$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json) Hash identifier: q9plJUoIUcjb9HkB0vGAN+W8AxBglVDr6HAw9G1gyCM= Subject key identifier: BD:00:D1:AC:AE:71:B6:F2:E4:CB:1F:31:13:8F:5A:81:C4:3D:B7:90 Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 279E6561017A60958AEED3F7BFE29CA306A773AC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft Manifest number: 98 Signing time: Wed 13 May 2026 10:56:03 +0000 Manifest this update: Wed 13 May 2026 10:51:03 +0000 Manifest next update: Thu 14 May 2026 11:01:03 +0000 Files and hashes: 1: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=) 2: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=) 3: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=) 4: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=) 5: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=) 6: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: moU5SbyqChoW0S/7yJCd6VCQMx7Cpk5iiNWCK7VJ1BU=) 7: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9e:65:61:01:7a:60:95:8a:ee:d3:f7:bf:e2:9c:a3:06:a7:73:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: May 13 10:51:03 2026 GMT Not After : May 14 11:01:03 2026 GMT Subject: CN=BD00D1ACAE71B6F2E4CB1F31138F5A81C43DB790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b7:42:bf:9a:e5:f3:54:ac:cf:ec:ee:2a:59: 40:cc:69:08:92:eb:ff:88:df:ca:b0:79:38:9f:9b: 85:24:ab:9f:9a:3a:75:d5:dc:b9:38:f3:9f:4b:df: 2d:9b:c8:81:60:7e:35:cc:e3:7f:cc:81:d2:e6:7a: 6c:d9:e7:e4:f6:b5:c7:bf:ed:c2:fd:9b:e2:65:ed: 1f:5b:ff:fb:22:fe:6d:d2:1f:72:cc:a4:23:af:25: 25:bc:89:b6:b9:2e:af:9d:fc:14:67:d0:ae:4f:0e: 37:5e:62:d1:dd:d4:ff:37:cc:78:aa:b9:44:e8:1f: c3:9f:c4:f9:43:d3:f8:89:33:3c:c9:3d:a9:ee:6e: be:fd:92:79:1c:14:e9:d1:73:54:6f:8b:64:75:ee: d3:19:07:3b:e9:56:08:08:c9:03:51:00:a5:42:87: c8:5f:8a:5e:1f:d7:5b:d8:52:1c:c9:96:bc:cb:7d: aa:0f:f1:41:d6:df:d7:49:e6:2e:c3:33:e0:4f:70: 41:36:3a:76:ed:ac:6b:8d:da:ae:19:8c:a9:40:bb: a8:96:2a:35:d6:bd:45:ed:16:7b:c4:b9:bc:72:54: f5:23:7c:1b:f5:c1:a3:01:b4:35:99:0e:8b:9c:d9: 18:8b:7f:0e:0f:00:56:09:d1:3e:76:5c:38:95:6c: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:D1:AC:AE:71:B6:F2:E4:CB:1F:31:13:8F:5A:81:C4:3D:B7:90 X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:04:2e:49:62:6c:0c:08:d5:51:80:bc:33:76:ad:a0:28:5f: 19:7f:3f:60:9a:60:1e:70:30:b6:ce:65:eb:25:90:aa:8d:b8: ba:04:fe:21:e4:23:24:e3:fa:e9:d9:37:23:20:98:33:70:59: 8f:17:56:72:5b:31:5a:45:6b:6a:97:36:b9:73:9b:61:e4:2c: ab:49:8d:08:61:a1:3f:2f:96:60:30:e5:a3:61:a7:f8:95:b3: 93:26:e3:b5:ef:61:37:1b:2e:57:66:9e:5d:27:67:48:c6:5c: b7:4c:b0:23:dd:7d:a9:f3:d2:03:0b:b6:30:d4:90:fa:cf:e0: 7e:73:a2:7d:7a:69:30:0f:66:92:d3:3d:59:e3:4c:29:e4:8d: c8:58:57:ae:68:60:85:c0:30:c1:48:24:c7:15:b5:41:f4:b6: 2e:8b:75:52:e7:0d:19:7c:35:e9:b5:d4:42:d9:83:57:fe:ef: ab:05:59:26:dd:da:f7:e1:c2:1d:41:60:01:5f:ae:b8:fb:a0: bd:bb:b5:f8:85:27:3a:2b:b6:57:62:ed:ab:2f:8f:98:e4:c1: c8:b7:0a:b0:05:12:27:88:5d:94:12:bb:9f:a1:bd:73:97:cd: 89:e2:ac:b4:66:a0:d1:b0:ca:2b:48:c5:22:c7:e1:bc:87:42: 67:5d:de:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ55lYQF6YJWK7tP3v+Kcowanc6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjA1MTMxMDUxMDNaFw0yNjA1MTQxMTAxMDNaMDMxMTAvBgNV BAMTKEJEMDBEMUFDQUU3MUI2RjJFNENCMUYzMTEzOEY1QTgxQzQzREI3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyt0K/muXzVKzP7O4qWUDMaQiS 6/+I38qweTifm4Ukq5+aOnXV3Lk4859L3y2byIFgfjXM43/MgdLmemzZ5+T2tce/ 7cL9m+Jl7R9b//si/m3SH3LMpCOvJSW8iba5Lq+d/BRn0K5PDjdeYtHd1P83zHiq uUToH8OfxPlD0/iJMzzJPanubr79knkcFOnRc1Rvi2R17tMZBzvpVggIyQNRAKVC h8hfil4f11vYUhzJlrzLfaoP8UHW39dJ5i7DM+BPcEE2OnbtrGuN2q4ZjKlAu6iW KjXWvUXtFnvEubxyVPUjfBv1waMBtDWZDouc2RiLfw4PAFYJ0T52XDiVbEvFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvQDRrK5xtvLkyx8xE49agcQ9t5AwHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0NjU4NTgvMC9BNTlGQjU1RjhCM0U0 MDY5NDI3ODc4QkQ1QkE3RkY0MUExNjkxQjVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQQuSWJsDAjV UYC8M3atoChfGX8/YJpgHnAwts5l6yWQqo24ugT+IeQjJOP66dk3IyCYM3BZjxdW clsxWkVrapc2uXObYeQsq0mNCGGhPy+WYDDlo2Gn+JWzkybjte9hNxsuV2aeXSdn SMZct0ywI919qfPSAwu2MNSQ+s/gfnOifXppMA9mktM9WeNMKeSNyFhXrmhghcAw wUgkxxW1QfS2Lot1UucNGXw16bXUQtmDV/7vqwVZJt3a9+HCHUFgAV+uuPugvbu1 +IUnOiu2V2Ltqy+PmOTByLcKsAUSJ4hdlBK7n6G9c5fNieKstGag0bDKK0jFIsfh vIdCZ13eFA== -----END CERTIFICATE-----Generated at Wed May 13 20:21:18 2026 by rpki-client