$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft File: 5F00140F672D031D0607493A021A46F1A9475AE8.mft (raw, json) Hash identifier: u6CLNehh5itqjMHCYlUJA1kl+BAFyyeQoyN+ZAZTiYs= Subject key identifier: 69:E2:27:51:F4:AE:8D:C3:0E:F7:CB:C4:18:07:F3:DA:58:D8:A6:DE Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8 Certificate serial: 1B1DD1D2171FAD1D57A03D1483E985131898D284 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft Manifest number: 2C Signing time: Wed 13 May 2026 04:00:55 +0000 Manifest this update: Wed 13 May 2026 03:55:55 +0000 Manifest next update: Thu 14 May 2026 07:17:55 +0000 Files and hashes: 1: 3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa (hash: 26nl4bikGp2Ci9HCEbZJ7fOjhWzaLL4wYwu2l9/Jgao=) 2: 3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa (hash: U7ZbArWBWfu8/5lcAVKldcUla2gFMo1Yu6PSfWaHzL8=) 3: 5F00140F672D031D0607493A021A46F1A9475AE8.crl (hash: asMuZbrOum9dOlccbZoQnnxBNYVSSnndoz1Hj5d4qTw=) 4: 3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa (hash: hBscGvJr4AnNB3Ne2DqjxOugixWWQhpfuAEh32znKV0=) 5: 3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa (hash: CKziFNu0LqXNWZ/lBrbX59kZ+YgYSz+Zo35FHCpodYY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:1d:d1:d2:17:1f:ad:1d:57:a0:3d:14:83:e9:85:13:18:98:d2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8 Validity Not Before: May 13 03:55:55 2026 GMT Not After : May 14 07:17:55 2026 GMT Subject: CN=69E22751F4AE8DC30EF7CBC41807F3DA58D8A6DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:cd:e8:13:87:d0:31:54:c0:87:94:47:25: 84:7a:c2:89:fc:64:28:27:6b:a1:96:49:f0:f6:e9: 40:f4:86:60:b8:5a:af:4f:e9:08:cb:d3:ac:8b:e5: b2:96:65:27:77:8c:24:d1:a3:c5:c4:8a:b7:a8:35: b8:65:98:ba:61:42:97:69:0a:af:29:29:1b:22:de: fc:f9:36:fd:f3:e5:c2:a9:8e:94:66:9b:98:ff:77: c1:68:a2:40:fc:ce:de:bd:ef:7c:51:e9:d6:86:1b: 2f:02:77:cf:fd:23:8d:ea:b9:fc:fc:5a:e9:11:c1: 9e:fb:e2:41:b6:63:6c:84:53:21:bd:b3:69:43:33: 56:e7:6b:f5:90:d0:a4:0a:79:26:c5:4d:3d:98:97: f4:b0:31:20:79:83:23:6f:a6:c5:93:21:62:97:e7: ab:bd:fd:b6:cc:ee:0f:ce:a6:bd:8d:9b:d7:83:6d: 1a:e9:b9:91:e3:27:a7:fa:c5:a9:e1:2e:f7:e4:ab: f6:22:c6:f3:85:1b:72:b4:a3:a6:56:88:c5:2a:cd: b2:79:ee:51:27:4e:39:80:30:d5:b4:73:1f:be:66: 70:96:8e:9e:0e:45:b2:19:7b:70:81:7b:b3:a8:7b: 4c:c4:ba:2c:da:84:d3:1e:b7:8f:aa:f0:d4:41:e9: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E2:27:51:F4:AE:8D:C3:0E:F7:CB:C4:18:07:F3:DA:58:D8:A6:DE X509v3 Authority Key Identifier: keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:15:4e:56:58:7e:ec:11:3b:93:97:fd:38:a5:7a:cf:00:ce: 8d:bc:79:00:4e:b6:cf:a5:05:d3:e5:21:8a:80:ab:05:39:39: bb:91:27:86:9b:11:76:8d:2f:b0:63:86:4a:2e:0d:82:1c:cf: 01:e6:87:8a:40:d9:12:a9:ee:1f:25:f9:6c:59:5f:e8:47:7d: 32:e4:a5:42:c2:28:57:5b:f1:41:bb:fe:47:20:f8:58:f2:e7: 9f:5e:1d:32:98:c9:81:b6:d9:16:a2:8f:7c:16:ff:1d:fb:43: b8:67:4a:b1:6f:4f:a2:07:f6:1b:9e:ab:74:59:0a:82:2e:00: 02:f1:c6:0a:af:a1:ac:04:33:6b:a6:8c:a5:80:a5:4c:d6:bc: a4:66:1e:26:78:1b:21:72:bc:06:38:d4:03:97:e2:6c:b2:bb: f5:ca:f5:1f:db:41:d8:06:a6:22:cf:1c:66:6e:54:38:de:45: 68:68:e1:b2:20:5f:c7:6e:c8:e2:e8:e5:f7:08:d7:f6:9b:69: 5f:60:b7:e2:4d:06:04:6b:ae:a3:52:c1:14:0c:9f:8d:6d:d4: 15:d1:3e:28:5b:82:a6:24:fa:f4:3d:dd:e8:e3:9a:02:84:1e: 8c:35:de:33:3f:f6:2f:3e:78:cc:b8:92:7c:4e:a2:ca:52:0d: b4:ff:de:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGx3R0hcfrR1XoD0Ug+mFExiY0oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFB OTQ3NUFFODAeFw0yNjA1MTMwMzU1NTVaFw0yNjA1MTQwNzE3NTVaMDMxMTAvBgNV BAMTKDY5RTIyNzUxRjRBRThEQzMwRUY3Q0JDNDE4MDdGM0RBNThEOEE2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3w83oE4fQMVTAh5RHJYR6won8 ZCgna6GWSfD26UD0hmC4Wq9P6QjL06yL5bKWZSd3jCTRo8XEireoNbhlmLphQpdp Cq8pKRsi3vz5Nv3z5cKpjpRmm5j/d8FookD8zt6973xR6daGGy8Cd8/9I43qufz8 WukRwZ774kG2Y2yEUyG9s2lDM1bna/WQ0KQKeSbFTT2Yl/SwMSB5gyNvpsWTIWKX 56u9/bbM7g/Opr2Nm9eDbRrpuZHjJ6f6xanhLvfkq/YixvOFG3K0o6ZWiMUqzbJ5 7lEnTjmAMNW0cx++ZnCWjp4ORbIZe3CBe7Ooe0zEuizahNMet4+q8NRB6YmBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaeInUfSujcMO98vEGAfz2ljYpt4wHwYDVR0j BBgwFoAUXwAUD2ctAx0GB0k6AhpG8alHWugwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4MTIxNTA2NTQ1NjY0Mi8wLzVGMDAxNDBGNjcyRDAzMUQwNjA3NDkzQTAyMUE0 NkYxQTk0NzVBRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFBOTQ3NUFFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODEyMTUwNjU0NTY2NDIvMC81RjAwMTQwRjY3MkQw MzFEMDYwNzQ5M0EwMjFBNDZGMUE5NDc1QUU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRVOVlh+7BE7 k5f9OKV6zwDOjbx5AE62z6UF0+UhioCrBTk5u5EnhpsRdo0vsGOGSi4NghzPAeaH ikDZEqnuHyX5bFlf6Ed9MuSlQsIoV1vxQbv+RyD4WPLnn14dMpjJgbbZFqKPfBb/ HftDuGdKsW9Pogf2G56rdFkKgi4AAvHGCq+hrAQza6aMpYClTNa8pGYeJngbIXK8 BjjUA5fibLK79cr1H9tB2AamIs8cZm5UON5FaGjhsiBfx27I4ujl9wjX9ptpX2C3 4k0GBGuuo1LBFAyfjW3UFdE+KFuCpiT69D3d6OOaAoQejDXeMz/2Lz54zLiSfE6i ylINtP/e8A== -----END CERTIFICATE-----Generated at Wed May 13 20:55:30 2026 by rpki-client