$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: fFuPi+khrzle59lHNp15M96sY7xbfrajFLbwRI2WLN4= Subject key identifier: F9:4E:D1:5E:82:8F:95:E8:55:23:BC:8D:FD:25:38:0A:2B:7D:BA:F3 Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 3C470CF2E89FA1715DB6F90892819724997AC417 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: 9A Signing time: Wed 13 May 2026 05:45:58 +0000 Manifest this update: Wed 13 May 2026 05:40:58 +0000 Manifest next update: Thu 14 May 2026 09:19:58 +0000 Files and hashes: 1: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=) 2: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=) 3: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: KN43ol8nELn6GbEZ9oAK9UFky5m073bsaVBWu6O1fz4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:47:0c:f2:e8:9f:a1:71:5d:b6:f9:08:92:81:97:24:99:7a:c4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: May 13 05:40:58 2026 GMT Not After : May 14 09:19:58 2026 GMT Subject: CN=F94ED15E828F95E85523BC8DFD25380A2B7DBAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:d7:84:e5:f3:8e:85:51:55:80:9d:c8:fa: de:4f:0a:5b:9c:13:f0:7f:a0:f2:8f:cc:f1:5e:10: dd:36:ee:fb:38:b7:42:57:0c:eb:30:47:0e:9c:6b: 67:c3:b2:a5:b2:85:b4:71:13:72:ca:a3:0a:c7:8c: 48:5a:a9:50:f1:75:e9:54:71:9f:d7:43:4b:11:f4: 0e:41:ab:4c:77:a0:52:2a:00:1a:e5:3a:41:2c:7b: 78:05:4f:c7:40:9f:12:40:ab:d6:de:5c:45:7e:6a: 22:0e:aa:dc:40:58:de:1e:92:74:c6:30:33:1e:2d: eb:3a:5c:1b:32:ba:36:2a:ae:8c:2e:a3:2c:44:92: fd:28:9d:97:ae:d0:1c:a8:91:f5:da:f5:c7:56:43: ae:cd:35:80:00:46:3e:97:fa:ba:32:95:08:28:7a: 28:05:d1:c0:60:33:21:22:1c:1e:56:77:4a:c1:6e: 53:c0:a5:9b:5e:bd:1d:40:b0:8e:4a:ed:18:91:9b: 14:cd:06:09:7b:0b:53:a5:ba:9d:25:b1:b3:7f:d0: 9c:3c:6e:b2:be:1c:a0:20:1f:8d:d0:9c:3c:11:b2: 4a:4a:a1:b9:51:42:8b:9f:31:9b:a4:97:d2:ed:d7: 00:66:5f:28:99:31:80:55:c6:d6:fa:2b:f9:46:53: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4E:D1:5E:82:8F:95:E8:55:23:BC:8D:FD:25:38:0A:2B:7D:BA:F3 X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b9:67:96:23:8c:1e:cd:e4:91:d0:35:88:bf:01:2c:b9:31: 39:c7:3a:bc:71:5c:6c:6a:e0:9e:f8:84:3c:9f:46:f1:69:da: fa:5b:f5:b6:de:3f:65:fa:9a:76:c4:dd:36:e7:b5:68:51:97: c1:a9:25:45:e3:2c:01:d1:7e:d4:a7:e0:4a:2c:c6:d1:5f:6b: d4:43:58:7a:7e:a0:77:8f:6a:e3:54:3b:2b:5e:85:1d:7c:11: bd:58:3e:ba:96:ac:4f:29:7a:3f:04:0a:b5:4e:98:d6:3e:db: 7d:de:71:b1:c2:c7:4f:7c:3c:f4:f0:45:5a:d4:71:c2:a8:cc: f8:3c:64:cf:48:ed:71:2c:ee:89:eb:7b:c8:76:73:9f:57:1b: 06:7f:17:6d:97:bc:e0:9e:f9:0d:7d:37:00:2b:d2:33:ef:67: 93:7c:10:0e:05:45:6f:7b:a6:cf:78:55:77:52:dc:62:c6:15: a7:45:b6:04:51:37:7b:f0:33:9a:c1:02:ca:8b:d2:8b:71:10: ed:15:2c:60:14:fa:1f:6d:4f:57:b2:b5:e7:bf:4f:f3:c7:d7: 35:48:cc:a9:e3:31:13:4e:74:af:2a:33:9d:47:de:b8:ef:37: 61:9b:a9:bb:3e:5f:2d:78:3e:34:d7:66:87:ae:a5:25:cd:28: 14:6c:00:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPEcM8uifoXFdtvkIkoGXJJl6xBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjA1MTMwNTQwNThaFw0yNjA1MTQwOTE5NThaMDMxMTAvBgNV BAMTKEY5NEVEMTVFODI4Rjk1RTg1NTIzQkM4REZEMjUzODBBMkI3REJBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRE9eE5fOOhVFVgJ3I+t5PCluc E/B/oPKPzPFeEN027vs4t0JXDOswRw6ca2fDsqWyhbRxE3LKowrHjEhaqVDxdelU cZ/XQ0sR9A5Bq0x3oFIqABrlOkEse3gFT8dAnxJAq9beXEV+aiIOqtxAWN4eknTG MDMeLes6XBsyujYqrowuoyxEkv0onZeu0ByokfXa9cdWQ67NNYAARj6X+roylQgo eigF0cBgMyEiHB5Wd0rBblPApZtevR1AsI5K7RiRmxTNBgl7C1Olup0lsbN/0Jw8 brK+HKAgH43QnDwRskpKoblRQoufMZukl9Lt1wBmXyiZMYBVxtb6K/lGU7e/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+U7RXoKPlehVI7yN/SU4Cit9uvMwHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurlnliOMHs3k kdA1iL8BLLkxOcc6vHFcbGrgnviEPJ9G8Wna+lv1tt4/ZfqadsTdNue1aFGXwakl ReMsAdF+1KfgSizG0V9r1ENYen6gd49q41Q7K16FHXwRvVg+upasTyl6PwQKtU6Y 1j7bfd5xscLHT3w89PBFWtRxwqjM+Dxkz0jtcSzuiet7yHZzn1cbBn8XbZe84J75 DX03ACvSM+9nk3wQDgVFb3umz3hVd1LcYsYVp0W2BFE3e/AzmsECyovSi3EQ7RUs YBT6H21PV7K1579P88fXNUjMqeMxE050ryoznUfeuO83YZupuz5fLXg+NNdmh66l Jc0oFGwAeQ== -----END CERTIFICATE-----Generated at Wed May 13 19:49:12 2026 by rpki-client