$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: g31toMfbYRICV2HjZFjnOzOSOv/biWjIfjYcjhBBOjU= Subject key identifier: 54:7C:DD:C5:EB:31:64:F1:2F:EC:D0:D5:A4:2B:78:40:62:DC:36:0F Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 760D356D9F4EC3DFCE362E7BAA5FE46B5882C9F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 98 Signing time: Wed 13 May 2026 02:05:52 +0000 Manifest this update: Wed 13 May 2026 02:00:52 +0000 Manifest next update: Thu 14 May 2026 05:37:52 +0000 Files and hashes: 1: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 2: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: Q3z6P/kA3pkaAECdrMxI/gwd8928qnQ4dp7s42X4J7o=) 3: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 4: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0d:35:6d:9f:4e:c3:df:ce:36:2e:7b:aa:5f:e4:6b:58:82:c9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: May 13 02:00:52 2026 GMT Not After : May 14 05:37:52 2026 GMT Subject: CN=547CDDC5EB3164F12FECD0D5A42B784062DC360F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:6d:1d:e2:88:87:1d:bb:64:c3:c1:69:6f: fa:42:22:0f:b1:73:f5:e5:bb:0c:cb:30:8e:21:ed: 0d:68:be:98:b7:21:53:8b:b5:fb:f1:19:7e:0b:9f: 49:98:45:ec:98:3f:cf:20:81:91:59:c9:20:a4:6d: 20:cb:e1:8d:ea:56:b9:3f:d0:09:6b:0e:7e:a6:7e: e4:39:8c:a0:c6:38:3e:c1:0f:20:3a:6f:57:30:0f: ab:3f:25:d2:e9:78:db:a2:79:c6:19:69:07:3f:f8: 12:71:39:0f:a5:d9:30:f1:d9:3d:a9:e4:d3:7c:50: 0e:04:51:34:59:84:75:41:b1:23:0c:27:81:ca:d7: 6d:93:d7:1f:60:19:22:95:73:df:06:e3:7a:86:47: 05:11:72:26:fb:27:44:e2:be:7b:06:9c:df:ea:d7: 33:54:82:93:6d:e6:71:93:e4:f8:7b:63:00:8e:54: fb:55:3f:f1:27:a2:40:07:e6:90:c5:1b:d4:35:22: ef:12:d8:80:6c:1f:87:3f:a3:a5:b2:11:fa:99:c6: 42:6e:03:19:f8:d7:f3:21:94:fb:4e:84:07:71:d9: e9:3e:aa:34:7d:9c:89:a0:16:40:8a:86:b5:a2:c6: 90:5e:d8:3d:9e:61:3e:17:d2:12:d2:38:e8:bd:29: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7C:DD:C5:EB:31:64:F1:2F:EC:D0:D5:A4:2B:78:40:62:DC:36:0F X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:73:09:55:67:06:73:59:0a:75:47:46:ba:08:c3:9e:d8:32: 05:51:69:07:12:36:61:c3:fe:ba:64:c4:6b:ad:a4:78:48:a2: 0b:0d:be:d7:1e:4b:e6:fc:64:cd:92:16:a1:74:0b:b5:19:d7: 11:bd:34:33:38:32:3e:f3:0b:35:ef:38:88:68:ba:8b:4c:15: ff:51:8e:d4:73:14:5f:2c:d9:97:f4:5e:b1:aa:5e:43:63:73: 38:92:a6:bd:c3:f2:00:27:dc:ec:37:a3:34:3b:e8:e2:e4:71: 6b:8b:1e:26:e7:f7:16:63:c3:d3:5d:4f:b7:5f:10:9c:77:c1: 69:c4:44:76:55:59:4a:16:b2:cf:33:4f:79:4f:24:c3:39:45: fb:23:a7:69:f6:77:81:fd:81:63:46:53:cb:8b:0c:97:6b:65: b5:e5:28:90:98:ad:44:3e:32:31:b1:da:30:fa:8c:5f:c6:06: bf:15:e2:4f:52:53:5e:35:d3:ef:c1:7c:bd:eb:64:7a:5e:4a: 87:92:ef:31:30:ba:3c:5d:cd:d8:0f:0b:81:f5:31:e1:31:bd: 2a:6b:6d:3c:80:94:83:20:4a:41:e7:5e:6b:17:27:df:99:17: fa:83:26:34:f3:2f:fb:b9:9e:e6:b9:1d:60:ed:7e:85:a1:df: d3:a5:b8:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdg01bZ9Ow9/ONi57ql/ka1iCyfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjA1MTMwMjAwNTJaFw0yNjA1MTQwNTM3NTJaMDMxMTAvBgNV BAMTKDU0N0NEREM1RUIzMTY0RjEyRkVDRDBENUE0MkI3ODQwNjJEQzM2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZ20d4oiHHbtkw8Fpb/pCIg+x c/XluwzLMI4h7Q1ovpi3IVOLtfvxGX4Ln0mYReyYP88ggZFZySCkbSDL4Y3qVrk/ 0AlrDn6mfuQ5jKDGOD7BDyA6b1cwD6s/JdLpeNuiecYZaQc/+BJxOQ+l2TDx2T2p 5NN8UA4EUTRZhHVBsSMMJ4HK122T1x9gGSKVc98G43qGRwURcib7J0TivnsGnN/q 1zNUgpNt5nGT5Ph7YwCOVPtVP/EnokAH5pDFG9Q1Iu8S2IBsH4c/o6WyEfqZxkJu Axn41/MhlPtOhAdx2ek+qjR9nImgFkCKhrWixpBe2D2eYT4X0hLSOOi9KRsvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVHzdxesxZPEv7NDVpCt4QGLcNg8wHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXMJVWcGc1kK dUdGugjDntgyBVFpBxI2YcP+umTEa62keEiiCw2+1x5L5vxkzZIWoXQLtRnXEb00 MzgyPvMLNe84iGi6i0wV/1GO1HMUXyzZl/ResapeQ2NzOJKmvcPyACfc7DejNDvo 4uRxa4seJuf3FmPD011Pt18QnHfBacREdlVZShayzzNPeU8kwzlF+yOnafZ3gf2B Y0ZTy4sMl2tlteUokJitRD4yMbHaMPqMX8YGvxXiT1JTXjXT78F8vetkel5Kh5Lv MTC6PF3N2A8LgfUx4TG9KmttPICUgyBKQedeaxcn35kX+oMmNPMv+7me5rkdYO1+ haHf06W4+Q== -----END CERTIFICATE-----Generated at Wed May 13 16:48:46 2026 by rpki-client