$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: RMY4DL/EVY4B3PeszU/xuCHxk4Ls42TMHUFcMhiKZcw= Subject key identifier: 25:18:EB:44:D5:4D:7D:A6:9B:EA:F3:B3:C1:CD:E9:3B:22:04:FE:61 Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 21CC2328718104251C2F7C7CA777F0B31D7F54AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 9E Signing time: Tue 12 May 2026 19:25:42 +0000 Manifest this update: Tue 12 May 2026 19:20:42 +0000 Manifest next update: Wed 13 May 2026 22:00:42 +0000 Files and hashes: 1: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: Jq18l5qpgPedNEjuVhD3B9NQyGRM5cssCIt5jGKuL/w=) 2: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=) 3: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:cc:23:28:71:81:04:25:1c:2f:7c:7c:a7:77:f0:b3:1d:7f:54:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: May 12 19:20:42 2026 GMT Not After : May 13 22:00:42 2026 GMT Subject: CN=2518EB44D54D7DA69BEAF3B3C1CDE93B2204FE61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f0:5a:c9:25:04:f8:88:c4:5b:27:96:bd:17: 4f:a8:bf:9f:be:1f:bc:f5:3f:d1:27:cc:d1:97:b1: 89:62:91:b3:c9:ab:ab:f0:c2:0c:a6:44:e6:78:f1: 3b:c1:9b:fe:e1:4d:e7:64:c5:af:43:c9:69:f4:41: c5:bf:55:1e:b2:ce:cb:25:ef:81:71:3f:da:e9:03: 16:11:36:af:c8:d7:d1:21:fc:49:f1:11:30:41:ce: fa:ec:92:60:fa:f4:ba:26:25:bc:03:82:18:91:55: 95:f7:60:07:a4:36:cf:e6:07:f2:ab:7f:54:1c:86: f1:c1:45:62:6b:79:d7:65:a6:2b:27:fc:ba:ff:bf: 9d:ed:0c:09:ba:38:18:fc:a4:bb:b3:37:3e:24:03: 2f:99:dd:a7:af:7a:96:01:cd:48:98:77:b5:0b:b8: 82:1f:bc:c0:17:d2:4d:8e:9b:16:a1:4f:3c:95:67: 75:d4:a2:2c:5b:f3:84:4d:2c:43:2c:1e:9d:d9:2a: 9f:63:46:62:99:61:3b:2a:6f:36:49:26:0d:08:50: 1b:2a:91:24:2b:92:35:f6:db:90:74:e5:01:d6:fd: 5d:74:93:58:9c:24:10:95:28:7c:15:4b:a2:ed:d9: 66:08:fe:48:9b:86:eb:73:e8:ec:43:d0:1c:d7:72: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:18:EB:44:D5:4D:7D:A6:9B:EA:F3:B3:C1:CD:E9:3B:22:04:FE:61 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:ec:1e:e9:49:e0:a1:1b:18:15:68:94:95:0d:1e:8b:c4:12: 9e:4f:96:c0:86:3b:a5:4b:14:27:31:2d:8e:b8:3b:d0:63:49: 23:68:5d:23:e5:d0:2c:5d:67:0c:c9:c3:eb:de:46:75:36:58: 21:5a:29:2b:cb:67:b4:5a:d2:a6:75:37:fa:ab:2e:b1:c0:04: fc:62:c2:da:96:14:9a:ce:42:b1:99:18:78:bd:57:5d:2d:9f: b9:2e:19:65:6e:f2:5a:71:b0:64:4f:f3:26:a3:3d:f3:db:b9: aa:c8:b0:15:19:d1:ba:58:1b:ea:24:ac:4b:8b:4f:58:de:01: be:a4:d2:30:53:54:a2:96:d0:c3:3f:8d:4a:f0:d7:27:e9:e6: 9d:a6:56:a2:e4:6a:a8:bc:ff:33:76:33:73:27:11:4c:b3:8e: 65:da:0b:28:f4:35:21:5f:4a:42:2e:b2:10:14:96:fb:3d:69: 47:c2:79:2a:1f:94:79:2e:97:b1:dd:f6:a3:9c:fd:6a:18:b2: ba:e7:a8:02:a0:f5:1d:cd:7f:73:7f:18:c3:da:d8:44:f8:de: cd:0c:db:72:00:98:70:d1:54:06:ee:ea:50:c5:87:de:b7:f9: 03:80:85:b7:16:33:ea:34:ac:d2:0b:02:df:c2:d6:38:b3:b7: dc:90:29:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIcwjKHGBBCUcL3x8p3fwsx1/VK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjA1MTIxOTIwNDJaFw0yNjA1MTMyMjAwNDJaMDMxMTAvBgNV BAMTKDI1MThFQjQ0RDU0RDdEQTY5QkVBRjNCM0MxQ0RFOTNCMjIwNEZFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD38FrJJQT4iMRbJ5a9F0+ov5++ H7z1P9EnzNGXsYlikbPJq6vwwgymROZ48TvBm/7hTedkxa9DyWn0QcW/VR6yzssl 74FxP9rpAxYRNq/I19Eh/EnxETBBzvrskmD69LomJbwDghiRVZX3YAekNs/mB/Kr f1QchvHBRWJreddlpisn/Lr/v53tDAm6OBj8pLuzNz4kAy+Z3aevepYBzUiYd7UL uIIfvMAX0k2OmxahTzyVZ3XUoixb84RNLEMsHp3ZKp9jRmKZYTsqbzZJJg0IUBsq kSQrkjX225B05QHW/V10k1icJBCVKHwVS6Lt2WYI/kibhutz6OxD0BzXcuHhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJRjrRNVNfaab6vOzwc3pOyIE/mEwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ewe6UngoRsY FWiUlQ0ei8QSnk+WwIY7pUsUJzEtjrg70GNJI2hdI+XQLF1nDMnD695GdTZYIVop K8tntFrSpnU3+qsuscAE/GLC2pYUms5CsZkYeL1XXS2fuS4ZZW7yWnGwZE/zJqM9 89u5qsiwFRnRulgb6iSsS4tPWN4BvqTSMFNUopbQwz+NSvDXJ+nmnaZWouRqqLz/ M3YzcycRTLOOZdoLKPQ1IV9KQi6yEBSW+z1pR8J5Kh+UeS6Xsd32o5z9ahiyuueo AqD1Hc1/c38Yw9rYRPjezQzbcgCYcNFUBu7qUMWH3rf5A4CFtxYz6jSs0gsC38LW OLO33JApng== -----END CERTIFICATE-----Generated at Wed May 13 16:12:41 2026 by rpki-client