$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft File: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft (raw, json) Hash identifier: jbsQ4JPBwzYhssFLnUcvVsp7mEqZa4TNkihXtiqOTQ4= Subject key identifier: 45:1C:BB:C8:97:8F:3D:86:84:87:99:DD:D6:8F:65:57:C3:96:A3:3A Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 195A68446D872A3FB64929C1063CA7D41BDAB40A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft Manifest number: 99 Signing time: Wed 13 May 2026 03:40:55 +0000 Manifest this update: Wed 13 May 2026 03:35:55 +0000 Manifest next update: Thu 14 May 2026 06:01:55 +0000 Files and hashes: 1: 323430303a356636303a3a2f33322d3332203d3e20313436373631.roa (hash: DyboZUW+ZsHiG0TQ2QlXg9N1Udo8DukmD2LIGfkwL6w=) 2: 3130332e322e3135382e302f32342d3234203d3e20313436373632.roa (hash: KmAN9co8g8woRBt62qGsshlijcSmsXQ7J65gVIPP3WY=) 3: 3130332e322e3135392e302f32342d3234203d3e20313436373632.roa (hash: 9g0xW7AmpZhtlTL3yKRzbCzVa8h7KeJrq49B9jPei30=) 4: 3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa (hash: C7VfQ5RZhf5OnAeKfKA9NgZGlrBddmIBCn4gvV8/SvE=) 5: 3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa (hash: 7MkVhAQ/ZLkwVh+NMEQgiOXhv9KYJmUNU5ot6ZWOSOU=) 6: 3130332e322e3135372e302f32342d3234203d3e20313436373632.roa (hash: 0lnVRbIs/e81a/ombdJYKhr/uI3gJ/7kYg5290LJFdI=) 7: 3131342e3131312e3137392e302f32342d3234203d3e20313436373632.roa (hash: C5mjk+1CG6r0bzt4b18un9KgRI/Xnp9P0cDH3RA0Hy4=) 8: 3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa (hash: DfoNTHHHPPQvz5ij9Tse9a3EdCP3ruj/rqOSevyve2I=) 9: 3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa (hash: PPgkSPwD1+U5stprn1D0dN8dTyE3ZUS4cSC5pqU8EBA=) 10: 3131342e3131312e3139312e302f32342d3234203d3e2034383132.roa (hash: 0Tz94FSnf8noh/jg+K+xGNe+oMRaQWPqA1KdljfT0sI=) 11: 3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa (hash: euPUAsBr1t7QdXoj1ahahda0S3VUgs4yGGVvDrZpqVI=) 12: 3131342e3131312e3138332e302f32342d3234203d3e20313436373632.roa (hash: EI1qa8y78SWxMil8dnhbXcjeLjq6LDygLF5SIMrC0BA=) 13: 3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa (hash: G3+LeensaDFmePqko03P1I/U70ppCM1tFWwCVpmhfxk=) 14: 3131342e3131312e3138362e302f32342d3234203d3e20313436373632.roa (hash: 14KdTLxuOOqp83g/G/Ys/4m/YS+CsQCpCaT1Ppveym0=) 15: 3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa (hash: Yd2hPJhMjdqd3tfkS6BhuAHKfqEvDiNjI/wreHyMlDM=) 16: 3131342e3131312e3137382e302f32342d3234203d3e20313436373632.roa (hash: KonUV/ojd1MNml5rROTSxf3fIHa2czkDZZNwNKw8A44=) 17: 3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa (hash: jV0UQMUSzuX46lyxU9Q1TIad3C+g694F7rPF2x053cs=) 18: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl (hash: AXOw3cpw4WPQLvJB7qxP3Hg+LUiiPDWn0BVdKBpnPi0=) 19: 3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa (hash: d3dxWmoPXxo1nO5RHMRT4MjQS31UKEZUCxDP0qx+gPI=) 20: 3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa (hash: UN7Qnirh/2XzM0qJ+K46LJtDxxzQ/o9T5wdOdPQYwgw=) 21: 3130332e3138332e32362e302f32332d3233203d3e20313436373631.roa (hash: n2yJFDGxv025XpKqavpDIa1XF9Rdfe1uA9zzY9nQ+sg=) 22: 3131342e3131312e3137362e302f32302d3230203d3e20313436373632.roa (hash: eoYlD0RAPkGnyRtlK8iXT60W+N/fDNkGjE7hNOcXIoA=) 23: 3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa (hash: VC+9ee95pNmMQJysCZRaAUqZrztwr1iHfxKQUtLwzeU=) 24: 323430303a356636303a3a2f33322d3332203d3e20313436373632.roa (hash: 2zf8ptIuNWz/ytNogvE5KsEgpil1bYy9wjHUWvs6PfU=) 25: 3130332e322e3135362e302f32342d3234203d3e20313436373632.roa (hash: ZT6T2FjjqBr9ft4J2Y3eyVRDUROWQVDrmyy7K6YoBoI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5a:68:44:6d:87:2a:3f:b6:49:29:c1:06:3c:a7:d4:1b:da:b4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: May 13 03:35:55 2026 GMT Not After : May 14 06:01:55 2026 GMT Subject: CN=451CBBC8978F3D86848799DDD68F6557C396A33A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:9a:f3:a1:20:53:b7:10:94:4b:20:2b:57: 63:6d:1f:69:40:80:ab:a3:6b:52:b2:66:84:03:4d: 62:c3:26:2a:58:4f:11:46:ba:4b:6e:f9:55:7c:ac: 4d:e2:10:fe:94:89:55:07:a0:46:b4:1f:03:9c:26: 78:39:9f:a2:4a:f0:fe:90:93:10:04:a3:a8:44:44: 57:b4:68:87:56:5a:16:65:24:37:96:51:95:95:b7: 13:c7:33:cd:b6:dd:26:34:55:c6:3f:ac:b3:86:58: c9:f6:eb:0e:55:27:34:e3:0b:8f:8c:65:10:53:f7: c5:2a:3f:68:24:8c:93:57:24:a7:68:f6:a4:7d:3d: 01:4f:43:36:70:43:e3:ba:3b:a2:ef:bb:e2:30:46: 8a:b6:aa:a8:5a:99:4f:c3:99:b9:69:16:c8:bf:c4: dd:69:6c:a7:64:18:d0:6d:4f:bf:8e:30:ed:ef:2c: 4f:f9:db:84:7e:d8:5f:ce:dd:33:cc:d0:e7:3e:72: 4d:cb:95:d3:fc:e9:09:95:fd:11:90:40:68:1f:ab: 83:fb:36:cc:cc:e3:af:a8:ef:d2:82:17:9d:fd:b1: 11:89:99:bc:76:ed:e6:30:e7:b9:ef:f7:56:c1:68: 12:27:f6:b7:df:d2:3b:b7:51:00:26:6e:4c:0c:4e: 5c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1C:BB:C8:97:8F:3D:86:84:87:99:DD:D6:8F:65:57:C3:96:A3:3A X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:96:bb:b4:78:da:85:b5:4a:e0:60:db:c9:64:5c:29:c8:b5: d9:3b:4e:9c:d1:b9:b8:3f:91:bd:6e:35:0c:b4:ec:24:06:21: 2c:37:92:01:7b:88:1a:a6:2d:59:5a:26:61:8d:60:8e:e6:1f: c5:10:b5:f0:60:13:94:f0:3e:3d:0d:1b:72:23:ba:b5:ae:a9: c6:fc:07:f1:c1:bf:22:07:ef:24:f4:44:0d:ac:ae:ef:b4:90: b3:04:02:11:5f:f8:ff:48:66:ce:4d:af:50:fe:40:83:ad:cd: 7a:70:eb:4d:8e:72:b8:fc:e5:51:3e:d2:60:5b:d7:48:21:2f: 2e:57:77:df:15:41:93:7e:7d:f1:29:1c:0f:5a:68:80:f4:fa: 46:ce:6f:3b:70:8b:3b:55:02:ea:88:f3:e7:07:73:84:97:3e: 78:52:40:88:32:c9:bd:ba:0b:4e:b2:dd:a1:0d:8c:ab:39:4d: 4d:7f:4e:4c:3d:f3:d8:22:a3:c0:89:75:d0:c0:4e:49:b8:59: 54:57:77:69:14:49:79:05:10:f2:b5:5b:e6:32:89:93:03:67: fa:1d:cc:d3:5d:b9:b8:04:52:03:db:1c:28:c3:8f:02:a0:5c: 79:62:85:69:7c:ad:94:96:7f:7d:aa:86:b0:fa:b7:f7:8e:f0: f3:5d:88:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGVpoRG2HKj+2SSnBBjyn1BvatAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjA1MTMwMzM1NTVaFw0yNjA1MTQwNjAxNTVaMDMxMTAvBgNV BAMTKDQ1MUNCQkM4OTc4RjNEODY4NDg3OTlEREQ2OEY2NTU3QzM5NkEzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0ZrzoSBTtxCUSyArV2NtH2lA gKuja1KyZoQDTWLDJipYTxFGuktu+VV8rE3iEP6UiVUHoEa0HwOcJng5n6JK8P6Q kxAEo6hERFe0aIdWWhZlJDeWUZWVtxPHM8223SY0VcY/rLOGWMn26w5VJzTjC4+M ZRBT98UqP2gkjJNXJKdo9qR9PQFPQzZwQ+O6O6Lvu+IwRoq2qqhamU/DmblpFsi/ xN1pbKdkGNBtT7+OMO3vLE/524R+2F/O3TPM0Oc+ck3LldP86QmV/RGQQGgfq4P7 NszM46+o79KCF539sRGJmbx27eYw57nv91bBaBIn9rff0ju3UQAmbkwMTlzbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURRy7yJePPYaEh5nd1o9lV8OWozowHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczMjQwMzUvMC9EMzVGOTBEOEE3M0ZG QzE2MEEzMTBBOTZCQzAwQkVBQjdEQTI5MTFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5a7tHjahbVK 4GDbyWRcKci12TtOnNG5uD+RvW41DLTsJAYhLDeSAXuIGqYtWVomYY1gjuYfxRC1 8GATlPA+PQ0bciO6ta6pxvwH8cG/IgfvJPREDayu77SQswQCEV/4/0hmzk2vUP5A g63NenDrTY5yuPzlUT7SYFvXSCEvLld33xVBk3598SkcD1pogPT6Rs5vO3CLO1UC 6ojz5wdzhJc+eFJAiDLJvboLTrLdoQ2MqzlNTX9OTD3z2CKjwIl10MBOSbhZVFd3 aRRJeQUQ8rVb5jKJkwNn+h3M0125uARSA9scKMOPAqBceWKFaXytlJZ/faqGsPq3 947w812IwQ== -----END CERTIFICATE-----Generated at Wed May 13 12:03:22 2026 by rpki-client