$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json) Hash identifier: zqUssqhGGyLUnSdlD3QNsBx6Czc0sOKkP6AnvMdLcWE= Subject key identifier: 3C:AB:D8:41:28:E5:9E:1A:A8:4F:E5:90:0D:CA:7A:12:26:67:93:82 Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977 Certificate serial: 20925694899FFF30F9D19BE253E398591D32AE6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft Manifest number: 99 Signing time: Wed 13 May 2026 08:36:03 +0000 Manifest this update: Wed 13 May 2026 08:31:03 +0000 Manifest next update: Thu 14 May 2026 10:04:03 +0000 Files and hashes: 1: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=) 2: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=) 3: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=) 4: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: sQ0Nkr8GtUQ1DcQE6VLFZbANlT4CmTNrJomo0M2Qt/A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:92:56:94:89:9f:ff:30:f9:d1:9b:e2:53:e3:98:59:1d:32:ae:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977 Validity Not Before: May 13 08:31:03 2026 GMT Not After : May 14 10:04:03 2026 GMT Subject: CN=3CABD84128E59E1AA84FE5900DCA7A1226679382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:dd:58:ce:b6:63:b1:d4:b9:8b:e8:8d:c0: 51:81:81:cf:d0:9a:85:9e:33:16:bc:bd:33:33:6b: 37:4d:7b:be:18:3c:dd:2e:36:44:21:cf:1a:6d:0a: 4b:fe:1e:ee:be:4f:ca:e9:b6:fd:99:cc:33:b4:15: 4e:86:f3:dd:08:91:52:2b:54:9a:2f:98:da:f9:d3: 68:7a:bd:29:ff:81:92:21:3c:c4:ee:4e:05:3f:12: 08:f4:d4:a0:c8:f0:e1:93:22:63:3a:3d:6b:a2:53: 09:84:0b:98:a8:21:e4:93:c6:08:f9:88:85:9f:bf: de:db:cc:18:f0:cb:fa:f8:8e:f0:87:da:49:52:0e: e7:23:53:2a:85:fb:88:f4:68:d8:ae:ed:6e:b6:a4: a4:9f:4e:47:d3:cc:2b:02:8a:20:1a:e3:3c:ae:51: df:12:e1:9c:d0:67:bc:8e:5a:b6:f2:1e:a6:39:7d: eb:32:74:ae:49:a3:f3:4b:92:a1:fb:58:08:94:e3: 82:bd:8b:8b:24:9c:37:c7:15:9d:12:d2:57:fc:16: cf:b8:f1:01:62:66:d7:9c:30:d1:fb:88:0d:d2:ec: 38:62:b7:10:d9:e8:36:79:2c:fa:dc:48:9a:89:95: 5a:d9:b2:7c:67:c3:58:59:f0:14:51:68:f8:a3:e8: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AB:D8:41:28:E5:9E:1A:A8:4F:E5:90:0D:CA:7A:12:26:67:93:82 X509v3 Authority Key Identifier: keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:95:79:ff:45:ff:e5:8d:d6:af:7c:ec:43:fe:39:bf:3f:fd: a4:7b:23:48:4b:6c:8b:a1:b0:b0:28:d1:ca:42:43:41:7b:8e: e4:12:98:87:e2:d2:d0:1b:73:c9:58:9d:d7:ea:19:21:98:3b: 9a:4b:dd:9a:2f:ea:d3:2f:b7:0f:7b:e3:91:2b:7b:4f:88:f1: 06:b5:01:ae:6b:6b:82:24:fc:8e:d8:51:7d:75:67:dd:32:45: 35:c8:cb:47:ea:6a:95:44:31:76:7d:85:ed:79:84:63:75:4f: 51:33:91:5a:24:04:7c:35:ab:6d:ab:50:ee:24:c4:6c:34:76: 58:92:e7:31:08:83:b5:e2:84:ac:79:b4:9c:7a:a1:14:0a:63: ce:8b:e8:2f:74:31:f8:8a:ce:0d:6e:42:a7:47:8d:c0:ad:a6: 5f:8b:27:63:e4:0e:14:92:92:79:17:40:21:f7:0d:b8:06:d2: 14:0f:a3:52:13:55:53:35:9c:07:74:59:2a:fa:37:9d:c5:f5: ba:61:c9:10:71:6e:81:f9:e5:3d:21:1a:14:4e:17:ce:97:87: 1f:40:7c:1c:aa:e5:54:52:e3:ff:f8:bf:c2:37:c0:8c:d5:34: 55:da:4b:d1:0f:44:ea:bb:64:34:af:ab:e1:b5:b4:eb:13:f0: 4f:07:e8:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIJJWlImf/zD50ZviU+OYWR0yrmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5 NDI3OTk3NzAeFw0yNjA1MTMwODMxMDNaFw0yNjA1MTQxMDA0MDNaMDMxMTAvBgNV BAMTKDNDQUJEODQxMjhFNTlFMUFBODRGRTU5MDBEQ0E3QTEyMjY2NzkzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYPt1YzrZjsdS5i+iNwFGBgc/Q moWeMxa8vTMzazdNe74YPN0uNkQhzxptCkv+Hu6+T8rptv2ZzDO0FU6G890IkVIr VJovmNr502h6vSn/gZIhPMTuTgU/Egj01KDI8OGTImM6PWuiUwmEC5ioIeSTxgj5 iIWfv97bzBjwy/r4jvCH2klSDucjUyqF+4j0aNiu7W62pKSfTkfTzCsCiiAa4zyu Ud8S4ZzQZ7yOWrbyHqY5fesydK5Jo/NLkqH7WAiU44K9i4sknDfHFZ0S0lf8Fs+4 8QFiZtecMNH7iA3S7DhitxDZ6DZ5LPrcSJqJlVrZsnxnw1hZ8BRRaPij6FLHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPKvYQSjlnhqoT+WQDcp6EiZnk4IwHwYDVR0j BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2 MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ4NTEzMzEvMC80MTU1NDM5RUVCNzdF RDE5RTMwMzFGNjM4QThFNjMzMzk0Mjc5OTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZV5/0X/5Y3W r3zsQ/45vz/9pHsjSEtsi6GwsCjRykJDQXuO5BKYh+LS0BtzyVid1+oZIZg7mkvd mi/q0y+3D3vjkSt7T4jxBrUBrmtrgiT8jthRfXVn3TJFNcjLR+pqlUQxdn2F7XmE Y3VPUTORWiQEfDWrbatQ7iTEbDR2WJLnMQiDteKErHm0nHqhFApjzovoL3Qx+IrO DW5Cp0eNwK2mX4snY+QOFJKSeRdAIfcNuAbSFA+jUhNVUzWcB3RZKvo3ncX1umHJ EHFugfnlPSEaFE4XzpeHH0B8HKrlVFLj//i/wjfAjNU0VdpL0Q9E6rtkNK+r4bW0 6xPwTwfoqw== -----END CERTIFICATE-----Generated at Wed May 13 20:58:13 2026 by rpki-client