$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: gqqhY9q83wtUXwm7JIlrYxkRmMpn/mGqQbp8t3aOi04= Subject key identifier: F1:D8:90:7A:31:E4:3C:ED:B7:E1:74:ED:F6:F2:B5:B7:F6:6E:EE:80 Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 468EC2CF0B13D8C914395E75CC04EED6756D33B4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: 31 Signing time: Wed 13 May 2026 10:26:03 +0000 Manifest this update: Wed 13 May 2026 10:21:03 +0000 Manifest next update: Thu 14 May 2026 13:58:03 +0000 Files and hashes: 1: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 2: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) 3: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: LnN2fULWga+y62Z8LSPRQGxY8/1ZzANyYZm+pHLYAEE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8e:c2:cf:0b:13:d8:c9:14:39:5e:75:cc:04:ee:d6:75:6d:33:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: May 13 10:21:03 2026 GMT Not After : May 14 13:58:03 2026 GMT Subject: CN=F1D8907A31E43CEDB7E174EDF6F2B5B7F66EEE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:82:d0:5a:cd:18:57:38:7b:e6:c7:af:32:65: 13:86:e3:fa:9a:f5:1a:fa:1f:41:d8:da:25:e5:e0: 2f:f5:3e:94:ca:7f:31:0d:ea:c9:58:19:11:12:26: 0d:c9:b5:a4:c8:f4:1d:2e:cb:9d:ee:5c:59:f0:b3: 13:ba:bd:c2:8c:fb:c0:a8:39:0b:25:e2:67:8e:81: e6:38:e1:52:2e:6d:4a:61:39:e6:28:98:1d:c6:cd: 38:7b:95:69:ae:23:4c:f1:7c:0a:b9:e8:f5:80:c7: 50:17:8d:81:a1:11:68:0e:fb:06:05:72:bc:e4:ee: 2d:d4:f8:eb:fd:7c:15:d5:b3:3d:8a:94:c4:aa:9f: ff:64:ea:1f:c0:8a:16:b5:03:be:bb:47:17:eb:14: 55:36:6c:74:d6:8d:d3:5d:de:1e:c2:c0:e8:2a:f1: c6:a3:6d:c5:45:18:52:4f:ac:80:3c:fd:d6:a1:d1: 4d:3c:76:72:cb:4b:2c:1f:2f:f6:fd:ec:ad:83:54: d1:bb:40:1e:9a:d6:dc:f9:a9:f0:0f:03:13:5f:8b: 4e:ee:78:b3:41:dc:91:a3:7d:36:59:bd:de:39:87: 43:ff:ab:f2:9b:7b:34:36:7a:79:eb:24:54:7c:73: 0d:56:a3:0b:cc:8c:4a:b5:54:f8:45:96:21:e3:59: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D8:90:7A:31:E4:3C:ED:B7:E1:74:ED:F6:F2:B5:B7:F6:6E:EE:80 X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:94:8c:1a:ef:74:c3:dd:45:4f:8c:cd:1f:15:57:08:f2: 53:a7:0f:29:91:90:49:4f:5a:34:16:c7:b3:f7:af:58:fd:61: a8:b3:1e:02:eb:c2:0d:87:1a:82:28:d0:d0:fa:1a:81:d5:48: 60:86:11:01:04:8c:d3:04:3e:17:38:52:ae:a2:5c:81:29:bb: 1a:ba:9a:e3:95:c2:4c:c3:f6:b3:3d:6e:68:e5:06:32:0c:50: 56:36:4e:9a:ce:db:56:53:ac:19:7a:3f:73:49:47:69:46:31: fe:1b:87:84:bf:68:be:35:f7:c6:2e:c5:02:f3:5c:eb:5f:92: 37:19:80:7a:9f:2c:bb:8b:64:0e:aa:3f:20:34:fd:92:50:8f: ec:59:92:6c:13:97:42:21:b2:e1:a9:08:48:ed:77:58:60:9c: 10:23:23:b9:33:64:5b:28:f9:6d:9d:af:0a:48:db:d1:93:b7: f7:5f:ea:57:79:13:a8:0d:b0:36:54:55:08:54:64:01:d4:b9: 01:9c:49:f3:46:84:87:d7:7a:84:06:c7:5f:31:87:79:58:12: f8:2c:99:72:7a:de:f3:ce:21:0b:c7:ef:0c:19:5b:cb:d1:3b: 03:b7:18:1c:9b:fa:95:6c:1e:32:50:e9:15:76:0f:bd:05:a6: 89:80:31:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURo7CzwsT2MkUOV51zATu1nVtM7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA1MTMxMDIxMDNaFw0yNjA1MTQxMzU4MDNaMDMxMTAvBgNV BAMTKEYxRDg5MDdBMzFFNDNDRURCN0UxNzRFREY2RjJCNUI3RjY2RUVFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5gtBazRhXOHvmx68yZROG4/qa 9Rr6H0HY2iXl4C/1PpTKfzEN6slYGRESJg3JtaTI9B0uy53uXFnwsxO6vcKM+8Co OQsl4meOgeY44VIubUphOeYomB3GzTh7lWmuI0zxfAq56PWAx1AXjYGhEWgO+wYF crzk7i3U+Ov9fBXVsz2KlMSqn/9k6h/Aiha1A767RxfrFFU2bHTWjdNd3h7CwOgq 8cajbcVFGFJPrIA8/dah0U08dnLLSywfL/b97K2DVNG7QB6a1tz5qfAPAxNfi07u eLNB3JGjfTZZvd45h0P/q/KbezQ2ennrJFR8cw1WowvMjEq1VPhFliHjWVSZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8diQejHkPO234XTt9vK1t/Zu7oAwHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkseUjBrvdMPd RU+MzR8VVwjyU6cPKZGQSU9aNBbHs/evWP1hqLMeAuvCDYcagijQ0PoagdVIYIYR AQSM0wQ+FzhSrqJcgSm7Grqa45XCTMP2sz1uaOUGMgxQVjZOms7bVlOsGXo/c0lH aUYx/huHhL9ovjX3xi7FAvNc61+SNxmAep8su4tkDqo/IDT9klCP7FmSbBOXQiGy 4akISO13WGCcECMjuTNkWyj5bZ2vCkjb0ZO391/qV3kTqA2wNlRVCFRkAdS5AZxJ 80aEh9d6hAbHXzGHeVgS+CyZcnre884hC8fvDBlby9E7A7cYHJv6lWweMlDpFXYP vQWmiYAxfQ== -----END CERTIFICATE-----Generated at Wed May 13 13:42:29 2026 by rpki-client