$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: NSplayr+7ItDdhaeE3vdOA3hEZTPS/sPTK9RpmzfOkA= Subject key identifier: 6B:0A:7A:C2:C5:74:CC:5D:DC:4D:85:C0:59:70:91:64:D5:2D:90:3C Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 6B426E1F78FD2B1753371552FA9BA1941AC7613F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: 28 Signing time: Wed 13 May 2026 03:55:55 +0000 Manifest this update: Wed 13 May 2026 03:50:55 +0000 Manifest next update: Thu 14 May 2026 07:17:55 +0000 Files and hashes: 1: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) 2: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) 3: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: x/N/yAppyzFGU+hVzN7U+u+RhbvPl/ZTS+tyRh84QnM=) 4: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:42:6e:1f:78:fd:2b:17:53:37:15:52:fa:9b:a1:94:1a:c7:61:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: May 13 03:50:55 2026 GMT Not After : May 14 07:17:55 2026 GMT Subject: CN=6B0A7AC2C574CC5DDC4D85C059709164D52D903C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f3:c4:b4:11:da:23:37:de:7a:c6:92:af:a5: f6:b7:17:16:20:21:53:14:fe:7f:26:ba:96:fb:ab: 7c:53:ab:8a:c9:4a:1e:4a:e6:26:8d:60:90:7e:c4: 76:f6:81:f4:32:40:b2:64:8f:f3:ac:a9:76:95:f8: 6a:cb:80:a4:7b:98:36:b3:4b:13:83:52:a3:a7:e9: 95:40:23:fe:a6:2a:c8:49:b4:d3:ae:61:7a:14:3d: d9:9a:02:cf:33:5c:7b:99:90:b8:94:44:29:e1:49: b6:72:38:42:1d:1e:a8:93:be:8f:35:36:25:3e:82: cb:3c:76:f5:e7:f3:af:3e:7a:4d:44:37:05:7d:99: e2:0b:2c:96:b9:73:11:8c:73:10:a0:9e:fd:27:34: 8d:87:3b:51:32:78:b7:c4:b3:68:50:6a:a6:b9:49: 1f:04:26:a8:29:ca:1b:8a:fe:89:dd:51:e4:6f:08: 83:9e:fc:c9:d4:75:7d:ff:e7:5d:ea:69:ff:0e:70: fe:2a:8e:26:8b:d0:a9:3b:ca:3f:18:84:2f:89:c1: 4f:b1:40:c2:9e:45:ef:4d:7e:b7:ff:70:66:f5:ba: 95:66:cd:b0:05:04:71:ff:a7:48:a8:4a:1f:0d:fe: 8c:9c:ea:a4:b9:d6:93:d5:e4:4c:f5:71:99:ff:f1: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0A:7A:C2:C5:74:CC:5D:DC:4D:85:C0:59:70:91:64:D5:2D:90:3C X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:73:33:02:58:a6:11:65:6e:f0:74:6d:8a:14:28:c1:90:fe: 6f:91:b8:cd:00:7c:b9:ca:10:0b:e3:5a:70:ff:c9:62:ec:5a: cc:34:e9:f1:f5:f9:d6:b9:27:19:92:7c:14:6d:aa:9a:65:d7: 2b:05:fa:a7:02:ce:60:3b:7b:31:20:9c:20:e5:ea:8c:aa:05: 30:13:e4:ac:c2:56:8c:18:fb:33:51:36:c0:98:8f:b5:ac:39: 4c:2f:53:f4:67:34:d0:74:97:21:b4:ee:73:ff:f8:95:3a:f3: 74:0a:f6:72:b2:29:d2:3e:fb:66:e3:cd:35:8d:1a:82:73:17: b2:9d:50:32:46:db:ff:e5:8c:8c:47:e6:e8:26:30:9f:fe:d4: bf:c6:95:68:c8:2c:77:6c:55:16:e3:7d:c7:bd:7a:85:bb:7d: 7a:fd:b8:f5:6d:f6:6d:99:49:39:dc:16:a3:cc:08:4c:57:4c: ae:20:ff:5b:8c:eb:23:e7:b7:28:68:91:54:24:a9:fb:a7:8f: e5:6f:39:aa:06:e2:d5:3f:67:dc:ea:11:fa:21:92:5d:99:d8: 63:59:4e:27:0b:34:9a:27:10:fb:49:95:11:a5:5d:ef:58:13: 1b:2f:53:35:64:7b:e8:7f:e0:aa:10:e6:0f:be:20:2b:c1:22: 35:f9:e0:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa0JuH3j9KxdTNxVS+puhlBrHYT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjA1MTMwMzUwNTVaFw0yNjA1MTQwNzE3NTVaMDMxMTAvBgNV BAMTKDZCMEE3QUMyQzU3NENDNUREQzREODVDMDU5NzA5MTY0RDUyRDkwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz88S0EdojN956xpKvpfa3FxYg IVMU/n8mupb7q3xTq4rJSh5K5iaNYJB+xHb2gfQyQLJkj/OsqXaV+GrLgKR7mDaz SxODUqOn6ZVAI/6mKshJtNOuYXoUPdmaAs8zXHuZkLiURCnhSbZyOEIdHqiTvo81 NiU+gss8dvXn868+ek1ENwV9meILLJa5cxGMcxCgnv0nNI2HO1EyeLfEs2hQaqa5 SR8EJqgpyhuK/ondUeRvCIOe/MnUdX3/513qaf8OcP4qjiaL0Kk7yj8YhC+JwU+x QMKeRe9Nfrf/cGb1upVmzbAFBHH/p0ioSh8N/oyc6qS51pPV5Ez1cZn/8YLrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUawp6wsV0zF3cTYXAWXCRZNUtkDwwHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnMzAlimEWVu 8HRtihQowZD+b5G4zQB8ucoQC+NacP/JYuxazDTp8fX51rknGZJ8FG2qmmXXKwX6 pwLOYDt7MSCcIOXqjKoFMBPkrMJWjBj7M1E2wJiPtaw5TC9T9Gc00HSXIbTuc//4 lTrzdAr2crIp0j77ZuPNNY0agnMXsp1QMkbb/+WMjEfm6CYwn/7Uv8aVaMgsd2xV FuN9x716hbt9ev249W32bZlJOdwWo8wITFdMriD/W4zrI+e3KGiRVCSp+6eP5W85 qgbi1T9n3OoR+iGSXZnYY1lOJws0micQ+0mVEaVd71gTGy9TNWR76H/gqhDmD74g K8EiNfngYw== -----END CERTIFICATE-----Generated at Wed May 13 14:09:29 2026 by rpki-client