$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft File: 786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json) Hash identifier: 294fbzhLJJQd5j3iyfvS7bagCOANukyMhs4JIWkuDGc= Subject key identifier: CF:02:18:78:F2:85:33:FD:4F:8B:C4:6F:43:9A:D3:89:D2:C6:68:0E Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3 Certificate serial: 6E688C5F040531B48B71DBC684AFD53119FEF20A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft Manifest number: 30 Signing time: Wed 13 May 2026 04:00:55 +0000 Manifest this update: Wed 13 May 2026 03:55:55 +0000 Manifest next update: Thu 14 May 2026 07:00:55 +0000 Files and hashes: 1: 34322e3139352e302e302f31362d3136203d3e2030.roa (hash: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=) 2: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: hHyymZ4QtOOm+riOHdvOYwCsk6Up6XImqcW0WOVAEkA=) 3: 323430333a323734303a3a2f33322d3332203d3e2030.roa (hash: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:68:8c:5f:04:05:31:b4:8b:71:db:c6:84:af:d5:31:19:fe:f2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Validity Not Before: May 13 03:55:55 2026 GMT Not After : May 14 07:00:55 2026 GMT Subject: CN=CF021878F28533FD4F8BC46F439AD389D2C6680E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c8:bc:12:28:a0:ac:a3:3c:ff:3b:f9:50:72: ce:15:46:2b:4a:40:9e:ed:df:1c:fc:fc:59:e1:84: 1f:4d:bd:39:6a:2e:6d:49:a0:72:16:f9:cb:ed:fc: da:04:28:b4:50:38:77:54:6b:2f:f2:05:00:05:f1: ba:9b:6d:96:93:b7:42:6a:e6:b0:50:c0:99:dd:b7: 09:02:f4:08:9f:27:ec:c4:f9:8b:83:65:81:d8:4a: ab:b4:81:a6:d8:71:38:98:ca:ba:19:53:70:30:18: 03:48:0f:56:6e:35:03:ed:c2:b6:f4:93:53:a5:cd: c6:75:72:da:82:65:ae:c9:00:18:64:c2:c2:09:29: 85:7d:d8:14:b6:e3:e9:02:6d:b6:ca:45:2a:75:04: fb:c5:03:2a:ec:db:43:85:a9:a7:d1:f8:4a:1f:20: f5:d0:2e:20:0a:04:24:83:52:d7:64:d8:e4:90:1f: 71:31:b7:c9:45:b2:c1:8f:04:ab:37:db:8d:c0:bc: d5:0f:d7:bf:93:96:a2:3d:09:5c:86:ca:89:c3:e5: 04:81:e0:c5:83:62:c9:c2:1e:ac:70:7f:63:3a:6d: 69:1c:ab:47:e0:ee:91:56:e6:ab:40:f6:45:10:1d: 4c:a3:98:64:b8:7e:ea:45:8a:1a:37:4b:db:14:50: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:02:18:78:F2:85:33:FD:4F:8B:C4:6F:43:9A:D3:89:D2:C6:68:0E X509v3 Authority Key Identifier: keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:03:79:e7:7b:9e:32:49:7b:f1:c7:32:df:ec:f9:6a:5f:8d: ef:cc:e2:97:ec:c9:28:9f:50:43:02:38:91:b0:07:3b:f3:2a: 1f:5b:8b:41:33:7f:a7:a1:7c:3f:cd:0b:f6:6c:20:31:dc:6c: a2:0e:33:ae:96:ec:d2:2e:cb:ab:48:75:85:92:17:5c:68:2b: 6a:5e:ec:b4:70:a6:d0:e5:7c:18:7b:94:1f:12:f3:47:63:0c: 5d:e2:48:66:c1:c8:52:a4:12:01:b8:94:7e:8b:57:4a:a5:b8: b8:bf:d8:8f:3d:74:05:1d:de:c6:57:07:3e:3b:d9:ed:3d:88: 7f:53:72:21:51:a2:5e:54:d2:f8:b8:20:92:4b:27:69:d3:84: 96:96:bc:64:8e:2f:46:0c:6d:8d:a9:7f:1b:0e:a1:7b:e1:08: 9b:a5:c1:5c:43:62:a3:00:3c:3d:dd:97:ec:d2:45:7e:c3:e4: e8:2f:df:d9:dc:28:06:92:ff:4d:90:cd:cc:3f:ba:3c:51:50: ed:9d:53:7e:52:37:64:fb:5d:99:7a:98:33:ad:ce:fd:a6:a9: 49:1a:93:9e:e5:aa:9f:19:43:3d:3d:a8:3e:28:13:59:98:c1: 17:f5:13:33:ab:44:64:c0:54:67:1b:9a:07:fd:95:05:78:1e: 78:d4:06:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbmiMXwQFMbSLcdvGhK/VMRn+8gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIz QTBFMDNFMzAeFw0yNjA1MTMwMzU1NTVaFw0yNjA1MTQwNzAwNTVaMDMxMTAvBgNV BAMTKENGMDIxODc4RjI4NTMzRkQ0RjhCQzQ2RjQzOUFEMzg5RDJDNjY4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyLwSKKCsozz/O/lQcs4VRitK QJ7t3xz8/FnhhB9NvTlqLm1JoHIW+cvt/NoEKLRQOHdUay/yBQAF8bqbbZaTt0Jq 5rBQwJndtwkC9AifJ+zE+YuDZYHYSqu0gabYcTiYyroZU3AwGANID1ZuNQPtwrb0 k1OlzcZ1ctqCZa7JABhkwsIJKYV92BS24+kCbbbKRSp1BPvFAyrs20OFqafR+Eof IPXQLiAKBCSDUtdk2OSQH3Ext8lFssGPBKs3243AvNUP17+TlqI9CVyGyonD5QSB 4MWDYsnCHqxwf2M6bWkcq0fg7pFW5qtA9kUQHUyjmGS4fupFiho3S9sUULJ9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzwIYePKFM/1Pi8RvQ5rTidLGaA4wHwYDVR0j BBgwFoAUeGWIwofQ+UmjefTVEzX5QjoOA+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8xLzc4NjU4OEMyODdEMEY5NDlBMzc5RjRENTEzMzVG OTQyM0EwRTAzRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMS83ODY1ODhDMjg3RDBG OTQ5QTM3OUY0RDUxMzM1Rjk0MjNBMEUwM0UzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAN553ueMkl7 8ccy3+z5al+N78zil+zJKJ9QQwI4kbAHO/MqH1uLQTN/p6F8P80L9mwgMdxsog4z rpbs0i7Lq0h1hZIXXGgral7stHCm0OV8GHuUHxLzR2MMXeJIZsHIUqQSAbiUfotX SqW4uL/Yjz10BR3exlcHPjvZ7T2If1NyIVGiXlTS+LggkksnadOElpa8ZI4vRgxt jal/Gw6he+EIm6XBXENiowA8Pd2X7NJFfsPk6C/f2dwoBpL/TZDNzD+6PFFQ7Z1T flI3ZPtdmXqYM63O/aapSRqTnuWqnxlDPT2oPigTWZjBF/UTM6tEZMBUZxuaB/2V BXgeeNQGjA== -----END CERTIFICATE-----Generated at Wed May 13 13:44:48 2026 by rpki-client