$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft File: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json) Hash identifier: UdlUNsGS+4kOcYbtt+OrmfYoNTlRkE7uKvx0Ezy+W8c= Subject key identifier: 15:36:A9:C0:DA:7B:48:79:AD:54:88:D2:15:84:B4:C3:B7:DC:5F:16 Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4 Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4 Certificate serial: 36F33F226A484323BE7B7090A4643CFA500951EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft Manifest number: 0140 Signing time: Wed 13 May 2026 03:20:29 +0000 Manifest this update: Wed 13 May 2026 03:15:29 +0000 Manifest next update: Thu 14 May 2026 03:55:29 +0000 Files and hashes: 1: AS139080.roa (hash: 0FkJ+X+G0MS/Skou8Id8N9zGTkmyNJNJJkepvNEoaMQ=) 2: AS56047.roa (hash: 3V1gbU+6Bdba783idzKM5G47Je/1rV8dlG4NS9xzi2Q=) 3: AS141425.roa (hash: ShZmIooS/UFlr5TLH2+F9Rk+17iIhC/nwb7kx2CoRfU=) 4: AS134810.roa (hash: rFJLhDKhZr/Y4BL3WhxWBEBt5Tnm5ncZKEeNdazP4Sg=) 5: AS132525.roa (hash: oJRF7Vd0gWYGZ4i3sqvttuh6uKvnWtd2FdS6McnqVCA=) 6: AS9808.roa (hash: yAXLdf1tDLnTkmfYF2v2C5EeNvEh53YKbEUTH5PA31w=) 7: AS140105.roa (hash: 4CoCTTMS/eeu0EpGjk4DxYUflM1XsLpulc5dXV5pH28=) 8: AS56040.roa (hash: g78yZoAVMKQMZ7cIWYjzvt4vjbasDrsEY1aaxhBQX8U=) 9: AS24444.roa (hash: bj4nNc0sL2ZVkEgbqfQ1FEhzkIw4xKEHPn9eUq4lwhE=) 10: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: NU3sJ2yLv5S/zPOc1BnBeZ1Ju0yYrEcUJGdsKaPWRHg=) 11: AS56044.roa (hash: zwP5ZSaVyRx74/q0o8Mc+zzYTfnie4SnI3g1x9ICzOE=) 12: AS24445.roa (hash: 4JjDDREI4kVrwt18rMjfppCp6YMUIN65tEs88TWctW4=) 13: AS24400.roa (hash: pajZgsXSCAUxq+mEYE0FACzVEuCULxjHQPRzJEx6Xqg=) 14: AS138407.roa (hash: PYX6daE1G5y9ji7q0unNa87hic3gqwqz6BAymxPl7SM=) 15: AS38019.roa (hash: FdVBqrSZCNMzyIGNZfKptOmc0gPpcrb/61h7Ab+ovps=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f3:3f:22:6a:48:43:23:be:7b:70:90:a4:64:3c:fa:50:09:51:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4 Validity Not Before: May 13 03:15:29 2026 GMT Not After : May 14 03:55:29 2026 GMT Subject: CN=1536A9C0DA7B4879AD5488D21584B4C3B7DC5F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:c5:87:8b:d5:0d:40:a6:25:c9:21:f8:e1: 86:4f:fe:f4:cb:94:27:45:a4:b0:c4:e2:d1:07:bd: 5b:40:14:cc:02:9f:57:7d:1a:f8:6f:54:ac:1e:82: 94:d2:fa:d2:18:ab:2f:61:03:05:d5:09:93:39:dc: 16:c1:20:bd:c0:f2:53:a8:b8:12:49:7b:c8:38:f1: a3:82:b6:e5:37:41:b5:58:2c:c2:49:be:e5:fb:39: 7b:37:3f:78:a0:d5:fb:6a:21:b2:4f:d7:68:70:6d: 5b:e3:83:a5:95:3c:8c:52:fe:5a:0c:50:f1:f2:ae: 20:c5:2c:35:3e:21:71:6c:2d:d6:59:54:a3:46:f9: 75:0b:1a:6b:3c:bf:72:ba:2e:5a:2b:a9:bd:2a:c4: c4:76:4c:f5:13:82:84:0a:0d:a1:8b:23:86:5f:0c: b3:aa:0f:8e:4f:9c:87:52:36:49:bd:d0:9d:af:b3: 58:16:40:53:bc:6f:a2:34:84:33:52:1a:3a:c4:53: 9d:4c:fa:91:b6:43:72:f4:48:d4:f0:c1:13:9e:a7: ad:eb:0a:ef:ae:65:bb:9d:b4:f0:50:91:97:46:25: e5:1d:e9:30:a3:82:af:17:72:dd:17:b8:70:42:f4: 2f:6b:a0:fc:06:b6:cc:6d:03:6d:11:fd:f1:da:56: 98:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:36:A9:C0:DA:7B:48:79:AD:54:88:D2:15:84:B4:C3:B7:DC:5F:16 X509v3 Authority Key Identifier: keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:92:f2:dc:56:a9:39:4f:12:15:0f:7c:de:50:01:c0:9a:47: 6d:52:93:98:45:df:63:69:43:00:23:56:d5:b4:a9:32:3f:9d: a6:44:65:93:27:02:5c:15:b7:09:b8:88:30:78:eb:69:7e:be: 77:fa:a8:f3:2b:9b:4a:e4:f9:e0:32:30:9d:ff:22:cc:b3:58: 24:37:75:30:19:13:6e:ec:97:7a:52:6a:c5:3a:24:33:e5:3a: 3d:ae:bf:e6:ce:4a:da:3f:34:d7:4f:da:87:3e:de:a1:f5:c6: 76:f3:30:27:73:5a:85:bf:76:1f:28:aa:15:fe:13:28:e8:8d: a7:d6:b3:32:31:85:da:d9:94:36:f8:62:ae:8e:7c:7b:40:20: c5:a1:b3:a4:fc:99:c5:25:1d:2b:52:76:50:89:30:69:6c:05: 28:ee:c5:7d:21:5a:7b:37:4b:74:7f:2e:9d:b0:05:b1:1c:ed: e6:14:36:7a:8d:df:c8:a2:2b:60:3d:72:88:18:cc:35:9c:28: ac:ae:fb:93:66:a6:d5:17:7c:fa:75:58:40:bc:76:78:dd:fc: 30:97:8b:20:89:67:6a:e1:b0:a5:c3:16:40:43:61:c0:48:b4: 72:6a:29:1c:f2:54:c6:2f:8f:e2:d8:19:7c:19:f6:90:a0:d5: 61:45:70:0a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNvM/ImpIQyO+e3CQpGQ8+lAJUe4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDVGM0QwMDAwMTEwLwYDVQQFEyhEQkIyM0M3RUU0 OTIyMTJFQTg1OEI3OEUxQzY2QkYyMjk4RTVBQ0Q0MB4XDTI2MDUxMzAzMTUyOVoX DTI2MDUxNDAzNTUyOVowMzExMC8GA1UEAxMoMTUzNkE5QzBEQTdCNDg3OUFENTQ4 OEQyMTU4NEI0QzNCN0RDNUYxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoRxYeL1Q1ApiXJIfjhhk/+9MuUJ0WksMTi0Qe9W0AUzAKfV30a+G9UrB6C lNL60hirL2EDBdUJkzncFsEgvcDyU6i4Ekl7yDjxo4K25TdBtVgswkm+5fs5ezc/ eKDV+2ohsk/XaHBtW+ODpZU8jFL+WgxQ8fKuIMUsNT4hcWwt1llUo0b5dQsaazy/ crouWiupvSrExHZM9ROChAoNoYsjhl8Ms6oPjk+ch1I2Sb3Qna+zWBZAU7xvojSE M1IaOsRTnUz6kbZDcvRI1PDBE56nresK765lu5208FCRl0Yl5R3pMKOCrxdy3Re4 cEL0L2ug/Aa2zG0DbRH98dpWmMcCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQVNqnA 2ntIea1UiNIVhLTDt9xfFjAfBgNVHSMEGDAWgBTbsjx+5JIhLqhYt44cZr8imOWs 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1Nzc1NzQ3LzAvREJCMjND N0VFNDkyMjEyRUE4NThCNzhFMUM2NkJGMjI5OEU1QUNENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMjdJOGZ1U1NJ UzZvV0xlT0hHYV9JcGpsck5RLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5 NTc3NTc0Ny8wL0RCQjIzQzdFRTQ5MjIxMkVBODU4Qjc4RTFDNjZCRjIyOThFNUFD RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAakvLcVqk5TxIVD3zeUAHAmkdtUpOYRd9jaUMAI1bVtKky P52mRGWTJwJcFbcJuIgweOtpfr53+qjzK5tK5PngMjCd/yLMs1gkN3UwGRNu7Jd6 UmrFOiQz5To9rr/mzkraPzTXT9qHPt6h9cZ28zAnc1qFv3YfKKoV/hMo6I2n1rMy MYXa2ZQ2+GKujnx7QCDFobOk/JnFJR0rUnZQiTBpbAUo7sV9IVp7N0t0fy6dsAWx HO3mFDZ6jd/IoitgPXKIGMw1nCisrvuTZqbVF3z6dVhAvHZ43fwwl4sgiWdq4bCl wxZAQ2HASLRyaikc8lTGL4/i2Bl8GfaQoNVhRXAK -----END CERTIFICATE-----Generated at Wed May 13 09:17:51 2026 by rpki-client