$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: JpyDuWh/k3kjQZRgc7aeqf5OmQ0lLCHX8gWL6GhYg4w= Subject key identifier: 93:78:80:52:A1:44:E8:54:44:90:AF:42:8D:45:D1:A8:B0:3F:0E:7D Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 0FEF0DA0BC1C5B63247DC9C86F392ADA3EBB03A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: 9B Signing time: Wed 13 May 2026 12:41:04 +0000 Manifest this update: Wed 13 May 2026 12:36:04 +0000 Manifest next update: Thu 14 May 2026 15:15:04 +0000 Files and hashes: 1: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (hash: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=) 2: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: 0wM7UdYEVJglQ6ooXep9gYNQnCAbFfR4qeuQhbto8kY=) 3: 3133382e3235322e37322e302f32342d3234203d3e20313337373331.roa (hash: UQKPf2S3sGHCJlse2YLd/IC42+k7YICa9NGSQPIobpw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ef:0d:a0:bc:1c:5b:63:24:7d:c9:c8:6f:39:2a:da:3e:bb:03:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: May 13 12:36:04 2026 GMT Not After : May 14 15:15:04 2026 GMT Subject: CN=93788052A144E8544490AF428D45D1A8B03F0E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:24:18:b2:93:e3:60:56:fb:c0:79:91:df: d0:ab:4a:40:f7:bf:b2:57:e2:dd:41:70:94:7a:25: c2:dc:7c:d8:79:96:66:63:70:fc:a3:42:a2:9f:70: 99:fb:b3:fb:72:d3:2c:8e:50:77:15:29:11:b9:4e: 94:c0:f9:7b:95:aa:27:ea:00:0a:ac:8d:fc:70:fe: a1:6a:e5:60:1d:c1:76:94:05:5a:cd:70:d2:43:d4: 3f:e8:b3:80:21:51:d4:3c:8f:d7:e9:49:4a:47:de: 1a:28:48:05:1a:72:54:aa:e8:42:db:18:11:8b:1c: 8a:1f:46:92:64:d5:c8:01:09:62:53:67:78:3b:15: ae:e5:91:81:29:4d:14:db:29:69:c6:50:42:9a:d6: c5:39:5b:51:60:85:63:0b:11:c5:25:c7:63:a0:44: f8:aa:53:e0:26:76:f4:76:4b:37:2f:16:bc:34:80: cc:42:d7:a9:3f:04:b7:67:20:d8:ea:fe:31:92:30: 4a:60:d7:ec:d3:c5:e8:c1:60:19:eb:c5:2c:3c:2c: d6:54:34:63:60:69:d7:a0:33:fe:7e:33:67:bf:b5: 6b:b3:a5:1a:8d:2b:3d:9f:53:0c:ac:07:7c:fc:76: a5:a9:84:35:58:7c:69:bf:49:8b:f1:ad:53:ae:95: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:78:80:52:A1:44:E8:54:44:90:AF:42:8D:45:D1:A8:B0:3F:0E:7D X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1a:e3:63:0c:e2:dc:fd:93:a6:ed:10:22:57:00:40:3c:3f: ff:67:6e:f1:d6:9c:36:78:31:9a:e9:df:b6:43:1b:7b:ce:a6: 0d:5e:f5:db:15:37:ee:74:7c:d2:b7:50:e8:78:13:34:d8:75: 3e:ba:1f:00:ca:d2:d0:8a:a1:2a:b9:15:16:c8:31:dc:03:2c: 8b:b9:7e:21:c5:89:15:0a:ab:dc:fd:1d:53:d4:d7:8a:5e:ea: c2:03:90:d6:ad:b3:47:f7:e3:1c:aa:d4:5d:f3:85:86:db:9a: a7:69:f6:f1:96:76:aa:76:1a:fd:c0:db:27:65:ed:21:1f:d1: 75:e2:9b:a4:13:67:97:1d:b1:c9:88:b4:d4:1b:9f:fb:cf:8c: 4d:e2:25:bd:4e:10:48:f2:3a:0d:06:5c:00:2a:72:05:4d:5b: 28:7b:f0:40:d5:f2:fe:ed:80:f3:f7:55:ef:31:df:46:e6:f6: 62:14:06:3a:e4:83:21:2a:f4:8c:6a:b9:d9:13:fb:03:27:4e: 3a:b2:02:8d:b8:01:7d:fb:4c:7b:19:ed:f7:9b:34:b1:5a:7b: 40:47:85:40:ec:63:c0:b2:95:ab:64:9c:b1:99:6e:fd:9a:ea: 47:ff:bd:dd:f6:19:06:2f:22:fc:71:ce:c6:32:ca:f0:04:3c: 1d:b5:e1:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD+8NoLwcW2MkfcnIbzkq2j67A6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjA1MTMxMjM2MDRaFw0yNjA1MTQxNTE1MDRaMDMxMTAvBgNV BAMTKDkzNzg4MDUyQTE0NEU4NTQ0NDkwQUY0MjhENDVEMUE4QjAzRjBFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhCQYspPjYFb7wHmR39CrSkD3 v7JX4t1BcJR6JcLcfNh5lmZjcPyjQqKfcJn7s/ty0yyOUHcVKRG5TpTA+XuVqifq AAqsjfxw/qFq5WAdwXaUBVrNcNJD1D/os4AhUdQ8j9fpSUpH3hooSAUaclSq6ELb GBGLHIofRpJk1cgBCWJTZ3g7Fa7lkYEpTRTbKWnGUEKa1sU5W1FghWMLEcUlx2Og RPiqU+AmdvR2SzcvFrw0gMxC16k/BLdnINjq/jGSMEpg1+zTxejBYBnrxSw8LNZU NGNgadegM/5+M2e/tWuzpRqNKz2fUwysB3z8dqWphDVYfGm/SYvxrVOulTvFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk3iAUqFE6FREkK9CjUXRqLA/Dn0wHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRrjYwzi3P2T pu0QIlcAQDw//2du8dacNngxmunftkMbe86mDV712xU37nR80rdQ6HgTNNh1Prof AMrS0IqhKrkVFsgx3AMsi7l+IcWJFQqr3P0dU9TXil7qwgOQ1q2zR/fjHKrUXfOF htuap2n28ZZ2qnYa/cDbJ2XtIR/RdeKbpBNnlx2xyYi01Buf+8+MTeIlvU4QSPI6 DQZcACpyBU1bKHvwQNXy/u2A8/dV7zHfRub2YhQGOuSDISr0jGq52RP7AydOOrIC jbgBfftMexnt95s0sVp7QEeFQOxjwLKVq2ScsZlu/ZrqR/+93fYZBi8i/HHOxjLK 8AQ8HbXh/A== -----END CERTIFICATE-----Generated at Wed May 13 17:53:17 2026 by rpki-client