$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json) Hash identifier: CbOqPnq32fi/AfdO2dHULqTAIRupVpDkEQW90gZBdb0= Subject key identifier: 2B:F6:BA:2F:3D:44:93:98:6E:59:A3:15:3D:EC:F5:84:96:01:5F:04 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 74DDC52D48C883CB23CBC85C794E2CE7D812C898 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft Manifest number: A1 Signing time: Wed 13 May 2026 09:51:03 +0000 Manifest this update: Wed 13 May 2026 09:46:03 +0000 Manifest next update: Thu 14 May 2026 10:14:03 +0000 Files and hashes: 1: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=) 2: AS9808.roa (hash: lDrAoTUnYB64grsjpP1t7+3xH0Ykk2SmzdWPX2wFqNM=) 3: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=) 4: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=) 5: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=) 6: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: +PkjcrcBJCiNAs8DPljGy711HNB/iLBJb1/QJVFUI9w=) 7: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=) 8: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=) 9: AS24400.roa (hash: ql35zIap451HVcpWGnoICAb2sHI19dHkxqC8PGi+o/s=) 10: AS146788.roa (hash: zpRF+orMm1cXnAI2EXsq1WNqOE/Y017y0m/dOiaCEbE=) 11: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=) 12: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=) 13: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=) 14: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=) 15: AS244400.roa (hash: bhI1UKxrm3GLN+fc8qGvC+xkunPjqFis517LeIEdzh8=) 16: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=) 17: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=) 18: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=) 19: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dd:c5:2d:48:c8:83:cb:23:cb:c8:5c:79:4e:2c:e7:d8:12:c8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: May 13 09:46:03 2026 GMT Not After : May 14 10:14:03 2026 GMT Subject: CN=2BF6BA2F3D4493986E59A3153DECF58496015F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:42:ef:ea:97:b8:64:b6:72:87:9c:c0:a2: 19:00:94:39:3d:76:d7:e7:b1:58:47:ad:a1:fd:b6: 90:b8:9a:ff:11:95:12:ae:73:57:b6:22:60:e4:9c: 45:6a:75:d9:14:65:de:2d:2e:05:10:52:9c:e0:ec: d6:2b:08:cb:8d:46:30:12:85:73:37:92:1d:0e:e3: e2:df:31:08:15:13:66:62:72:14:cc:d4:f5:98:0b: 2a:c3:9e:85:10:05:fa:93:d4:6a:ae:0e:43:02:f8: 98:15:38:01:fe:ea:b8:41:a7:c6:cf:d3:31:15:a7: d3:f7:f7:62:66:06:ba:d2:32:d9:28:68:82:a0:b7: e1:f6:fa:dd:fb:61:e9:c1:12:89:3a:8d:bb:eb:76: 23:e1:e0:58:09:5b:d2:dc:0f:96:97:80:2f:25:35: aa:33:bc:3d:54:40:67:93:6f:03:e7:9c:81:3d:43: e1:59:10:4b:e3:0d:7e:f6:43:96:5b:6a:35:5e:79: 2f:44:9e:85:85:84:ef:13:b8:ef:e7:20:3b:d9:84: f3:da:79:01:a6:3a:22:94:93:35:c4:87:44:78:9c: 23:50:a8:cb:60:8d:c7:1f:16:a1:bf:f0:19:e4:32: 4c:32:5e:0f:73:b4:62:db:18:93:80:ef:25:35:3f: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F6:BA:2F:3D:44:93:98:6E:59:A3:15:3D:EC:F5:84:96:01:5F:04 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:60:c2:3e:d5:fb:3a:74:fe:e4:38:61:5d:fe:e2:41:53:4f: bf:d1:e3:f4:88:48:f1:7e:fe:60:d3:5b:61:81:84:b4:ae:0f: f3:b0:8e:a1:a5:1e:99:4c:f3:fb:d9:1f:c0:e7:09:fa:64:96: 68:4e:ef:37:36:f0:10:67:33:11:1d:ca:d5:39:a8:21:a3:65: 57:70:07:d4:7e:35:5d:53:e4:aa:c4:e8:1c:6d:69:6a:96:1e: 90:40:08:86:86:59:30:a7:58:d0:c6:df:82:bb:50:62:60:9f: e7:ba:70:81:bc:41:04:75:40:41:b6:34:20:0e:f0:1a:ec:e2: a7:e2:c7:18:8a:45:49:c1:83:cd:a0:c4:35:2b:7b:ec:99:f0: 76:20:58:22:66:88:d5:17:40:80:20:40:16:d2:36:ef:a9:26: e4:b8:43:7d:b2:92:04:51:62:8c:dd:2d:60:10:00:74:7f:f8: 5c:c9:6b:f0:c3:94:d5:67:19:3d:cb:43:9d:5e:b6:39:3a:95: 13:46:71:8d:0d:3b:01:63:24:3d:3b:dd:d3:8d:a3:d6:d6:bb: b7:de:74:61:2e:96:f5:06:b4:a5:8b:53:8a:ee:e9:b6:fb:13: c7:16:65:51:a6:1b:5a:0f:10:18:07:26:8d:c9:dd:99:7d:47: ef:74:a8:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdN3FLUjIg8sjy8hceU4s59gSyJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjA1MTMwOTQ2MDNaFw0yNjA1MTQxMDE0MDNaMDMxMTAvBgNV BAMTKDJCRjZCQTJGM0Q0NDkzOTg2RTU5QTMxNTNERUNGNTg0OTYwMTVGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1q0Lv6pe4ZLZyh5zAohkAlDk9 dtfnsVhHraH9tpC4mv8RlRKuc1e2ImDknEVqddkUZd4tLgUQUpzg7NYrCMuNRjAS hXM3kh0O4+LfMQgVE2ZichTM1PWYCyrDnoUQBfqT1GquDkMC+JgVOAH+6rhBp8bP 0zEVp9P392JmBrrSMtkoaIKgt+H2+t37YenBEok6jbvrdiPh4FgJW9LcD5aXgC8l NaozvD1UQGeTbwPnnIE9Q+FZEEvjDX72Q5ZbajVeeS9EnoWFhO8TuO/nIDvZhPPa eQGmOiKUkzXEh0R4nCNQqMtgjccfFqG/8BnkMkwyXg9ztGLbGJOA7yU1P/9xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK/a6Lz1Ek5huWaMVPez1hJYBXwQwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC84NDVCQjMwN0UyQTEx MDBFODlGQTBDOTM5QTkzODk2ODY3OTZGMEY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2DCPtX7OnT+ 5DhhXf7iQVNPv9Hj9IhI8X7+YNNbYYGEtK4P87COoaUemUzz+9kfwOcJ+mSWaE7v NzbwEGczER3K1TmoIaNlV3AH1H41XVPkqsToHG1papYekEAIhoZZMKdY0MbfgrtQ YmCf57pwgbxBBHVAQbY0IA7wGuzip+LHGIpFScGDzaDENSt77JnwdiBYImaI1RdA gCBAFtI276km5LhDfbKSBFFijN0tYBAAdH/4XMlr8MOU1WcZPctDnV62OTqVE0Zx jQ07AWMkPTvd042j1ta7t950YS6W9Qa0pYtTiu7ptvsTxxZlUaYbWg8QGAcmjcnd mX1H73SoLw== -----END CERTIFICATE-----Generated at Wed May 13 19:42:55 2026 by rpki-client