$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: KVPbTqMCclzoN6JXA9Aaq6bxyVtbzUDqla02dKPmImE= Subject key identifier: E3:E7:50:39:3F:04:6D:57:9D:10:6D:B9:30:DB:E1:B0:46:1C:A1:08 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 48634C4C0B758269FAA2AB3DD5BE0B3339FB65F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 98 Signing time: Wed 13 May 2026 04:55:57 +0000 Manifest this update: Wed 13 May 2026 04:50:57 +0000 Manifest next update: Thu 14 May 2026 06:39:57 +0000 Files and hashes: 1: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 2: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 3: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 4: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) 5: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 6: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 7: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: 9l/MHSHwp7Xkv40Q96VRG8JlKtccHGH4btU8mU/jcio=) 8: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:63:4c:4c:0b:75:82:69:fa:a2:ab:3d:d5:be:0b:33:39:fb:65:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: May 13 04:50:57 2026 GMT Not After : May 14 06:39:57 2026 GMT Subject: CN=E3E750393F046D579D106DB930DBE1B0461CA108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:b1:58:09:3e:29:6d:a0:4b:3d:08:e1:84: a6:1d:ae:de:81:fb:7f:58:03:ba:9d:69:06:b2:e7: 2c:82:b6:0c:42:18:c6:99:7a:fe:45:09:aa:4a:02: b9:69:26:51:34:c6:88:4a:7a:ae:a9:90:f9:dd:d3: 35:19:6d:90:0f:e8:60:9e:6b:3c:a0:eb:2e:0d:a9: 46:62:98:8f:6b:75:89:31:28:e1:af:bd:76:1a:34: ac:c6:5f:c2:3b:01:9c:87:14:f1:ef:48:26:d0:05: 3f:35:9f:53:2e:0d:66:ba:7d:e6:ab:61:64:ef:f0: 2e:d2:45:1f:f1:8e:2d:15:51:76:a9:ce:c7:58:2d: 9e:2d:18:0e:3b:4f:27:2c:88:1e:91:54:46:ce:b4: ef:77:fd:f3:04:d7:1b:53:97:7a:00:22:0d:a9:85: e6:92:20:df:44:cf:d8:20:6a:25:10:dc:fc:19:84: 6e:6e:aa:d8:41:eb:a9:e6:d0:7d:66:aa:58:33:76: a5:b4:2c:19:ad:58:4a:79:6e:2c:60:e6:cb:5a:7a: 04:f9:c6:82:e5:47:35:8d:a1:1a:0c:92:5a:dd:cb: 87:f6:9c:34:da:ce:4a:9b:f0:52:d5:9a:bd:eb:10: a5:19:55:de:02:c9:9a:85:36:85:35:55:3a:36:00: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E7:50:39:3F:04:6D:57:9D:10:6D:B9:30:DB:E1:B0:46:1C:A1:08 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:85:4d:e2:db:b7:83:d5:3f:6f:f3:39:1d:b9:3a:67:25:36: 8e:21:13:6d:ca:47:e7:78:3d:d4:a9:c2:55:00:c5:2a:0c:f6: 5a:41:20:eb:6a:bf:66:f5:9e:e2:97:fe:35:42:14:e4:d4:2a: f0:dd:18:66:de:5d:13:85:78:2f:a9:42:51:84:8e:cf:77:e7: 96:70:83:f0:59:24:7a:7b:56:16:32:70:3d:3d:e3:72:81:8e: 8b:4d:65:2a:1f:49:e2:d0:01:38:45:aa:cf:bb:45:47:31:d9: d4:5c:90:38:3f:be:8c:f0:6f:83:35:41:33:0a:c3:9c:4e:13: f2:8a:7a:d9:a3:fd:64:83:94:a5:54:36:a4:5a:6d:ad:2a:44: 63:33:93:6a:bc:a5:54:a5:51:f6:87:08:6d:58:c6:13:87:ea: ee:1a:a6:0c:75:a9:22:d6:d4:bc:95:bc:52:90:ce:44:28:d6: 89:de:4f:cf:6d:c1:cb:1a:60:b6:65:6c:c7:ed:fa:a9:68:d4: 8a:19:02:20:9a:2f:28:fb:fe:f3:dc:89:0c:fc:bc:a6:84:af: 42:19:70:a0:32:20:89:47:9c:96:af:82:18:3f:b2:ea:ba:64: 5f:96:53:46:ea:ee:fc:55:98:b1:9e:98:ab:05:18:04:48:80: bf:74:87:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSGNMTAt1gmn6oqs91b4LMzn7ZfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjA1MTMwNDUwNTdaFw0yNjA1MTQwNjM5NTdaMDMxMTAvBgNV BAMTKEUzRTc1MDM5M0YwNDZENTc5RDEwNkRCOTMwREJFMUIwNDYxQ0ExMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRbFYCT4pbaBLPQjhhKYdrt6B +39YA7qdaQay5yyCtgxCGMaZev5FCapKArlpJlE0xohKeq6pkPnd0zUZbZAP6GCe azyg6y4NqUZimI9rdYkxKOGvvXYaNKzGX8I7AZyHFPHvSCbQBT81n1MuDWa6fear YWTv8C7SRR/xji0VUXapzsdYLZ4tGA47TycsiB6RVEbOtO93/fME1xtTl3oAIg2p heaSIN9Ez9ggaiUQ3PwZhG5uqthB66nm0H1mqlgzdqW0LBmtWEp5bixg5staegT5 xoLlRzWNoRoMklrdy4f2nDTazkqb8FLVmr3rEKUZVd4CyZqFNoU1VTo2ALC9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4+dQOT8EbVedEG25MNvhsEYcoQgwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4VN4tu3g9U/ b/M5Hbk6ZyU2jiETbcpH53g91KnCVQDFKgz2WkEg62q/ZvWe4pf+NUIU5NQq8N0Y Zt5dE4V4L6lCUYSOz3fnlnCD8FkkentWFjJwPT3jcoGOi01lKh9J4tABOEWqz7tF RzHZ1FyQOD++jPBvgzVBMwrDnE4T8op62aP9ZIOUpVQ2pFptrSpEYzOTarylVKVR 9ocIbVjGE4fq7hqmDHWpItbUvJW8UpDORCjWid5Pz23ByxpgtmVsx+36qWjUihkC IJovKPv+89yJDPy8poSvQhlwoDIgiUeclq+CGD+y6rpkX5ZTRuru/FWYsZ6YqwUY BEiAv3SHQA== -----END CERTIFICATE-----Generated at Wed May 13 15:01:07 2026 by rpki-client