$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: iAdeMxmmDrhgTo+A7d2lDYRun+BxPpva843UsdWHc4E= Subject key identifier: 89:8C:DC:0F:42:67:E3:31:83:6E:B7:0E:80:80:B2:C9:3D:0C:B5:FC Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 658F478FACA76802E9558253D77C54E9DAA3886C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 98 Signing time: Wed 13 May 2026 08:16:02 +0000 Manifest this update: Wed 13 May 2026 08:11:02 +0000 Manifest next update: Thu 14 May 2026 10:00:02 +0000 Files and hashes: 1: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) 2: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 3: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: Q9s3b5uy5S0KelHIqbxoW5hQCzBGBsI5Q/PPEkoQnvw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8f:47:8f:ac:a7:68:02:e9:55:82:53:d7:7c:54:e9:da:a3:88:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: May 13 08:11:02 2026 GMT Not After : May 14 10:00:02 2026 GMT Subject: CN=898CDC0F4267E331836EB70E8080B2C93D0CB5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:50:77:44:ff:e5:ae:19:33:13:24:a8:aa: 8d:5a:9e:2f:d3:86:17:e9:48:84:23:ab:24:29:e3: f6:c9:48:b6:a1:5a:87:fc:4c:0c:dc:9d:44:ac:a2: 7a:c5:d9:cc:ee:ca:ff:18:10:2f:a2:5d:c6:41:fa: 4e:4b:bc:fc:56:60:7b:0a:14:dd:47:d6:d0:55:fb: db:47:f3:34:9b:e7:f9:05:c9:18:7a:bb:28:ac:de: d6:3b:fa:08:61:b7:ad:bb:c9:25:1f:42:e9:f6:b5: 38:75:c0:7e:21:63:fd:58:9b:15:8c:8d:30:b3:d8: 21:cc:97:af:64:bf:cc:86:f6:64:a3:8f:db:ee:2c: a2:9c:ec:56:85:66:3d:a9:30:e9:5b:35:a3:ed:f5: be:1d:37:27:c6:31:21:80:ef:e3:51:ce:ef:d7:f0: cd:c1:63:b4:82:34:f1:c7:ab:09:6d:2a:ec:bb:3d: 4b:e8:52:1f:ae:32:0c:e7:b8:33:33:d0:41:df:e1: c8:d2:2a:de:ee:ee:45:7c:44:45:14:5d:5d:35:b9: 20:4a:80:e4:5e:1e:19:27:78:8e:8f:d7:fc:12:87: 1c:ae:d0:4b:7c:55:0a:cc:72:f5:ac:e1:37:98:7f: c3:e9:8e:53:83:a3:3e:6e:43:ac:8d:0e:22:15:98: ab:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8C:DC:0F:42:67:E3:31:83:6E:B7:0E:80:80:B2:C9:3D:0C:B5:FC X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:12:a8:c2:0b:5b:d0:cf:f9:0a:6b:43:8a:31:4c:fa:9a:ec: 37:69:82:fd:a8:c8:3e:af:e0:c5:a8:97:f1:c1:f8:6b:be:fd: 20:84:ac:31:1a:08:fb:71:a1:29:12:a1:04:4c:4a:a4:5a:a0: b9:9c:23:ed:45:a7:a1:88:18:70:61:b8:59:9d:96:3b:89:ca: 22:75:21:74:ca:08:dc:6e:bd:c0:86:30:db:48:a9:a3:e1:e5: 7d:0c:02:2d:29:d4:75:66:1b:53:6d:f8:7e:fc:10:1e:95:41: 31:6e:70:05:97:28:f6:3d:3e:b1:25:2e:ae:04:60:6b:2d:1e: dd:1d:20:52:f6:9f:4f:5b:23:92:e3:96:5c:c3:7e:b3:c2:b1: 6b:11:7f:af:7d:85:a2:55:81:9b:7b:ba:32:b4:a2:19:3c:9a: 5a:d6:8c:70:c9:29:2b:25:6e:a3:2e:a7:87:fc:7e:92:99:5c: 53:b0:dd:6c:38:fe:4c:b5:c1:10:8a:01:8c:d7:58:b4:c1:cf: bf:48:f3:ee:46:9c:ae:74:3c:ae:88:4b:58:c2:31:cd:87:dd: f4:09:bc:6a:2c:60:18:4d:d7:9e:a2:3d:86:ff:f4:96:9e:8e: 4e:1a:3f:17:f8:53:b7:30:a8:fb:49:78:95:88:72:e5:73:6b: 48:cb:e1:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZY9Hj6ynaALpVYJT13xU6dqjiGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA1MTMwODExMDJaFw0yNjA1MTQxMDAwMDJaMDMxMTAvBgNV BAMTKDg5OENEQzBGNDI2N0UzMzE4MzZFQjcwRTgwODBCMkM5M0QwQ0I1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRoVB3RP/lrhkzEySoqo1ani/T hhfpSIQjqyQp4/bJSLahWof8TAzcnUSsonrF2czuyv8YEC+iXcZB+k5LvPxWYHsK FN1H1tBV+9tH8zSb5/kFyRh6uyis3tY7+ghht627ySUfQun2tTh1wH4hY/1YmxWM jTCz2CHMl69kv8yG9mSjj9vuLKKc7FaFZj2pMOlbNaPt9b4dNyfGMSGA7+NRzu/X 8M3BY7SCNPHHqwltKuy7PUvoUh+uMgznuDMz0EHf4cjSKt7u7kV8REUUXV01uSBK gOReHhkneI6P1/wShxyu0Et8VQrMcvWs4TeYf8PpjlODoz5uQ6yNDiIVmKsTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiYzcD0Jn4zGDbrcOgICyyT0MtfwwHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxKowgtb0M/5 CmtDijFM+prsN2mC/ajIPq/gxaiX8cH4a779IISsMRoI+3GhKRKhBExKpFqguZwj 7UWnoYgYcGG4WZ2WO4nKInUhdMoI3G69wIYw20ipo+HlfQwCLSnUdWYbU234fvwQ HpVBMW5wBZco9j0+sSUurgRgay0e3R0gUvafT1sjkuOWXMN+s8KxaxF/r32FolWB m3u6MrSiGTyaWtaMcMkpKyVuoy6nh/x+kplcU7DdbDj+TLXBEIoBjNdYtMHPv0jz 7kacrnQ8rohLWMIxzYfd9Am8aixgGE3XnqI9hv/0lp6OTho/F/hTtzCo+0l4lYhy 5XNrSMvhnQ== -----END CERTIFICATE-----Generated at Wed May 13 14:01:59 2026 by rpki-client