$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: nmLqzd/Kj3+tThksqEUKslwt7n5xicsyPzag4/PqrCo= Subject key identifier: 62:51:D9:79:5A:F8:C1:DA:91:07:57:45:12:FD:C6:86:F0:FD:17:9D Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 1F29936A6B129E77920D9D470A82413C89337A04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: 2A Signing time: Wed 13 May 2026 08:11:02 +0000 Manifest this update: Wed 13 May 2026 08:06:02 +0000 Manifest next update: Thu 14 May 2026 08:19:02 +0000 Files and hashes: 1: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) 2: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: 5wJK+Zk9y1iOmOIo51boMAzsvmptE8zie7iI1iI3WaI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:29:93:6a:6b:12:9e:77:92:0d:9d:47:0a:82:41:3c:89:33:7a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: May 13 08:06:02 2026 GMT Not After : May 14 08:19:02 2026 GMT Subject: CN=6251D9795AF8C1DA9107574512FDC686F0FD179D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:89:f9:e5:96:89:c4:20:3b:c3:51:7f:a7: 2b:0e:d8:27:ce:2a:f5:38:3a:b3:cf:c0:41:d3:64: bd:b7:57:95:3a:6c:fc:f5:cd:d8:32:fd:8a:4d:0b: fc:bf:70:b6:25:64:4a:be:7c:60:f0:88:6c:ac:a9: c3:2c:32:0f:8a:ca:d5:9b:9a:3e:0d:5b:64:f1:2b: 2d:fa:dc:eb:ed:d6:64:c6:ca:96:83:e8:5e:a3:60: 0b:d5:23:56:7d:22:c3:ac:89:d0:f6:e4:73:d1:f1: 53:45:a3:a2:4c:32:06:5d:ce:fd:0d:d1:75:23:61: 75:1f:b6:2d:d1:a2:ab:c8:b4:7d:98:a5:f3:a3:b2: 09:2d:d5:3a:2f:a0:9e:7c:7a:20:0b:b2:d3:22:cd: 2b:f7:86:85:34:cb:dd:f0:9d:0b:a4:9a:9d:a6:de: 83:d9:0f:6f:64:65:01:53:2b:8d:a9:4d:90:a1:a7: 66:f6:4a:b7:9a:2b:8b:6c:17:29:b2:a6:bc:ef:04: 0f:b4:9c:d4:76:27:1a:b6:87:4a:df:26:22:34:06: 16:0a:d8:cc:a3:65:6f:6d:80:aa:45:21:dc:d4:ea: 5f:6b:0c:7e:80:15:af:61:bf:79:50:2a:5e:a1:7d: db:cc:6f:b2:39:99:5c:0f:4f:fd:ac:49:4a:63:1a: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:51:D9:79:5A:F8:C1:DA:91:07:57:45:12:FD:C6:86:F0:FD:17:9D X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:aa:3e:b5:db:fa:bd:ed:aa:92:e4:60:b0:ad:be:86:f1:50: 50:4e:6e:6d:64:d9:1b:f3:d4:d6:e8:64:40:85:21:5c:c9:e5: 96:58:7e:93:4a:22:67:f9:c2:b8:e8:9f:a2:66:4d:4b:49:09: c9:79:9a:4f:5c:c3:75:91:56:9e:35:4f:5b:4a:1f:70:11:ac: 65:36:41:b7:63:a7:1b:eb:48:9e:82:55:98:1d:dd:d0:35:6b: 0e:4b:f1:1e:6b:c6:58:33:06:76:e0:86:9a:6f:b1:f3:b4:16: 08:ed:fc:c1:e0:1c:28:df:13:ad:a7:5e:77:16:dd:f7:98:df: cb:48:f1:5b:84:1e:0b:46:25:4a:0b:d3:d4:a9:88:df:4c:16: e8:bb:fe:d5:90:15:bd:ef:b9:f8:65:5d:40:95:ac:b2:1c:d4: 23:43:18:5c:83:c7:d2:bf:30:12:1d:56:2e:e6:86:53:2f:39: 4f:ac:ea:ba:dd:35:75:88:67:7f:d6:2f:b0:3a:aa:56:e1:24: ac:ca:9a:36:d6:98:ee:3a:8d:20:b7:49:5a:41:1e:dd:cd:50: 25:7a:46:6b:bc:5f:2d:2c:cd:22:a7:14:0f:3f:59:09:1f:db: 5f:51:88:7a:f6:74:87:03:9a:d9:66:dc:79:32:db:16:72:32: 8c:fe:33:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHymTamsSnneSDZ1HCoJBPIkzegQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA1MTMwODA2MDJaFw0yNjA1MTQwODE5MDJaMDMxMTAvBgNV BAMTKDYyNTFEOTc5NUFGOEMxREE5MTA3NTc0NTEyRkRDNjg2RjBGRDE3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRYn55ZaJxCA7w1F/pysO2CfO KvU4OrPPwEHTZL23V5U6bPz1zdgy/YpNC/y/cLYlZEq+fGDwiGysqcMsMg+KytWb mj4NW2TxKy363Ovt1mTGypaD6F6jYAvVI1Z9IsOsidD25HPR8VNFo6JMMgZdzv0N 0XUjYXUfti3RoqvItH2YpfOjsgkt1TovoJ58eiALstMizSv3hoU0y93wnQukmp2m 3oPZD29kZQFTK42pTZChp2b2SreaK4tsFymyprzvBA+0nNR2Jxq2h0rfJiI0BhYK 2MyjZW9tgKpFIdzU6l9rDH6AFa9hv3lQKl6hfdvMb7I5mVwPT/2sSUpjGqOTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYlHZeVr4wdqRB1dFEv3GhvD9F50wHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqo+tdv6ve2q kuRgsK2+hvFQUE5ubWTZG/PU1uhkQIUhXMnlllh+k0oiZ/nCuOifomZNS0kJyXma T1zDdZFWnjVPW0ofcBGsZTZBt2OnG+tInoJVmB3d0DVrDkvxHmvGWDMGduCGmm+x 87QWCO38weAcKN8Tradedxbd95jfy0jxW4QeC0YlSgvT1KmI30wW6Lv+1ZAVve+5 +GVdQJWsshzUI0MYXIPH0r8wEh1WLuaGUy85T6zqut01dYhnf9YvsDqqVuEkrMqa NtaY7jqNILdJWkEe3c1QJXpGa7xfLSzNIqcUDz9ZCR/bX1GIevZ0hwOa2WbceTLb FnIyjP4zCg== -----END CERTIFICATE-----Generated at Wed May 13 12:40:12 2026 by rpki-client