$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: Tc8RK3zz+vAJbz0OqTvL5gktB/9XMPm9JTei7dt//YE= Subject key identifier: 30:38:03:95:8B:13:F9:5C:97:D5:4F:91:15:5D:5C:FC:7F:92:CB:55 Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 1D8DEC983A6D70E3859E00B2B1358204AA61F5ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 98 Signing time: Tue 12 May 2026 20:55:45 +0000 Manifest this update: Tue 12 May 2026 20:50:45 +0000 Manifest next update: Thu 14 May 2026 00:23:45 +0000 Files and hashes: 1: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 2: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: Y0NW8l4QFeM4XldKDW43ZyT28teSooLaDuJoUirvoAM=) 3: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8d:ec:98:3a:6d:70:e3:85:9e:00:b2:b1:35:82:04:aa:61:f5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: May 12 20:50:45 2026 GMT Not After : May 14 00:23:45 2026 GMT Subject: CN=303803958B13F95C97D54F91155D5CFC7F92CB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2a:22:c5:3d:82:b2:81:3a:5a:8d:9d:92:59: 47:14:76:94:04:13:1d:34:f0:6c:6f:3e:1c:c3:1e: 7a:e3:5f:b9:11:5c:a5:ed:86:8b:8e:ef:57:0c:fa: 79:b0:a4:e1:5f:25:a5:1c:42:0b:2c:c8:56:dc:20: 28:46:bd:4a:3e:d4:4c:0c:d7:15:e6:00:da:29:6a: 4d:13:eb:b9:45:4c:e1:9d:6c:12:8c:00:0b:61:d5: 95:50:3c:64:35:76:b6:65:19:e4:03:89:97:18:61: e3:5d:6d:9e:8f:d4:76:62:9e:0d:95:fc:d2:28:b2: 16:91:14:5e:d2:f9:f4:1a:ae:9d:51:f3:c1:b9:98: 03:87:51:57:d8:8f:85:36:8b:ae:4b:b9:84:c3:6d: 0d:ac:3f:07:15:1c:5d:80:20:66:3a:cf:65:91:04: 9d:00:33:ac:42:90:69:20:46:08:b7:12:72:e6:2c: d3:21:11:f3:6d:7c:81:c4:68:93:10:2e:ba:93:32: 18:0d:86:38:e3:41:60:84:1d:aa:83:87:d8:6a:d2: 46:da:1b:a5:09:17:ab:53:27:33:95:ae:cd:33:4a: 15:5b:5d:ad:d4:8b:51:a2:f5:e9:27:a0:54:50:58: cf:40:47:d6:ee:b6:5f:34:b1:5a:f1:5a:da:73:2a: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:38:03:95:8B:13:F9:5C:97:D5:4F:91:15:5D:5C:FC:7F:92:CB:55 X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:5f:11:03:67:21:e6:1b:58:db:bc:d8:12:0b:eb:1b:03:72: 7b:0c:f6:53:c5:a6:65:87:f6:38:5f:99:50:1f:12:21:a1:31: e4:e1:64:f3:fc:87:47:6d:28:32:59:64:13:2c:0e:fb:8f:a1: 01:1d:f6:ff:f6:ff:3d:d7:79:d0:01:3c:15:d8:f9:40:43:54: 1e:16:00:6a:4e:96:64:fa:29:16:8a:45:7b:75:80:57:1a:02: 0d:49:95:c8:9e:01:6d:9a:65:bf:e7:d4:d9:c6:e0:49:6c:8c: a5:5f:62:db:b4:20:7b:98:9a:7d:0a:10:d8:97:f4:3b:8a:45: d0:7d:6d:e6:30:b1:14:9b:e4:57:9a:d6:f0:bb:c4:5b:5d:48: 94:69:df:61:2d:31:4b:7f:cb:9c:6c:6a:83:49:ce:ef:a6:20: 07:94:9b:49:6d:44:94:30:04:22:6c:9c:75:c8:d6:4c:e5:0c: 17:9e:5f:c6:0d:7e:30:5c:29:dc:f2:d1:49:ad:5c:8d:87:25: 20:ce:bb:74:6a:31:6d:5e:c6:6c:7f:49:33:56:d4:cc:6b:c9: de:c9:c2:db:08:61:da:66:b7:56:c9:ea:53:7a:af:ef:b4:78: aa:5e:d2:c8:13:08:4c:d9:c7:e4:3a:9e:32:ea:57:e5:74:05: fb:c6:89:0f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHY3smDptcOOFngCysTWCBKph9e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjA1MTIyMDUwNDVaFw0yNjA1MTQwMDIzNDVaMDMxMTAvBgNV BAMTKDMwMzgwMzk1OEIxM0Y5NUM5N0Q1NEY5MTE1NUQ1Q0ZDN0Y5MkNCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUKiLFPYKygTpajZ2SWUcUdpQE Ex008GxvPhzDHnrjX7kRXKXthouO71cM+nmwpOFfJaUcQgssyFbcIChGvUo+1EwM 1xXmANopak0T67lFTOGdbBKMAAth1ZVQPGQ1drZlGeQDiZcYYeNdbZ6P1HZing2V /NIoshaRFF7S+fQarp1R88G5mAOHUVfYj4U2i65LuYTDbQ2sPwcVHF2AIGY6z2WR BJ0AM6xCkGkgRgi3EnLmLNMhEfNtfIHEaJMQLrqTMhgNhjjjQWCEHaqDh9hq0kba G6UJF6tTJzOVrs0zShVbXa3Ui1Gi9eknoFRQWM9AR9butl80sVrxWtpzKsndAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMDgDlYsT+VyX1U+RFV1c/H+Sy1UwHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR18RA2ch5htY 27zYEgvrGwNyewz2U8WmZYf2OF+ZUB8SIaEx5OFk8/yHR20oMllkEywO+4+hAR32 //b/Pdd50AE8Fdj5QENUHhYAak6WZPopFopFe3WAVxoCDUmVyJ4BbZplv+fU2cbg SWyMpV9i27Qge5iafQoQ2Jf0O4pF0H1t5jCxFJvkV5rW8LvEW11IlGnfYS0xS3/L nGxqg0nO76YgB5SbSW1ElDAEImycdcjWTOUMF55fxg1+MFwp3PLRSa1cjYclIM67 dGoxbV7GbH9JM1bUzGvJ3snC2whh2ma3VsnqU3qv77R4ql7SyBMITNnH5DqeMupX 5XQF+8aJDw== -----END CERTIFICATE-----Generated at Wed May 13 17:13:00 2026 by rpki-client