$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft File: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft (raw, json) Hash identifier: CrAwqzzHQ6yXSHFF0SYu9RFmdy0iJSAqCFH9bfGCfYc= Subject key identifier: 93:6B:D4:02:EF:F6:D3:F6:F7:94:A7:C2:B2:2F:47:E5:B8:5A:71:3A Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 74D28AE92AC6D0AB1BB7DE2DD9B064435C222C3A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft Manifest number: 29 Signing time: Tue 12 May 2026 23:45:49 +0000 Manifest this update: Tue 12 May 2026 23:40:49 +0000 Manifest next update: Thu 14 May 2026 01:13:49 +0000 Files and hashes: 1: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (hash: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=) 2: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl (hash: JlKMtMtW8u61xLEh8gnb//tWh7BTSDWuMEzK6n35nkE=) 3: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (hash: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=) 4: 3134342e34382e3231332e302f32342d3234203d3e203536303436.roa (hash: 9rruxfBtc3Po2Kcfh6A2jkuFy4C64mi5rqrB9y/j9lg=) 5: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (hash: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E=) 6: 3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (hash: qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=) 7: 3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (hash: zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=) 8: 3130332e3231352e33392e302f32342d3234203d3e203536303436.roa (hash: p6FgftTcMGm810mxMbm4vOq8OBqCWSWi01lBsK+/mO0=) 9: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (hash: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo=) 10: 3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (hash: ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=) 11: 3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (hash: Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=) 12: 3130332e3231352e33362e302f32322d3232203d3e203233363530.roa (hash: Z7qfxupQ6TOi75qeAxQIukqaySG+uH05FoMhY9vC090=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d2:8a:e9:2a:c6:d0:ab:1b:b7:de:2d:d9:b0:64:43:5c:22:2c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: May 12 23:40:49 2026 GMT Not After : May 14 01:13:49 2026 GMT Subject: CN=936BD402EFF6D3F6F794A7C2B22F47E5B85A713A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:2f:fb:ba:79:8d:21:eb:38:81:9a:35:cf: 97:99:ee:50:e0:42:1f:76:00:14:47:0f:6f:fc:a3: 5b:8d:5b:0e:44:03:63:5b:90:e8:8d:b8:08:49:1f: 31:22:0a:bd:a5:27:99:72:6c:87:12:cd:1f:cd:a1: 80:d4:c6:77:ae:8f:24:2a:fd:1e:28:39:52:6e:be: fa:cb:74:68:a2:7a:36:15:d1:52:61:c9:d7:77:b0: 6a:f9:fc:d1:8b:70:1b:b5:e2:9e:37:d1:1b:49:bd: d9:72:c5:61:22:67:c0:d1:27:e4:5f:f8:bd:1b:90: 55:a1:d2:2f:ac:06:91:5b:0d:af:62:8a:79:5c:d4: c8:cb:42:39:4b:e9:3b:92:41:fc:80:ef:9c:53:5b: cb:1a:9b:94:19:83:4a:77:e7:d6:45:c2:67:61:76: 0e:0d:07:e4:e4:59:35:0f:af:bd:a6:cb:06:f0:d6: 32:76:f1:af:a8:e1:f9:ff:f8:12:c3:92:70:55:9a: c7:81:a8:08:45:75:12:a4:55:38:fe:10:d2:3c:c6: a9:ed:92:d3:b3:a6:04:e9:8b:4a:0b:76:e7:aa:a5: 3f:df:02:2c:aa:0e:2a:84:77:dd:b5:44:46:21:5d: 75:5f:82:51:b4:f9:3b:d7:62:41:4d:7e:a1:1d:e7: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6B:D4:02:EF:F6:D3:F6:F7:94:A7:C2:B2:2F:47:E5:B8:5A:71:3A X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:97:3a:11:e3:49:97:d1:5a:b0:f6:9c:47:49:df:ba:3d: 22:b8:aa:dd:ba:47:69:c0:1d:52:6b:11:d9:87:84:e5:f7:db: 6f:f1:27:d3:00:f1:eb:3d:a1:1a:46:96:0d:2b:77:72:ca:18: 20:bd:50:38:76:55:d6:ab:56:93:7a:a2:51:74:95:73:4b:98: 26:be:cc:64:a2:12:e8:37:24:c0:2a:7b:46:5b:57:48:f2:5f: cf:7f:1b:aa:a0:40:ed:ec:42:fe:10:04:53:06:50:5a:0b:b1: a9:6c:e3:cd:16:ef:47:32:e6:eb:1d:7a:53:b6:82:34:aa:f7: 24:b3:05:56:ba:bf:91:a8:90:1e:14:4c:38:00:0e:b9:fe:0c: 0c:4e:2a:c0:ff:93:3a:eb:e2:1e:8a:8e:1a:08:37:6c:17:92: 80:4b:03:ae:f2:ec:73:19:d2:c6:40:25:1f:56:f7:df:1c:8e: c7:2f:cc:db:43:3b:64:5a:8a:c2:28:68:64:52:dd:e6:f4:39: 60:db:7f:96:fa:72:ed:22:d2:df:81:aa:eb:48:5f:e2:02:cb: 07:b3:8f:6e:fc:bc:9b:d4:28:e6:49:c5:80:28:97:ea:55:ff: 14:31:26:4a:18:ad:b8:e1:79:19:75:13:70:84:37:67:e3:05: ea:a9:ef:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdNKK6SrG0Ksbt94t2bBkQ1wiLDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA1MTIyMzQwNDlaFw0yNjA1MTQwMTEzNDlaMDMxMTAvBgNV BAMTKDkzNkJENDAyRUZGNkQzRjZGNzk0QTdDMkIyMkY0N0U1Qjg1QTcxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Wy/7unmNIes4gZo1z5eZ7lDg Qh92ABRHD2/8o1uNWw5EA2NbkOiNuAhJHzEiCr2lJ5lybIcSzR/NoYDUxneujyQq /R4oOVJuvvrLdGiiejYV0VJhydd3sGr5/NGLcBu14p430RtJvdlyxWEiZ8DRJ+Rf +L0bkFWh0i+sBpFbDa9iinlc1MjLQjlL6TuSQfyA75xTW8sam5QZg0p359ZFwmdh dg4NB+TkWTUPr72mywbw1jJ28a+o4fn/+BLDknBVmseBqAhFdRKkVTj+ENI8xqnt ktOzpgTpi0oLdueqpT/fAiyqDiqEd921REYhXXVfglG0+TvXYkFNfqEd50MBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk2vUAu/20/b3lKfCsi9H5bhacTowHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTEyMTU1MTczODQ3MDUvMC9EMTM1OEU5NkE1Mjc4 QUMyMThBRkI3MThFMkExQkJFRjU0QjkxNDlELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj66XOhHjSZfR WrD2nEdJ37o9Iriq3bpHacAdUmsR2YeE5ffbb/En0wDx6z2hGkaWDSt3csoYIL1Q OHZV1qtWk3qiUXSVc0uYJr7MZKIS6DckwCp7RltXSPJfz38bqqBA7exC/hAEUwZQ WguxqWzjzRbvRzLm6x16U7aCNKr3JLMFVrq/kaiQHhRMOAAOuf4MDE4qwP+TOuvi HoqOGgg3bBeSgEsDrvLscxnSxkAlH1b33xyOxy/M20M7ZFqKwihoZFLd5vQ5YNt/ lvpy7SLS34Gq60hf4gLLB7OPbvy8m9Qo5knFgCiX6lX/FDEmShituOF5GXUTcIQ3 Z+MF6qnv+Q== -----END CERTIFICATE-----Generated at Wed May 13 09:18:09 2026 by rpki-client