$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: ioyImoJa7G2F/VaIRFVVRT1e+66AgwGofYQuJV825Zg= Subject key identifier: 7C:F1:2C:EF:1D:7A:4C:6A:33:10:30:6A:EB:27:B5:81:7F:C7:1B:67 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 2256406E57A6EBB36F909F46CCC00AD208225E15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 98 Signing time: Wed 13 May 2026 09:56:03 +0000 Manifest this update: Wed 13 May 2026 09:51:03 +0000 Manifest next update: Thu 14 May 2026 11:45:03 +0000 Files and hashes: 1: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) 2: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: BcMDAboMAz4k8PIisULanpwEi8VMqkMRrFWPBmVQPQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:56:40:6e:57:a6:eb:b3:6f:90:9f:46:cc:c0:0a:d2:08:22:5e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: May 13 09:51:03 2026 GMT Not After : May 14 11:45:03 2026 GMT Subject: CN=7CF12CEF1D7A4C6A3310306AEB27B5817FC71B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0c:67:0d:6e:c0:8b:ec:db:39:12:dc:a4:70: 81:2d:d5:58:50:10:8b:0c:0d:79:c5:78:30:93:80: 6a:8f:95:09:8b:7c:44:de:dc:87:27:66:82:ac:23: e7:87:c1:2c:e0:55:ba:a2:37:55:e0:bf:f5:e6:cd: 31:b3:ad:dd:17:78:74:6e:a0:d3:47:34:0e:25:e6: f4:0c:58:5e:06:12:dd:6c:f5:3f:1f:78:69:03:ff: b8:47:38:1f:9d:45:3d:21:c3:c6:e2:32:38:66:45: 39:25:ed:e8:35:13:d5:6b:45:d5:26:22:4c:e9:e8: 0e:e8:32:cf:21:e5:42:10:4a:41:f3:34:0f:5b:98: e2:6a:18:11:cb:f6:74:29:a1:88:5a:fc:e2:bf:dc: ae:cb:e4:57:a8:e1:d2:77:9d:f0:80:0b:98:2f:9c: 20:25:5d:9c:e0:ec:27:89:6d:25:e1:92:67:30:f9: 2e:53:83:82:d4:31:c6:8b:fe:a9:27:76:15:28:6e: 7b:ca:6a:1e:f4:99:25:6b:d6:16:80:be:c9:84:90: f4:ba:5a:c2:fe:0f:07:30:2b:85:df:e0:11:0b:86: d3:57:0c:7a:e2:9c:e4:3a:ed:4d:20:bb:ae:06:c8: 46:40:cc:31:93:8d:19:7d:52:61:71:33:ae:a8:f0: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F1:2C:EF:1D:7A:4C:6A:33:10:30:6A:EB:27:B5:81:7F:C7:1B:67 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:02:b0:85:d4:1f:e8:41:b1:0b:20:62:74:ab:ef:9f:d3:f6: a4:b5:39:13:5a:c9:7b:cc:24:a4:b3:47:60:bd:ef:b0:fc:34: d2:87:82:e9:58:5c:31:82:0a:f4:90:6f:92:8d:ce:45:34:5e: d7:d8:54:62:c9:df:ec:4a:ac:3c:32:23:05:cf:d9:ef:11:6d: d9:5f:53:46:36:36:8a:23:26:b0:f7:83:0e:78:51:4f:97:59: 5f:ca:3f:27:40:3c:81:22:b2:cc:8d:b3:2e:07:8a:a9:9a:28: 3c:02:a5:ab:50:ed:32:ed:07:05:74:f8:0f:28:e8:99:08:b7: b0:b9:ff:e5:3f:48:b2:f7:4a:d0:74:44:66:8f:67:44:a3:b9: 06:fb:86:01:d0:b0:0e:22:23:8c:21:bd:2d:f1:42:1a:12:0a: e3:73:be:b6:72:7b:1e:b2:c8:17:e5:07:41:6c:f0:9f:9f:8c: 53:64:ca:98:ea:0e:e2:25:c6:d5:79:3d:91:fe:a0:eb:6f:68: 9e:a9:5e:d6:0b:be:1e:56:9d:6e:98:00:19:fd:27:5e:6b:e5: d8:4b:f6:4d:e7:e3:77:4e:24:d5:39:c9:d3:ff:22:e6:70:dc: 1a:65:18:93:ca:4a:a4:e9:a4:d2:8a:25:b6:e0:2f:0e:16:57: 0f:8f:66:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIlZAblem67NvkJ9GzMAK0ggiXhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjA1MTMwOTUxMDNaFw0yNjA1MTQxMTQ1MDNaMDMxMTAvBgNV BAMTKDdDRjEyQ0VGMUQ3QTRDNkEzMzEwMzA2QUVCMjdCNTgxN0ZDNzFCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDGcNbsCL7Ns5EtykcIEt1VhQ EIsMDXnFeDCTgGqPlQmLfETe3IcnZoKsI+eHwSzgVbqiN1Xgv/XmzTGzrd0XeHRu oNNHNA4l5vQMWF4GEt1s9T8feGkD/7hHOB+dRT0hw8biMjhmRTkl7eg1E9VrRdUm Ikzp6A7oMs8h5UIQSkHzNA9bmOJqGBHL9nQpoYha/OK/3K7L5Feo4dJ3nfCAC5gv nCAlXZzg7CeJbSXhkmcw+S5Tg4LUMcaL/qkndhUobnvKah70mSVr1haAvsmEkPS6 WsL+DwcwK4Xf4BELhtNXDHrinOQ67U0gu64GyEZAzDGTjRl9UmFxM66o8OBZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfPEs7x16TGozEDBq6ye1gX/HG2cwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQKwhdQf6EGx CyBidKvvn9P2pLU5E1rJe8wkpLNHYL3vsPw00oeC6VhcMYIK9JBvko3ORTRe19hU Ysnf7EqsPDIjBc/Z7xFt2V9TRjY2iiMmsPeDDnhRT5dZX8o/J0A8gSKyzI2zLgeK qZooPAKlq1DtMu0HBXT4DyjomQi3sLn/5T9IsvdK0HREZo9nRKO5BvuGAdCwDiIj jCG9LfFCGhIK43O+tnJ7HrLIF+UHQWzwn5+MU2TKmOoO4iXG1Xk9kf6g629onqle 1gu+HladbpgAGf0nXmvl2Ev2Tefjd04k1TnJ0/8i5nDcGmUYk8pKpOmk0ooltuAv DhZXD49mfQ== -----END CERTIFICATE-----Generated at Wed May 13 16:45:19 2026 by rpki-client