$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: KgERkTRR94R7Tfp+NhGX1+eu45j8ZJr+dlJJmTa4nSk= Subject key identifier: 04:2F:51:BF:D5:81:EE:7C:C7:1C:DE:3E:9F:85:3E:98:AA:C7:68:52 Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 7CD0634A85A7646217B67A587517E39609D9CB03 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: 9E Signing time: Wed 13 May 2026 07:01:01 +0000 Manifest this update: Wed 13 May 2026 06:56:01 +0000 Manifest next update: Thu 14 May 2026 10:00:01 +0000 Files and hashes: 1: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) 2: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) 3: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 4: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: RMil9HBrBTEc4ORDbK4vkP1gpGJktuz6o5X8zlSFMLE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d0:63:4a:85:a7:64:62:17:b6:7a:58:75:17:e3:96:09:d9:cb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: May 13 06:56:01 2026 GMT Not After : May 14 10:00:01 2026 GMT Subject: CN=042F51BFD581EE7CC71CDE3E9F853E98AAC76852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:e5:f1:6d:7f:3d:47:20:65:46:29:a2:35: 4b:ba:18:42:6a:59:61:37:0e:be:12:98:17:13:4f: fe:30:6b:0f:be:82:f6:73:73:ba:c3:94:df:53:0b: 30:6e:42:e3:d2:59:c9:68:0e:ff:a1:d4:6a:98:f6: 0b:2c:c9:6b:db:26:60:6c:11:24:ec:cb:40:a5:96: bf:60:67:e1:43:b1:66:02:79:d0:4b:f2:9f:4e:bd: eb:cd:c7:af:70:29:de:8a:93:95:a7:da:e0:fa:49: a2:d3:5e:7c:7f:99:3c:9a:73:5f:62:2c:59:6d:84: ab:83:7b:bf:aa:af:5f:25:d0:af:1f:0e:01:94:c5: 38:c2:a9:c6:4a:60:1f:33:9c:12:d3:55:3e:30:7e: ee:b0:a5:70:8f:c9:07:f3:10:a9:76:11:3f:9d:67: 18:4f:48:6f:6d:c6:eb:ac:6a:ee:bc:41:fa:11:24: c8:1f:99:27:68:08:be:85:f6:24:9e:da:6e:57:02: 24:8f:3d:b7:1e:ff:91:59:54:82:26:bf:4f:1a:91: aa:12:70:e3:c6:46:ee:8c:67:af:00:6e:dd:ce:16: 9b:07:eb:85:fd:a7:da:3f:80:c1:a8:cc:95:9b:0a: ce:ce:85:a1:08:84:cf:10:5d:13:3c:4d:c6:81:e3: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:51:BF:D5:81:EE:7C:C7:1C:DE:3E:9F:85:3E:98:AA:C7:68:52 X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:06:90:77:b4:aa:4b:3f:f3:bd:68:5a:68:13:ae:b6:a7:11: e4:01:0d:b5:14:d2:fb:4a:69:f2:49:a9:4e:8a:95:c9:6f:73: f0:4e:b3:eb:9e:56:65:80:4c:b0:b2:55:9f:e4:ab:7a:80:1a: 1c:f0:38:36:c9:09:f9:6e:e0:61:75:96:1c:64:6d:e8:0e:91: d3:e5:8a:da:a6:f0:4d:a4:ff:52:a5:83:4a:d8:61:af:5e:4e: 26:8d:65:df:43:7c:3c:02:7e:f1:1b:41:68:12:ca:15:11:c8: fa:a5:6a:f8:69:96:13:2f:03:fd:c9:62:4a:9a:8e:ae:c3:d3: c7:d8:eb:5a:50:60:b3:ec:64:7f:f3:86:ec:3c:41:d7:48:62: e0:0a:ec:30:5d:26:80:d3:a0:b1:5e:15:ea:05:71:fc:fd:57: 5b:bd:81:4b:b5:2f:ff:b0:40:11:ae:cb:22:5f:34:29:47:64: e7:c1:70:96:97:2c:72:dc:dd:e4:14:be:b6:be:47:13:75:a3: 54:42:d5:e8:f5:d5:c7:5c:d8:e4:31:78:30:f2:4d:e8:98:23: 06:6b:06:e2:ea:9b:34:7f:83:ed:b6:04:1c:91:51:b4:9d:ec: d5:d3:30:91:a3:37:54:a8:49:65:79:83:17:89:a6:4b:34:59: 9e:ee:4a:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfNBjSoWnZGIXtnpYdRfjlgnZywMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjA1MTMwNjU2MDFaFw0yNjA1MTQxMDAwMDFaMDMxMTAvBgNV BAMTKDA0MkY1MUJGRDU4MUVFN0NDNzFDREUzRTlGODUzRTk4QUFDNzY4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJOXxbX89RyBlRimiNUu6GEJq WWE3Dr4SmBcTT/4waw++gvZzc7rDlN9TCzBuQuPSWcloDv+h1GqY9gssyWvbJmBs ESTsy0Cllr9gZ+FDsWYCedBL8p9OvevNx69wKd6Kk5Wn2uD6SaLTXnx/mTyac19i LFlthKuDe7+qr18l0K8fDgGUxTjCqcZKYB8znBLTVT4wfu6wpXCPyQfzEKl2ET+d ZxhPSG9txuusau68QfoRJMgfmSdoCL6F9iSe2m5XAiSPPbce/5FZVIImv08akaoS cOPGRu6MZ68Abt3OFpsH64X9p9o/gMGozJWbCs7OhaEIhM8QXRM8TcaB4wqxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBC9Rv9WB7nzHHN4+n4U+mKrHaFIwHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAaQd7SqSz/z vWhaaBOutqcR5AENtRTS+0pp8kmpToqVyW9z8E6z655WZYBMsLJVn+SreoAaHPA4 NskJ+W7gYXWWHGRt6A6R0+WK2qbwTaT/UqWDSthhr15OJo1l30N8PAJ+8RtBaBLK FRHI+qVq+GmWEy8D/cliSpqOrsPTx9jrWlBgs+xkf/OG7DxB10hi4ArsMF0mgNOg sV4V6gVx/P1XW72BS7Uv/7BAEa7LIl80KUdk58Fwlpcsctzd5BS+tr5HE3WjVELV 6PXVx1zY5DF4MPJN6JgjBmsG4uqbNH+D7bYEHJFRtJ3s1dMwkaM3VKhJZXmDF4mm SzRZnu5K8g== -----END CERTIFICATE-----Generated at Wed May 13 18:59:14 2026 by rpki-client