$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json) Hash identifier: B4eNzY7sxOY2BK5taOZhrt/7Yolv/V+LRIy/z6On1y8= Subject key identifier: D9:D9:0C:D3:F9:FE:3E:D2:64:DD:62:95:C4:E4:BE:BA:FF:C1:C0:DE Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 0F93F4C245BCF6ABCB42DC8F985FF2B935BDA8CD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft Manifest number: AA Signing time: Wed 13 May 2026 09:27:09 +0000 Manifest this update: Wed 13 May 2026 09:22:09 +0000 Manifest next update: Thu 14 May 2026 12:38:09 +0000 Files and hashes: 1: AS4808.roa (hash: 9xJTcGuM/yQxUG/gHOUlST+lfB11xme3THOXzC0nnDM=) 2: AS45110.roa (hash: JikWiiOaADzHvogyytecjTEoEj/sVnjTTokZe9NyXFk=) 3: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: Fbm3Ha3sp7fQOFcLByRoCuc1Smpc1d0wpHbmgF/8y7U=) 4: AS4847.roa (hash: UaL0mueNJNce4o1bxIo/jlJg2m3Z4Oheqv+PAKiB4xA=) 5: AS131314.roa (hash: zm6eNEs+Sg3vn7JG2IW6iQKdGTgnpkFrfio80ns6ymQ=) 6: AS17621.roa (hash: kqw3r/jiIwDnioze2JS67ePPacBLzehQLpbOWpUmWPY=) 7: AS17622.roa (hash: G6SRMo8oJ2lus5ULWU7PAonM99ac59J9+t8oOBWMnzk=) 8: AS4812.roa (hash: H9ooc1cT1y88w9htdKul1HADlK4i6TimWVABbyVsybk=) 9: AS38379.roa (hash: 0ig03Uuymfxkf0nBvMY+COQTj2HRI/D5gU2CBu/xkoM=) 10: AS134773.roa (hash: LS1op7nr0t6UFxbuUu+QGxely+gvDlAgRyd3k4OpMS8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:93:f4:c2:45:bc:f6:ab:cb:42:dc:8f:98:5f:f2:b9:35:bd:a8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: May 13 09:22:09 2026 GMT Not After : May 14 12:38:09 2026 GMT Subject: CN=D9D90CD3F9FE3ED264DD6295C4E4BEBAFFC1C0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:de:4c:92:e7:51:66:fe:06:77:12:0b:3a: ba:20:12:61:ab:b2:b8:de:d7:b3:46:5e:a7:70:74: 2a:e5:58:58:24:0e:5a:af:aa:05:c2:07:6c:27:2a: 08:a0:5d:b2:a0:1d:a2:29:14:57:dd:36:2e:a2:f2: 1a:b2:fe:9c:d4:68:a4:d5:68:ce:b5:49:99:56:4d: dd:fe:ce:14:26:81:7a:5b:f5:44:3e:bc:df:63:ca: b4:1f:f7:f8:02:41:9a:ed:2c:db:f1:70:55:96:27: 7a:07:6c:a1:69:31:95:6d:33:00:76:f7:98:45:6a: fa:54:e1:91:10:51:e6:64:b2:c7:c4:87:04:da:34: a0:74:99:34:d9:b5:d0:06:29:d6:8a:7e:90:00:01: 1d:6b:d8:f1:c1:7f:a8:f1:5c:fd:2f:a6:82:84:f9: 37:5c:16:9d:78:aa:fc:6e:3c:1b:78:fe:44:50:1b: aa:47:93:e9:ce:ce:0f:e5:5b:13:29:8c:77:24:b7: 02:15:7d:98:54:ab:53:e9:11:6d:90:f7:8f:35:83: b9:84:56:0b:7b:af:6c:73:85:0a:78:5c:ec:5d:67: 1d:fe:07:6c:e2:69:b5:98:ff:7f:cb:73:f0:de:50: 9f:a2:45:d0:2b:91:fb:23:cf:89:2e:fa:4c:f1:7d: 76:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:0C:D3:F9:FE:3E:D2:64:DD:62:95:C4:E4:BE:BA:FF:C1:C0:DE X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0b:f7:fd:b5:7b:b2:1a:cc:26:ec:35:d2:ea:6e:1d:2e:50: f7:f6:ab:ca:3c:6f:53:20:7e:c7:60:a7:d5:21:32:86:25:75: 3d:5a:a1:f5:51:4c:27:60:a5:e3:72:ce:f1:92:3a:22:5d:47: 6d:91:2d:70:1f:17:b6:53:7f:62:8c:f5:6b:41:cf:36:b0:53: 38:db:31:ab:2a:d5:37:d4:d3:ad:f4:4e:04:5f:24:a1:f3:3e: e4:54:0b:2c:a2:ff:67:0e:8c:a0:c7:6d:35:5e:90:1f:29:ee: 13:58:2d:89:7f:a0:f4:83:1b:d5:ff:76:bf:90:af:ae:aa:46: f0:45:4f:5d:31:53:40:82:36:98:95:6f:8e:69:50:81:ee:55: 65:0c:84:a7:9b:87:f8:cf:62:65:dd:60:05:96:27:a5:b4:5b: cc:1b:36:6d:96:7f:c0:5a:5a:fa:df:ee:f0:ef:3a:3f:96:f6: 45:38:0e:5d:9b:45:63:46:7c:fb:bd:b7:0e:70:23:96:7b:03: b7:c2:d4:b1:fa:5c:0f:09:b2:1f:ab:67:0e:10:e4:9f:26:47: 08:42:74:c3:da:d0:cb:62:c4:d0:1e:e7:57:71:f9:d9:ab:a8: 96:f3:60:7c:9b:93:03:18:a1:31:a6:f5:98:31:07:13:a0:67: fd:e7:d6:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD5P0wkW89qvLQtyPmF/yuTW9qM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA1MTMwOTIyMDlaFw0yNjA1MTQxMjM4MDlaMDMxMTAvBgNV BAMTKEQ5RDkwQ0QzRjlGRTNFRDI2NERENjI5NUM0RTRCRUJBRkZDMUMwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRP95MkudRZv4GdxILOrogEmGr srje17NGXqdwdCrlWFgkDlqvqgXCB2wnKgigXbKgHaIpFFfdNi6i8hqy/pzUaKTV aM61SZlWTd3+zhQmgXpb9UQ+vN9jyrQf9/gCQZrtLNvxcFWWJ3oHbKFpMZVtMwB2 95hFavpU4ZEQUeZkssfEhwTaNKB0mTTZtdAGKdaKfpAAAR1r2PHBf6jxXP0vpoKE +TdcFp14qvxuPBt4/kRQG6pHk+nOzg/lWxMpjHcktwIVfZhUq1PpEW2Q9481g7mE Vgt7r2xzhQp4XOxdZx3+B2ziabWY/3/Lc/DeUJ+iRdArkfsjz4ku+kzxfXadAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2dkM0/n+PtJk3WKVxOS+uv/BwN4wHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC84RDQ3M0I3QjQxRTNE NjIyREZCM0I2MEQ1RUI5NDY5OThGQkU3RUFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgv3/bV7shrM Juw10upuHS5Q9/aryjxvUyB+x2Cn1SEyhiV1PVqh9VFMJ2Cl43LO8ZI6Il1HbZEt cB8XtlN/Yoz1a0HPNrBTONsxqyrVN9TTrfROBF8kofM+5FQLLKL/Zw6MoMdtNV6Q HynuE1gtiX+g9IMb1f92v5CvrqpG8EVPXTFTQII2mJVvjmlQge5VZQyEp5uH+M9i Zd1gBZYnpbRbzBs2bZZ/wFpa+t/u8O86P5b2RTgOXZtFY0Z8+723DnAjlnsDt8LU sfpcDwmyH6tnDhDknyZHCEJ0w9rQy2LE0B7nV3H52auolvNgfJuTAxihMab1mDEH E6Bn/efWkg== -----END CERTIFICATE-----Generated at Wed May 13 14:04:24 2026 by rpki-client