$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: 0Vhrqd2/XKxq3iiMuKjQZCyGG9h0fXct6fDkPM/q7mg= Subject key identifier: A1:47:33:A6:F8:C6:09:23:83:AA:40:BC:2D:E7:61:05:6F:AD:39:E5 Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 0ED240BA1D58DE56FB80AE07872A6B8A734FD2EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: 33 Signing time: Tue 12 May 2026 22:40:48 +0000 Manifest this update: Tue 12 May 2026 22:35:48 +0000 Manifest next update: Wed 13 May 2026 23:35:48 +0000 Files and hashes: 1: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) 2: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 3: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 4: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: jOW5ntMVwvxCcJqf50RO5P55FpKksdk1SPojnhCrmUw=) 5: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) 6: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 7: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d2:40:ba:1d:58:de:56:fb:80:ae:07:87:2a:6b:8a:73:4f:d2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: May 12 22:35:48 2026 GMT Not After : May 13 23:35:48 2026 GMT Subject: CN=A14733A6F8C6092383AA40BC2DE761056FAD39E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:77:d9:73:b2:11:ef:24:c0:f4:2d:6e:da: 12:ee:a0:24:35:94:a5:75:7d:62:94:3b:c9:86:da: 2f:a2:5d:c4:7e:39:c8:1c:30:eb:62:76:6a:35:ae: d8:52:92:88:f5:1e:be:67:56:f1:37:7d:6e:57:64: 3c:a0:54:d4:03:ec:b6:d4:ae:83:b2:ae:b6:48:28: 86:de:98:68:5f:33:0d:96:c5:4d:0b:5f:9e:42:02: 27:41:fa:2a:12:09:80:0b:83:e6:6b:20:05:90:e8: af:6c:7f:ef:e8:cf:48:06:4f:1f:e6:2f:40:4a:01: f8:76:31:5a:3f:f8:30:a5:c9:2c:14:41:86:78:81: 60:0b:f0:6e:e3:20:70:2d:dc:62:03:88:86:54:49: 10:b5:1f:e9:2f:7c:74:de:c4:bc:44:0c:ae:8d:5e: 45:01:f8:ea:a8:55:21:e7:ec:ac:07:84:9a:af:31: 48:6c:9b:db:8b:d9:d6:2e:bd:c8:11:fa:ca:ab:9f: df:36:47:9c:31:00:f4:d6:88:09:b5:79:bc:f8:ef: 01:cd:c2:74:2f:16:23:a4:06:4a:a3:5d:70:cc:39: 9e:08:b3:4a:24:30:73:e2:66:aa:d6:a3:b4:7f:36: e8:cd:c4:69:b3:65:3f:ba:21:76:55:2e:eb:32:f4: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:47:33:A6:F8:C6:09:23:83:AA:40:BC:2D:E7:61:05:6F:AD:39:E5 X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:25:01:bb:bf:57:c0:c4:53:62:c4:78:96:0d:3b:2e:ac:1d: 0e:e3:a0:56:40:29:af:7e:ea:98:8e:9e:76:9f:a3:3f:b2:46: 84:60:33:86:90:b1:a9:13:57:45:dd:c3:47:76:0a:ca:bb:59: 5a:f6:68:23:11:7e:07:a2:01:9e:76:d0:07:79:0c:46:99:75: c6:96:5e:4a:cb:9d:25:29:f7:31:bc:22:ed:2a:a7:48:a5:35: 60:24:19:4a:85:20:9d:c1:81:21:03:d1:76:8a:ba:dd:93:d3: 40:e3:97:21:d8:aa:58:77:a7:84:94:70:17:49:50:63:a6:09: 6d:f3:9a:92:9f:38:9f:b3:12:b5:00:2d:dd:41:42:fd:dd:b0: 04:87:0c:c3:8c:a1:39:56:cb:79:d7:45:e1:1c:99:9c:c9:25: e5:a8:5b:49:57:c8:2a:51:86:14:8a:f4:f8:67:ed:75:d0:12: 68:9b:75:65:91:43:fd:12:9c:82:9e:16:70:6e:df:36:18:7c: 6e:70:d2:6e:1f:4e:1f:fa:c7:f4:4b:4a:d8:2a:e1:b7:08:db: 73:95:2a:c6:be:33:65:49:da:f6:ca:85:53:24:8b:9e:2e:43: d4:e9:e9:a6:3d:c7:90:31:64:ee:68:1f:cb:3a:dd:67:68:e1: 91:aa:82:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDtJAuh1Y3lb7gK4HhyprinNP0uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA1MTIyMjM1NDhaFw0yNjA1MTMyMzM1NDhaMDMxMTAvBgNV BAMTKEExNDczM0E2RjhDNjA5MjM4M0FBNDBCQzJERTc2MTA1NkZBRDM5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOHfZc7IR7yTA9C1u2hLuoCQ1 lKV1fWKUO8mG2i+iXcR+OcgcMOtidmo1rthSkoj1Hr5nVvE3fW5XZDygVNQD7LbU roOyrrZIKIbemGhfMw2WxU0LX55CAidB+ioSCYALg+ZrIAWQ6K9sf+/oz0gGTx/m L0BKAfh2MVo/+DClySwUQYZ4gWAL8G7jIHAt3GIDiIZUSRC1H+kvfHTexLxEDK6N XkUB+OqoVSHn7KwHhJqvMUhsm9uL2dYuvcgR+sqrn982R5wxAPTWiAm1ebz47wHN wnQvFiOkBkqjXXDMOZ4Is0okMHPiZqrWo7R/NujNxGmzZT+6IXZVLusy9FoXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoUczpvjGCSODqkC8LedhBW+tOeUwHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASUBu79XwMRT YsR4lg07LqwdDuOgVkApr37qmI6edp+jP7JGhGAzhpCxqRNXRd3DR3YKyrtZWvZo IxF+B6IBnnbQB3kMRpl1xpZeSsudJSn3Mbwi7SqnSKU1YCQZSoUgncGBIQPRdoq6 3ZPTQOOXIdiqWHenhJRwF0lQY6YJbfOakp84n7MStQAt3UFC/d2wBIcMw4yhOVbL eddF4RyZnMkl5ahbSVfIKlGGFIr0+GftddASaJt1ZZFD/RKcgp4WcG7fNhh8bnDS bh9OH/rH9EtK2Crhtwjbc5Uqxr4zZUna9sqFUySLni5D1Onppj3HkDFk7mgfyzrd Z2jhkaqCIQ== -----END CERTIFICATE-----Generated at Wed May 13 16:47:49 2026 by rpki-client