$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft File: 5253565A27C06C800009631402F5A6EE85C46456.mft (raw, json) Hash identifier: xUXJq2iQwYDANItDyoy1nRAKHTqV3Zj2ml1R36S/MYo= Subject key identifier: D7:D0:5C:41:D5:C6:84:1E:1F:B9:79:0E:9D:6F:07:0E:F6:81:FE:FE Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456 Certificate serial: 4588A8264ABDF6B6F3E9ADA53C785A6F31208BE5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft Manifest number: 2D Signing time: Wed 13 May 2026 05:40:33 +0000 Manifest this update: Wed 13 May 2026 05:35:33 +0000 Manifest next update: Thu 14 May 2026 07:01:33 +0000 Files and hashes: 1: 5253565A27C06C800009631402F5A6EE85C46456.crl (hash: GWc3f+TRDodU29TKNAyZTYYaw20QYB8TdSrJ3jnaoqA=) 2: 36312e32382e32322e302f32342d3234203d3e203137343930.roa (hash: c8dY+eezDL5du11b5N5DH68Kfu9k1THfO3vCNk1QYJU=) 3: 36312e32382e34392e302f32342d3234203d3e203137343930.roa (hash: 1qAL1pYEAu0DoDcmCnnrMvVFEKrQOKExgEB4+TQvGO4=) 4: 36312e32382e3130382e302f32342d3234203d3e203137343930.roa (hash: fncXqOd2R+5Fk1BqsrlCFUki0Yj3TQ3y2SYjcEIQInU=) 5: 36312e32382e32302e302f32342d3234203d3e203137343930.roa (hash: gcRJWMv4hzquoRvAdEge38qqL47KkxPgYFvdxOJg3H0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:88:a8:26:4a:bd:f6:b6:f3:e9:ad:a5:3c:78:5a:6f:31:20:8b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456 Validity Not Before: May 13 05:35:33 2026 GMT Not After : May 14 07:01:33 2026 GMT Subject: CN=D7D05C41D5C6841E1FB9790E9D6F070EF681FEFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b5:39:9e:6e:1d:7f:cb:d2:71:ec:e2:34:9c: 47:a2:a2:c7:47:57:11:48:77:3a:84:45:48:0a:63: 85:95:c2:d6:d8:3f:21:a0:39:36:b3:8c:9d:64:8f: 21:a0:ec:8a:c1:98:e9:d2:7a:16:1d:8c:c7:f6:69: 5a:b7:0c:2c:de:94:ba:c0:2c:4e:ee:f5:39:33:c1: 49:8e:81:ac:95:96:9f:7f:61:f8:a6:58:ad:68:91: 43:67:90:2f:49:04:d2:7c:ae:16:07:e8:1d:8c:c5: 70:2d:e1:ef:d8:64:83:b4:86:41:a3:e1:9a:be:60: 6c:78:04:0c:5e:21:65:07:3d:94:69:c3:bd:53:68: 13:87:4e:57:aa:1a:a3:fb:17:ee:07:8e:6a:81:12: ec:5f:fe:bc:9c:5a:59:28:22:0d:5b:19:f7:26:64: ae:0e:84:8b:a5:f6:3c:7a:d0:fa:99:d6:57:da:79: 15:53:70:a9:6a:14:4f:d8:0f:ba:43:8c:11:a7:e1: 2a:f0:f4:5a:88:d5:10:bf:2a:f4:82:04:7a:1a:22: 9c:ba:f2:2f:99:58:5c:70:5b:30:56:ed:bc:70:ea: 5c:1f:c8:e5:bf:a9:16:ba:ca:fd:a4:b0:b9:05:bd: d2:54:14:df:15:d2:6f:0a:24:ac:25:94:b2:ad:24: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D0:5C:41:D5:C6:84:1E:1F:B9:79:0E:9D:6F:07:0E:F6:81:FE:FE X509v3 Authority Key Identifier: keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:02:17:a4:63:3c:17:70:0e:38:78:3b:8a:05:7d:48:15:83: bf:d7:09:64:aa:8d:b6:5a:3a:4a:45:2d:4a:e0:4b:7f:0f:d7: 75:6c:04:1e:38:31:f1:c3:ab:b2:fc:da:25:ae:8e:ca:8b:b4: a9:b8:0d:01:0a:81:b4:8e:e8:fd:e6:c3:db:bf:ec:c4:bb:7d: af:01:b8:64:7d:9f:a1:eb:8f:58:8a:42:12:c2:97:23:28:ce: 12:86:4a:6a:11:ad:66:66:80:58:8f:4e:aa:81:68:e7:98:d0: 8c:ef:3c:40:22:38:72:a2:df:9e:42:fb:1e:b4:76:bc:98:c5: d5:8c:8c:24:c9:02:db:87:0b:97:32:fb:b7:1a:9f:3d:65:08: e4:35:3e:0f:21:bb:4e:ec:8b:8f:5c:39:18:ce:34:d6:ea:57: ae:43:ee:2c:4a:fd:22:84:82:f8:fc:c3:dc:3c:a1:36:64:6a: f8:02:fd:fd:9d:2c:19:ad:25:80:39:6b:ea:7f:05:92:7a:e6: fa:fd:a1:a5:8e:fc:90:81:49:94:6f:d3:b0:0c:06:7d:21:f9: bc:e0:a4:6d:bc:22:5e:2c:d7:12:0f:29:fa:9f:55:da:f2:76: 23:ec:18:98:71:d1:73:c4:d4:47:76:2f:50:0a:6a:40:ae:bc: 2d:1c:f6:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURYioJkq99rbz6a2lPHhabzEgi+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4 NUM0NjQ1NjAeFw0yNjA1MTMwNTM1MzNaFw0yNjA1MTQwNzAxMzNaMDMxMTAvBgNV BAMTKEQ3RDA1QzQxRDVDNjg0MUUxRkI5NzkwRTlENkYwNzBFRjY4MUZFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtTmebh1/y9Jx7OI0nEeiosdH VxFIdzqERUgKY4WVwtbYPyGgOTazjJ1kjyGg7IrBmOnSehYdjMf2aVq3DCzelLrA LE7u9TkzwUmOgayVlp9/YfimWK1okUNnkC9JBNJ8rhYH6B2MxXAt4e/YZIO0hkGj 4Zq+YGx4BAxeIWUHPZRpw71TaBOHTleqGqP7F+4HjmqBEuxf/rycWlkoIg1bGfcm ZK4OhIul9jx60PqZ1lfaeRVTcKlqFE/YD7pDjBGn4Srw9FqI1RC/KvSCBHoaIpy6 8i+ZWFxwWzBW7bxw6lwfyOW/qRa6yv2ksLkFvdJUFN8V0m8KJKwllLKtJNTZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU19BcQdXGhB4fuXkOnW8HDvaB/v4wHwYDVR0j BBgwFoAUUlNWWifAbIAACWMUAvWm7oXEZFYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTY0MzY1MS8wLzUyNTM1NjVBMjdDMDZDODAwMDA5NjMxNDAyRjVB NkVFODVDNDY0NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4NUM0NjQ1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU2NDM2NTEvMC81MjUzNTY1QTI3QzA2 QzgwMDAwOTYzMTQwMkY1QTZFRTg1QzQ2NDU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgIXpGM8F3AO OHg7igV9SBWDv9cJZKqNtlo6SkUtSuBLfw/XdWwEHjgx8cOrsvzaJa6Oyou0qbgN AQqBtI7o/ebD27/sxLt9rwG4ZH2foeuPWIpCEsKXIyjOEoZKahGtZmaAWI9OqoFo 55jQjO88QCI4cqLfnkL7HrR2vJjF1YyMJMkC24cLlzL7txqfPWUI5DU+DyG7TuyL j1w5GM401upXrkPuLEr9IoSC+PzD3DyhNmRq+AL9/Z0sGa0lgDlr6n8Fknrm+v2h pY78kIFJlG/TsAwGfSH5vOCkbbwiXizXEg8p+p9V2vJ2I+wYmHHRc8TUR3YvUApq QK68LRz2+w== -----END CERTIFICATE-----Generated at Wed May 13 20:55:05 2026 by rpki-client