$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: j7U6gGHlghOJUcwkPxKaalPQbxMXAUiAwnaFkuQno/U= Subject key identifier: BB:F2:39:19:3E:D0:25:D0:7A:BE:91:7D:A1:79:A4:AA:60:31:32:7F Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 7E33F6EDC4BE6D7732BE63DC61E715EFB1D5024F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: 99 Signing time: Wed 13 May 2026 05:45:58 +0000 Manifest this update: Wed 13 May 2026 05:40:58 +0000 Manifest next update: Thu 14 May 2026 07:40:58 +0000 Files and hashes: 1: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: 5m00ckwob4pjTcGnUDfNzdZ8LI1ZxQXzU4ufm3jcd3A=) 2: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) 3: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:33:f6:ed:c4:be:6d:77:32:be:63:dc:61:e7:15:ef:b1:d5:02:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: May 13 05:40:58 2026 GMT Not After : May 14 07:40:58 2026 GMT Subject: CN=BBF239193ED025D07ABE917DA179A4AA6031327F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:1f:c0:48:1c:bf:59:87:4f:22:f8:33:b3: 6b:6f:2d:4f:0b:f8:7d:d4:8f:2b:b8:c6:f6:a4:e1: 99:2c:7e:c4:d8:37:69:7d:0f:17:9f:7b:e7:94:02: fb:57:78:d7:fe:34:f5:22:07:de:4a:8f:b4:e2:af: fe:be:86:6b:36:85:59:e7:1c:cc:e7:6e:fc:c2:06: da:36:24:f3:9b:03:d5:c0:0a:69:00:c4:85:24:f7: e4:2d:d7:a3:c4:98:6c:01:f4:2f:e8:c6:15:a5:54: 76:12:cb:3f:ea:4f:a0:e5:21:8d:8d:2a:86:13:22: 26:36:b9:f7:07:64:61:50:bd:40:b6:09:d8:52:2b: e2:af:6d:77:0a:27:fb:9b:cc:1a:e4:92:80:6d:26: c7:aa:4d:6e:1f:c4:d8:37:e5:8c:01:a1:66:c2:cd: f5:24:20:fc:bf:05:32:9e:fb:d2:fb:de:1d:ea:88: ab:fe:3a:e5:18:bd:51:e1:d5:7d:d7:ed:e1:33:1b: a4:4e:1a:a5:04:15:38:29:3a:b7:e1:2b:a9:d5:3b: 78:67:1f:ea:0d:0a:cd:6d:c4:d3:b0:8d:1e:e2:0f: cc:b1:5a:f6:92:50:60:d1:46:6e:a6:9e:72:66:9f: 55:09:22:f1:22:6c:41:35:a4:6f:9b:1d:34:be:5c: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F2:39:19:3E:D0:25:D0:7A:BE:91:7D:A1:79:A4:AA:60:31:32:7F X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e7:bf:af:94:cd:46:1f:51:91:b2:96:62:a8:1c:de:69:89: 45:ac:dd:2f:74:9e:5e:08:20:6b:c2:e8:a8:60:0c:75:5c:6d: 37:f9:ee:c8:f8:ca:35:67:3f:d3:35:f8:87:63:b8:a2:59:dc: b2:d5:2e:e2:93:14:7a:c8:00:ab:5f:78:b7:fa:7f:9d:4f:9f: cc:6a:b9:e6:d2:7a:a7:67:d5:38:62:0e:dc:ff:80:87:5c:e5: d6:c5:7a:fc:a0:0f:74:04:69:3c:c1:82:cd:a2:4e:d3:f6:0f: 8c:9c:14:fb:6a:d8:7c:e9:2d:9f:c9:50:eb:7b:f4:1e:6b:9e: 16:9a:6e:56:ea:21:62:1b:cb:49:59:c5:84:d3:bc:4a:5b:2c: 62:6a:31:11:5f:7a:92:7a:8b:b0:c5:b8:93:fc:57:b7:9c:12: 8a:da:0f:ed:b3:5a:1a:ae:7b:d0:6a:fa:cb:97:a0:b1:75:a0: eb:09:2a:e3:93:ce:3a:3a:b9:dc:4e:95:4d:a1:b3:00:15:20: 45:56:1f:3e:b4:a8:34:e2:d5:81:6b:d6:f7:c6:9a:44:8e:e0: b6:16:9f:73:f9:2e:6a:23:a4:91:31:ff:05:e8:29:df:e8:28: 8b:9a:1d:0e:b8:fd:eb:90:26:30:56:c7:d7:38:a8:d2:5c:98: e5:96:58:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfjP27cS+bXcyvmPcYecV77HVAk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjA1MTMwNTQwNThaFw0yNjA1MTQwNzQwNThaMDMxMTAvBgNV BAMTKEJCRjIzOTE5M0VEMDI1RDA3QUJFOTE3REExNzlBNEFBNjAzMTMyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4x/ASBy/WYdPIvgzs2tvLU8L +H3Ujyu4xvak4ZksfsTYN2l9Dxefe+eUAvtXeNf+NPUiB95Kj7Tir/6+hms2hVnn HMznbvzCBto2JPObA9XACmkAxIUk9+Qt16PEmGwB9C/oxhWlVHYSyz/qT6DlIY2N KoYTIiY2ufcHZGFQvUC2CdhSK+KvbXcKJ/ubzBrkkoBtJseqTW4fxNg35YwBoWbC zfUkIPy/BTKe+9L73h3qiKv+OuUYvVHh1X3X7eEzG6ROGqUEFTgpOrfhK6nVO3hn H+oNCs1txNOwjR7iD8yxWvaSUGDRRm6mnnJmn1UJIvEibEE1pG+bHTS+XHg5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu/I5GT7QJdB6vpF9oXmkqmAxMn8wHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOe/r5TNRh9R kbKWYqgc3mmJRazdL3SeXggga8LoqGAMdVxtN/nuyPjKNWc/0zX4h2O4olncstUu 4pMUesgAq194t/p/nU+fzGq55tJ6p2fVOGIO3P+Ah1zl1sV6/KAPdARpPMGCzaJO 0/YPjJwU+2rYfOktn8lQ63v0HmueFppuVuohYhvLSVnFhNO8SlssYmoxEV96knqL sMW4k/xXt5wSitoP7bNaGq570Gr6y5egsXWg6wkq45POOjq53E6VTaGzABUgRVYf PrSoNOLVgWvW98aaRI7gthafc/kuaiOkkTH/Begp3+goi5odDrj965AmMFbH1zio 0lyY5ZZYfw== -----END CERTIFICATE-----Generated at Wed May 13 15:10:53 2026 by rpki-client