$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json) Hash identifier: OvNx0AheA3xPWQuYcLtmj9k02gVWKBvwH+TFboG3cUQ= Subject key identifier: 90:26:3D:A8:86:50:89:5C:40:AE:D3:6F:2D:C4:78:34:39:F8:E2:7F Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Certificate serial: 0BA23086D26F9E786C510D08E0152FC55B12FBF9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft Manifest number: 2A Signing time: Wed 13 May 2026 11:41:04 +0000 Manifest this update: Wed 13 May 2026 11:36:04 +0000 Manifest next update: Thu 14 May 2026 14:38:04 +0000 Files and hashes: 1: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=) 2: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=) 3: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: Y1TiH6wAb6acdfxyGe1+I7XOW6T0au6N4DvMQaVC550=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a2:30:86:d2:6f:9e:78:6c:51:0d:08:e0:15:2f:c5:5b:12:fb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Validity Not Before: May 13 11:36:04 2026 GMT Not After : May 14 14:38:04 2026 GMT Subject: CN=90263DA88650895C40AED36F2DC4783439F8E27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:5f:01:f4:83:be:5e:aa:1c:a2:76:06:c5: 12:52:2a:3f:78:11:36:f8:7f:52:6c:f4:b9:bb:6d: fb:6c:8d:fd:d3:3e:3b:b8:6b:90:4a:38:7d:56:88: f5:4a:07:10:93:6a:2a:2c:b4:7b:66:2d:8e:e9:12: 34:52:b2:23:41:ae:77:f2:4d:ae:64:62:14:2e:ca: 3a:13:77:e3:fe:b4:cf:d6:92:21:79:00:5f:8e:73: c4:ec:23:15:95:32:1b:91:42:88:b2:8b:36:ec:93: 0b:9f:3a:48:45:62:3f:8b:de:4f:03:00:6f:65:9f: f2:85:94:4b:25:a3:dd:44:4c:43:3e:b6:dd:ba:32: 70:ee:7a:31:ab:8a:b4:10:0a:fb:64:8a:20:2f:95: 46:43:ce:5e:fb:5a:d8:05:85:c6:85:17:ef:86:be: 68:1b:55:dd:70:b5:8f:e4:24:27:88:ca:40:81:78: f3:84:32:4f:96:5c:d8:62:0c:5a:cc:41:91:42:b9: bd:29:3a:ca:d8:f1:59:8b:f9:aa:09:33:b3:b8:fc: c8:f7:6d:ae:4e:8e:85:af:10:cf:62:93:37:1b:78: 18:69:8a:25:3b:73:9e:b2:53:59:fe:da:a7:38:21: 77:10:e2:3e:90:02:8c:78:f5:22:e3:8c:c6:f9:1f: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:26:3D:A8:86:50:89:5C:40:AE:D3:6F:2D:C4:78:34:39:F8:E2:7F X509v3 Authority Key Identifier: keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:de:e5:1b:49:5d:e2:f4:9e:3a:3a:1a:d8:7e:36:a9:39:5b: 0b:08:fe:04:53:41:78:5d:98:72:73:78:f1:d9:28:86:5d:11: d0:ea:ee:93:2b:21:d9:e6:0d:33:63:73:6a:b5:78:08:76:0c: 26:01:c8:99:0d:9f:13:fa:aa:a2:e1:3f:44:7a:ba:b1:11:1f: 6e:db:66:2d:81:28:d6:89:57:e1:eb:bd:5a:5f:cb:2b:43:b0: b0:3a:d0:14:c4:9b:bb:79:0d:3f:68:7d:d4:d9:75:bd:63:28: 6c:35:2c:ae:7b:05:8e:0e:c6:80:b8:d9:89:de:3f:3f:f1:0a: 52:da:ca:59:f3:34:9a:af:86:c6:ac:8c:db:27:be:90:cb:3f: bd:ce:04:0e:44:15:b4:4f:be:53:2a:83:94:a6:b9:18:43:c5: 02:7f:84:07:4a:6c:c6:60:88:78:3a:7e:d3:df:c6:16:19:f7: 4a:92:bb:15:77:5c:07:4e:ea:dd:43:f2:ef:b4:be:dc:07:6b: a8:80:bb:90:93:b2:a6:2e:b9:d7:a2:47:9a:d1:b0:48:0e:f5: 6d:3d:20:fd:11:a5:16:81:26:c7:e9:78:64:a6:2e:cf:06:c9: 97:77:3f:dc:06:0a:d8:8d:13:db:ad:1a:c1:11:04:26:a3:c5: ba:4a:fb:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC6IwhtJvnnhsUQ0I4BUvxVsS+/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVB RTZFNzMwOTAeFw0yNjA1MTMxMTM2MDRaFw0yNjA1MTQxNDM4MDRaMDMxMTAvBgNV BAMTKDkwMjYzREE4ODY1MDg5NUM0MEFFRDM2RjJEQzQ3ODM0MzlGOEUyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4F8B9IO+XqoconYGxRJSKj94 ETb4f1Js9Lm7bftsjf3TPju4a5BKOH1WiPVKBxCTaiostHtmLY7pEjRSsiNBrnfy Ta5kYhQuyjoTd+P+tM/WkiF5AF+Oc8TsIxWVMhuRQoiyizbskwufOkhFYj+L3k8D AG9ln/KFlEslo91ETEM+tt26MnDuejGrirQQCvtkiiAvlUZDzl77WtgFhcaFF++G vmgbVd1wtY/kJCeIykCBePOEMk+WXNhiDFrMQZFCub0pOsrY8VmL+aoJM7O4/Mj3 ba5OjoWvEM9ikzcbeBhpiiU7c56yU1n+2qc4IXcQ4j6QAox49SLjjMb5H3jnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkCY9qIZQiVxArtNvLcR4NDn44n8wHwYDVR0j BBgwFoAUsblCkzaoYEZ8cQU93qBWXq5ucwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NjU5NTI3MDkxODE0Ny8wL0IxQjk0MjkzMzZBODYwNDY3QzcxMDUzRERFQTA1 NjVFQUU2RTczMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVBRTZFNzMwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjY1OTUyNzA5MTgxNDcvMC9CMUI5NDI5MzM2QTg2 MDQ2N0M3MTA1M0RERUEwNTY1RUFFNkU3MzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0d7lG0ld4vSe Ojoa2H42qTlbCwj+BFNBeF2YcnN48dkohl0R0Orukysh2eYNM2NzarV4CHYMJgHI mQ2fE/qqouE/RHq6sREfbttmLYEo1olX4eu9Wl/LK0OwsDrQFMSbu3kNP2h91Nl1 vWMobDUsrnsFjg7GgLjZid4/P/EKUtrKWfM0mq+GxqyM2ye+kMs/vc4EDkQVtE++ UyqDlKa5GEPFAn+EB0psxmCIeDp+09/GFhn3SpK7FXdcB07q3UPy77S+3AdrqIC7 kJOypi6516JHmtGwSA71bT0g/RGlFoEmx+l4ZKYuzwbJl3c/3AYK2I0T260awREE JqPFukr77w== -----END CERTIFICATE-----Generated at Wed May 13 19:39:22 2026 by rpki-client