$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: sSRNIz1a8soz+Nt2+fqA3Ul0lxSuHcw5g4I99JidECw= Subject key identifier: 41:68:9D:0D:06:62:B8:FE:8F:0D:3E:69:C2:36:EE:FC:CF:F9:DC:B9 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 254B848A582076B026F56AC0DB4FD42CF5CA4659 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 99 Signing time: Wed 13 May 2026 05:10:57 +0000 Manifest this update: Wed 13 May 2026 05:05:57 +0000 Manifest next update: Thu 14 May 2026 06:14:57 +0000 Files and hashes: 1: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: tTMqHo16+i/qlqKBYZeLd75QuylFo7KUFe4x8DKOhOw=) 2: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) 3: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4b:84:8a:58:20:76:b0:26:f5:6a:c0:db:4f:d4:2c:f5:ca:46:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: May 13 05:05:57 2026 GMT Not After : May 14 06:14:57 2026 GMT Subject: CN=41689D0D0662B8FE8F0D3E69C236EEFCCFF9DCB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:f9:46:28:9f:5a:d2:fb:74:89:ec:ba:81: 35:12:67:51:73:9e:bf:a9:9d:27:d6:fa:9c:ac:43: cd:31:a8:8b:e1:01:27:ba:8b:fd:b7:8b:c7:bf:55: 68:2e:f2:61:2d:af:2f:2d:ad:7a:82:3a:1c:90:1c: 34:95:9c:5b:a0:05:6a:21:1b:ce:0d:21:e5:0f:f2: e7:eb:bb:dc:7e:ea:f8:95:b7:36:c9:a2:67:ee:e0: ea:7b:b4:e8:ad:d0:d2:29:c7:65:30:1a:6d:f2:b3: fd:79:3d:6f:66:82:89:48:47:9c:46:0d:a8:7b:0e: e7:f5:44:ef:64:f1:a9:e0:1b:40:88:56:94:bf:e1: a9:ad:ce:17:91:25:27:8d:50:23:be:01:89:7f:64: bf:4d:3c:dc:c8:5e:db:88:ad:d1:d9:0f:5b:20:47: d9:53:88:53:58:fe:b3:1d:8e:47:6b:50:bf:e8:a1: 55:b4:95:5f:4c:e0:7e:48:5c:e5:d3:dd:5e:71:a4: 4e:c0:db:a0:85:4e:7d:b9:fe:cb:22:5c:b6:20:49: 35:ba:83:33:e8:15:8a:57:bc:4b:47:22:3d:4f:68: d5:28:79:86:3e:4a:48:c4:02:bf:fc:54:fe:a1:5d: 6f:ac:fd:8b:d8:fd:1c:e4:2a:ad:82:e5:fc:39:82: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:68:9D:0D:06:62:B8:FE:8F:0D:3E:69:C2:36:EE:FC:CF:F9:DC:B9 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bb:d1:17:3c:d2:d7:71:22:db:ea:33:ba:46:64:ed:70:c2: e5:52:7b:b6:0a:20:f8:a2:be:6d:0e:77:80:6a:a2:64:84:9d: 75:17:b6:03:b9:29:68:da:d9:2c:aa:35:3f:9a:12:b3:ef:71: 4e:f0:fa:32:fa:cd:15:7f:bf:e3:a7:cc:99:8c:a3:5f:64:6c: 83:0e:13:c2:7b:85:b8:60:ac:40:3f:9a:8c:8b:be:e9:19:d5: 18:16:05:2d:42:d8:b7:ec:fd:c4:c5:da:40:07:30:d8:b5:8e: 6d:cc:35:9f:87:60:07:d1:85:e1:d4:8a:86:4c:75:15:f7:cc: eb:18:84:1b:63:57:30:4f:2c:19:c9:b2:d9:58:18:a4:28:56: bd:af:05:e4:8d:ce:4b:dd:07:1a:ad:7a:1c:4c:42:d7:cc:bb: 32:5a:4a:71:45:3d:eb:d5:d1:0e:5e:ce:eb:cc:84:3a:b8:71: 1b:1f:0d:6b:4a:b4:a1:98:bb:9d:c8:cd:a0:49:d2:55:40:57: b6:d0:5a:04:fc:ff:35:77:5c:81:67:3f:39:61:f1:0e:f8:bd: 50:ce:6a:6c:85:56:f7:0e:96:02:10:2f:05:59:80:97:09:14: 3c:8f:ac:c6:3c:76:67:2b:10:9a:c2:11:15:5f:5d:b4:0e:0d: 1f:81:1a:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJUuEilggdrAm9WrA20/ULPXKRlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA1MTMwNTA1NTdaFw0yNjA1MTQwNjE0NTdaMDMxMTAvBgNV BAMTKDQxNjg5RDBEMDY2MkI4RkU4RjBEM0U2OUMyMzZFRUZDQ0ZGOURDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7flGKJ9a0vt0iey6gTUSZ1Fz nr+pnSfW+pysQ80xqIvhASe6i/23i8e/VWgu8mEtry8trXqCOhyQHDSVnFugBWoh G84NIeUP8ufru9x+6viVtzbJomfu4Op7tOit0NIpx2UwGm3ys/15PW9mgolIR5xG Dah7Duf1RO9k8angG0CIVpS/4amtzheRJSeNUCO+AYl/ZL9NPNzIXtuIrdHZD1sg R9lTiFNY/rMdjkdrUL/ooVW0lV9M4H5IXOXT3V5xpE7A26CFTn25/ssiXLYgSTW6 gzPoFYpXvEtHIj1PaNUoeYY+SkjEAr/8VP6hXW+s/YvY/RzkKq2C5fw5gp2RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQWidDQZiuP6PDT5pwjbu/M/53LkwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbvRFzzS13Ei 2+ozukZk7XDC5VJ7tgog+KK+bQ53gGqiZISddRe2A7kpaNrZLKo1P5oSs+9xTvD6 MvrNFX+/46fMmYyjX2Rsgw4TwnuFuGCsQD+ajIu+6RnVGBYFLULYt+z9xMXaQAcw 2LWObcw1n4dgB9GF4dSKhkx1FffM6xiEG2NXME8sGcmy2VgYpChWva8F5I3OS90H Gq16HExC18y7MlpKcUU969XRDl7O68yEOrhxGx8Na0q0oZi7ncjNoEnSVUBXttBa BPz/NXdcgWc/OWHxDvi9UM5qbIVW9w6WAhAvBVmAlwkUPI+sxjx2ZysQmsIRFV9d tA4NH4EalA== -----END CERTIFICATE-----Generated at Wed May 13 19:46:09 2026 by rpki-client