$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json) Hash identifier: 7wY4b7xROIrux3s1AWnRh3AxPAca7P7hYHsmx8zADTI= Subject key identifier: 43:DA:4E:06:64:52:B4:94:88:7F:77:2A:37:E9:7A:FD:03:DD:65:BD Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Certificate serial: 4E8C4C48B894A60701918BD55BCC3ABACC5FC216 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft Manifest number: 99 Signing time: Wed 13 May 2026 00:05:49 +0000 Manifest this update: Wed 13 May 2026 00:00:49 +0000 Manifest next update: Thu 14 May 2026 01:12:49 +0000 Files and hashes: 1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: o279KuAkQzswu2cJK1lrgMm3OxWuA3elKxof0r2RVgY=) 2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8c:4c:48:b8:94:a6:07:01:91:8b:d5:5b:cc:3a:ba:cc:5f:c2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Validity Not Before: May 13 00:00:49 2026 GMT Not After : May 14 01:12:49 2026 GMT Subject: CN=43DA4E066452B494887F772A37E97AFD03DD65BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:0c:a8:8c:15:94:fb:81:52:47:5b:84:fb: 57:83:39:58:56:b8:3e:2b:79:94:4d:41:e0:6f:4a: 7c:3b:9e:8a:04:7a:9c:1f:24:d3:19:59:16:6a:20: 60:58:12:a8:55:1a:7c:7c:f7:ef:60:8b:cc:d2:46: 0d:63:7c:6a:ee:56:6f:eb:9b:bd:e4:f5:25:05:df: db:ff:a6:cb:49:11:7a:3d:a2:b0:ff:89:3c:a2:4f: 12:2c:ed:e0:4b:b5:b7:5d:f0:b8:ca:33:b8:88:9f: f8:0b:2e:e5:dd:0a:bc:32:76:f6:af:81:6a:b8:df: 81:b3:6b:2b:70:c5:f9:2b:a0:6e:43:46:86:26:65: a3:65:06:70:46:2a:17:16:c4:7a:a2:1f:e5:7f:a2: ef:aa:11:20:d1:af:8d:4d:f0:35:52:1a:bc:3f:64: 02:ba:6b:b9:2f:e7:50:4b:6d:b1:c8:ee:25:e5:42: 68:df:c9:8a:cc:7c:79:87:c8:3b:68:72:2b:4d:e1: b5:e7:9a:15:4f:e8:51:c6:d2:95:19:a2:49:f8:84: a2:51:55:fc:27:b3:5c:ef:06:34:d8:f7:ad:e2:e3: 98:76:43:ac:a7:57:82:ed:d2:8a:2d:00:88:28:e3: 5a:e5:3f:c8:07:30:b8:d9:46:d7:7e:be:a1:05:7d: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DA:4E:06:64:52:B4:94:88:7F:77:2A:37:E9:7A:FD:03:DD:65:BD X509v3 Authority Key Identifier: keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:71:ef:86:91:be:d5:d3:02:60:00:7a:98:a6:46:5f:3a:bf: 04:25:76:78:e6:df:c7:64:f7:da:10:bc:97:68:8f:d3:ca:61: 2d:55:0a:0e:fb:57:62:74:73:3f:fc:b1:5b:9f:f8:bf:be:39: e7:99:8b:e3:4d:6e:c8:51:e6:43:02:f3:eb:2d:5f:b6:d8:14: 52:53:5a:86:8d:ca:84:42:55:83:ee:13:cc:38:77:d2:9e:ed: ac:00:68:0f:6b:20:14:44:b6:ff:d5:44:78:12:e3:a1:d4:ba: 01:55:c5:7f:c1:ec:91:d3:e6:cc:28:38:39:f7:67:dd:0e:af: cb:0c:bb:d7:a9:dc:06:18:8f:b4:e2:7e:22:2a:70:74:0d:74: 4d:be:4f:a1:80:2c:5f:fa:a8:f0:fa:ac:f6:9e:4a:5e:d8:9f: 9d:8c:9d:bc:10:e9:e4:9b:c2:3c:5d:b2:4a:f1:fb:e0:7e:70: b4:13:4b:a7:53:b2:69:fc:9b:37:45:ed:1a:e0:23:91:a7:88: 36:9e:ac:dd:c3:43:68:5a:87:d5:05:7d:0b:66:8d:f9:0a:f5: 59:89:ef:8e:e0:e6:4a:60:f6:55:64:67:5e:e6:47:d8:1a:d5: 95:43:7c:40:2d:d8:91:74:2f:31:3d:ac:16:67:07:6e:0e:81: 41:7f:99:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUToxMSLiUpgcBkYvVW8w6usxfwhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1 NUJGRjFGNTAeFw0yNjA1MTMwMDAwNDlaFw0yNjA1MTQwMTEyNDlaMDMxMTAvBgNV BAMTKDQzREE0RTA2NjQ1MkI0OTQ4ODdGNzcyQTM3RTk3QUZEMDNERDY1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUzAyojBWU+4FSR1uE+1eDOVhW uD4reZRNQeBvSnw7nooEepwfJNMZWRZqIGBYEqhVGnx89+9gi8zSRg1jfGruVm/r m73k9SUF39v/pstJEXo9orD/iTyiTxIs7eBLtbdd8LjKM7iIn/gLLuXdCrwydvav gWq434GzaytwxfkroG5DRoYmZaNlBnBGKhcWxHqiH+V/ou+qESDRr41N8DVSGrw/ ZAK6a7kv51BLbbHI7iXlQmjfyYrMfHmHyDtocitN4bXnmhVP6FHG0pUZokn4hKJR Vfwns1zvBjTY963i45h2Q6ynV4Lt0ootAIgo41rlP8gHMLjZRtd+vqEFffnTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ9pOBmRStJSIf3cqN+l6/QPdZb0wHwYDVR0j BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1 RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHHvhpG+1dMC YAB6mKZGXzq/BCV2eObfx2T32hC8l2iP08phLVUKDvtXYnRzP/yxW5/4v74555mL 401uyFHmQwLz6y1fttgUUlNaho3KhEJVg+4TzDh30p7trABoD2sgFES2/9VEeBLj odS6AVXFf8HskdPmzCg4Ofdn3Q6vywy716ncBhiPtOJ+IipwdA10Tb5PoYAsX/qo 8Pqs9p5KXtifnYydvBDp5JvCPF2ySvH74H5wtBNLp1OyafybN0XtGuAjkaeINp6s 3cNDaFqH1QV9C2aN+Qr1WYnvjuDmSmD2VWRnXuZH2BrVlUN8QC3YkXQvMT2sFmcH bg6BQX+Z2Q== -----END CERTIFICATE-----Generated at Wed May 13 19:46:58 2026 by rpki-client