$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: maxpHLDJ8/IzOEBB996iAdAAfyiWsKbD2eEfSneZH+w= Subject key identifier: E6:83:57:95:7D:81:B0:B6:BA:C0:13:96:A9:F9:A9:EF:E3:E0:56:F8 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 16B4F635773EEA0824D0D1F20F70A09162F51848 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 99 Signing time: Wed 13 May 2026 00:05:49 +0000 Manifest this update: Wed 13 May 2026 00:00:49 +0000 Manifest next update: Thu 14 May 2026 00:34:49 +0000 Files and hashes: 1: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) 2: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: ioey+/VaP4l/zg/SnlsH2Wx9SG19YMRSvHx6SICgnvU=) 3: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b4:f6:35:77:3e:ea:08:24:d0:d1:f2:0f:70:a0:91:62:f5:18:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: May 13 00:00:49 2026 GMT Not After : May 14 00:34:49 2026 GMT Subject: CN=E68357957D81B0B6BAC01396A9F9A9EFE3E056F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:d8:81:e9:5c:82:c8:ce:ee:00:3c:f8:2f: 64:89:c6:d8:af:16:95:83:92:3e:1c:2f:9d:10:81: a4:99:b5:ef:bc:90:19:0c:20:18:81:73:94:0d:3e: 96:d4:a8:28:49:21:54:1e:a0:c9:05:69:13:87:44: 4f:43:1c:9f:b5:f6:12:3e:37:92:22:a8:74:32:99: c1:3f:41:7d:dd:2b:cb:9b:de:f4:a2:bd:35:81:f4: 72:eb:c3:17:94:c6:ab:c6:76:57:0b:ee:0a:3e:68: e6:35:3e:37:4e:33:bd:97:25:8c:71:1d:29:0a:9e: 26:7c:f4:8a:3e:7b:29:53:9d:e1:7a:dd:1c:d9:c6: 52:a1:78:c6:b7:48:13:bc:07:d1:67:ca:6c:90:19: ab:5c:52:1e:92:f5:95:53:6b:97:69:b9:a4:96:ef: 0d:52:b4:a2:a4:68:78:24:a6:1c:80:08:b1:78:3e: 06:6c:2c:73:d7:8c:dc:1a:ab:e4:a7:21:6b:84:93: 98:cb:e9:59:ee:65:91:6f:3b:2a:48:89:ec:80:9b: ba:2a:cf:75:04:e9:32:c3:0b:a8:c9:62:f5:26:d0: ed:c8:21:cc:75:fa:f4:cb:d9:ea:b7:4a:4b:ee:d4: 04:2c:fc:0d:17:b0:85:45:43:54:28:39:55:98:d7: 26:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:83:57:95:7D:81:B0:B6:BA:C0:13:96:A9:F9:A9:EF:E3:E0:56:F8 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7a:77:32:26:99:24:1c:25:a0:52:62:be:4a:00:ff:54:ed: 5f:f3:ae:e6:3d:f4:f3:76:dc:49:45:5d:8a:f6:8e:93:49:71: 43:9e:57:9f:df:74:1f:3c:6c:e6:92:ed:51:1f:ee:f3:5e:da: 00:1c:26:06:25:fe:40:9f:6e:0e:2c:a1:5a:55:b1:86:e3:d8: a7:b7:eb:e0:74:e5:6d:59:08:92:79:ac:c5:86:66:24:a6:33: d0:30:9c:c2:bc:5b:10:84:8f:dc:37:29:4b:3e:c8:52:ba:9c: 74:be:20:e2:81:32:a7:fd:48:18:1a:a4:ad:a6:44:1e:66:07: d6:4a:79:77:e1:dd:b0:03:95:78:ff:16:0b:dc:b3:58:fd:af: 44:4a:a8:e9:a3:bf:2f:bf:b0:6d:b0:8f:b2:5e:8e:c3:1a:16: f7:de:b0:49:8a:55:a2:af:45:8d:1b:bc:00:79:19:4b:6f:f4: 5a:82:19:3e:9b:1f:cf:15:70:77:00:e7:7e:7e:a5:2f:05:57: a5:ce:1a:2f:ea:a1:47:53:64:b4:e4:ca:09:28:af:11:57:0b: 20:3b:d4:98:b2:f6:d0:48:29:47:41:9c:d6:f3:ac:87:ac:dd: cc:04:ad:44:33:26:28:fe:be:56:c0:09:52:5e:bd:74:3a:8f: 20:88:34:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFrT2NXc+6ggk0NHyD3CgkWL1GEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjA1MTMwMDAwNDlaFw0yNjA1MTQwMDM0NDlaMDMxMTAvBgNV BAMTKEU2ODM1Nzk1N0Q4MUIwQjZCQUMwMTM5NkE5RjlBOUVGRTNFMDU2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlNiB6VyCyM7uADz4L2SJxtiv FpWDkj4cL50QgaSZte+8kBkMIBiBc5QNPpbUqChJIVQeoMkFaROHRE9DHJ+19hI+ N5IiqHQymcE/QX3dK8ub3vSivTWB9HLrwxeUxqvGdlcL7go+aOY1PjdOM72XJYxx HSkKniZ89Io+eylTneF63RzZxlKheMa3SBO8B9FnymyQGatcUh6S9ZVTa5dpuaSW 7w1StKKkaHgkphyACLF4PgZsLHPXjNwaq+SnIWuEk5jL6VnuZZFvOypIieyAm7oq z3UE6TLDC6jJYvUm0O3IIcx1+vTL2eq3Skvu1AQs/A0XsIVFQ1QoOVWY1yb3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5oNXlX2BsLa6wBOWqfmp7+PgVvgwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnp3MiaZJBwl oFJivkoA/1TtX/Ou5j3083bcSUVdivaOk0lxQ55Xn990Hzxs5pLtUR/u817aABwm BiX+QJ9uDiyhWlWxhuPYp7fr4HTlbVkIknmsxYZmJKYz0DCcwrxbEISP3DcpSz7I UrqcdL4g4oEyp/1IGBqkraZEHmYH1kp5d+HdsAOVeP8WC9yzWP2vREqo6aO/L7+w bbCPsl6OwxoW996wSYpVoq9FjRu8AHkZS2/0WoIZPpsfzxVwdwDnfn6lLwVXpc4a L+qhR1NktOTKCSivEVcLIDvUmLL20EgpR0Gc1vOsh6zdzAStRDMmKP6+VsAJUl69 dDqPIIg0LA== -----END CERTIFICATE-----Generated at Wed May 13 17:57:18 2026 by rpki-client