$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft File: C979A435EE505D2600A38B057A1D127AADD915A7.mft (raw, json) Hash identifier: pAqZvUYr75aUY8M6QAF/n1Jpoh1zKYXZDJZzOBR6Qsw= Subject key identifier: D0:34:48:66:34:24:BC:13:64:C7:82:D8:28:AD:ED:C8:7E:68:32:54 Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7 Certificate serial: 54C4653A2154A6896DA41B647E1C4D2ACD4424AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft Manifest number: 2A Signing time: Wed 13 May 2026 09:41:03 +0000 Manifest this update: Wed 13 May 2026 09:36:03 +0000 Manifest next update: Thu 14 May 2026 10:38:03 +0000 Files and hashes: 1: 3130332e37362e36312e302f32342d3234203d3e2034383038.roa (hash: qHJ8SjuvP/L0FU1ZBFGW45FTPNVLPsl6rSF7Z151E0Y=) 2: C979A435EE505D2600A38B057A1D127AADD915A7.crl (hash: g4hH8hMCCf189u4SKXOulzY2vIZ39qA5e9s4fWgJFVQ=) 3: 3130332e37362e36302e302f32342d3234203d3e2034383038.roa (hash: /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=) 4: 3130332e37362e36332e302f32342d3234203d3e2034383038.roa (hash: ZTMv3No6G4Zfxi018iFJfqQZ3eR7To+7x4M04JylFww=) 5: 3130332e37362e36322e302f32342d3234203d3e2034383038.roa (hash: VrPCCEa9ouGYNn5oJQcrMRBIma1uSJAfNKk550Y6VWw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c4:65:3a:21:54:a6:89:6d:a4:1b:64:7e:1c:4d:2a:cd:44:24:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7 Validity Not Before: May 13 09:36:03 2026 GMT Not After : May 14 10:38:03 2026 GMT Subject: CN=D03448663424BC1364C782D828ADEDC87E683254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:fa:78:cb:5d:4e:41:f0:3f:bf:4f:d7:8a: ee:f8:6f:87:b5:da:22:7f:d1:d2:76:40:ec:84:a7: 46:82:b7:ff:7b:01:83:bc:c8:f5:28:1f:d6:13:d1: 62:1f:81:89:bb:bf:a6:19:80:a8:45:59:fd:bb:96: b7:d9:e4:eb:9e:d6:1e:7d:77:78:72:2f:b7:58:18: 0b:ad:6a:d0:b1:10:3f:5b:91:e7:00:45:fd:1d:c7: 88:a0:85:02:95:6a:f9:84:dc:d3:e5:a5:11:ab:af: 8f:b5:16:ae:5d:cc:3f:c3:df:87:fa:c6:a9:6b:11: 7e:1e:da:01:f7:ed:21:69:40:3e:97:2e:d3:3b:a2: 58:b5:2e:08:b7:b3:93:db:e2:98:5c:34:1e:d8:94: 94:75:a0:fd:f2:64:3a:89:e2:98:03:e0:bc:1c:f6: f0:03:ff:14:bc:f0:f2:44:15:72:ca:ed:11:7d:1d: e5:11:74:ab:ae:9d:58:b4:c0:96:e9:b0:c5:0c:03: ec:54:0b:2e:18:72:aa:7d:0a:c8:ef:7f:a3:4b:9e: 84:25:e1:56:45:a9:f9:6c:81:b8:90:24:13:dd:44: 74:97:14:95:63:a3:6b:1b:9b:d1:b6:f4:83:fe:bf: f6:3d:83:e4:78:9b:9e:b6:69:67:64:0d:4d:76:f8: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:34:48:66:34:24:BC:13:64:C7:82:D8:28:AD:ED:C8:7E:68:32:54 X509v3 Authority Key Identifier: keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b5:9b:22:02:da:7e:bb:f8:34:93:91:21:7e:6c:7f:ea:1e: a6:4a:c2:fd:6f:30:2e:f1:7e:b8:87:bb:01:b2:4e:3c:9b:a5: 0b:60:55:10:be:05:36:d7:62:10:aa:44:db:28:1b:3e:48:ff: 60:0e:4c:d4:c3:6a:0a:f1:ea:56:bb:50:65:b4:89:98:ef:e2: 06:bf:fc:27:37:ac:fd:b1:d0:1a:71:3a:41:ba:5a:c9:c4:6c: ec:8c:f7:ff:0a:73:c5:f7:63:29:8c:68:8f:2c:cb:5c:a3:0f: b2:c5:e7:eb:c5:96:07:e2:dc:26:a9:ec:3f:55:22:b6:e9:53: b8:9d:b1:4d:81:9a:13:a8:f6:39:53:6f:2b:84:16:9e:66:a8: 4a:d5:c1:a9:8d:1e:f9:6b:3a:89:90:b8:91:73:f2:56:09:52: 33:db:02:3e:fc:71:bd:41:b5:ba:9a:33:ca:14:74:fc:12:67: 43:10:a3:d1:1c:ed:ab:c2:13:97:f9:98:89:f3:de:66:aa:a8: 78:0a:68:67:e3:64:ce:94:e5:b3:13:e0:c1:77:75:b3:9d:20: 53:34:8a:fc:bf:b5:25:f2:94:54:52:3e:1a:c4:c5:c0:49:98: ec:aa:cb:61:5e:fe:49:35:45:ce:3b:99:7f:e2:1f:80:ff:b0: e5:78:80:1d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVMRlOiFUpoltpBtkfhxNKs1EJK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FB REQ5MTVBNzAeFw0yNjA1MTMwOTM2MDNaFw0yNjA1MTQxMDM4MDNaMDMxMTAvBgNV BAMTKEQwMzQ0ODY2MzQyNEJDMTM2NEM3ODJEODI4QURFREM4N0U2ODMyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Rfp4y11OQfA/v0/Xiu74b4e1 2iJ/0dJ2QOyEp0aCt/97AYO8yPUoH9YT0WIfgYm7v6YZgKhFWf27lrfZ5Oue1h59 d3hyL7dYGAutatCxED9bkecARf0dx4ighQKVavmE3NPlpRGrr4+1Fq5dzD/D34f6 xqlrEX4e2gH37SFpQD6XLtM7oli1Lgi3s5Pb4phcNB7YlJR1oP3yZDqJ4pgD4Lwc 9vAD/xS88PJEFXLK7RF9HeURdKuunVi0wJbpsMUMA+xUCy4Ycqp9Csjvf6NLnoQl 4VZFqflsgbiQJBPdRHSXFJVjo2sbm9G29IP+v/Y9g+R4m562aWdkDU12+IQ3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0DRIZjQkvBNkx4LYKK3tyH5oMlQwHwYDVR0j BBgwFoAUyXmkNe5QXSYAo4sFeh0Seq3ZFacwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwMjcxODE3MjA1MzUwNS8wL0M5NzlBNDM1RUU1MDVEMjYwMEEzOEIwNTdBMUQx MjdBQUREOTE1QTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDI3MTgxNzIwNTM1MDUvMC9DOTc5QTQzNUVFNTA1 RDI2MDBBMzhCMDU3QTFEMTI3QUFERDkxNUE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrWbIgLafrv4 NJORIX5sf+oepkrC/W8wLvF+uIe7AbJOPJulC2BVEL4FNtdiEKpE2ygbPkj/YA5M 1MNqCvHqVrtQZbSJmO/iBr/8Jzes/bHQGnE6QbpaycRs7Iz3/wpzxfdjKYxojyzL XKMPssXn68WWB+LcJqnsP1UitulTuJ2xTYGaE6j2OVNvK4QWnmaoStXBqY0e+Ws6 iZC4kXPyVglSM9sCPvxxvUG1upozyhR0/BJnQxCj0Rztq8ITl/mYifPeZqqoeApo Z+NkzpTlsxPgwXd1s50gUzSK/L+1JfKUVFI+GsTFwEmY7KrLYV7+STVFzjuZf+If gP+w5XiAHQ== -----END CERTIFICATE-----Generated at Wed May 13 14:57:10 2026 by rpki-client