6R TQEyYoQEfqf/33oDsV6syAqOwcKHCduFR4uA/qbkg94kOICetlYYJqjIacI7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqZlCJ/BOiCV9+bw6VSawqL737kswHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPTEAXczDtSy T6iovgloWKjePDOFleWG+fWcbjXd9B92InJ7/pjNE+NzbkdR78eTg+iaKuqSRCuE 4NaSyZP8WKh7G7ce5/02spMCRY8UY6wivxGBEz7Difvpf8ixDvSZfM+NZyzmbjfz yMeDCilwfzIvTht0LxLb1PSAS4S1ERWJPAAomvjZuoYLIgEwZzFj9yl2q6M0Mh0m 77r3e0tfZXEJJ/SwW68qewcgGeeZKbFk7Wv6eue1iXjui7XLMdwEe1XKQk/7s/Oi VVz4rpXh3gmRsFPvU6O9MFRSQ/m2gHlC91fV5mR3GDoBLSV5S67s0xny1UxC8Jkv JLnZ1j31Sg== -----END CERTIFICATE-----Generated at Wed May 13 16:03:33 2026 by rpki-client