$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json) Hash identifier: BlPDfUf5dU3RsOfsvpUwjctTsIEEazwx6IZLuOtpUNo= Subject key identifier: 42:24:60:AD:31:A1:B1:A2:CB:98:DA:88:93:A9:4C:CF:CA:C7:85:32 Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Certificate serial: 13A7D30B4B0681F2A53182D82D6AC8EA574CB08C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft Manifest number: 2E Signing time: Tue 12 May 2026 16:15:37 +0000 Manifest this update: Tue 12 May 2026 16:10:37 +0000 Manifest next update: Wed 13 May 2026 19:23:37 +0000 Files and hashes: 1: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=) 2: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: 6EkCf2dzs3HpExqxAN8lYNusm3oXbnrmjoaKWiT3fUo=) 3: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a7:d3:0b:4b:06:81:f2:a5:31:82:d8:2d:6a:c8:ea:57:4c:b0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Validity Not Before: May 12 16:10:37 2026 GMT Not After : May 13 19:23:37 2026 GMT Subject: CN=422460AD31A1B1A2CB98DA8893A94CCFCAC78532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:7e:b0:dd:22:cc:a9:09:12:f1:87:13:68: 1d:5c:c9:3b:de:bc:4f:e0:5e:b0:a2:77:30:87:78: 7d:75:7e:0a:20:41:f0:f5:74:61:70:f2:a1:8c:9b: 46:fd:a6:6c:16:c7:7d:3f:dd:0c:41:28:33:2c:08: cc:4a:90:c4:4f:fe:27:4f:56:ae:d6:05:7a:d9:6c: bb:1c:30:3c:1e:89:a2:e5:cc:d9:50:6d:4f:e3:8c: 1e:44:a2:39:39:0b:9d:a1:e7:fd:77:a2:2b:53:3d: a0:d6:f8:5e:35:8e:0d:d9:2e:13:f6:a6:f0:a5:48: 59:ca:a1:b1:b0:f1:3f:16:8f:90:ee:75:87:e1:3e: d3:fe:c0:69:a5:fb:a3:e6:55:c0:10:4f:13:ee:ca: 75:a6:2b:94:6d:ef:7c:c7:9b:b5:4f:e0:0f:d3:21: b1:57:92:22:d9:e2:23:a9:0d:53:80:fb:eb:d3:63: 93:f9:6d:7b:4f:97:b8:d5:d7:ad:bc:ad:43:7f:47: f9:53:69:9f:0d:52:fc:0f:54:22:f9:cf:1e:b9:3f: ac:73:22:ce:15:02:28:64:e9:53:49:a0:a3:0f:da: 20:c3:18:04:5e:c4:15:31:15:fa:8c:43:de:a1:88: dc:6f:aa:f8:d3:05:7b:47:57:f6:07:dc:9d:3d:a2: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:60:AD:31:A1:B1:A2:CB:98:DA:88:93:A9:4C:CF:CA:C7:85:32 X509v3 Authority Key Identifier: keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0e:d1:a5:cc:41:44:3f:9c:4b:d0:51:91:ce:0c:5a:a6:4f: 4f:58:40:99:8c:bd:29:75:b1:ca:02:b6:5a:b9:93:ea:16:d6: e6:f4:1f:51:a1:23:72:f5:a7:41:5f:e5:41:7e:1f:fb:63:30: 75:ae:80:e7:69:34:fd:f5:b8:61:05:4b:59:cf:ec:ba:9c:55: 91:1b:4b:01:2c:91:50:e6:d8:55:4d:b2:b1:83:f3:b5:f5:41: 71:14:f0:bc:cc:99:46:2c:5e:70:cd:e8:2b:e5:57:95:a2:7f: 05:9a:76:ad:b9:e2:35:31:df:81:c4:09:0a:c6:ff:23:af:01: 5e:f0:bb:05:2a:b2:ab:32:e2:1e:87:7f:08:5a:c5:ae:90:a5: 36:f7:20:b7:0c:db:f8:9e:36:36:15:95:7a:74:de:d2:2d:06: 8b:dd:1d:21:96:e2:46:43:35:32:6d:94:d3:72:53:e6:b9:f1: 33:53:a6:f4:25:8f:58:de:de:02:1e:66:a3:6c:5a:a8:77:b3: b0:dc:8e:c1:e7:d2:65:d5:35:e4:12:9f:44:43:c1:1a:8d:b4: c4:0c:8c:51:78:02:12:32:9b:8f:82:e1:10:a3:c1:3a:60:d4: 9a:59:1d:f8:a8:47:96:ec:9d:31:85:a6:3f:42:37:fb:56:b3: fc:a3:e9:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE6fTC0sGgfKlMYLYLWrI6ldMsIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC NTNDNzBFMDAeFw0yNjA1MTIxNjEwMzdaFw0yNjA1MTMxOTIzMzdaMDMxMTAvBgNV BAMTKDQyMjQ2MEFEMzFBMUIxQTJDQjk4REE4ODkzQTk0Q0NGQ0FDNzg1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LX6w3SLMqQkS8YcTaB1cyTve vE/gXrCidzCHeH11fgogQfD1dGFw8qGMm0b9pmwWx30/3QxBKDMsCMxKkMRP/idP Vq7WBXrZbLscMDweiaLlzNlQbU/jjB5Eojk5C52h5/13oitTPaDW+F41jg3ZLhP2 pvClSFnKobGw8T8Wj5DudYfhPtP+wGml+6PmVcAQTxPuynWmK5Rt73zHm7VP4A/T IbFXkiLZ4iOpDVOA++vTY5P5bXtPl7jV1628rUN/R/lTaZ8NUvwPVCL5zx65P6xz Is4VAihk6VNJoKMP2iDDGARexBUxFfqMQ96hiNxvqvjTBXtHV/YH3J09oiTXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQiRgrTGhsaLLmNqIk6lMz8rHhTIwHwYDVR0j BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MjYxNDYzNDA0NTQ0MDIvMC9GMjFCNjE3RjQ2RTVE RDc2MEFFNTZBMjFCNjg5MDE4NUI1M0M3MEUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw7RpcxBRD+c S9BRkc4MWqZPT1hAmYy9KXWxygK2WrmT6hbW5vQfUaEjcvWnQV/lQX4f+2Mwda6A 52k0/fW4YQVLWc/supxVkRtLASyRUObYVU2ysYPztfVBcRTwvMyZRixecM3oK+VX laJ/BZp2rbniNTHfgcQJCsb/I68BXvC7BSqyqzLiHod/CFrFrpClNvcgtwzb+J42 NhWVenTe0i0Gi90dIZbiRkM1Mm2U03JT5rnxM1Om9CWPWN7eAh5mo2xaqHezsNyO wefSZdU15BKfREPBGo20xAyMUXgCEjKbj4LhEKPBOmDUmlkd+KhHluydMYWmP0I3 +1az/KPpBQ== -----END CERTIFICATE-----Generated at Wed May 13 13:48:20 2026 by rpki-client