$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: Y0PDkwiaUiZXhvEaeZJwIt2OSbEvAV4sLcvmUFqNveI= Subject key identifier: 99:29:50:84:A2:8B:90:3D:01:54:D6:DA:FD:6B:91:4C:5F:91:09:91 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 5D49AD5AF9A813D1F3AA9B3637AA327DD9D78E5C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: D6 Signing time: Tue 12 May 2026 17:10:37 +0000 Manifest this update: Tue 12 May 2026 17:05:37 +0000 Manifest next update: Wed 13 May 2026 19:32:37 +0000 Files and hashes: 1: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) 2: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: /aQ46Uls4gmyg2mxUu/xOTGH1AePHQ5A+4AGuii5mKU=) 3: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) 4: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 5: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) 6: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:49:ad:5a:f9:a8:13:d1:f3:aa:9b:36:37:aa:32:7d:d9:d7:8e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: May 12 17:05:37 2026 GMT Not After : May 13 19:32:37 2026 GMT Subject: CN=99295084A28B903D0154D6DAFD6B914C5F910991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:49:e4:ce:dc:27:e7:77:a4:6d:07:81:0d: e6:27:48:f2:98:0d:73:27:bb:8a:a5:68:1b:43:8b: 99:2e:e0:a2:f9:7b:02:08:0e:38:6f:a2:68:76:94: ca:fd:5a:3d:f2:9f:5c:da:3c:40:a3:f0:14:fb:fc: 06:f3:0f:73:11:bd:a7:a4:01:f2:da:7e:26:e1:63: 5e:34:42:14:3b:e5:98:14:5a:ae:f5:eb:0b:bc:15: 4a:85:b4:27:8e:b9:a5:2a:b4:7d:36:b9:28:4d:0e: ce:2a:0f:46:ea:9b:7e:20:d5:88:5e:06:e3:5d:70: e3:50:e5:54:54:2b:a3:60:97:36:3c:2d:39:2d:ed: 17:9a:4f:80:25:06:06:4d:84:e1:4b:cf:b4:be:57: 8f:e7:a7:eb:61:69:b0:9c:4b:3d:b4:6a:b7:2e:07: 7b:f8:a2:5e:26:29:b7:45:6d:66:91:e8:47:40:8c: 49:a3:ec:8f:e9:c3:6a:8e:cc:c4:a2:35:fa:5b:be: 54:3e:e4:61:49:4a:f9:6c:dc:2d:61:b6:38:b4:f3: 5c:19:2e:90:c5:ce:6f:83:d7:3e:08:84:39:27:97: 5f:e4:77:6e:b5:69:c1:7f:26:9b:29:ca:c1:c2:3e: 24:84:b3:60:11:87:37:14:83:b8:b3:27:b1:44:02: 31:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:29:50:84:A2:8B:90:3D:01:54:D6:DA:FD:6B:91:4C:5F:91:09:91 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:a9:c3:51:19:ec:6b:8e:ad:5e:01:f0:ab:57:d5:c0:cf:05: fc:cb:45:57:b1:fc:5f:65:9d:86:6f:ef:4e:af:c8:ea:03:7d: 9d:4c:a0:bd:70:80:00:0d:ee:0e:f3:78:8b:43:7e:d7:e3:02: cf:3e:d0:a5:a7:da:2e:95:ba:03:38:48:aa:e8:2c:33:0c:9e: 82:fc:b2:26:28:19:45:b7:9d:2f:68:93:30:01:20:37:04:05: d2:65:cc:ed:94:be:ee:c1:97:50:ae:49:af:b7:10:a0:29:06: db:07:ca:6b:22:86:b2:66:de:1d:f9:20:81:0b:db:cf:a8:19: 3a:89:f4:2a:46:20:59:37:c1:fc:95:e6:c3:6a:c9:d6:da:7e: c4:e7:a2:fe:55:d4:fb:26:e6:a9:82:b9:9f:64:00:75:10:c0: 80:2b:89:24:18:5d:f8:d2:ff:a0:64:e9:e3:a0:30:17:58:14: 11:c0:f1:cc:d0:db:e4:e6:e1:32:8d:14:fe:35:34:cb:0d:6b: 12:90:36:b1:59:95:d6:34:56:28:8d:88:5d:f8:3a:35:83:fb: 7a:75:46:44:62:63:71:65:79:54:ea:0b:81:62:3b:28:d7:bf: 99:d6:67:0c:90:87:7a:c5:95:e0:37:30:d3:c1:52:00:e3:3a: 56:1c:62:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXUmtWvmoE9Hzqps2N6oyfdnXjlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA1MTIxNzA1MzdaFw0yNjA1MTMxOTMyMzdaMDMxMTAvBgNV BAMTKDk5Mjk1MDg0QTI4QjkwM0QwMTU0RDZEQUZENkI5MTRDNUY5MTA5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71Unkztwn53ekbQeBDeYnSPKY DXMnu4qlaBtDi5ku4KL5ewIIDjhvomh2lMr9Wj3yn1zaPECj8BT7/AbzD3MRvaek AfLafibhY140QhQ75ZgUWq716wu8FUqFtCeOuaUqtH02uShNDs4qD0bqm34g1Yhe BuNdcONQ5VRUK6NglzY8LTkt7ReaT4AlBgZNhOFLz7S+V4/np+thabCcSz20arcu B3v4ol4mKbdFbWaR6EdAjEmj7I/pw2qOzMSiNfpbvlQ+5GFJSvls3C1htji081wZ LpDFzm+D1z4IhDknl1/kd261acF/JpspysHCPiSEs2ARhzcUg7izJ7FEAjFrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmSlQhKKLkD0BVNba/WuRTF+RCZEwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA16nDURnsa46t XgHwq1fVwM8F/MtFV7H8X2Wdhm/vTq/I6gN9nUygvXCAAA3uDvN4i0N+1+MCzz7Q pafaLpW6AzhIqugsMwyegvyyJigZRbedL2iTMAEgNwQF0mXM7ZS+7sGXUK5Jr7cQ oCkG2wfKayKGsmbeHfkggQvbz6gZOon0KkYgWTfB/JXmw2rJ1tp+xOei/lXU+ybm qYK5n2QAdRDAgCuJJBhd+NL/oGTp46AwF1gUEcDxzNDb5ObhMo0U/jU0yw1rEpA2 sVmV1jRWKI2IXfg6NYP7enVGRGJjcWV5VOoLgWI7KNe/mdZnDJCHesWV4Dcw08FS AOM6Vhxi6Q== -----END CERTIFICATE-----Generated at Wed May 13 12:58:18 2026 by rpki-client