$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: FzThsKZXMbYWPn1u2mp3zM56RQw9+THhRJh5lCuH29c= Subject key identifier: 31:2F:45:3E:EA:9C:12:5A:59:00:10:94:42:90:9F:8D:5F:44:E0:81 Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 2058D6985269C0CF7F1967C6EDFE786966DAA2BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: 2E Signing time: Tue 12 May 2026 17:20:37 +0000 Manifest this update: Tue 12 May 2026 17:15:37 +0000 Manifest next update: Wed 13 May 2026 19:33:37 +0000 Files and hashes: 1: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: xKsX+hvHssSRlzT7+VP7WdWG+5k+xqYiTIRfKNu7LWM=) 2: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 3: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:58:d6:98:52:69:c0:cf:7f:19:67:c6:ed:fe:78:69:66:da:a2:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: May 12 17:15:37 2026 GMT Not After : May 13 19:33:37 2026 GMT Subject: CN=312F453EEA9C125A5900109442909F8D5F44E081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:06:8b:13:80:f3:3c:7e:cd:80:f5:0f:f2: 60:3a:c0:f9:70:d1:3d:11:f9:43:37:2a:2f:f5:d8: 28:be:b0:81:a3:2b:86:ae:dd:13:bb:cd:13:cd:ba: 80:18:34:19:87:22:e5:5d:fd:03:df:a8:77:8b:d2: 22:cb:95:c5:77:78:2b:1c:06:4d:4d:26:26:ab:82: 07:75:76:e2:f4:2e:58:c8:c8:41:ca:65:01:76:95: af:d3:40:9b:a8:19:21:4b:f0:59:b5:24:48:7f:24: 60:e5:b7:eb:2f:3a:f7:d7:82:ba:3d:4c:f8:07:4e: a0:bf:b2:e7:8b:71:01:40:8e:8b:2c:cb:6c:56:d3: 79:bc:82:89:d1:04:f5:71:e5:5a:8f:ee:c9:91:42: 30:89:4f:76:3a:36:2f:cd:f6:62:bc:53:46:0a:2c: f2:4c:36:8c:d1:14:09:c3:20:5f:42:d1:39:dd:e7: b3:a4:83:cc:43:a1:07:ea:c5:9c:ef:aa:28:81:16: 87:92:31:4b:0f:26:19:36:fa:50:03:e0:cf:29:cb: 55:90:18:ba:fb:2c:b0:9e:ab:61:89:9e:60:29:7c: 2a:b5:74:f3:6e:2a:b8:63:34:85:14:f4:de:45:10: e7:84:10:a0:a6:d5:56:1a:09:63:41:62:69:71:3f: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2F:45:3E:EA:9C:12:5A:59:00:10:94:42:90:9F:8D:5F:44:E0:81 X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b7:c2:4f:c1:c0:9a:da:8d:f7:17:95:6e:36:cc:16:dd:4e: 8b:a4:a0:32:ad:4e:f0:bc:ed:bc:05:02:46:b6:0a:e6:a4:77: 68:28:ee:94:c9:24:d1:5c:2a:8d:37:74:88:14:a3:18:28:dc: a9:59:cb:38:7e:a1:e7:08:ae:8c:98:bc:09:21:d3:bf:e9:e7: db:b3:7e:93:ee:84:15:98:ee:9d:8b:15:bc:b8:3c:95:6a:6f: 78:98:3b:fd:67:e1:97:98:98:23:ec:32:ff:05:18:1e:b9:24: 13:e4:ad:6d:21:97:22:9f:7e:0e:c6:9f:df:2d:bd:2f:db:e2: 2d:00:aa:12:a9:f6:3f:33:f9:ed:70:3f:fd:e4:24:0e:f6:61: d6:ac:b4:58:f3:b0:86:68:a3:ce:cb:02:9e:af:3f:c2:50:23: 5b:4f:83:1e:d1:ee:31:16:12:ae:3d:07:ec:89:ff:a3:2f:d2: e5:69:4c:93:ea:93:fa:12:5c:bc:26:9e:42:94:09:71:57:db: 95:ac:77:f2:4d:c3:c5:cb:12:a7:e6:0b:a5:2c:0e:00:33:25: 34:3e:5f:d0:01:a6:e4:03:dd:72:f6:9c:34:32:bb:06:6f:61: 77:01:ff:75:0c:65:85:fb:00:c1:0c:1e:aa:18:84:8d:02:90: 3a:03:f9:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIFjWmFJpwM9/GWfG7f54aWbaor8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA1MTIxNzE1MzdaFw0yNjA1MTMxOTMzMzdaMDMxMTAvBgNV BAMTKDMxMkY0NTNFRUE5QzEyNUE1OTAwMTA5NDQyOTA5RjhENUY0NEUwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28AaLE4DzPH7NgPUP8mA6wPlw 0T0R+UM3Ki/12Ci+sIGjK4au3RO7zRPNuoAYNBmHIuVd/QPfqHeL0iLLlcV3eCsc Bk1NJiarggd1duL0LljIyEHKZQF2la/TQJuoGSFL8Fm1JEh/JGDlt+svOvfXgro9 TPgHTqC/sueLcQFAjossy2xW03m8gonRBPVx5VqP7smRQjCJT3Y6Ni/N9mK8U0YK LPJMNozRFAnDIF9C0Tnd57Okg8xDoQfqxZzvqiiBFoeSMUsPJhk2+lAD4M8py1WQ GLr7LLCeq2GJnmApfCq1dPNuKrhjNIUU9N5FEOeEEKCm1VYaCWNBYmlxP3EjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMS9FPuqcElpZABCUQpCfjV9E4IEwHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7fCT8HAmtqN 9xeVbjbMFt1Oi6SgMq1O8LztvAUCRrYK5qR3aCjulMkk0VwqjTd0iBSjGCjcqVnL OH6h5wiujJi8CSHTv+nn27N+k+6EFZjunYsVvLg8lWpveJg7/Wfhl5iYI+wy/wUY HrkkE+StbSGXIp9+Dsaf3y29L9viLQCqEqn2PzP57XA//eQkDvZh1qy0WPOwhmij zssCnq8/wlAjW0+DHtHuMRYSrj0H7In/oy/S5WlMk+qT+hJcvCaeQpQJcVfblax3 8k3DxcsSp+YLpSwOADMlND5f0AGm5APdcvacNDK7Bm9hdwH/dQxlhfsAwQweqhiE jQKQOgP5Ow== -----END CERTIFICATE-----Generated at Wed May 13 12:40:12 2026 by rpki-client