$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json) Hash identifier: nH2E3nkOK2icHVME2/biVkEjVPh4hrRavXfPF7IM93Q= Subject key identifier: 3E:E3:CC:3D:AE:3D:48:1A:A2:85:C5:3E:BF:41:13:BF:F3:53:06:0C Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 09534C3FB2198970683C186F51C8C79C91E3D1D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft Manifest number: 2B Signing time: Wed 13 May 2026 13:16:05 +0000 Manifest this update: Wed 13 May 2026 13:11:05 +0000 Manifest next update: Thu 14 May 2026 14:42:05 +0000 Files and hashes: 1: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: 7/eLVMjfwMh9v2UzqYAYs+Y5xC+cIqV8XE6W9Q5tziE=) 2: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:53:4c:3f:b2:19:89:70:68:3c:18:6f:51:c8:c7:9c:91:e3:d1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: May 13 13:11:05 2026 GMT Not After : May 14 14:42:05 2026 GMT Subject: CN=3EE3CC3DAE3D481AA285C53EBF4113BFF353060C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:58:47:98:de:68:09:f4:33:f2:49:9c:98:fa: 82:26:29:94:50:01:4c:0f:8c:e3:5d:9f:c7:0a:1e: 3f:f0:83:c6:f2:cf:94:cd:81:ed:9b:81:80:a8:4c: dc:a8:be:67:98:bd:a0:fc:a0:77:2e:eb:fa:8b:b6: 76:c2:91:60:06:f7:fe:94:f3:de:fe:e9:af:0d:3e: d4:af:3b:1e:bb:ef:ea:d0:ae:f4:0f:fa:ef:46:f9: 74:98:db:b7:6a:71:73:bf:80:76:b1:e8:10:06:97: 30:ae:63:50:b6:85:5a:5a:ec:dd:cc:d8:ea:89:1f: 97:70:e7:41:01:ca:65:65:67:ca:e2:c3:16:5e:d0: cf:c8:4c:af:dc:3e:ff:74:f2:81:a2:55:2c:e9:33: 4a:c3:61:3a:4b:88:c8:de:29:3a:02:f2:28:44:23: 03:dc:82:2e:62:db:e9:6b:81:35:14:73:a1:d8:15: 0a:e8:0d:16:1b:c7:82:65:7f:1b:1f:54:bf:fd:4d: 20:0f:91:6f:8f:0c:3d:15:d0:88:fe:fc:69:ce:75: b3:92:00:65:4c:c8:64:15:31:08:b1:e2:87:b1:be: 5f:75:d7:de:81:ec:ce:84:46:90:87:8d:37:b7:d8: 7a:88:b2:2b:0f:f8:11:17:01:3b:45:52:32:cb:a4: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E3:CC:3D:AE:3D:48:1A:A2:85:C5:3E:BF:41:13:BF:F3:53:06:0C X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ca:64:83:73:05:3f:e6:80:47:be:f8:4b:2a:06:e6:b6:92: ad:f3:9c:84:3a:59:49:7c:85:09:7c:ce:8e:60:da:4a:b5:6a: 60:d9:84:9a:f7:b0:a1:cb:8a:d9:65:41:23:3c:5a:17:eb:d8: ee:33:2a:ac:98:2d:98:be:90:68:12:b5:85:e9:18:70:29:36: 50:0e:8a:56:b3:61:cc:95:31:5a:79:8d:3b:96:5f:19:22:79: 16:0c:4e:41:01:50:3c:4e:80:d9:47:82:45:eb:df:e6:cf:9f: d4:6e:6d:bf:1c:e5:e1:c1:6a:94:7a:2e:ed:1a:59:ce:3e:8a: c6:a7:3c:51:b5:e4:f9:2b:27:ec:e9:c9:99:41:93:c0:d1:78: 42:ff:2c:e6:c3:f3:21:8d:68:2e:b9:48:ac:fa:e0:af:57:da: 6b:5d:33:3a:9c:8c:b4:83:89:ae:ce:83:95:1a:31:fd:7e:f6: 9b:c4:f1:44:86:db:e7:03:9f:5b:b6:fd:64:1e:5f:df:ac:d2: e4:dd:bd:6d:66:0c:f8:96:5b:c0:69:1d:ed:d6:0f:e2:e3:30: bc:94:b0:92:08:38:74:eb:6b:00:d7:1d:93:0d:53:5e:21:2d: 55:04:5a:0c:93:19:4d:1f:2f:9d:93:c8:57:6c:2e:1e:55:be: 86:8a:b7:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCVNMP7IZiXBoPBhvUcjHnJHj0dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjA1MTMxMzExMDVaFw0yNjA1MTQxNDQyMDVaMDMxMTAvBgNV BAMTKDNFRTNDQzNEQUUzRDQ4MUFBMjg1QzUzRUJGNDExM0JGRjM1MzA2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWEeY3mgJ9DPySZyY+oImKZRQ AUwPjONdn8cKHj/wg8byz5TNge2bgYCoTNyovmeYvaD8oHcu6/qLtnbCkWAG9/6U 897+6a8NPtSvOx677+rQrvQP+u9G+XSY27dqcXO/gHax6BAGlzCuY1C2hVpa7N3M 2OqJH5dw50EBymVlZ8riwxZe0M/ITK/cPv908oGiVSzpM0rDYTpLiMjeKToC8ihE IwPcgi5i2+lrgTUUc6HYFQroDRYbx4JlfxsfVL/9TSAPkW+PDD0V0Ij+/GnOdbOS AGVMyGQVMQix4oexvl91196B7M6ERpCHjTe32HqIsisP+BEXATtFUjLLpIC5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPuPMPa49SBqihcU+v0ETv/NTBgwwHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC9FQzdFNDc2REQxRkE2 NUExQTEzQzc0RThBNTQ3QzlFMUQyN0Q4REYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcpkg3MFP+aA R774SyoG5raSrfOchDpZSXyFCXzOjmDaSrVqYNmEmvewocuK2WVBIzxaF+vY7jMq rJgtmL6QaBK1hekYcCk2UA6KVrNhzJUxWnmNO5ZfGSJ5FgxOQQFQPE6A2UeCRevf 5s+f1G5tvxzl4cFqlHou7RpZzj6Kxqc8UbXk+Ssn7OnJmUGTwNF4Qv8s5sPzIY1o LrlIrPrgr1faa10zOpyMtIOJrs6DlRox/X72m8TxRIbb5wOfW7b9ZB5f36zS5N29 bWYM+JZbwGkd7dYP4uMwvJSwkgg4dOtrANcdkw1TXiEtVQRaDJMZTR8vnZPIV2wu HlW+hoq3rw== -----END CERTIFICATE-----Generated at Wed May 13 18:42:50 2026 by rpki-client