$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft File: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft (raw, json) Hash identifier: QMqECGcWwokIVfyTkHFmOS6iEWugbH1IkcdQDHeXRII= Subject key identifier: 23:C6:9E:73:5F:FD:BC:D7:9C:D6:7F:DD:FA:5E:60:92:04:EE:8A:F5 Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Certificate serial: 3697B6FC40DE23351BCF832C1B03BE70E6095634 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft Manifest number: 9A Signing time: Wed 13 May 2026 05:45:58 +0000 Manifest this update: Wed 13 May 2026 05:40:58 +0000 Manifest next update: Thu 14 May 2026 07:31:58 +0000 Files and hashes: 1: 34332e3235352e3231322e302f32322d3232203d3e20313334373634.roa (hash: nvpX3+tQBlD7o4JRzeJzJ8SBqs6nbVPAwRAZ8Hg23Rs=) 2: 3130332e3231302e3136302e302f32322d3232203d3e203633313939.roa (hash: B/mJbtPu0UVWmsBqfhu4FLdB1gzXkN1btMchb8wEDGA=) 3: 34332e3235352e3231322e302f32322d3232203d3e20313336393538.roa (hash: mP/WzKqlnEhqwDkLhudrruXO2O7e8o0TzyuISBE0WWA=) 4: 34332e3235352e3231322e302f32322d3232203d3e203536303430.roa (hash: VLiXiRL9m9UaxtL5IIpzNqXZ0El1YmwJlVWUpR3X+4M=) 5: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl (hash: XLu1im2PB5JpCAZyiG8DCqrTDq2VNM2huyychBO1bvk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:97:b6:fc:40:de:23:35:1b:cf:83:2c:1b:03:be:70:e6:09:56:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Validity Not Before: May 13 05:40:58 2026 GMT Not After : May 14 07:31:58 2026 GMT Subject: CN=23C69E735FFDBCD79CD67FDDFA5E609204EE8AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:a4:31:aa:d0:c3:44:cf:af:fa:e7:cf:eb: ad:7d:f0:12:98:91:17:26:f9:ac:4c:89:a5:48:89: 49:83:69:67:cb:c1:ca:6c:8d:e9:61:4c:06:3e:59: bf:5a:58:fe:3d:3b:6a:b7:7e:e5:38:90:fc:af:5e: 26:8d:c1:df:ae:87:8a:0d:a3:00:7d:08:b1:64:54: b0:20:f8:8c:53:a6:63:50:ad:57:5f:c3:22:83:fb: e1:62:c0:a5:c5:fc:35:64:35:65:2b:28:f4:37:91: 2f:ec:ef:2b:da:6c:ae:83:30:41:79:eb:99:86:85: 3a:57:22:3e:15:2a:c5:51:46:19:65:cb:50:10:0f: 13:61:3d:05:fb:35:48:42:8e:68:01:28:d5:30:e4: 11:6d:33:a9:c0:9f:34:a9:cc:ff:9e:e9:ae:16:5e: 3d:b2:de:45:0c:70:25:47:c8:0e:ae:eb:d4:77:28: a3:4d:39:eb:28:0e:40:57:da:d6:73:d0:92:3c:f9: 1e:46:aa:71:e5:c8:c4:e6:28:6f:bf:e6:e9:69:08: e2:9e:c3:9d:56:48:4b:15:82:8c:16:92:25:c0:44: 6f:8a:cc:e9:8c:5d:2e:2f:17:d2:3a:42:bc:22:ac: 9c:ce:57:34:f4:ea:99:0a:f4:86:6b:67:de:15:b9: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C6:9E:73:5F:FD:BC:D7:9C:D6:7F:DD:FA:5E:60:92:04:EE:8A:F5 X509v3 Authority Key Identifier: keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:09:55:aa:7f:d7:bf:98:ee:59:e1:da:c2:06:13:81:0e:aa: ff:d8:d9:14:85:aa:a4:ed:f6:c2:d9:67:00:53:2a:f2:59:31: 38:21:73:50:4c:a2:7d:b0:37:55:e6:27:10:99:f6:6e:52:d4: 88:34:b8:57:d2:e8:93:c7:38:7f:29:13:ef:4b:f1:52:ae:28: 9d:12:1d:6c:24:fe:80:d5:21:dd:a9:07:10:65:38:96:35:65: a1:28:e1:eb:d5:22:5f:b1:bf:8f:b8:76:be:e3:07:ba:77:a3: 25:c4:11:74:1f:cd:eb:87:d8:05:ff:f6:44:61:5c:2b:dc:d2: d9:bc:af:50:c9:6c:2e:f9:35:07:78:3c:97:56:e6:65:e7:fa: 64:7e:e3:9b:12:45:b5:ef:55:a6:3f:90:64:71:a3:82:cc:aa: f3:5b:49:63:c8:67:7a:e3:b6:9f:93:fa:d3:f1:8f:9f:88:fc: 54:f2:18:34:0c:95:ba:f1:5d:5c:3e:a2:c4:fc:69:4d:31:3d: 66:78:9a:b4:b5:36:0a:67:83:f8:96:37:99:f7:4b:ed:c0:54: 31:62:14:1b:45:87:54:12:94:65:5f:8e:26:63:6e:0b:2f:76: ed:95:a5:e2:2e:95:e8:b1:92:a5:2c:db:11:9c:48:df:5b:74: 34:18:b3:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNpe2/EDeIzUbz4MsGwO+cOYJVjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw NEZENjlERDAeFw0yNjA1MTMwNTQwNThaFw0yNjA1MTQwNzMxNThaMDMxMTAvBgNV BAMTKDIzQzY5RTczNUZGREJDRDc5Q0Q2N0ZEREZBNUU2MDkyMDRFRThBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+6QxqtDDRM+v+ufP66198BKY kRcm+axMiaVIiUmDaWfLwcpsjelhTAY+Wb9aWP49O2q3fuU4kPyvXiaNwd+uh4oN owB9CLFkVLAg+IxTpmNQrVdfwyKD++FiwKXF/DVkNWUrKPQ3kS/s7yvabK6DMEF5 65mGhTpXIj4VKsVRRhlly1AQDxNhPQX7NUhCjmgBKNUw5BFtM6nAnzSpzP+e6a4W Xj2y3kUMcCVHyA6u69R3KKNNOesoDkBX2tZz0JI8+R5GqnHlyMTmKG+/5ulpCOKe w51WSEsVgowWkiXARG+KzOmMXS4vF9I6QrwirJzOVzT06pkK9IZrZ94VuUfxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI8aec1/9vNec1n/d+l5gkgTuivUwHwYDVR0j BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMC81MDQ3MDgzQjQ2MzdB M0YwMkRGOURFRUJBNjdCRUREQzA0RkQ2OURELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4wlVqn/Xv5ju WeHawgYTgQ6q/9jZFIWqpO32wtlnAFMq8lkxOCFzUEyifbA3VeYnEJn2blLUiDS4 V9Lok8c4fykT70vxUq4onRIdbCT+gNUh3akHEGU4ljVloSjh69UiX7G/j7h2vuMH unejJcQRdB/N64fYBf/2RGFcK9zS2byvUMlsLvk1B3g8l1bmZef6ZH7jmxJFte9V pj+QZHGjgsyq81tJY8hneuO2n5P60/GPn4j8VPIYNAyVuvFdXD6ixPxpTTE9Znia tLU2CmeD+JY3mfdL7cBUMWIUG0WHVBKUZV+OJmNuCy927ZWl4i6V6LGSpSzbEZxI 31t0NBiz6A== -----END CERTIFICATE-----Generated at Wed May 13 15:01:29 2026 by rpki-client