$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: dYzYyIxuMBETchXq9nzFME6JpsD2dde+A7xb73nVxlQ= Subject key identifier: 95:90:1C:C2:83:36:7B:C3:94:EC:B3:AF:F5:18:AD:19:FD:44:62:DC Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 59C04FD3F8C7AF139381C6844FB92B6CF4164EB2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: 9A Signing time: Wed 13 May 2026 05:55:59 +0000 Manifest this update: Wed 13 May 2026 05:50:59 +0000 Manifest next update: Thu 14 May 2026 06:29:59 +0000 Files and hashes: 1: 323430323a333465303a3a2f33322d3634203d3e20313337373331.roa (hash: Wbeu0hKMIHoSh2P7VuIFvW2KrEjA7clBu32fGJbvhD0=) 2: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: cO+V3ZTzzGhQzJFe5YuZB/8XOoRm6thGhWh51PK/9+k=) 3: 3130332e36322e38382e302f32342d3234203d3e20313337373331.roa (hash: 8Xb1CHZIDmh88wJbpKG5TbT7TsAK7LQOv8M6QxQppao=) 4: 3130332e36322e38392e302f32342d3234203d3e20313337373331.roa (hash: pM31wts4Oaso1hrJBK0dRasFzd5sL5iB5ioXtCHk96o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c0:4f:d3:f8:c7:af:13:93:81:c6:84:4f:b9:2b:6c:f4:16:4e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: May 13 05:50:59 2026 GMT Not After : May 14 06:29:59 2026 GMT Subject: CN=95901CC283367BC394ECB3AFF518AD19FD4462DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:34:d7:63:92:94:f6:bd:82:b1:57:3e:37: d9:9c:72:6c:ae:dc:ce:89:7d:ab:49:a9:29:92:ed: da:d0:c3:49:be:15:5a:fd:bd:6c:17:2b:cf:43:6e: bc:00:34:f2:24:3f:8f:5c:b3:41:1b:9e:9f:5f:43: e4:45:32:1f:85:26:6d:84:6b:80:a9:c3:e2:62:4d: a2:52:fc:f8:dd:2b:6d:3e:c6:5c:22:05:ee:d8:86: c2:b7:23:f6:67:c0:eb:71:5c:69:11:80:30:04:b1: b6:45:56:4a:39:2c:9e:ce:a3:92:34:c7:63:26:4e: 1b:0e:11:1b:0c:75:4c:a0:b3:13:75:1e:27:42:6c: 2c:41:b9:8c:7e:ea:ec:ae:09:82:a8:a1:a5:ea:42: 93:d7:34:4c:44:64:01:8a:a9:00:e1:43:b7:1b:4d: 31:31:fa:92:47:f5:af:21:40:2e:a8:d2:a9:2f:77: 83:c0:38:0e:81:36:fc:1c:ff:23:49:6e:30:d8:3d: 24:93:ec:c0:22:c0:ad:11:67:ae:42:81:82:55:11: a8:e3:04:fe:83:b3:4b:94:d2:8c:87:e4:3d:cb:bb: 7c:1d:b4:bd:7d:46:f5:5f:5b:16:66:f1:11:11:42: 8b:59:70:a2:b8:ce:a7:58:60:12:6f:da:c6:a6:97: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:90:1C:C2:83:36:7B:C3:94:EC:B3:AF:F5:18:AD:19:FD:44:62:DC X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1b:9c:09:5a:6e:35:15:15:ca:5a:ab:0d:78:78:94:17:c7: 88:a3:33:50:ea:1f:2b:85:78:a9:bb:97:df:a0:7c:af:0f:26: 48:6f:7d:67:b2:62:42:ac:93:f2:e9:4e:48:e2:c3:5d:40:2b: 4a:37:eb:f5:bb:33:e7:02:30:12:89:02:a7:94:ae:ee:d7:df: 69:66:ed:22:be:e6:81:04:18:02:2a:22:ba:6a:72:e3:08:f3: 0b:21:b1:fb:14:0a:c8:c0:69:41:fa:ce:9a:20:54:4f:a3:41: 82:38:e9:e8:14:99:b1:0f:20:a3:8e:74:fb:1a:c3:42:46:f8: 1e:51:b3:2a:2e:ff:35:0f:6f:bb:b1:c4:95:52:35:dd:97:f0: ba:92:dd:8e:d5:8e:fa:4e:a3:63:77:94:ba:b6:cc:0c:26:3f: 3b:aa:5b:7c:a3:4e:ef:60:2e:30:72:5e:c8:9e:e5:be:4f:6f: 99:10:ef:7a:e5:c9:5d:01:c6:65:92:5d:28:8e:74:16:a1:3e: 88:9b:7c:83:32:d5:c3:c4:c1:70:02:2d:19:4e:a2:73:9c:68: f5:32:05:af:59:9f:97:75:67:9f:d6:9c:fe:a6:ed:73:76:c5: 57:93:b3:24:ed:70:d0:d3:7d:eb:14:4c:6a:2b:08:6d:e8:44: 1b:c6:07:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWcBP0/jHrxOTgcaET7krbPQWTrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjA1MTMwNTUwNTlaFw0yNjA1MTQwNjI5NTlaMDMxMTAvBgNV BAMTKDk1OTAxQ0MyODMzNjdCQzM5NEVDQjNBRkY1MThBRDE5RkQ0NDYyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYzTXY5KU9r2CsVc+N9mccmyu 3M6JfatJqSmS7drQw0m+FVr9vWwXK89DbrwANPIkP49cs0Ebnp9fQ+RFMh+FJm2E a4Cpw+JiTaJS/PjdK20+xlwiBe7YhsK3I/ZnwOtxXGkRgDAEsbZFVko5LJ7Oo5I0 x2MmThsOERsMdUygsxN1HidCbCxBuYx+6uyuCYKooaXqQpPXNExEZAGKqQDhQ7cb TTEx+pJH9a8hQC6o0qkvd4PAOA6BNvwc/yNJbjDYPSST7MAiwK0RZ65CgYJVEajj BP6Ds0uU0oyH5D3Lu3wdtL19RvVfWxZm8RERQotZcKK4zqdYYBJv2saml+evAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlZAcwoM2e8OU7LOv9RitGf1EYtwwHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxucCVpuNRUV ylqrDXh4lBfHiKMzUOofK4V4qbuX36B8rw8mSG99Z7JiQqyT8ulOSOLDXUArSjfr 9bsz5wIwEokCp5Su7tffaWbtIr7mgQQYAioiumpy4wjzCyGx+xQKyMBpQfrOmiBU T6NBgjjp6BSZsQ8go450+xrDQkb4HlGzKi7/NQ9vu7HElVI13ZfwupLdjtWO+k6j Y3eUurbMDCY/O6pbfKNO72AuMHJeyJ7lvk9vmRDveuXJXQHGZZJdKI50FqE+iJt8 gzLVw8TBcAItGU6ic5xo9TIFr1mfl3Vnn9ac/qbtc3bFV5OzJO1w0NN96xRMaisI behEG8YHgw== -----END CERTIFICATE-----Generated at Wed May 13 19:42:49 2026 by rpki-client