$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: SMjvAdU4nABjNspozyNaZMuPJZLktRuB5puRIDNDieM= Subject key identifier: C5:81:37:1E:F7:47:66:F0:23:0A:BE:66:0C:4A:CF:D3:F9:67:28:9C Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 5F918EE6C348AA9C1DD4BCAE79F72EAE414F2165 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 98 Signing time: Tue 12 May 2026 23:25:49 +0000 Manifest this update: Tue 12 May 2026 23:20:49 +0000 Manifest next update: Thu 14 May 2026 00:47:49 +0000 Files and hashes: 1: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: uMzvC0wfnZCF9HP4qQkOSFCx5Z3kOV4+cs+nGYHceaM=) 2: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:91:8e:e6:c3:48:aa:9c:1d:d4:bc:ae:79:f7:2e:ae:41:4f:21:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: May 12 23:20:49 2026 GMT Not After : May 14 00:47:49 2026 GMT Subject: CN=C581371EF74766F0230ABE660C4ACFD3F967289C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:f5:7b:5e:22:43:e7:b3:2e:93:0d:22:97: 6d:fb:ba:fc:97:9a:4c:aa:c4:48:c1:56:32:5f:b4: a5:ef:18:1b:3a:e1:d2:69:b1:3a:26:6b:35:de:91: 33:27:71:86:d8:80:a2:cc:78:ee:d8:e3:d8:a8:a8: 92:94:41:34:46:08:4c:71:d5:6d:9f:de:d2:74:e9: 63:1d:0d:4b:ce:fa:5f:52:a3:3d:0b:45:c6:ca:83: c2:21:79:0d:46:52:d4:13:31:96:34:ad:f0:79:a5: 39:5d:95:d7:34:d4:d2:e9:96:82:5f:74:67:77:78: 1d:d5:a8:91:58:cd:58:64:b0:fe:2d:e6:d1:ef:ff: b7:4f:ae:ac:e0:79:bf:49:77:cb:f0:b9:4f:a4:3f: 12:01:cb:61:d3:67:99:90:48:10:37:b1:c5:ff:0f: 90:a7:7c:22:4c:ef:15:7a:5e:5b:65:01:3b:26:5e: 75:55:d8:5a:a3:d0:c0:91:c1:79:01:2c:7c:a2:22: 80:d0:69:c0:23:64:41:46:50:91:21:ae:69:7c:41: fd:88:0f:0f:11:0a:3f:a3:86:7f:a2:e7:24:05:b4: 11:f8:fa:02:b7:1d:e6:f7:96:70:3b:c5:1e:93:63: b9:54:3d:aa:ae:71:4e:4b:39:11:1f:ff:15:9e:79: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:81:37:1E:F7:47:66:F0:23:0A:BE:66:0C:4A:CF:D3:F9:67:28:9C X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:35:54:14:e3:96:84:c8:65:21:b8:f9:8d:b0:51:28:0f:5d: 13:f0:b8:0e:c4:39:28:a7:de:f0:9d:fa:47:c3:be:4d:5f:0d: 8e:d5:a4:17:6b:91:e7:2f:cf:4d:27:c8:db:ea:1a:b3:5b:00: cc:66:09:9b:f8:a9:1a:01:91:d6:65:ae:5c:73:5b:13:20:8e: 36:c3:de:a7:ce:77:46:0d:a3:ef:57:42:90:1b:72:6e:67:df: d6:77:22:a5:db:c7:85:37:03:d3:fb:6f:af:49:e9:ae:6d:50: aa:22:50:a9:9f:b6:ad:53:5b:ea:dd:c8:3f:ae:92:c2:6e:3d: 1c:4c:09:ce:cf:5f:6b:af:34:3b:ce:a8:37:eb:03:ac:47:9f: fd:f4:79:f8:b3:07:7f:3b:0a:e0:f0:93:0b:b7:52:77:d3:4f: 38:50:8b:28:34:b0:eb:23:13:d3:d1:a0:da:c9:a5:d7:ee:16: be:8f:af:6c:97:77:70:f9:a3:e2:89:5e:57:3f:49:30:79:7c: 25:53:5e:0a:8a:a8:9b:3f:93:a0:c3:71:a5:2f:8d:a3:98:bd: 8c:41:1a:11:96:3f:d6:ce:92:e4:68:44:85:40:9d:a8:f4:b2: 2c:53:b9:10:5d:d5:94:ec:ac:fe:e0:29:b8:51:b6:21:da:7b: 73:7d:46:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX5GO5sNIqpwd1LyuefcurkFPIWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA1MTIyMzIwNDlaFw0yNjA1MTQwMDQ3NDlaMDMxMTAvBgNV BAMTKEM1ODEzNzFFRjc0NzY2RjAyMzBBQkU2NjBDNEFDRkQzRjk2NzI4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pfV7XiJD57Mukw0il237uvyX mkyqxEjBVjJftKXvGBs64dJpsTomazXekTMncYbYgKLMeO7Y49ioqJKUQTRGCExx 1W2f3tJ06WMdDUvO+l9Soz0LRcbKg8IheQ1GUtQTMZY0rfB5pTldldc01NLploJf dGd3eB3VqJFYzVhksP4t5tHv/7dPrqzgeb9Jd8vwuU+kPxIBy2HTZ5mQSBA3scX/ D5CnfCJM7xV6XltlATsmXnVV2Fqj0MCRwXkBLHyiIoDQacAjZEFGUJEhrml8Qf2I Dw8RCj+jhn+i5yQFtBH4+gK3Heb3lnA7xR6TY7lUPaqucU5LOREf/xWeebC9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxYE3HvdHZvAjCr5mDErP0/lnKJwwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDVUFOOWhMhl Ibj5jbBRKA9dE/C4DsQ5KKfe8J36R8O+TV8NjtWkF2uR5y/PTSfI2+oas1sAzGYJ m/ipGgGR1mWuXHNbEyCONsPep853Rg2j71dCkBtybmff1ncipdvHhTcD0/tvr0np rm1QqiJQqZ+2rVNb6t3IP66Swm49HEwJzs9fa680O86oN+sDrEef/fR5+LMHfzsK 4PCTC7dSd9NPOFCLKDSw6yMT09Gg2sml1+4Wvo+vbJd3cPmj4oleVz9JMHl8JVNe Coqomz+ToMNxpS+No5i9jEEaEZY/1s6S5GhEhUCdqPSyLFO5EF3VlOys/uApuFG2 Idp7c31Geg== -----END CERTIFICATE-----Generated at Wed May 13 19:40:12 2026 by rpki-client