$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: bjQmYcIyBoNKXl0SudzwTEnHZAtQMOcuyrGbFPsT+fQ= Subject key identifier: 9B:ED:D2:53:D2:F4:D0:DA:BD:DE:83:8E:92:A4:6A:E3:35:69:C9:3F Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 560B45D13062D2CE74B5820F8658545B5D38BF21 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 9B Signing time: Tue 12 May 2026 20:25:45 +0000 Manifest this update: Tue 12 May 2026 20:20:45 +0000 Manifest next update: Wed 13 May 2026 22:39:45 +0000 Files and hashes: 1: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 2: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: lGPn9dToH5LUjqWu/tdstDN73OM59m092pvsJP5xgeQ=) 3: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 4: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 5: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 6: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) 7: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 8: 3131322e37332e302e302f31362d3234203d3e20323135353935.roa (hash: Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0b:45:d1:30:62:d2:ce:74:b5:82:0f:86:58:54:5b:5d:38:bf:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: May 12 20:20:45 2026 GMT Not After : May 13 22:39:45 2026 GMT Subject: CN=9BEDD253D2F4D0DABDDE838E92A46AE33569C93F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:c8:7f:7d:65:ff:9e:5f:a7:2c:20:2c:cc: 3b:2a:32:3f:65:89:5d:2d:2d:ef:3c:5c:49:fd:50: 26:fc:4b:c3:7b:c0:7b:69:89:d8:dc:28:2c:3e:2a: c3:e5:22:ef:e2:39:bb:b3:0b:83:09:12:eb:2e:c8: 81:0c:5e:1e:ff:d2:95:1b:b6:12:0f:d0:fe:a8:14: da:53:d6:b5:48:c9:37:a8:4c:38:6c:2d:c2:c3:9a: 9d:2b:95:79:25:d2:c7:01:73:28:83:22:c9:73:a6: 18:e0:58:ec:3e:d4:44:7d:5b:9c:02:dd:26:05:17: b7:38:82:a7:32:b7:0d:fc:8c:2e:d2:9e:cb:88:b2: e1:69:be:cb:35:d8:1a:e7:66:67:b8:5a:68:db:59: aa:cb:f2:cb:58:cc:a4:c0:45:96:c6:31:ca:54:ab: 34:90:6e:a0:47:98:2a:28:6b:b2:e4:02:d3:20:f5: e4:30:eb:a3:59:51:80:9e:ab:9f:31:8b:dc:0f:c7: 96:41:f2:82:4f:c9:e3:3f:e4:07:0c:95:9a:53:bc: 26:18:1e:84:a6:a9:4b:57:51:c7:f5:46:9b:b2:24: a8:0c:8f:d9:95:44:7c:36:68:d3:2b:eb:11:55:a5: 0a:74:30:bc:1a:c6:6a:69:e9:fd:7a:3c:90:5e:f9: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:ED:D2:53:D2:F4:D0:DA:BD:DE:83:8E:92:A4:6A:E3:35:69:C9:3F X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:14:1f:41:c0:63:8a:5e:50:10:2b:d3:6b:b5:7d:58:0b:01: 90:31:19:05:6a:2e:4e:88:65:95:1a:3b:43:73:0a:eb:ac:ba: c3:0a:cc:0c:66:21:da:e0:7e:f0:61:95:5b:93:06:0c:27:d5: 46:90:9e:cb:bf:0d:5e:eb:97:fa:a0:ab:99:3b:9f:fa:65:b2: 5e:2d:ee:5b:52:d9:64:a5:4a:44:ac:5d:2f:ba:b8:e8:b0:66: aa:47:ef:eb:1a:36:3c:1a:03:70:0f:64:74:9c:e9:51:74:3d: 54:03:dd:4f:71:b4:24:e3:0a:14:90:df:43:a3:f5:88:2f:7a: 4d:ce:aa:b5:4f:5d:cd:02:51:e2:c6:ad:60:c1:78:99:b0:34: 8b:5b:6f:d9:15:0c:f3:35:e7:60:c1:9b:9e:27:e6:79:34:77: 6b:b4:08:2b:8c:cb:7c:46:f2:4d:25:f7:a3:45:83:15:f3:60: 3b:c9:b2:95:f8:ba:00:8c:9c:2f:69:91:a8:f3:3c:4a:a2:39: 31:a2:ec:c1:d3:c9:a3:ec:73:82:ae:32:a0:e7:1a:64:8d:73: 9d:dd:87:3c:dd:af:87:90:a7:93:55:93:97:99:09:3a:a8:e5: 27:b8:7d:b1:2c:85:17:56:bc:75:90:9f:1a:d1:e4:e7:53:29: 4c:a0:5f:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVgtF0TBi0s50tYIPhlhUW104vyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA1MTIyMDIwNDVaFw0yNjA1MTMyMjM5NDVaMDMxMTAvBgNV BAMTKDlCRUREMjUzRDJGNEQwREFCRERFODM4RTkyQTQ2QUUzMzU2OUM5M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Qsh/fWX/nl+nLCAszDsqMj9l iV0tLe88XEn9UCb8S8N7wHtpidjcKCw+KsPlIu/iObuzC4MJEusuyIEMXh7/0pUb thIP0P6oFNpT1rVIyTeoTDhsLcLDmp0rlXkl0scBcyiDIslzphjgWOw+1ER9W5wC 3SYFF7c4gqcytw38jC7SnsuIsuFpvss12BrnZme4WmjbWarL8stYzKTARZbGMcpU qzSQbqBHmCooa7LkAtMg9eQw66NZUYCeq58xi9wPx5ZB8oJPyeM/5AcMlZpTvCYY HoSmqUtXUcf1RpuyJKgMj9mVRHw2aNMr6xFVpQp0MLwaxmpp6f16PJBe+cy3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm+3SU9L00Nq93oOOkqRq4zVpyT8wHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRQfQcBjil5Q ECvTa7V9WAsBkDEZBWouTohllRo7Q3MK66y6wwrMDGYh2uB+8GGVW5MGDCfVRpCe y78NXuuX+qCrmTuf+mWyXi3uW1LZZKVKRKxdL7q46LBmqkfv6xo2PBoDcA9kdJzp UXQ9VAPdT3G0JOMKFJDfQ6P1iC96Tc6qtU9dzQJR4satYMF4mbA0i1tv2RUM8zXn YMGbnifmeTR3a7QIK4zLfEbyTSX3o0WDFfNgO8mylfi6AIycL2mRqPM8SqI5MaLs wdPJo+xzgq4yoOcaZI1znd2HPN2vh5Cnk1WTl5kJOqjlJ7h9sSyFF1a8dZCfGtHk 51MpTKBfHg== -----END CERTIFICATE-----Generated at Wed May 13 13:29:46 2026 by rpki-client