$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: gCkJ2tYjh8qXneW1hNII+/Wcn5bYiuFdJZzFas08cAM= Subject key identifier: 46:0C:1C:CE:0B:E6:7F:3B:B9:25:2B:AC:D4:F3:3C:5A:29:85:FE:44 Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 3A5FC0926016939CEB9A33034FF689264FE7CD36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: 41 Signing time: Tue 12 May 2026 17:30:37 +0000 Manifest this update: Tue 12 May 2026 17:25:37 +0000 Manifest next update: Wed 13 May 2026 20:26:37 +0000 Files and hashes: 1: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: s9E59x/Lvkh/VkAL54Cftg6c+G8m54I3ev/zxwnbMRw=) 2: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=) 3: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=) 4: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5f:c0:92:60:16:93:9c:eb:9a:33:03:4f:f6:89:26:4f:e7:cd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: May 12 17:25:37 2026 GMT Not After : May 13 20:26:37 2026 GMT Subject: CN=460C1CCE0BE67F3BB9252BACD4F33C5A2985FE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:94:a3:9a:76:15:00:e6:a0:4b:f9:2c:ab: 46:9b:67:4e:66:c4:a0:53:d7:e5:00:cd:da:4e:b2: 0c:fa:dd:10:66:65:2d:61:24:71:fb:62:e8:58:8e: 65:62:aa:54:41:90:95:0d:ea:b8:4b:a7:b9:bc:63: ab:fc:43:a0:2c:5f:ce:10:42:99:f9:36:ce:31:a1: bf:40:8f:b2:85:90:d2:13:0e:89:c4:30:bd:91:e0: 44:1a:25:d8:f8:57:02:b5:58:fd:9d:dc:55:05:76: 8f:c6:4a:f9:8e:41:7c:53:df:6d:2f:bd:db:ee:c7: 03:bb:1f:96:8e:d7:ef:ba:cf:4f:56:28:7f:89:f2: 73:22:73:fe:d3:91:66:f5:41:73:75:95:1b:24:ae: 5e:ea:ff:66:67:f4:59:8a:ce:9c:cc:9e:bb:21:4c: 08:36:1a:42:dc:d4:6c:a3:1e:99:c8:cb:55:b0:35: 20:e1:a7:02:d1:9c:99:c9:0c:fb:35:0d:95:5e:57: 2d:f6:c6:4c:67:a9:83:b9:c6:1b:a7:c7:ac:4c:23: d7:e6:13:98:4b:02:9d:94:d1:00:1a:f0:12:4c:f4: 72:59:34:01:aa:44:e9:4f:17:9e:de:3a:ff:8b:bf: c4:8d:26:69:8a:c2:01:ae:ff:6c:11:06:86:07:91: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0C:1C:CE:0B:E6:7F:3B:B9:25:2B:AC:D4:F3:3C:5A:29:85:FE:44 X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b0:f0:58:16:1f:25:c0:c3:e0:54:8b:2e:22:a0:3f:8c:38: 7d:2d:48:59:3c:f5:bf:1c:e7:04:b2:7d:b2:22:64:bc:2a:91: 04:ad:f5:a3:3a:ab:62:55:f8:25:18:5d:16:42:53:a5:0d:98: 57:7d:2a:89:c0:84:09:14:66:aa:04:38:14:98:b3:7f:63:cb: 08:01:7c:81:7f:76:e6:dd:bb:41:24:de:e3:ef:95:60:f4:2a: 74:3e:78:39:b3:69:b4:b2:5b:f1:5d:8f:84:18:16:93:90:79: 7d:4e:ba:bb:f7:39:d7:dc:10:28:f2:0b:28:71:7c:1c:9b:06: 5c:73:61:a4:39:17:03:e4:85:27:6c:fe:66:c6:8b:b5:93:5f: cb:e6:70:f1:f2:f1:40:ac:20:7a:b6:f9:d0:36:e8:08:9c:f0: 32:5b:09:31:f3:b9:df:e0:4e:d4:fc:cd:68:99:d7:26:9c:a2: 39:de:0e:d5:07:c1:1f:36:a3:18:b0:fc:92:47:8c:66:8e:cd: 80:c3:5f:f0:61:dc:fa:ce:b9:2e:33:5e:95:e3:6f:12:ff:e0: 79:67:4f:cf:b0:17:d2:96:c9:57:9e:ef:9e:83:f0:ff:e4:0b: 53:0a:0c:2f:0b:6b:6c:15:b8:f7:5d:84:57:d1:60:ed:19:8d: 09:e3:6d:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOl/AkmAWk5zrmjMDT/aJJk/nzTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjA1MTIxNzI1MzdaFw0yNjA1MTMyMDI2MzdaMDMxMTAvBgNV BAMTKDQ2MEMxQ0NFMEJFNjdGM0JCOTI1MkJBQ0Q0RjMzQzVBMjk4NUZFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfepSjmnYVAOagS/ksq0abZ05m xKBT1+UAzdpOsgz63RBmZS1hJHH7YuhYjmViqlRBkJUN6rhLp7m8Y6v8Q6AsX84Q Qpn5Ns4xob9Aj7KFkNITDonEML2R4EQaJdj4VwK1WP2d3FUFdo/GSvmOQXxT320v vdvuxwO7H5aO1++6z09WKH+J8nMic/7TkWb1QXN1lRskrl7q/2Zn9FmKzpzMnrsh TAg2GkLc1GyjHpnIy1WwNSDhpwLRnJnJDPs1DZVeVy32xkxnqYO5xhunx6xMI9fm E5hLAp2U0QAa8BJM9HJZNAGqROlPF57eOv+Lv8SNJmmKwgGu/2wRBoYHkQBxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURgwczgvmfzu5JSus1PM8WimF/kQwHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7DwWBYfJcDD 4FSLLiKgP4w4fS1IWTz1vxznBLJ9siJkvCqRBK31ozqrYlX4JRhdFkJTpQ2YV30q icCECRRmqgQ4FJizf2PLCAF8gX925t27QSTe4++VYPQqdD54ObNptLJb8V2PhBgW k5B5fU66u/c519wQKPILKHF8HJsGXHNhpDkXA+SFJ2z+ZsaLtZNfy+Zw8fLxQKwg erb50DboCJzwMlsJMfO53+BO1PzNaJnXJpyiOd4O1QfBHzajGLD8kkeMZo7NgMNf 8GHc+s65LjNeleNvEv/geWdPz7AX0pbJV57vnoPw/+QLUwoMLwtrbBW4912EV9Fg 7RmNCeNtbQ== -----END CERTIFICATE-----Generated at Wed May 13 10:07:35 2026 by rpki-client