$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: +hKzT5wuj+JfIFBE8qSGgCKE78FeJy3YH9w0kRQ/6kk= Subject key identifier: 00:85:F0:1E:E1:A4:0B:8B:59:69:87:D6:C9:05:87:B1:9C:35:73:EA Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 6B2EDA016D76F216B2F78A6A6E6235DAA1FBA345 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 98 Signing time: Wed 13 May 2026 00:20:49 +0000 Manifest this update: Wed 13 May 2026 00:15:49 +0000 Manifest next update: Thu 14 May 2026 03:34:49 +0000 Files and hashes: 1: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 2: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: MZ1uQhufrDIdYS6V12mVhe9/r2oy1zvudui8ab60zUY=) 3: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2e:da:01:6d:76:f2:16:b2:f7:8a:6a:6e:62:35:da:a1:fb:a3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: May 13 00:15:49 2026 GMT Not After : May 14 03:34:49 2026 GMT Subject: CN=0085F01EE1A40B8B596987D6C90587B19C3573EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:78:08:91:c6:de:db:ec:29:6e:e4:de:27: a2:df:99:39:97:93:86:4e:2e:68:f5:60:a0:68:d3: 7d:0c:1f:41:f5:27:31:64:f3:71:02:aa:28:6d:81: 24:02:69:79:b2:b6:61:be:3b:b9:7a:00:a2:d3:8b: 81:b6:48:86:27:cf:ee:3c:1d:59:df:f7:35:41:fb: cc:05:74:5d:88:1e:fc:9c:60:c7:21:1c:81:e9:31: d7:e6:b4:42:1d:4f:f9:a6:94:30:2b:6f:a1:f8:c1: 5f:6e:de:55:f8:4a:7d:8a:64:0b:f9:be:9e:90:a0: 24:71:ae:80:b7:e9:3e:42:79:f5:c6:65:94:3e:7c: bd:11:cf:62:c4:f6:ea:8c:7b:be:27:ce:15:5d:be: b8:9d:54:93:d9:62:6b:63:4a:24:fa:67:86:07:bb: 05:c4:01:5c:d8:cb:1c:88:88:18:99:3c:24:15:08: 05:00:7e:b2:99:c4:f5:67:41:66:01:db:96:e3:86: cb:dc:a2:07:a6:f2:0d:cf:9e:5b:c3:b0:9e:48:7c: 86:f5:a4:d2:54:52:0e:cc:ce:28:25:95:93:99:cc: 24:cf:30:fa:fa:ae:1d:62:0f:5e:97:3c:67:60:ea: 96:ba:11:ee:da:a0:b2:a8:64:d5:3e:65:cc:f9:ae: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:85:F0:1E:E1:A4:0B:8B:59:69:87:D6:C9:05:87:B1:9C:35:73:EA X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d7:d5:7a:d3:77:e1:ae:67:9f:49:76:26:a2:a2:1c:78:78: d9:88:87:42:12:0c:a5:2e:d3:a0:45:ff:69:a8:38:18:43:f6: 21:76:c0:9b:db:53:20:d8:57:e3:4f:06:e3:20:e9:ff:f7:3e: 73:cc:ce:1d:fe:2e:fa:1c:c2:df:2c:04:e1:fd:03:d7:01:7c: 3a:73:94:ad:6f:49:b8:a5:de:c9:0d:e7:47:70:fc:01:61:81: 94:e9:99:12:11:36:cf:3f:1a:00:8a:05:fd:3b:92:80:09:1c: 0f:1b:e7:51:93:e5:aa:c6:e1:7a:d6:67:e7:dd:8b:44:bb:af: 7a:a8:20:86:41:17:a5:51:bf:b9:2b:10:70:97:51:7c:b9:d8: 05:9d:27:a0:b1:31:26:53:f3:71:30:10:8f:07:20:dc:f6:5e: 77:c8:0d:63:f7:32:fc:8b:72:03:52:2c:b0:00:3c:20:bd:4e: d2:7c:f7:20:7f:ac:d0:26:f8:bd:bd:3c:7c:99:2a:7f:7e:43: 24:1f:0b:cf:0e:fd:46:3a:72:77:c4:29:4a:ff:fb:b3:55:59: 17:7b:17:27:f3:46:39:38:0f:d1:b4:a0:b8:0f:7a:b0:41:fa: fe:56:46:f6:61:f7:57:3a:2f:39:6c:3d:74:c2:14:84:11:84: 97:0a:b8:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUay7aAW128hay94pqbmI12qH7o0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjA1MTMwMDE1NDlaFw0yNjA1MTQwMzM0NDlaMDMxMTAvBgNV BAMTKDAwODVGMDFFRTFBNDBCOEI1OTY5ODdENkM5MDU4N0IxOUMzNTczRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9ngIkcbe2+wpbuTeJ6LfmTmX k4ZOLmj1YKBo030MH0H1JzFk83ECqihtgSQCaXmytmG+O7l6AKLTi4G2SIYnz+48 HVnf9zVB+8wFdF2IHvycYMchHIHpMdfmtEIdT/mmlDArb6H4wV9u3lX4Sn2KZAv5 vp6QoCRxroC36T5CefXGZZQ+fL0Rz2LE9uqMe74nzhVdvridVJPZYmtjSiT6Z4YH uwXEAVzYyxyIiBiZPCQVCAUAfrKZxPVnQWYB25bjhsvcogem8g3PnlvDsJ5IfIb1 pNJUUg7MzigllZOZzCTPMPr6rh1iD16XPGdg6pa6Ee7aoLKoZNU+Zcz5rmz/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAIXwHuGkC4tZaYfWyQWHsZw1c+owHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9fVetN34a5n n0l2JqKiHHh42YiHQhIMpS7ToEX/aag4GEP2IXbAm9tTINhX408G4yDp//c+c8zO Hf4u+hzC3ywE4f0D1wF8OnOUrW9JuKXeyQ3nR3D8AWGBlOmZEhE2zz8aAIoF/TuS gAkcDxvnUZPlqsbhetZn592LRLuveqgghkEXpVG/uSsQcJdRfLnYBZ0noLExJlPz cTAQjwcg3PZed8gNY/cy/ItyA1IssAA8IL1O0nz3IH+s0Cb4vb08fJkqf35DJB8L zw79Rjpyd8QpSv/7s1VZF3sXJ/NGOTgP0bSguA96sEH6/lZG9mH3VzovOWw9dMIU hBGElwq4vQ== -----END CERTIFICATE-----Generated at Wed May 13 14:06:22 2026 by rpki-client