$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: /cq0ykuvXMGoaMY6yxvkIs3H1S56/9hdCFNFlSVxKfU= Subject key identifier: CE:1C:4D:1D:61:F7:CC:A4:B4:6F:A7:18:DF:E8:2D:74:82:41:F7:A7 Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 505369379DFB090AF1281FAD86EDAE2D8F751A9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: 98 Signing time: Wed 13 May 2026 15:01:05 +0000 Manifest this update: Wed 13 May 2026 14:56:05 +0000 Manifest next update: Thu 14 May 2026 18:35:05 +0000 Files and hashes: 1: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: LwcWqldumYHTku0yW6UZoNDx4xxqTJDosT0HhBWed04=) 2: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 3: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:53:69:37:9d:fb:09:0a:f1:28:1f:ad:86:ed:ae:2d:8f:75:1a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: May 13 14:56:05 2026 GMT Not After : May 14 18:35:05 2026 GMT Subject: CN=CE1C4D1D61F7CCA4B46FA718DFE82D748241F7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:77:ab:6d:04:da:b6:00:f0:74:43:fe:ad: 55:74:7d:44:7b:cb:41:58:fb:97:9c:34:1a:5f:0d: 2f:23:2f:78:78:15:47:7d:5a:34:d6:aa:59:86:d2: 2d:f4:87:1b:47:d1:c9:be:b4:2a:19:0e:22:1c:81: 18:99:e7:9b:1d:a6:44:5e:5f:7b:68:1e:d6:2f:13: 2e:eb:64:44:b3:04:d8:f7:b9:c4:e0:47:30:d6:44: 9d:e2:e5:fd:a4:7e:8e:30:62:30:55:82:e2:23:ce: f0:5b:5d:c7:60:60:d2:a6:aa:cc:66:ef:2e:f2:0f: 7f:04:49:e7:56:57:05:6f:2a:9d:b8:af:67:b9:f9: e6:2e:af:21:cf:e1:ce:25:ce:62:03:f2:19:c5:92: 56:f7:58:29:74:bd:21:54:ce:76:3a:9f:60:dc:8f: 77:b7:e7:f9:7a:ff:73:87:3e:32:bf:63:61:3e:0f: 3f:76:ee:93:3a:3e:37:a2:4c:ce:a9:16:d7:1e:58: b9:a3:e2:6b:01:0c:41:19:7c:0e:b8:b6:1b:e1:62: f5:f0:16:b8:ec:08:81:03:5e:50:7f:e2:23:63:da: 49:bb:67:01:7e:ec:17:1f:31:11:bb:79:88:ff:a7: ea:38:28:e8:75:aa:f3:cb:64:f7:73:2f:f5:c6:7f: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1C:4D:1D:61:F7:CC:A4:B4:6F:A7:18:DF:E8:2D:74:82:41:F7:A7 X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bc:51:1c:93:37:8b:0a:47:dc:02:b1:57:00:0b:2f:b2:89: 80:f5:06:b7:3d:6b:46:af:87:0c:a7:81:47:89:60:c3:2c:47: 30:a7:37:52:70:65:ce:ef:dd:5d:07:cd:bc:80:7a:2f:ab:fb: e0:bd:dd:a5:fe:bc:aa:c2:50:7c:03:e4:c5:b0:66:77:64:3a: b2:6a:1d:b1:41:1b:d6:b7:bf:8a:ea:94:0a:50:26:b5:74:1b: d5:76:11:e0:4c:10:b6:ec:17:28:36:7c:9a:6b:b4:c7:67:99: 7a:31:11:f7:32:c7:e3:1b:a5:25:c9:f0:84:de:f2:71:55:2d: 71:a9:b7:41:f1:48:34:25:a3:86:b1:78:3a:60:b7:69:10:fa: 7f:e0:d1:02:08:76:cd:7c:aa:50:bf:b9:d9:68:ae:79:90:5f: 85:f3:74:63:4a:02:38:f7:81:3f:32:7a:35:8d:8c:64:ae:b8: 97:ff:b3:bf:5f:73:ae:1c:13:60:50:29:71:8a:3f:02:e7:9f: 8a:70:f4:5c:39:a9:c1:d8:07:e6:96:45:88:9b:bf:c5:11:1e: 6e:ac:32:44:b9:68:2b:a4:56:75:f1:8f:14:6e:d7:c9:d7:a8: 26:e2:2d:34:bf:d0:de:4e:9b:90:ba:58:3a:3d:66:c1:7c:e1: 5b:48:ce:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUFNpN537CQrxKB+thu2uLY91Gp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjA1MTMxNDU2MDVaFw0yNjA1MTQxODM1MDVaMDMxMTAvBgNV BAMTKENFMUM0RDFENjFGN0NDQTRCNDZGQTcxOERGRTgyRDc0ODI0MUY3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCim3erbQTatgDwdEP+rVV0fUR7 y0FY+5ecNBpfDS8jL3h4FUd9WjTWqlmG0i30hxtH0cm+tCoZDiIcgRiZ55sdpkRe X3toHtYvEy7rZESzBNj3ucTgRzDWRJ3i5f2kfo4wYjBVguIjzvBbXcdgYNKmqsxm 7y7yD38ESedWVwVvKp24r2e5+eYuryHP4c4lzmID8hnFklb3WCl0vSFUznY6n2Dc j3e35/l6/3OHPjK/Y2E+Dz927pM6PjeiTM6pFtceWLmj4msBDEEZfA64thvhYvXw FrjsCIEDXlB/4iNj2km7ZwF+7BcfMRG7eYj/p+o4KOh1qvPLZPdzL/XGf5mvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzhxNHWH3zKS0b6cY3+gtdIJB96cwHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbxRHJM3iwpH 3AKxVwALL7KJgPUGtz1rRq+HDKeBR4lgwyxHMKc3UnBlzu/dXQfNvIB6L6v74L3d pf68qsJQfAPkxbBmd2Q6smodsUEb1re/iuqUClAmtXQb1XYR4EwQtuwXKDZ8mmu0 x2eZejER9zLH4xulJcnwhN7ycVUtcam3QfFINCWjhrF4OmC3aRD6f+DRAgh2zXyq UL+52WiueZBfhfN0Y0oCOPeBPzJ6NY2MZK64l/+zv19zrhwTYFApcYo/AuefinD0 XDmpwdgH5pZFiJu/xREebqwyRLloK6RWdfGPFG7XydeoJuItNL/Q3k6bkLpYOj1m wXzhW0jOVQ== -----END CERTIFICATE-----Generated at Wed May 13 21:35:37 2026 by rpki-client