$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: oLtwEl7hun5/aJgh3nQVuV4TP3wUsvzg+uNVaU75C1o= Subject key identifier: 5C:1F:63:D7:31:1A:AE:A4:25:9A:E3:06:5F:F0:16:C7:BC:29:D5:6B Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 5673B02E5E0C64574BD6B033635D2668AA514AEC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 99 Signing time: Tue 12 May 2026 20:35:45 +0000 Manifest this update: Tue 12 May 2026 20:30:45 +0000 Manifest next update: Wed 13 May 2026 21:04:45 +0000 Files and hashes: 1: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: H/dbgWmGVla+1jesLPB//X7VG21GGL6CxL+TFnlDWdw=) 2: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) 3: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:73:b0:2e:5e:0c:64:57:4b:d6:b0:33:63:5d:26:68:aa:51:4a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: May 12 20:30:45 2026 GMT Not After : May 13 21:04:45 2026 GMT Subject: CN=5C1F63D7311AAEA4259AE3065FF016C7BC29D56B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:08:c7:94:ca:53:d1:ce:1e:e5:17:7a:9f: 25:01:5c:dd:b1:6d:52:28:0d:e0:34:b4:e9:c3:32: ee:11:14:e4:83:8c:e4:b3:a4:63:77:fd:42:33:3e: 42:f0:bb:a6:ed:96:31:b4:82:f6:a4:66:e4:a8:9d: a3:ee:5c:f9:80:7c:1d:88:18:ca:a5:95:d6:aa:e5: 86:2a:02:fc:15:9e:64:02:b9:18:de:39:b8:db:db: 3b:da:07:26:19:4a:3c:2b:f4:07:83:47:f4:3b:4a: 53:fc:49:48:f5:9a:4e:87:dd:a8:9c:32:a1:a4:d0: a4:02:45:bc:7f:31:9f:c0:42:0c:1e:92:da:e2:95: 1f:a2:6a:5b:36:60:47:07:a9:ee:5b:61:07:09:18: 7c:47:b3:cb:6e:c0:24:33:f5:b4:cb:b3:51:08:5e: 95:ba:79:a1:e8:ad:0b:67:f9:ad:81:38:30:a3:f4: e8:e3:4a:4e:c6:82:77:c1:14:db:52:bf:b1:89:e4: d1:0b:4c:30:e9:97:dd:d6:de:83:17:ff:2d:d2:09: 9f:ca:34:33:7a:b5:58:da:c8:ed:63:17:d2:58:cc: e6:c3:dd:f4:d4:dd:ba:31:2c:4d:93:b3:4a:3d:d1: 76:fd:9c:d5:ca:2e:c0:66:02:39:09:a8:9c:5d:ed: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1F:63:D7:31:1A:AE:A4:25:9A:E3:06:5F:F0:16:C7:BC:29:D5:6B X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7a:6d:89:65:3f:b5:1d:2c:b6:a5:17:04:9e:ce:57:92:73: 5f:38:80:38:e9:aa:75:a4:0f:a7:0c:b5:4c:0a:f8:86:a2:3d: 85:c4:09:f5:78:03:15:d3:c9:5c:f5:2f:6c:aa:a9:7f:21:6c: 80:41:9c:d9:5c:7f:f8:e7:36:80:4e:0d:8b:71:fa:ec:d7:b1: fd:c9:a6:d0:78:b0:fa:75:d3:9a:1b:fa:1e:b7:54:1e:d2:ad: 5c:30:c5:ee:67:20:c8:c3:b2:4e:11:cc:6c:f6:67:9c:e5:a6: 5b:1d:2e:9a:05:20:eb:31:6e:d2:52:4d:c5:04:40:d8:0c:07: df:64:d6:36:58:3f:37:a1:c0:de:bd:82:2d:62:24:a6:fe:5a: 3c:7d:b7:3c:d2:f4:c3:7e:e1:f5:4f:b4:42:9b:f0:b2:64:c1: 00:1d:2d:e5:e2:c6:5a:10:8b:23:bc:21:80:b0:8c:94:58:06: 13:a4:08:ea:6c:da:24:47:d2:90:80:af:2f:7c:9c:c2:db:01: 56:6e:86:2b:a8:d2:32:08:76:0a:83:bf:76:4f:32:85:54:b3: 5a:92:11:6f:d3:04:e6:8c:c2:4d:78:00:b8:26:48:93:45:c1: 38:48:b5:52:67:33:0f:c4:99:fd:65:3c:3a:b8:00:50:e3:b9: 66:04:6e:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVnOwLl4MZFdL1rAzY10maKpRSuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjA1MTIyMDMwNDVaFw0yNjA1MTMyMTA0NDVaMDMxMTAvBgNV BAMTKDVDMUY2M0Q3MzExQUFFQTQyNTlBRTMwNjVGRjAxNkM3QkMyOUQ1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVgjHlMpT0c4e5Rd6nyUBXN2x bVIoDeA0tOnDMu4RFOSDjOSzpGN3/UIzPkLwu6btljG0gvakZuSonaPuXPmAfB2I GMqlldaq5YYqAvwVnmQCuRjeObjb2zvaByYZSjwr9AeDR/Q7SlP8SUj1mk6H3aic MqGk0KQCRbx/MZ/AQgwektrilR+ials2YEcHqe5bYQcJGHxHs8tuwCQz9bTLs1EI XpW6eaHorQtn+a2BODCj9OjjSk7GgnfBFNtSv7GJ5NELTDDpl93W3oMX/y3SCZ/K NDN6tVjayO1jF9JYzObD3fTU3boxLE2Ts0o90Xb9nNXKLsBmAjkJqJxd7b8pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXB9j1zEarqQlmuMGX/AWx7wp1WswHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHptiWU/tR0s tqUXBJ7OV5JzXziAOOmqdaQPpwy1TAr4hqI9hcQJ9XgDFdPJXPUvbKqpfyFsgEGc 2Vx/+Oc2gE4Ni3H67Nex/cmm0Hiw+nXTmhv6HrdUHtKtXDDF7mcgyMOyThHMbPZn nOWmWx0umgUg6zFu0lJNxQRA2AwH32TWNlg/N6HA3r2CLWIkpv5aPH23PNL0w37h 9U+0QpvwsmTBAB0t5eLGWhCLI7whgLCMlFgGE6QI6mzaJEfSkICvL3ycwtsBVm6G K6jSMgh2CoO/dk8yhVSzWpIRb9ME5ozCTXgAuCZIk0XBOEi1UmczD8SZ/WU8OrgA UOO5ZgRugA== -----END CERTIFICATE-----Generated at Wed May 13 11:13:05 2026 by rpki-client