$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: VWI1CBLGHF/l0i8XaR21JP0EAj1eGIeiD/lAlMxDImI= Subject key identifier: 27:21:3E:F4:B0:54:56:85:60:73:C3:85:CF:D1:41:58:C1:51:AD:5C Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 55141070862CE1397DA4807CCC0FC5A4B7750754 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 99 Signing time: Wed 13 May 2026 05:25:58 +0000 Manifest this update: Wed 13 May 2026 05:20:58 +0000 Manifest next update: Thu 14 May 2026 09:08:58 +0000 Files and hashes: 1: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 2: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 3: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: lA1IlUlQ1vPy5qmig+ACgAdmd0nWlW2K2Xby/SqVVFo=) 4: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) 5: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 6: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:14:10:70:86:2c:e1:39:7d:a4:80:7c:cc:0f:c5:a4:b7:75:07:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: May 13 05:20:58 2026 GMT Not After : May 14 09:08:58 2026 GMT Subject: CN=27213EF4B05456856073C385CFD14158C151AD5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:8c:c8:f2:74:e1:7f:d4:f6:2e:d2:fe:bc: 3e:bd:79:19:18:b4:e0:ee:bb:b1:06:49:3a:20:3c: 20:2c:80:7d:54:df:c2:d5:14:50:5b:80:bf:45:fe: a4:f6:26:2e:94:87:0f:11:01:14:0e:51:6f:f9:2c: 07:be:81:39:21:83:ad:26:de:03:9d:23:24:ce:5c: 45:95:1d:e6:4f:83:54:a6:85:e4:8c:1c:cd:bc:32: 75:2c:95:e3:c5:3f:f3:3f:1d:cd:f4:01:96:2f:49: 1a:76:d4:64:f0:3a:8e:34:21:05:29:6c:6e:66:37: 95:18:f7:af:65:be:15:8f:a6:66:90:da:46:bc:40: 43:a0:b2:6a:ce:c1:c6:f1:64:37:30:08:40:73:b3: b6:b5:5d:8f:28:7f:78:6a:cb:74:cc:a6:0e:ae:f3: bd:72:ff:30:e3:72:ee:66:c6:77:9d:77:74:8d:0e: 80:1b:2b:78:27:da:e4:e5:c2:3f:33:88:31:f9:e9: 19:f5:c7:7a:9a:48:bc:73:bd:76:09:88:48:20:79: 4c:08:3e:f6:a7:34:ed:8b:67:a6:76:43:78:8f:07: 3c:7d:df:d8:7d:2d:37:fd:40:fa:30:b1:b5:48:c0: 78:d9:f2:9d:be:c3:e0:8c:04:91:ec:ff:1a:e6:5d: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:21:3E:F4:B0:54:56:85:60:73:C3:85:CF:D1:41:58:C1:51:AD:5C X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:06:ce:52:ac:f8:29:12:81:78:e3:2f:e6:d9:5a:14:af:f0: aa:cc:7d:4f:4c:f4:2c:1e:c3:95:4b:ad:e2:c3:7d:1a:ff:87: be:41:f4:18:bd:08:5b:59:93:b8:b3:0a:53:17:8b:2e:d1:a2: d8:d4:ca:82:e2:dd:63:91:92:50:4e:71:28:05:e5:6e:b7:f0: 0c:ee:cb:e6:52:cb:68:93:ab:24:ad:b4:75:a2:dd:60:e0:24: 89:ff:d6:24:7b:2c:9b:99:77:d8:7e:51:71:07:77:35:8b:a1: 5c:b1:05:03:c0:7d:27:68:b6:f5:61:0c:eb:a5:60:26:61:6d: 8d:4f:f4:62:5d:bd:d1:fd:9e:42:5c:69:ba:a5:8e:09:a2:b9: 06:9c:29:30:7e:c8:35:ce:a1:7e:9a:70:6c:e9:74:bd:30:d5: 11:f9:01:9f:93:c3:c8:72:9b:8d:b4:87:88:4f:1a:0e:95:92: 59:c0:e7:7a:05:4d:78:ea:1c:a8:0c:1b:c0:e9:69:85:45:02: 64:f4:51:bd:0b:ae:ea:a4:11:a2:4f:23:02:06:71:5b:cb:b0: bb:fd:08:2b:ce:5d:f1:80:0b:fb:b6:6e:64:04:4f:52:48:4c: c8:44:4c:69:09:4a:93:35:e2:7a:d3:bc:0e:02:38:23:db:10: 0a:67:37:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVRQQcIYs4Tl9pIB8zA/FpLd1B1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjA1MTMwNTIwNThaFw0yNjA1MTQwOTA4NThaMDMxMTAvBgNV BAMTKDI3MjEzRUY0QjA1NDU2ODU2MDczQzM4NUNGRDE0MTU4QzE1MUFENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNiIzI8nThf9T2LtL+vD69eRkY tODuu7EGSTogPCAsgH1U38LVFFBbgL9F/qT2Ji6Uhw8RARQOUW/5LAe+gTkhg60m 3gOdIyTOXEWVHeZPg1SmheSMHM28MnUslePFP/M/Hc30AZYvSRp21GTwOo40IQUp bG5mN5UY969lvhWPpmaQ2ka8QEOgsmrOwcbxZDcwCEBzs7a1XY8of3hqy3TMpg6u 871y/zDjcu5mxnedd3SNDoAbK3gn2uTlwj8ziDH56Rn1x3qaSLxzvXYJiEggeUwI PvanNO2LZ6Z2Q3iPBzx939h9LTf9QPowsbVIwHjZ8p2+w+CMBJHs/xrmXSLNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJyE+9LBUVoVgc8OFz9FBWMFRrVwwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAbOUqz4KRKB eOMv5tlaFK/wqsx9T0z0LB7DlUut4sN9Gv+HvkH0GL0IW1mTuLMKUxeLLtGi2NTK guLdY5GSUE5xKAXlbrfwDO7L5lLLaJOrJK20daLdYOAkif/WJHssm5l32H5RcQd3 NYuhXLEFA8B9J2i29WEM66VgJmFtjU/0Yl290f2eQlxpuqWOCaK5BpwpMH7INc6h fppwbOl0vTDVEfkBn5PDyHKbjbSHiE8aDpWSWcDnegVNeOocqAwbwOlphUUCZPRR vQuu6qQRok8jAgZxW8uwu/0IK85d8YAL+7ZuZARPUkhMyERMaQlKkzXietO8DgI4 I9sQCmc38w== -----END CERTIFICATE-----Generated at Wed May 13 17:12:52 2026 by rpki-client