$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json) Hash identifier: Nz9M10mAB+Sif6FQ0mtamHE+2+DhR7R1syBGWTo9J94= Subject key identifier: 53:A5:B9:12:A8:6E:B9:AE:80:D4:12:F6:92:11:6A:37:BA:47:EE:37 Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Certificate serial: 1389C5EAF65624B125789E8595E9F84E71BF5CBB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft Manifest number: 2A Signing time: Wed 13 May 2026 07:51:02 +0000 Manifest this update: Wed 13 May 2026 07:46:02 +0000 Manifest next update: Thu 14 May 2026 08:51:02 +0000 Files and hashes: 1: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: I9v8YeYKc8q956l2B9yLf9s47iOJ5O/IdM2WEzlAs4U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:89:c5:ea:f6:56:24:b1:25:78:9e:85:95:e9:f8:4e:71:bf:5c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Validity Not Before: May 13 07:46:02 2026 GMT Not After : May 14 08:51:02 2026 GMT Subject: CN=53A5B912A86EB9AE80D412F692116A37BA47EE37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:80:58:2c:b7:b7:11:0d:c8:0b:5b:74:26: a2:75:78:fb:e0:f6:c6:e2:5c:55:47:94:65:41:f5: bb:c0:01:23:55:37:42:ab:01:0e:5b:c5:c1:2b:22: 3d:51:1d:91:03:5b:3a:40:07:79:b6:14:ef:fe:12: bc:27:5e:34:d1:15:39:7f:07:0d:75:fe:cf:63:ab: 38:f2:a1:e1:10:17:61:4b:43:1d:8f:6f:f5:53:8c: 58:fa:f0:12:2a:2c:46:0a:56:28:5e:3f:91:2b:97: 66:23:3d:2a:6b:61:0c:32:ea:15:4b:55:49:41:4b: 47:fe:99:0b:39:d6:0f:81:10:80:a1:43:ed:04:04: 60:a9:ca:bc:66:85:01:75:6f:f0:da:f4:86:3f:e9: 0b:33:e0:f5:67:a6:31:87:74:cf:b3:79:0d:66:45: ee:d9:b7:78:a8:03:45:01:a2:7c:30:f8:21:1b:fd: 11:47:24:45:7c:a9:71:9b:04:ed:a8:95:91:51:fc: fb:94:34:95:3e:75:0f:e6:e3:0d:d5:e5:46:fe:68: fe:6a:f8:4d:c4:48:f5:22:be:5b:4e:f2:b8:10:fb: e7:f8:c6:61:a9:35:a4:15:7b:11:38:79:2b:a8:cf: da:d0:e8:e1:cd:b3:db:87:97:a2:4b:c2:e3:1e:20: 09:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A5:B9:12:A8:6E:B9:AE:80:D4:12:F6:92:11:6A:37:BA:47:EE:37 X509v3 Authority Key Identifier: keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fd:de:5b:dc:e9:87:a2:81:17:82:52:78:a3:59:a9:e0:63: f7:ff:44:cd:b7:60:61:59:8f:af:5b:1a:89:b1:63:95:b6:a2: b8:53:57:bd:c1:0c:e8:e3:ed:3a:03:4a:9d:b7:a2:2b:70:de: fb:71:fd:99:ec:14:ce:43:63:c8:0a:54:60:80:26:31:ae:2a: 95:7d:27:ac:08:35:a0:48:98:a9:0c:f6:1e:46:a7:b3:ea:b9: ca:dc:b4:0c:a7:4e:23:94:9a:5d:c5:f9:96:36:75:fb:df:2a: c9:54:fe:4d:ba:ae:68:e9:ee:c9:48:30:a6:94:e5:34:9d:bf: 87:8d:a8:72:5d:3a:d1:ea:a1:99:9e:64:50:52:d7:d4:8e:49: 84:10:3b:7e:62:26:0e:73:42:ef:e2:8c:ea:aa:5d:49:15:a1: 9f:72:ba:3f:a3:03:8a:b8:9b:b9:52:4d:1a:8e:10:75:42:05: ba:1c:c4:10:6d:2e:3c:c2:27:db:2c:72:e5:8d:fb:bf:eb:a3: 96:2f:f6:34:6a:ed:f1:70:af:19:ca:37:77:ae:94:f1:cb:95: b8:e0:fd:e1:23:71:17:cd:49:09:17:9f:b5:4d:a3:a7:a3:21: 39:c1:e6:0f:c4:43:b7:7c:56:3a:29:60:6a:09:66:b5:08:c3: e4:1e:33:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE4nF6vZWJLEleJ6Flen4TnG/XLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJE MkVENjlBRjAeFw0yNjA1MTMwNzQ2MDJaFw0yNjA1MTQwODUxMDJaMDMxMTAvBgNV BAMTKDUzQTVCOTEyQTg2RUI5QUU4MEQ0MTJGNjkyMTE2QTM3QkE0N0VFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvoBYLLe3EQ3IC1t0JqJ1ePvg 9sbiXFVHlGVB9bvAASNVN0KrAQ5bxcErIj1RHZEDWzpAB3m2FO/+ErwnXjTRFTl/ Bw11/s9jqzjyoeEQF2FLQx2Pb/VTjFj68BIqLEYKViheP5Erl2YjPSprYQwy6hVL VUlBS0f+mQs51g+BEIChQ+0EBGCpyrxmhQF1b/Da9IY/6Qsz4PVnpjGHdM+zeQ1m Re7Zt3ioA0UBonww+CEb/RFHJEV8qXGbBO2olZFR/PuUNJU+dQ/m4w3V5Ub+aP5q +E3ESPUivltO8rgQ++f4xmGpNaQVexE4eSuoz9rQ6OHNs9uHl6JLwuMeIAmjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU6W5Eqhuua6A1BL2khFqN7pH7jcwHwYDVR0j BBgwFoAUfFWaAIQNADJbRdf2p8EO29Ltaa8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8wLzdDNTU5QTAwODQwRDAwMzI1QjQ1RDdGNkE3QzEw RURCRDJFRDY5QUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMC83QzU1OUEwMDg0MEQw MDMyNUI0NUQ3RjZBN0MxMEVEQkQyRUQ2OUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf3eW9zph6KB F4JSeKNZqeBj9/9EzbdgYVmPr1saibFjlbaiuFNXvcEM6OPtOgNKnbeiK3De+3H9 mewUzkNjyApUYIAmMa4qlX0nrAg1oEiYqQz2Hkans+q5yty0DKdOI5SaXcX5ljZ1 +98qyVT+TbquaOnuyUgwppTlNJ2/h42ocl060eqhmZ5kUFLX1I5JhBA7fmImDnNC 7+KM6qpdSRWhn3K6P6MDiribuVJNGo4QdUIFuhzEEG0uPMIn2yxy5Y37v+ujli/2 NGrt8XCvGco3d66U8cuVuOD94SNxF81JCReftU2jp6MhOcHmD8RDt3xWOilgaglm tQjD5B4z9A== -----END CERTIFICATE-----Generated at Wed May 13 16:52:24 2026 by rpki-client