$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json) Hash identifier: f3G8qRbfzUfxFFpcD0fSA/djNJLTOSMtee4D21sBzhI= Subject key identifier: 45:C1:7A:46:43:39:3C:EF:05:4B:4A:08:34:1C:6C:47:A9:2F:A0:46 Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 0C0387448C842F2AFD16E1F15A62F8AADD74B923 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft Manifest number: 29 Signing time: Wed 13 May 2026 02:40:53 +0000 Manifest this update: Wed 13 May 2026 02:35:53 +0000 Manifest next update: Thu 14 May 2026 04:47:53 +0000 Files and hashes: 1: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=) 2: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=) 3: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=) 4: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=) 5: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: +rN5kNk3PleJU30OjCn5HMY/gGt9BOYeiou8M7pfPok=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:03:87:44:8c:84:2f:2a:fd:16:e1:f1:5a:62:f8:aa:dd:74:b9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: May 13 02:35:53 2026 GMT Not After : May 14 04:47:53 2026 GMT Subject: CN=45C17A4643393CEF054B4A08341C6C47A92FA046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:59:24:ad:0f:e8:f4:29:ff:09:0f:d5:52: df:eb:c9:af:43:4f:00:25:27:4c:af:79:00:da:ce: fc:dd:dd:b6:3d:e2:b8:ac:9c:a8:42:d1:c3:34:55: ff:6e:0c:ec:07:23:a1:8f:78:a0:64:fe:3b:33:dd: 85:06:1b:6c:d2:dc:c8:4b:29:66:e5:04:9d:17:d4: 8c:09:58:2d:af:53:c5:9a:31:15:7b:ae:4a:77:68: 73:4f:07:b0:87:f8:f6:83:11:ec:74:1a:bb:18:18: c5:c6:17:51:6b:fa:d2:ec:df:37:7c:3b:57:0a:f6: 31:8e:8a:8a:9e:5a:51:4e:cf:02:1d:e7:1b:1b:81: 3c:e1:0e:c8:86:2d:60:2e:2d:34:4c:51:27:80:62: d4:5d:c1:eb:3e:28:64:a1:e7:0e:27:f7:e9:f6:ec: 36:80:60:2b:94:98:4a:cf:9a:ea:de:8a:f0:cf:53: ce:5d:2c:f0:e2:34:c2:21:50:6a:1b:c1:18:55:27: 0e:62:e9:11:e1:fa:7c:02:a6:ac:c9:71:69:6f:69: e8:71:91:78:19:8b:d5:3b:1c:8a:36:8f:e6:75:79: 75:32:4d:9b:2e:b4:71:76:48:a9:ba:76:b7:d6:19: 58:95:7c:f3:b7:d6:96:ca:c1:fd:d1:ef:85:e0:e9: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C1:7A:46:43:39:3C:EF:05:4B:4A:08:34:1C:6C:47:A9:2F:A0:46 X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:43:7e:45:fb:3c:b8:64:cc:b2:64:94:8b:83:36:f8:d0:cd: f7:a8:2f:3f:b8:39:f1:3a:23:6c:59:22:d2:7f:52:72:d2:e5: 09:96:1e:67:b6:1e:47:a7:af:fc:d2:4e:8a:61:51:fa:41:59: cc:df:6f:6b:40:fa:4e:d6:52:4d:54:d9:ef:1c:95:53:0e:dc: 5b:fb:77:23:90:50:ad:cd:42:c4:71:e3:92:00:3b:82:82:33: fb:92:4f:e2:bc:ef:52:7e:42:95:9a:bf:53:99:ba:67:18:23: a8:a6:6d:50:cc:13:c9:ec:06:5a:21:97:d7:f3:fc:f0:33:45: 32:32:54:b9:ea:c8:8d:e1:d0:c7:54:d3:ff:c5:eb:1d:59:d1: d8:3e:cb:7c:7a:82:94:19:25:88:61:85:07:a6:01:57:07:4b: a7:cf:be:37:ed:31:1d:6f:30:42:04:40:b5:fd:d1:6e:b7:84: d2:a6:17:b3:bb:e2:ab:64:d8:69:48:9b:9a:9e:7a:92:72:9d: f2:42:05:16:49:8c:26:8f:10:0b:54:80:00:cf:63:67:6b:ed: 0b:d8:6b:be:58:57:0b:16:42:fd:99:76:c9:bb:5c:5a:9b:1e: d6:41:d8:75:6a:76:89:c3:79:d7:cc:e8:f2:cb:2d:24:75:9e: b9:1f:7c:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDAOHRIyELyr9FuHxWmL4qt10uSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjA1MTMwMjM1NTNaFw0yNjA1MTQwNDQ3NTNaMDMxMTAvBgNV BAMTKDQ1QzE3QTQ2NDMzOTNDRUYwNTRCNEEwODM0MUM2QzQ3QTkyRkEwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9glkkrQ/o9Cn/CQ/VUt/rya9D TwAlJ0yveQDazvzd3bY94risnKhC0cM0Vf9uDOwHI6GPeKBk/jsz3YUGG2zS3MhL KWblBJ0X1IwJWC2vU8WaMRV7rkp3aHNPB7CH+PaDEex0GrsYGMXGF1Fr+tLs3zd8 O1cK9jGOioqeWlFOzwId5xsbgTzhDsiGLWAuLTRMUSeAYtRdwes+KGSh5w4n9+n2 7DaAYCuUmErPmureivDPU85dLPDiNMIhUGobwRhVJw5i6RHh+nwCpqzJcWlvaehx kXgZi9U7HIo2j+Z1eXUyTZsutHF2SKm6drfWGViVfPO31pbKwf3R74Xg6TqHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURcF6RkM5PO8FS0oINBxsR6kvoEYwHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzY3Njc1ODMyNTY1NzgvMC8yQkI2MTczRDgxODkw RTQ3ODlFMUI0QkE2QTJFM0E5MTZDMzhBMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0N+Rfs8uGTM smSUi4M2+NDN96gvP7g58TojbFki0n9SctLlCZYeZ7YeR6ev/NJOimFR+kFZzN9v a0D6TtZSTVTZ7xyVUw7cW/t3I5BQrc1CxHHjkgA7goIz+5JP4rzvUn5ClZq/U5m6 ZxgjqKZtUMwTyewGWiGX1/P88DNFMjJUuerIjeHQx1TT/8XrHVnR2D7LfHqClBkl iGGFB6YBVwdLp8++N+0xHW8wQgRAtf3RbreE0qYXs7viq2TYaUibmp56knKd8kIF FkmMJo8QC1SAAM9jZ2vtC9hrvlhXCxZC/Zl2ybtcWpse1kHYdWp2icN518zo8sst JHWeuR98VQ== -----END CERTIFICATE-----Generated at Wed May 13 17:13:45 2026 by rpki-client