$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: tRx/WTEylGmDnj8gOeSOe76/PeyUA2D1OF6mDxMdgz0= Subject key identifier: A7:24:6D:05:90:44:97:B7:DB:5A:08:A3:F7:DC:27:A9:DF:3C:A6:81 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 7DF4181374A8C81D0D9FAC8EFA4D7CF84466EB2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 99 Signing time: Wed 13 May 2026 09:01:03 +0000 Manifest this update: Wed 13 May 2026 08:56:03 +0000 Manifest next update: Thu 14 May 2026 09:17:03 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: AjAKeAkPaZzjRf5vG20yQEmZ0KeWwkSEPyGL2tjuYRA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f4:18:13:74:a8:c8:1d:0d:9f:ac:8e:fa:4d:7c:f8:44:66:eb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: May 13 08:56:03 2026 GMT Not After : May 14 09:17:03 2026 GMT Subject: CN=A7246D05904497B7DB5A08A3F7DC27A9DF3CA681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:29:05:05:82:bf:af:99:ab:d5:91:1b:d6: be:18:79:de:f6:0c:03:df:d2:45:3f:22:b1:c8:aa: 24:32:f1:d7:f3:61:b5:62:f8:76:03:75:84:23:b3: 70:aa:d3:30:04:19:2d:7f:36:3e:51:a2:22:55:b1: 58:34:f7:84:49:a8:63:7f:4a:4c:f5:7c:22:1a:c7: 4a:73:9f:98:45:ab:80:4c:4b:d2:03:17:10:02:47: d2:d4:8c:88:c7:de:50:b6:8f:a6:aa:d4:73:d3:6b: de:7e:c8:f4:ed:c6:1d:63:4d:29:d7:d6:f0:ea:c4: 10:41:66:e9:49:20:41:77:a9:e1:ec:5b:06:5d:6c: b8:3c:15:41:dc:55:5f:fc:b3:c5:1e:b0:1a:22:02: 6b:c7:2b:96:09:4f:ac:f9:e2:07:ef:03:8e:52:39: c3:e4:b3:cf:68:42:e5:72:e8:09:ac:11:08:5b:98: 75:b1:bd:5b:a0:b3:dd:74:d9:f6:c7:0e:6f:65:8f: a0:1b:14:af:e4:96:93:99:99:7d:14:fa:40:55:e5: 63:ff:1e:e2:fb:8a:87:61:4d:a9:9f:8f:f3:e1:08: 0b:dc:06:98:ac:0f:ab:b2:6f:78:67:ae:fe:39:d5: e0:2b:17:45:e4:96:3d:5e:9a:c5:72:92:ae:f8:22: fb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:24:6D:05:90:44:97:B7:DB:5A:08:A3:F7:DC:27:A9:DF:3C:A6:81 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ca:bb:01:4a:7b:57:a4:09:ea:40:75:79:6f:1c:31:fc:d8: a8:0b:1c:86:cf:f8:47:a5:ce:62:df:cd:b3:e0:b1:3a:2c:b2: 38:14:de:21:ed:22:d5:d8:3d:37:bf:dc:50:f8:22:84:53:eb: 1e:06:7a:14:ec:59:91:74:63:9b:80:99:4d:d0:4d:48:71:b9: 98:03:74:f6:43:7f:a0:6f:ed:d8:4d:93:64:58:48:69:23:ca: 9a:9d:02:c5:88:e9:18:7e:22:8e:53:21:f6:a9:30:03:c2:33: fc:36:0d:3c:82:31:b8:b5:5c:bc:eb:db:81:6d:da:d5:ce:cd: d9:9a:16:2a:18:68:57:5a:39:fa:f1:6b:61:2e:9f:67:54:ea: 71:10:fb:a2:6f:34:a9:50:cb:46:ce:88:31:22:e7:99:31:fc: a3:49:40:1f:5e:83:af:7e:bf:39:ad:84:e8:92:e6:80:a0:1c: a4:0e:32:e4:2d:92:5b:9c:19:b2:78:d1:e7:4d:81:6b:f8:e8: 55:c8:9e:4c:03:51:3c:9f:16:ff:f6:e0:f1:61:f4:4e:df:a5: bc:22:42:0a:f0:d0:99:9a:6b:ce:c6:3b:34:bd:f4:e7:7b:77: cc:6d:fc:dc:30:38:79:d6:db:cf:f3:94:81:91:60:2d:a7:98: 1a:0e:5b:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUffQYE3SoyB0Nn6yO+k18+ERm6ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA1MTMwODU2MDNaFw0yNjA1MTQwOTE3MDNaMDMxMTAvBgNV BAMTKEE3MjQ2RDA1OTA0NDk3QjdEQjVBMDhBM0Y3REMyN0E5REYzQ0E2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1SkFBYK/r5mr1ZEb1r4Yed72 DAPf0kU/IrHIqiQy8dfzYbVi+HYDdYQjs3Cq0zAEGS1/Nj5RoiJVsVg094RJqGN/ Skz1fCIax0pzn5hFq4BMS9IDFxACR9LUjIjH3lC2j6aq1HPTa95+yPTtxh1jTSnX 1vDqxBBBZulJIEF3qeHsWwZdbLg8FUHcVV/8s8UesBoiAmvHK5YJT6z54gfvA45S OcPks89oQuVy6AmsEQhbmHWxvVugs9102fbHDm9lj6AbFK/klpOZmX0U+kBV5WP/ HuL7iodhTamfj/PhCAvcBpisD6uyb3hnrv451eArF0Xklj1emsVykq74IvtbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpyRtBZBEl7fbWgij99wnqd88poEwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsq7AUp7V6QJ 6kB1eW8cMfzYqAschs/4R6XOYt/Ns+CxOiyyOBTeIe0i1dg9N7/cUPgihFPrHgZ6 FOxZkXRjm4CZTdBNSHG5mAN09kN/oG/t2E2TZFhIaSPKmp0CxYjpGH4ijlMh9qkw A8Iz/DYNPIIxuLVcvOvbgW3a1c7N2ZoWKhhoV1o5+vFrYS6fZ1TqcRD7om80qVDL Rs6IMSLnmTH8o0lAH16Dr36/Oa2E6JLmgKAcpA4y5C2SW5wZsnjR502Ba/joVcie TANRPJ8W//bg8WH0Tt+lvCJCCvDQmZprzsY7NL3053t3zG383DA4edbbz/OUgZFg LaeYGg5brQ== -----END CERTIFICATE-----Generated at Wed May 13 17:34:39 2026 by rpki-client