$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft File: D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json) Hash identifier: w3xgE+vXpUHZ5N1xD7s0vkEhuYTjsrvNI3tk23qNnO4= Subject key identifier: 09:F3:01:BB:1F:1C:D4:26:D4:2B:53:A4:72:EE:C9:A0:98:DB:90:A7 Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3 Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3 Certificate serial: 257072533E0083C065C188A585881C70039FD544 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft Manifest number: 3A Signing time: Wed 13 May 2026 08:00:38 +0000 Manifest this update: Wed 13 May 2026 07:55:38 +0000 Manifest next update: Thu 14 May 2026 08:17:38 +0000 Files and hashes: 1: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (hash: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=) 2: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: NgIT5y+HL1Xn710BD2dZ5fuV8vHyscxz9AirJ0Cx2Wg=) 3: 34332e3234312e3234302e302f32332d3233203d3e2034383038.roa (hash: Lydf+HeHIzjAwoZErdFDn5KtbiIWOENNEr7cVYyLFk0=) 4: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (hash: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=) 5: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (hash: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=) 6: 34332e3234332e3133362e302f32332d3233203d3e2034383038.roa (hash: MeegwRZIHce0h2CLLPnHVq97GiQa/EeEGjxY12mLK40=) 7: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (hash: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:70:72:53:3e:00:83:c0:65:c1:88:a5:85:88:1c:70:03:9f:d5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3 Validity Not Before: May 13 07:55:38 2026 GMT Not After : May 14 08:17:38 2026 GMT Subject: CN=09F301BB1F1CD426D42B53A472EEC9A098DB90A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:d2:42:61:c1:26:6e:38:6f:43:80:cb:0b: 46:3c:30:aa:1c:ae:cb:18:a4:d8:20:26:73:a1:ac: 2f:bd:cc:9d:f1:0b:cf:cb:3e:a7:e0:1a:8f:ef:39: da:cf:27:5c:65:93:5a:dc:bb:f2:72:ea:a3:1a:6e: af:9b:a9:71:c8:7b:8d:4a:21:c6:36:91:a0:a7:07: 98:66:b6:50:0b:3d:3e:74:ad:d2:2b:1f:38:b9:1c: 21:08:b6:67:d4:7a:06:92:55:ca:26:c7:d4:c6:55: 58:66:2e:d1:03:a7:41:d4:58:d9:99:08:51:93:ae: bd:be:89:bf:10:2e:29:43:89:d2:30:b0:38:4c:fb: b6:f4:ec:d5:bd:a7:bc:62:41:03:cc:49:70:77:ee: 45:10:51:d7:fc:ba:b4:37:77:60:5c:ae:68:91:7a: 47:25:03:39:34:b7:ba:d3:f7:58:00:71:3a:a9:e1: b5:e5:44:f5:e3:b0:a8:90:7e:f9:03:6a:f0:91:71: 54:3c:3d:bb:57:d1:35:32:40:00:ba:eb:07:af:86: 5f:04:00:f4:3e:75:4e:55:9d:fa:a4:4d:e4:57:8d: e5:7c:16:c8:41:b1:02:60:8f:39:b5:b1:6d:63:65: 5f:10:6a:ef:59:be:48:d1:53:8c:a9:61:fb:c4:3e: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F3:01:BB:1F:1C:D4:26:D4:2B:53:A4:72:EE:C9:A0:98:DB:90:A7 X509v3 Authority Key Identifier: keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:73:2d:36:34:0f:a9:e0:7f:a5:0c:1d:09:d3:54:c0:80:b5: f4:a8:47:27:c5:4a:64:45:1b:2a:67:2f:17:03:01:42:e5:8d: 12:6c:85:2a:2d:5c:32:29:40:bd:73:fd:4a:bb:d5:ec:ff:ad: 59:a3:a5:2e:ab:f7:ba:f3:11:dd:c1:94:d4:4f:69:47:4d:9a: 53:0e:a2:50:bf:96:e8:c9:7e:e8:56:a9:9d:58:85:ad:9c:0b: a1:60:36:a3:c1:49:5a:01:3e:8d:fe:99:3c:b9:ef:3c:43:50: 8a:d4:69:92:90:8e:25:11:76:c7:fa:e4:38:a0:20:42:61:25: 68:96:83:aa:c3:ee:e9:5d:29:bd:ba:45:83:ef:d6:a9:70:61: b7:23:f6:da:13:16:bc:05:de:8f:8e:8b:9a:a5:b1:2f:8f:8d: 93:7e:82:a8:1f:0b:a2:c0:8c:e3:12:7e:8a:19:e9:44:6a:58: a3:9d:07:c2:2c:36:93:8e:e6:02:a6:13:44:17:d2:27:a2:46: e4:20:76:3b:f8:05:ff:24:f4:7d:c5:47:f9:34:e9:0c:b4:1e: fa:b1:28:8a:41:bb:b9:b1:16:aa:e4:14:52:9c:bb:68:45:8e: 06:ad:63:61:af:57:40:bd:b6:b5:c3:c4:b4:9b:dc:71:23:02: 16:a5:be:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJXByUz4Ag8BlwYilhYgccAOf1UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw QkZGNjZCMzAeFw0yNjA1MTMwNzU1MzhaFw0yNjA1MTQwODE3MzhaMDMxMTAvBgNV BAMTKDA5RjMwMUJCMUYxQ0Q0MjZENDJCNTNBNDcyRUVDOUEwOThEQjkwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtNJCYcEmbjhvQ4DLC0Y8MKoc rssYpNggJnOhrC+9zJ3xC8/LPqfgGo/vOdrPJ1xlk1rcu/Jy6qMabq+bqXHIe41K IcY2kaCnB5hmtlALPT50rdIrHzi5HCEItmfUegaSVcomx9TGVVhmLtEDp0HUWNmZ CFGTrr2+ib8QLilDidIwsDhM+7b07NW9p7xiQQPMSXB37kUQUdf8urQ3d2BcrmiR ekclAzk0t7rT91gAcTqp4bXlRPXjsKiQfvkDavCRcVQ8PbtX0TUyQAC66wevhl8E APQ+dU5VnfqkTeRXjeV8FshBsQJgjzm1sW1jZV8Qau9ZvkjRU4ypYfvEPhShAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCfMBux8c1CbUK1Okcu7JoJjbkKcwHwYDVR0j BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2 RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI1MDg2NzMvMC9ENTY5Q0U0OUVEOTQw OTU1MzE4RjcxOEFFQUNENkQ0MTBCRkY2NkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnMtNjQPqeB/ pQwdCdNUwIC19KhHJ8VKZEUbKmcvFwMBQuWNEmyFKi1cMilAvXP9SrvV7P+tWaOl Lqv3uvMR3cGU1E9pR02aUw6iUL+W6Ml+6FapnViFrZwLoWA2o8FJWgE+jf6ZPLnv PENQitRpkpCOJRF2x/rkOKAgQmElaJaDqsPu6V0pvbpFg+/WqXBhtyP22hMWvAXe j46LmqWxL4+Nk36CqB8LosCM4xJ+ihnpRGpYo50Hwiw2k47mAqYTRBfSJ6JG5CB2 O/gF/yT0fcVH+TTpDLQe+rEoikG7ubEWquQUUpy7aEWOBq1jYa9XQL22tcPEtJvc cSMCFqW+Fg== -----END CERTIFICATE-----Generated at Wed May 13 18:21:48 2026 by rpki-client