$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json) Hash identifier: VoL+RmVXyx3pbRyfjbNlEUHkJineFqiMd6XbOrfi8l4= Subject key identifier: 51:0B:D8:4D:89:81:62:6E:D5:F1:79:2F:2A:09:E1:EA:E2:B5:67:CD Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Certificate serial: 3BC8BBBFC7C1F418DDEA1572310FF4A71B9A2C93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft Manifest number: 31 Signing time: Wed 13 May 2026 08:21:02 +0000 Manifest this update: Wed 13 May 2026 08:16:02 +0000 Manifest next update: Thu 14 May 2026 09:19:02 +0000 Files and hashes: 1: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=) 2: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=) 3: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: EJ7J7YtKkHZj5W2tjtp/nl5TKQ5GPyUjDAJXE/0WzVA=) 4: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c8:bb:bf:c7:c1:f4:18:dd:ea:15:72:31:0f:f4:a7:1b:9a:2c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Validity Not Before: May 13 08:16:02 2026 GMT Not After : May 14 09:19:02 2026 GMT Subject: CN=510BD84D8981626ED5F1792F2A09E1EAE2B567CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:93:c0:34:2c:f5:72:a7:30:c3:58:c7:ed: 8f:6f:4e:45:b5:06:d1:b0:69:8e:1e:38:84:73:5a: a7:21:4e:37:b7:b6:fb:53:ed:38:a6:31:6d:90:e1: 61:01:4d:d1:c7:ed:94:0b:5c:fe:3f:1b:0b:12:9a: 5d:04:7a:ea:13:c8:d0:53:66:1d:07:e5:c4:2a:66: 21:8f:34:d6:fb:88:96:cf:e4:55:91:fa:3b:63:03: d6:b4:71:b6:6f:07:a9:6c:c0:5a:35:23:c2:cb:86: cd:f7:c9:08:cd:42:08:32:18:7b:15:fb:3a:14:6e: de:af:a9:15:71:34:fa:d4:23:29:04:b5:01:dc:7a: 2c:fb:11:ab:99:88:16:fe:55:d8:1a:ef:cb:22:d3: 02:16:e5:3e:a1:1a:4c:c9:34:13:9a:3e:96:0b:fb: d5:ac:7e:82:0d:a1:21:a9:ef:d4:ec:7f:65:43:39: a4:3a:1a:e9:cf:6d:da:8c:dd:c9:1c:81:ce:33:ca: 00:10:a2:14:e7:bd:e5:c4:65:7f:8d:52:3f:22:69: 14:9d:bf:a0:ff:aa:a8:52:bc:fc:0f:25:3f:46:9f: 92:87:de:6c:5f:86:99:8f:f8:4f:d4:1f:51:03:f2: 72:05:04:be:52:02:f9:de:5a:4f:f9:67:e7:98:11: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:D8:4D:89:81:62:6E:D5:F1:79:2F:2A:09:E1:EA:E2:B5:67:CD X509v3 Authority Key Identifier: keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3e:a2:57:2b:96:bb:d4:db:88:f0:42:d5:89:f1:63:7d:3a: 95:d3:0e:4b:b0:67:d3:2f:67:d6:19:1c:94:54:65:cf:3f:f3: 39:d5:f8:0d:1d:10:da:72:7a:b0:a3:99:38:e3:78:f4:83:1f: 3e:10:4d:48:36:86:73:a4:f1:dd:06:a9:d3:89:40:8b:3e:0b: 4a:c8:5a:2d:d9:4b:92:b0:a3:83:23:1a:00:54:aa:f5:2b:c2: 47:83:6b:29:42:c9:c3:9d:04:80:cd:fb:c9:b3:46:e6:57:be: a7:c9:b4:50:34:c8:99:80:3a:81:7b:e3:5a:e9:e4:22:07:09: f4:f0:06:16:de:8a:05:8c:a0:d0:59:7b:05:a3:6f:73:a9:b5: ee:84:44:34:29:26:35:32:3c:96:85:15:a2:fe:58:4a:f0:c2: 67:84:f6:79:c7:3b:36:10:a5:7d:6e:36:17:f2:9c:92:d5:38: 66:01:e2:72:9a:48:91:c9:2e:97:88:3c:10:3b:a3:cf:6d:86: 87:92:d0:5a:b4:05:b3:51:9b:25:19:69:c0:00:77:9a:a7:d6: d0:56:26:7f:a5:a8:08:c9:c2:15:2c:15:6f:ca:27:73:98:39: 72:c5:24:8f:5d:56:10:13:e8:e0:89:83:71:e1:48:d0:43:e6: 6d:12:75:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO8i7v8fB9Bjd6hVyMQ/0pxuaLJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx QUM4RjQ4QzAeFw0yNjA1MTMwODE2MDJaFw0yNjA1MTQwOTE5MDJaMDMxMTAvBgNV BAMTKDUxMEJEODREODk4MTYyNkVENUYxNzkyRjJBMDlFMUVBRTJCNTY3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVy5PANCz1cqcww1jH7Y9vTkW1 BtGwaY4eOIRzWqchTje3tvtT7TimMW2Q4WEBTdHH7ZQLXP4/GwsSml0EeuoTyNBT Zh0H5cQqZiGPNNb7iJbP5FWR+jtjA9a0cbZvB6lswFo1I8LLhs33yQjNQggyGHsV +zoUbt6vqRVxNPrUIykEtQHceiz7EauZiBb+Vdga78si0wIW5T6hGkzJNBOaPpYL +9WsfoINoSGp79Tsf2VDOaQ6GunPbdqM3ckcgc4zygAQohTnveXEZX+NUj8iaRSd v6D/qqhSvPwPJT9Gn5KH3mxfhpmP+E/UH1ED8nIFBL5SAvneWk/5Z+eYEV4HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUQvYTYmBYm7V8XkvKgnh6uK1Z80wHwYDVR0j BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAz6iVyuWu9Tb iPBC1YnxY306ldMOS7Bn0y9n1hkclFRlzz/zOdX4DR0Q2nJ6sKOZOON49IMfPhBN SDaGc6Tx3Qap04lAiz4LSshaLdlLkrCjgyMaAFSq9SvCR4NrKULJw50EgM37ybNG 5le+p8m0UDTImYA6gXvjWunkIgcJ9PAGFt6KBYyg0Fl7BaNvc6m17oRENCkmNTI8 loUVov5YSvDCZ4T2ecc7NhClfW42F/KcktU4ZgHicppIkckul4g8EDujz22Gh5LQ WrQFs1GbJRlpwAB3mqfW0FYmf6WoCMnCFSwVb8onc5g5csUkj11WEBPo4ImDceFI 0EPmbRJ13g== -----END CERTIFICATE-----Generated at Wed May 13 12:25:40 2026 by rpki-client