$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json) Hash identifier: 13e9ee07FRtSMgGW4ij6J57pS4gjJXHJyZ0oEsg8Br8= Subject key identifier: 7A:59:5B:8E:4B:2A:96:12:BD:BA:CE:88:A1:AD:F3:BD:D0:BF:90:E1 Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Certificate serial: 7ACB2A0311B121BF8FD63DEBB35678D96DCBCB78 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft Manifest number: 99 Signing time: Wed 13 May 2026 08:21:02 +0000 Manifest this update: Wed 13 May 2026 08:16:02 +0000 Manifest next update: Thu 14 May 2026 09:48:02 +0000 Files and hashes: 1: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: 3Tz4CntwRgnmwUXl70XZjN/noz4SFNre0Oxo2mPJ/G4=) 2: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=) 3: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=) 4: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=) 5: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=) 6: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=) 7: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=) 8: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=) 9: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cb:2a:03:11:b1:21:bf:8f:d6:3d:eb:b3:56:78:d9:6d:cb:cb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Validity Not Before: May 13 08:16:02 2026 GMT Not After : May 14 09:48:02 2026 GMT Subject: CN=7A595B8E4B2A9612BDBACE88A1ADF3BDD0BF90E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:9e:bb:0d:8b:fd:0e:4a:0a:39:31:80:33: d0:37:33:77:e5:42:97:8a:ae:44:fd:d4:3e:16:2e: 21:d5:2f:44:15:5b:fd:dd:3a:db:9d:23:53:27:83: 08:22:86:54:1c:29:3c:26:12:03:5d:91:16:6b:6c: ad:d0:8e:cc:2d:85:f2:fe:77:51:40:cf:4d:58:5e: d4:d8:d4:a8:ac:47:e0:06:56:e8:76:a2:c4:79:d4: f6:f3:c9:3a:39:d2:6e:0b:23:58:b5:b1:4c:ba:ae: 2e:d1:93:ed:d0:a9:71:0a:82:b3:52:31:10:98:06: 7f:7d:05:f8:f1:e0:4e:97:9e:6d:8b:72:44:04:51: 92:e6:26:ec:cb:11:ea:27:b0:9b:13:09:24:30:88: 8a:1f:90:ad:5f:c9:29:0c:11:39:a9:50:1b:78:f3: f5:ae:da:d8:15:88:c0:b8:74:66:de:48:e7:ca:31: b4:ef:62:09:92:f6:30:7d:fd:53:16:a5:da:4f:53: 76:d8:25:75:18:89:7e:89:78:ac:0d:5a:56:fd:a8: 8d:d8:1b:bd:03:09:20:bc:93:53:ff:ee:fb:ab:57: ff:aa:e7:6b:bd:87:a4:43:30:1a:5b:b5:f0:d3:fd: 3c:a3:fd:4b:84:01:b4:1c:37:44:55:1f:b0:1f:27: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:59:5B:8E:4B:2A:96:12:BD:BA:CE:88:A1:AD:F3:BD:D0:BF:90:E1 X509v3 Authority Key Identifier: keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:59:a5:e8:58:4e:73:9a:47:2b:ce:59:a8:61:67:c1:f6:53: e9:18:c9:d6:0d:80:c2:de:7b:9b:5a:c7:33:9c:9b:2e:5d:fe: fc:79:9a:25:7d:47:a8:37:24:79:0d:1c:b3:be:7c:bf:b2:4b: 8d:01:8f:c8:01:d3:86:2f:b1:d2:14:39:4d:0c:5c:f3:da:28: ff:5d:af:8b:a3:2a:22:c6:cf:3c:ed:c1:60:a4:eb:71:50:32: 55:42:5a:f5:f0:ee:d7:7e:83:39:ff:94:9a:22:0d:3d:50:47: b8:f0:d6:18:38:64:40:9c:f8:bb:59:ac:4a:dc:d4:36:74:e7: 42:ce:01:d0:64:8a:7d:2a:80:b6:99:dc:6b:f2:02:74:81:df: 5e:d4:59:98:99:d8:61:4f:fd:74:a7:bd:38:a8:3a:cb:04:21: 58:f0:6e:5a:85:4e:fd:ec:85:a4:5b:76:88:66:c3:cc:92:11: 4b:4b:b6:85:a5:94:e4:c0:8d:de:fa:21:bd:48:01:f3:04:36: f5:30:10:1a:76:fb:3c:89:1b:28:ea:bd:98:8a:5c:a1:b5:a8: 7c:1c:e3:e2:3c:d7:0e:e5:fe:6a:89:2e:5c:ec:c0:7b:31:4d: 93:f4:09:59:40:31:56:0f:aa:5a:15:1e:eb:ce:91:2a:e5:3d: d0:8a:b2:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUessqAxGxIb+P1j3rs1Z42W3Ly3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3 QzkwNTUxNjAeFw0yNjA1MTMwODE2MDJaFw0yNjA1MTQwOTQ4MDJaMDMxMTAvBgNV BAMTKDdBNTk1QjhFNEIyQTk2MTJCREJBQ0U4OEExQURGM0JERDBCRjkwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Pp67DYv9DkoKOTGAM9A3M3fl QpeKrkT91D4WLiHVL0QVW/3dOtudI1MngwgihlQcKTwmEgNdkRZrbK3QjswthfL+ d1FAz01YXtTY1KisR+AGVuh2osR51PbzyTo50m4LI1i1sUy6ri7Rk+3QqXEKgrNS MRCYBn99Bfjx4E6Xnm2LckQEUZLmJuzLEeonsJsTCSQwiIofkK1fySkMETmpUBt4 8/Wu2tgViMC4dGbeSOfKMbTvYgmS9jB9/VMWpdpPU3bYJXUYiX6JeKwNWlb9qI3Y G70DCSC8k1P/7vurV/+q52u9h6RDMBpbtfDT/Tyj/UuEAbQcN0RVH7AfJ9G3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUellbjksqlhK9us6Ioa3zvdC/kOEwHwYDVR0j BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5NzI5OTQvMC83RkM1NDE4QjRBNTkw REYxNTM1NUUxNjdCN0FGQzBGRjdDOTA1NTE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlml6FhOc5pH K85ZqGFnwfZT6RjJ1g2Awt57m1rHM5ybLl3+/HmaJX1HqDckeQ0cs758v7JLjQGP yAHThi+x0hQ5TQxc89oo/12vi6MqIsbPPO3BYKTrcVAyVUJa9fDu136DOf+UmiIN PVBHuPDWGDhkQJz4u1msStzUNnTnQs4B0GSKfSqAtpnca/ICdIHfXtRZmJnYYU/9 dKe9OKg6ywQhWPBuWoVO/eyFpFt2iGbDzJIRS0u2haWU5MCN3vohvUgB8wQ29TAQ Gnb7PIkbKOq9mIpcobWofBzj4jzXDuX+aokuXOzAezFNk/QJWUAxVg+qWhUe686R KuU90Iqyvg== -----END CERTIFICATE-----Generated at Wed May 13 13:13:35 2026 by rpki-client