$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: EvbFLj4Bbp3ZQYfwqQlXCkidwVuC2/ezMPHO/GN+wXU= Subject key identifier: D7:95:AB:6B:D0:3F:0B:C0:D7:80:52:5A:30:3E:25:80:73:CD:DF:5D Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 0E818F1B600310CF0FCBA4EC85C3D1EA46F9D79E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: 98 Signing time: Wed 13 May 2026 03:10:54 +0000 Manifest this update: Wed 13 May 2026 03:05:54 +0000 Manifest next update: Thu 14 May 2026 05:22:54 +0000 Files and hashes: 1: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: psepfllNu+6M+P30CRWloKk02+9pg87KWh/MYLAluxQ=) 2: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:81:8f:1b:60:03:10:cf:0f:cb:a4:ec:85:c3:d1:ea:46:f9:d7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: May 13 03:05:54 2026 GMT Not After : May 14 05:22:54 2026 GMT Subject: CN=D795AB6BD03F0BC0D780525A303E258073CDDF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:67:19:e3:87:c7:2e:3a:35:54:72:02:80: 3a:84:ff:cf:37:f9:38:26:46:83:ae:84:c5:bd:80: d2:93:23:f4:27:a2:24:a9:7a:78:75:85:1f:1e:c3: a7:b4:86:71:61:24:ed:cc:06:53:5f:49:6c:37:24: 09:3c:e2:83:79:f8:2a:94:97:13:0a:f9:b9:71:0a: 62:5f:fe:53:75:0a:96:d7:fd:22:b1:d3:2e:18:60: 92:32:12:a1:36:67:52:cb:78:ea:a0:f7:b5:cf:5d: a1:cb:31:3b:38:11:b2:07:b3:0f:61:68:b3:61:37: 4f:72:35:d3:92:27:57:3c:67:ae:fb:97:f3:ae:1b: c6:30:d7:79:6e:7a:c1:03:d8:86:9d:b5:45:f0:68: f4:68:10:cf:1f:8d:fd:20:a4:06:42:d8:9c:63:5e: 5a:e7:3d:d6:9e:65:29:35:1e:9a:24:2a:7d:f6:3a: a8:5d:ed:c2:6e:89:2d:b7:b6:68:04:22:60:bf:ad: 7b:fa:b6:78:3c:53:15:13:4a:f6:fe:9b:e5:c0:c4: 68:06:85:d6:e5:ce:11:e2:a3:73:69:87:20:ea:49: 8e:d1:d1:46:cc:43:b7:ef:38:7b:bb:24:ba:5d:6a: c5:b0:c2:1f:12:b9:f9:87:7a:a1:3b:b6:da:3f:cf: dd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:95:AB:6B:D0:3F:0B:C0:D7:80:52:5A:30:3E:25:80:73:CD:DF:5D X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:0b:0f:3a:cf:f2:25:05:0e:ea:20:37:e1:49:db:c0:c9:24: 18:93:1c:22:f8:af:b7:54:72:8d:0c:73:e3:86:4c:30:e0:39: 92:a2:15:2b:5a:dc:e7:24:78:49:98:8f:9f:2f:23:1e:ac:30: 9c:12:b8:e4:2e:b8:8a:38:36:72:ff:0d:ab:ff:d2:a4:1d:46: e7:9f:68:e0:3b:4b:6e:09:59:67:97:e4:ab:62:a7:06:8c:5f: 53:1a:63:ce:83:d9:d7:8c:60:22:11:1d:8f:7d:15:86:e8:f0: e3:5d:81:ed:09:57:c4:9e:28:e5:94:4e:74:a7:6f:2c:df:a9: 20:0d:f8:6d:ab:0d:4a:ab:ab:8d:19:c9:f7:8f:b1:e5:9b:16: 03:63:6a:0a:b6:ba:b3:18:0f:71:c9:b9:c8:b0:d2:8c:9f:3e: 0c:ad:77:5f:31:d6:31:f8:25:26:9d:67:7c:b7:b0:6f:14:32: 80:79:8f:06:23:ce:5b:d9:f6:e0:f8:4b:5b:ac:00:49:0d:ab: e1:41:3f:64:80:21:16:61:39:53:a5:de:55:8b:9f:1a:ee:2c: 4f:19:3f:a3:ac:d5:98:fe:51:1d:a5:a9:92:02:e4:17:18:92: 17:32:ee:45:e8:e5:53:0e:79:8b:cc:8b:c1:e6:87:5b:3a:30: c0:4e:a0:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDoGPG2ADEM8Py6TshcPR6kb5154wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjA1MTMwMzA1NTRaFw0yNjA1MTQwNTIyNTRaMDMxMTAvBgNV BAMTKEQ3OTVBQjZCRDAzRjBCQzBENzgwNTI1QTMwM0UyNTgwNzNDRERGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGmcZ44fHLjo1VHICgDqE/883 +TgmRoOuhMW9gNKTI/QnoiSpenh1hR8ew6e0hnFhJO3MBlNfSWw3JAk84oN5+CqU lxMK+blxCmJf/lN1CpbX/SKx0y4YYJIyEqE2Z1LLeOqg97XPXaHLMTs4EbIHsw9h aLNhN09yNdOSJ1c8Z677l/OuG8Yw13luesED2IadtUXwaPRoEM8fjf0gpAZC2Jxj XlrnPdaeZSk1HpokKn32Oqhd7cJuiS23tmgEImC/rXv6tng8UxUTSvb+m+XAxGgG hdblzhHio3NphyDqSY7R0UbMQ7fvOHu7JLpdasWwwh8SufmHeqE7tto/z91xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU15Wra9A/C8DXgFJaMD4lgHPN310wHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzAsPOs/yJQUO 6iA34UnbwMkkGJMcIvivt1RyjQxz44ZMMOA5kqIVK1rc5yR4SZiPny8jHqwwnBK4 5C64ijg2cv8Nq//SpB1G559o4DtLbglZZ5fkq2KnBoxfUxpjzoPZ14xgIhEdj30V hujw412B7QlXxJ4o5ZROdKdvLN+pIA34basNSqurjRnJ94+x5ZsWA2NqCra6sxgP ccm5yLDSjJ8+DK13XzHWMfglJp1nfLewbxQygHmPBiPOW9n24PhLW6wASQ2r4UE/ ZIAhFmE5U6XeVYufGu4sTxk/o6zVmP5RHaWpkgLkFxiSFzLuRejlUw55i8yLweaH WzowwE6gKQ== -----END CERTIFICATE-----Generated at Wed May 13 19:42:52 2026 by rpki-client