$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: F9ELps/i31RcCnKqCck8ld3yv061s0bjP8dvW000TKw= Subject key identifier: 03:62:B0:64:E3:9A:22:F3:23:65:E2:9C:13:7E:7A:49:04:6D:76:40 Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 0FE3BEB335970309586E128B83B978086CAA8DA2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 9C Signing time: Wed 13 May 2026 05:30:58 +0000 Manifest this update: Wed 13 May 2026 05:25:58 +0000 Manifest next update: Thu 14 May 2026 07:11:58 +0000 Files and hashes: 1: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) 2: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: otuYAjpiRX49E5TbWDb6pn/w7KQ3O5rI6pssNSBdX44=) 3: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e3:be:b3:35:97:03:09:58:6e:12:8b:83:b9:78:08:6c:aa:8d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: May 13 05:25:58 2026 GMT Not After : May 14 07:11:58 2026 GMT Subject: CN=0362B064E39A22F32365E29C137E7A49046D7640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:9d:a6:de:0b:b8:ed:91:8f:f8:55:52:24: 50:d8:97:4a:32:3d:c0:2d:b1:46:4d:75:40:01:f3: 07:67:ae:63:75:cc:5a:be:d0:cf:0f:88:9e:48:de: fb:ed:6a:67:21:03:22:4d:a3:8d:9c:4b:d6:76:c7: bc:47:0a:1c:70:3c:0a:81:0d:c5:5d:99:08:dc:24: 39:c0:93:6b:93:e5:e6:b8:25:7b:64:84:52:48:c4: f1:48:f8:07:bc:2e:03:cf:e5:95:87:15:0f:fe:14: 40:c5:14:99:2d:f8:d6:9f:c7:0a:7f:d2:dd:d6:ae: 6b:c7:d6:c7:0a:ad:45:3b:45:d3:3f:46:7d:9b:58: e8:28:61:7c:74:74:d6:91:b8:92:41:5d:1f:f5:81: 5a:65:66:99:80:af:95:f8:ab:81:c2:39:c7:86:fd: 39:f3:99:b3:e0:2c:e9:88:62:d1:7a:53:44:1d:18: d4:44:45:c3:c5:c5:ff:4d:39:78:de:80:98:19:bb: b1:52:03:38:0e:1c:bc:f5:89:e3:d8:56:95:7f:f1: cf:5a:22:8b:0c:5f:d5:d4:b1:a9:fc:8f:ff:38:7b: 01:7d:53:a7:20:11:88:41:7a:5d:75:aa:ae:22:f6: 31:e4:cf:e3:5e:43:aa:f5:e7:2c:ee:27:bb:7d:8b: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:62:B0:64:E3:9A:22:F3:23:65:E2:9C:13:7E:7A:49:04:6D:76:40 X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6d:14:93:e8:14:8c:75:33:67:08:63:99:39:5a:0f:0b:06: 10:42:76:25:07:50:85:43:6e:e7:52:ad:c7:7b:ea:dd:b4:8b: 77:1e:2f:f8:44:d4:0c:40:7e:86:d4:50:f2:04:e7:53:72:57: e4:c9:85:60:5c:9f:59:2f:95:a0:13:83:c5:c8:7b:a3:a6:5c: 05:5d:8c:66:dd:dd:0e:88:91:75:37:5d:5e:d0:65:44:7b:2e: a1:b8:f2:50:bf:78:ca:a2:0d:81:f9:d2:51:4c:84:8a:6e:7f: 52:7f:05:7a:26:25:01:4f:b7:d7:3d:35:93:e5:83:42:d7:49: ca:b0:70:ec:f3:69:fa:66:8d:26:ff:d6:b2:05:6c:b8:ad:89: 09:03:ce:12:4e:50:a1:0a:84:55:b4:76:e4:6b:63:05:f4:31: ef:8b:85:76:c5:1f:20:74:29:ce:a9:e8:79:ac:c8:b8:52:e5: 86:ae:07:29:d1:f0:dc:be:d2:f3:d5:d0:56:81:bc:a5:59:7a: c6:58:8a:32:9b:ab:de:a0:48:42:e0:c0:e6:85:98:43:1c:bc: 29:29:f8:b9:6b:e2:42:08:b0:79:31:de:3d:11:f9:68:5f:02: 80:1c:d2:f0:c8:57:5b:e1:9b:4b:3d:cd:4d:67:71:dc:a9:41: 73:fe:3b:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD+O+szWXAwlYbhKLg7l4CGyqjaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjA1MTMwNTI1NThaFw0yNjA1MTQwNzExNThaMDMxMTAvBgNV BAMTKDAzNjJCMDY0RTM5QTIyRjMyMzY1RTI5QzEzN0U3QTQ5MDQ2RDc2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7p2m3gu47ZGP+FVSJFDYl0oy PcAtsUZNdUAB8wdnrmN1zFq+0M8PiJ5I3vvtamchAyJNo42cS9Z2x7xHChxwPAqB DcVdmQjcJDnAk2uT5ea4JXtkhFJIxPFI+Ae8LgPP5ZWHFQ/+FEDFFJkt+Nafxwp/ 0t3WrmvH1scKrUU7RdM/Rn2bWOgoYXx0dNaRuJJBXR/1gVplZpmAr5X4q4HCOceG /TnzmbPgLOmIYtF6U0QdGNRERcPFxf9NOXjegJgZu7FSAzgOHLz1iePYVpV/8c9a IosMX9XUsan8j/84ewF9U6cgEYhBel11qq4i9jHkz+NeQ6r15yzuJ7t9i6zJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUA2KwZOOaIvMjZeKcE356SQRtdkAwHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW0Uk+gUjHUz ZwhjmTlaDwsGEEJ2JQdQhUNu51Ktx3vq3bSLdx4v+ETUDEB+htRQ8gTnU3JX5MmF YFyfWS+VoBODxch7o6ZcBV2MZt3dDoiRdTddXtBlRHsuobjyUL94yqINgfnSUUyE im5/Un8FeiYlAU+31z01k+WDQtdJyrBw7PNp+maNJv/WsgVsuK2JCQPOEk5QoQqE VbR25GtjBfQx74uFdsUfIHQpzqnoeazIuFLlhq4HKdHw3L7S89XQVoG8pVl6xliK Mpur3qBIQuDA5oWYQxy8KSn4uWviQgiweTHePRH5aF8CgBzS8MhXW+GbSz3NTWdx 3KlBc/47pg== -----END CERTIFICATE-----Generated at Wed May 13 15:48:43 2026 by rpki-client