$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json) Hash identifier: 9i2smmbTQrX67cQ+twfAp3KgKCcjGkR35ooX5JlRjZA= Subject key identifier: 2B:9F:B2:E7:76:7C:81:1F:5B:58:CC:22:92:FF:CE:CB:B8:7E:B1:6F Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 366F86A993AF561274A92D3DCFF307ADCC821898 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft Manifest number: 99 Signing time: Wed 13 May 2026 08:21:02 +0000 Manifest this update: Wed 13 May 2026 08:16:02 +0000 Manifest next update: Thu 14 May 2026 11:35:02 +0000 Files and hashes: 1: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=) 2: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=) 3: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: BAN6w7eSiu2Q1uq83Wt843rIEsDpYfCslpaY5wNOsZ8=) 4: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:6f:86:a9:93:af:56:12:74:a9:2d:3d:cf:f3:07:ad:cc:82:18:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: May 13 08:16:02 2026 GMT Not After : May 14 11:35:02 2026 GMT Subject: CN=2B9FB2E7767C811F5B58CC2292FFCECBB87EB16F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d8:c8:2f:d1:c6:f5:eb:48:46:2b:bb:8e:06: 15:4c:2b:47:13:85:eb:df:ad:62:e4:ed:11:41:c8: 58:92:ed:ae:9a:aa:b9:27:d1:15:17:0b:f0:68:e8: 7e:dc:df:3b:43:9f:0a:ef:48:34:d5:60:14:a0:1e: 27:69:ef:a4:5c:71:ca:bd:b9:7e:2f:81:bd:d2:91: 41:b1:dc:3f:07:e8:77:b1:f4:aa:57:2f:48:c3:b7: 7b:b6:1c:45:bc:50:5f:56:d2:ed:98:ff:f8:a5:a6: 30:44:c2:7d:b2:25:6f:5f:ba:77:af:91:16:fe:56: 3b:f9:e3:19:e3:03:1d:5b:4a:8e:17:ab:2e:e3:82: cd:4f:5a:3b:74:01:9f:f7:dc:07:06:58:19:64:2d: 06:bd:11:5b:00:0c:67:78:dc:12:7d:82:02:68:54: 3d:d2:40:29:1c:82:45:fb:03:af:65:89:de:37:1e: be:8b:df:84:2b:93:36:16:c3:da:5b:7f:75:70:28: 90:7b:5f:2b:d6:84:95:16:69:84:3a:c4:58:b1:43: d8:43:05:30:c3:03:d6:04:83:e3:d6:23:6c:0c:ec: 3e:e4:59:ea:b3:0e:4c:f9:2d:1a:f4:a2:c9:fa:03: 2b:7f:dc:d1:fe:44:79:98:dd:67:2b:6e:91:0d:4f: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9F:B2:E7:76:7C:81:1F:5B:58:CC:22:92:FF:CE:CB:B8:7E:B1:6F X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:aa:3d:ef:f2:8a:d4:8f:22:1e:0f:9a:85:86:25:f4:f1:dc: 99:74:37:c5:d8:b3:4e:37:6e:65:c3:e0:c7:7a:24:4c:22:06: cd:43:27:95:86:92:86:b6:a3:a5:0a:84:c7:cb:f6:59:d3:54: 87:55:08:74:b9:1c:f9:7b:bd:28:ec:53:87:02:a4:72:53:b3: 85:1c:52:fd:4b:3c:2d:13:11:94:05:e2:64:e9:b9:ee:71:09: c2:91:c5:7e:00:bf:a1:dc:01:93:70:56:74:65:f1:cb:dc:e5: 23:db:54:48:02:f5:43:de:3b:0c:93:f4:01:84:de:63:e3:ba: 3a:db:37:b5:17:e1:94:96:16:a3:b3:98:d1:24:2d:05:cd:17: e4:9e:ac:e8:7b:a1:00:b7:80:12:17:66:42:5a:7e:e1:9d:ef: ea:89:15:33:78:b9:f7:f4:d5:98:11:0c:7f:e5:f9:25:9f:ef: ee:78:86:91:c5:6e:74:b3:56:1a:bc:38:dd:cd:98:4a:e3:ba: 4e:f5:0e:46:8a:e5:0c:5d:3c:8e:38:19:17:00:b5:80:ce:30: e8:9b:ac:97:c4:7e:f5:73:f6:cd:36:f6:e9:93:b1:87:37:bd: 0d:5d:43:fc:25:df:cc:68:a7:3f:02:bf:6b:eb:13:47:99:47: 33:a4:95:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNm+GqZOvVhJ0qS09z/MHrcyCGJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjA1MTMwODE2MDJaFw0yNjA1MTQxMTM1MDJaMDMxMTAvBgNV BAMTKDJCOUZCMkU3NzY3QzgxMUY1QjU4Q0MyMjkyRkZDRUNCQjg3RUIxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2Mgv0cb160hGK7uOBhVMK0cT hevfrWLk7RFByFiS7a6aqrkn0RUXC/Bo6H7c3ztDnwrvSDTVYBSgHidp76Rcccq9 uX4vgb3SkUGx3D8H6Hex9KpXL0jDt3u2HEW8UF9W0u2Y//ilpjBEwn2yJW9funev kRb+Vjv54xnjAx1bSo4Xqy7jgs1PWjt0AZ/33AcGWBlkLQa9EVsADGd43BJ9ggJo VD3SQCkcgkX7A69lid43Hr6L34QrkzYWw9pbf3VwKJB7XyvWhJUWaYQ6xFixQ9hD BTDDA9YEg+PWI2wM7D7kWeqzDkz5LRr0osn6Ayt/3NH+RHmY3WcrbpENTwbXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK5+y53Z8gR9bWMwikv/Oy7h+sW8wHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC83RjA4QjhEQzZFMjY3 RThCMTU5QzE1RjJGMjBBQjEwQjM0N0M3QTIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqo97/KK1I8i Hg+ahYYl9PHcmXQ3xdizTjduZcPgx3okTCIGzUMnlYaShrajpQqEx8v2WdNUh1UI dLkc+Xu9KOxThwKkclOzhRxS/Us8LRMRlAXiZOm57nEJwpHFfgC/odwBk3BWdGXx y9zlI9tUSAL1Q947DJP0AYTeY+O6Ots3tRfhlJYWo7OY0SQtBc0X5J6s6HuhALeA EhdmQlp+4Z3v6okVM3i59/TVmBEMf+X5JZ/v7niGkcVudLNWGrw43c2YSuO6TvUO RorlDF08jjgZFwC1gM4w6Jusl8R+9XP2zTb26ZOxhze9DV1D/CXfzGinPwK/a+sT R5lHM6SVmg== -----END CERTIFICATE-----Generated at Wed May 13 16:12:30 2026 by rpki-client