$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json) Hash identifier: XaOsQLj2JUu2plWQQ1yBcLGdoAoUJLa1Mk0wkb93GVk= Subject key identifier: BD:6A:BB:2E:BF:54:A6:D9:89:3D:97:B5:7D:36:C6:8E:40:B9:03:DA Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Certificate serial: 2B5B5EB588C484690509A7D34A5C47582C234D47 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft Manifest number: 99 Signing time: Wed 13 May 2026 00:00:49 +0000 Manifest this update: Tue 12 May 2026 23:55:49 +0000 Manifest next update: Thu 14 May 2026 03:36:49 +0000 Files and hashes: 1: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=) 2: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=) 3: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: S7E+1D9FIAWG0SWOvIbL12NiYE8V6hUf0olPrlz6DKk=) 4: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5b:5e:b5:88:c4:84:69:05:09:a7:d3:4a:5c:47:58:2c:23:4d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Validity Not Before: May 12 23:55:49 2026 GMT Not After : May 14 03:36:49 2026 GMT Subject: CN=BD6ABB2EBF54A6D9893D97B57D36C68E40B903DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:b1:e8:77:8e:81:64:f8:37:32:5e:65:51: 66:64:62:e0:50:be:f0:e4:81:74:f6:b4:af:74:90: 24:d5:96:8c:8f:f5:7c:fb:02:08:9a:2d:7c:df:2d: 46:2a:cf:2d:d8:f2:3b:c8:35:05:0c:34:69:23:ac: b2:0d:74:4d:9c:9c:a9:86:44:39:8e:da:f2:ec:a1: c1:bc:1c:ef:47:6a:6f:ab:7e:b1:2c:63:ae:d2:1b: 18:7c:7a:0e:d3:7b:57:55:ad:3a:6e:85:8b:1f:68: 6f:2e:02:1b:fb:7a:1d:d9:d1:28:01:a0:99:fd:6d: 99:78:67:96:67:7c:65:8c:81:de:f1:5f:8a:27:a4: 45:16:40:f1:3c:0f:1e:b0:ff:12:11:4e:c1:d1:4b: 45:d2:4d:de:2c:2f:6a:24:af:62:7d:c1:49:f4:1e: e8:38:44:ba:a1:25:34:f1:c9:02:53:c5:b9:41:09: f4:42:43:5d:51:dc:c6:00:ee:b8:48:e5:8a:1b:bc: d5:44:69:51:e2:54:e0:b0:3b:37:2d:96:a5:4c:99: 10:88:0f:f8:46:ac:76:02:a2:5e:0b:7e:e7:0f:32: 8c:bb:6a:c9:9d:3c:3a:38:55:64:30:75:ff:bb:f8: 69:68:28:60:c3:d7:06:d2:a9:d5:3f:d2:5b:4c:77: 84:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6A:BB:2E:BF:54:A6:D9:89:3D:97:B5:7D:36:C6:8E:40:B9:03:DA X509v3 Authority Key Identifier: keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:67:ae:71:18:a9:61:c9:3c:5a:4d:58:7c:eb:98:9e:44:ee: a1:a0:f1:cb:6d:38:06:24:fc:5b:f5:f4:7e:e7:b3:2b:81:f3: fa:76:d1:ec:a3:bf:e4:89:db:04:00:af:18:cc:37:ab:6f:41: e5:8c:c5:f5:2f:42:0c:5d:dc:52:69:63:ec:60:bd:08:5e:4c: 1b:ad:dd:78:14:e6:cc:66:4c:6e:99:13:3c:eb:e4:6e:b5:2f: 33:ff:26:62:4d:96:5a:2f:f8:06:e1:b0:ec:51:a9:47:7e:b1: fb:a1:01:9a:d6:9d:be:d7:2a:6e:14:16:91:7c:d3:d3:f1:11: 2e:ad:84:32:d1:9b:fe:50:ce:8e:e5:7a:85:9f:26:18:b1:63: 24:31:6d:95:2f:f3:5f:31:6d:71:5c:95:b2:b9:c0:3c:f2:50: 04:a9:0a:f8:4b:20:f4:9f:74:d4:66:cd:f5:68:8b:b1:a7:69: 7e:00:fe:1e:11:d7:b7:50:50:32:41:92:8e:37:6f:cc:d1:86: da:86:21:0f:ab:62:31:0e:ba:97:43:39:cd:46:23:8f:c4:cd: 1a:ab:8b:a5:ef:34:18:3a:4a:b1:a7:16:01:55:1e:e3:38:5f: 95:ce:14:23:2a:65:81:24:75:50:ca:60:17:79:78:25:77:c0: bd:a1:0b:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK1tetYjEhGkFCafTSlxHWCwjTUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy MzQ0QkE2QzAeFw0yNjA1MTIyMzU1NDlaFw0yNjA1MTQwMzM2NDlaMDMxMTAvBgNV BAMTKEJENkFCQjJFQkY1NEE2RDk4OTNEOTdCNTdEMzZDNjhFNDBCOTAzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3LHod46BZPg3Ml5lUWZkYuBQ vvDkgXT2tK90kCTVloyP9Xz7AgiaLXzfLUYqzy3Y8jvINQUMNGkjrLINdE2cnKmG RDmO2vLsocG8HO9Ham+rfrEsY67SGxh8eg7Te1dVrTpuhYsfaG8uAhv7eh3Z0SgB oJn9bZl4Z5ZnfGWMgd7xX4onpEUWQPE8Dx6w/xIRTsHRS0XSTd4sL2okr2J9wUn0 Hug4RLqhJTTxyQJTxblBCfRCQ11R3MYA7rhI5YobvNVEaVHiVOCwOzctlqVMmRCI D/hGrHYCol4LfucPMoy7asmdPDo4VWQwdf+7+GloKGDD1wbSqdU/0ltMd4RVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvWq7Lr9UptmJPZe1fTbGjkC5A9owHwYDVR0j BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5 MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2 NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomeucRipYck8 Wk1YfOuYnkTuoaDxy204BiT8W/X0fuezK4Hz+nbR7KO/5InbBACvGMw3q29B5YzF 9S9CDF3cUmlj7GC9CF5MG63deBTmzGZMbpkTPOvkbrUvM/8mYk2WWi/4BuGw7FGp R36x+6EBmtadvtcqbhQWkXzT0/ERLq2EMtGb/lDOjuV6hZ8mGLFjJDFtlS/zXzFt cVyVsrnAPPJQBKkK+Esg9J901GbN9WiLsadpfgD+HhHXt1BQMkGSjjdvzNGG2oYh D6tiMQ66l0M5zUYjj8TNGquLpe80GDpKsacWAVUe4zhflc4UIyplgSR1UMpgF3l4 JXfAvaELNw== -----END CERTIFICATE-----Generated at Wed May 13 20:18:12 2026 by rpki-client