$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft File: 7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json) Hash identifier: X5kBIU6GrbDsTiu3s16yUYVVzkIBurgQj/V5qEQERGo= Subject key identifier: 92:D1:22:66:E2:FB:5A:E3:82:8A:FA:E8:32:1B:EE:B1:52:64:BB:B5 Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D Certificate serial: 543C7B1FBFD3CB2BE206AABE00F753B102A285B0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft Manifest number: 28 Signing time: Wed 13 May 2026 17:11:05 +0000 Manifest this update: Wed 13 May 2026 17:06:05 +0000 Manifest next update: Thu 14 May 2026 20:27:05 +0000 Files and hashes: 1: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=) 2: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=) 3: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=) 4: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: Q4Jf3rH0DOUIXHPPpwZOzo2mXLOClmiJiKZ7A8QhSPQ=) 5: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3c:7b:1f:bf:d3:cb:2b:e2:06:aa:be:00:f7:53:b1:02:a2:85:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D Validity Not Before: May 13 17:06:05 2026 GMT Not After : May 14 20:27:05 2026 GMT Subject: CN=92D12266E2FB5AE3828AFAE8321BEEB15264BBB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:9f:6c:89:c6:53:7d:30:b3:13:ce:2b:03: 89:54:9a:11:6a:90:8a:b7:8e:7d:ab:c3:d2:1d:62: 79:8f:17:b3:be:ff:2c:08:82:35:2d:12:f2:85:e1: 62:69:38:2c:9c:9c:0f:24:2f:b3:1e:a4:3f:bd:16: 79:95:6d:58:64:12:33:39:c6:07:2b:8a:bf:85:7b: cb:4b:ee:af:e1:f3:0d:6e:e0:67:57:6b:97:dc:0e: ad:87:b4:0f:e8:1b:47:5f:02:01:0e:a5:fa:8d:78: bb:2f:df:25:63:53:ff:e9:5a:f2:47:07:a3:f4:c3: 0b:41:df:20:63:48:fc:59:42:82:b4:88:e3:8f:bc: 59:c0:5d:b3:ce:c7:37:72:c9:85:8d:3c:3a:cb:62: d2:e8:62:80:d7:bd:24:32:a9:2a:81:b8:b1:3a:24: 0a:2e:cc:84:30:48:21:20:c6:68:cb:ca:40:0a:02: b6:57:9d:8b:a0:d2:5b:ef:c2:63:ec:9b:5c:f0:7d: 1d:31:93:a0:fa:30:ac:e0:a5:71:60:98:02:80:67: a0:48:85:74:ae:04:84:65:a0:64:d7:b8:66:be:89: e7:1b:94:69:16:68:a8:9d:7d:57:80:06:dc:31:e3: 69:42:26:1a:b0:c5:ff:95:78:ec:01:48:de:c0:36: 77:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D1:22:66:E2:FB:5A:E3:82:8A:FA:E8:32:1B:EE:B1:52:64:BB:B5 X509v3 Authority Key Identifier: keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:44:50:81:38:8f:10:d7:cb:69:ea:2b:79:3e:b2:ac:a2: bb:a1:54:da:23:1a:20:c1:37:f2:6b:c2:81:29:ac:cd:99:05: 21:cc:ad:fd:2c:5d:30:f1:28:2a:8b:38:b0:a9:a1:8c:18:1e: c8:a3:0c:c2:5c:84:11:60:d5:51:e4:d0:33:bc:56:8a:74:66: fd:d7:4f:7f:f0:ca:6e:b9:f7:55:0a:8a:9d:44:d6:12:1a:4c: 3c:1b:01:a8:d1:99:57:eb:da:d3:5a:24:ca:51:b9:f0:9b:e3: 4b:98:77:80:58:63:07:9e:47:8b:fd:ea:01:03:e2:fd:78:0f: 1e:57:c9:7a:90:4d:24:39:2c:9e:f6:1c:f4:64:8e:ef:2b:42: 37:8e:ac:25:1c:2b:16:2b:09:32:8e:74:18:cd:a4:fe:d5:be: 16:a1:50:b4:ba:23:87:4c:00:ac:4f:18:c1:a9:3a:cf:5b:e5: 38:6e:2f:31:f5:d8:2d:33:58:aa:be:ea:35:b9:84:25:47:c4: 9c:77:7a:84:1e:3b:8b:cb:e9:8f:00:38:a9:68:82:17:e1:fd: 9f:de:63:60:27:83:9c:f4:fd:45:69:6e:b4:68:1b:a6:b1:d5: f1:68:2a:dd:b4:34:55:21:9b:d5:9a:a8:00:00:5c:98:8c:a0: aa:04:9b:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVDx7H7/TyyviBqq+APdTsQKihbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1 MUQzMTM1RDAeFw0yNjA1MTMxNzA2MDVaFw0yNjA1MTQyMDI3MDVaMDMxMTAvBgNV BAMTKDkyRDEyMjY2RTJGQjVBRTM4MjhBRkFFODMyMUJFRUIxNTI2NEJCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiNZ9sicZTfTCzE84rA4lUmhFq kIq3jn2rw9IdYnmPF7O+/ywIgjUtEvKF4WJpOCycnA8kL7MepD+9FnmVbVhkEjM5 xgcrir+Fe8tL7q/h8w1u4GdXa5fcDq2HtA/oG0dfAgEOpfqNeLsv3yVjU//pWvJH B6P0wwtB3yBjSPxZQoK0iOOPvFnAXbPOxzdyyYWNPDrLYtLoYoDXvSQyqSqBuLE6 JAouzIQwSCEgxmjLykAKArZXnYug0lvvwmPsm1zwfR0xk6D6MKzgpXFgmAKAZ6BI hXSuBIRloGTXuGa+iecblGkWaKidfVeABtwx42lCJhqwxf+VeOwBSN7ANndFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUktEiZuL7WuOCivroMhvusVJku7UwHwYDVR0j BBgwFoAUfwT2/OInUGB+VOVY4Dng9VHTE10wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYwMzIwNDQyNDEwNTk4Ni8wLzdGMDRGNkZDRTIyNzUwNjA3RTU0RTU1OEUwMzlF MEY1NTFEMzEzNUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1MUQzMTM1RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MDMyMDQ0MjQxMDU5ODYvMC83RjA0RjZGQ0UyMjc1 MDYwN0U1NEU1NThFMDM5RTBGNTUxRDMxMzVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHBEUIE4jxDX y2nqK3k+sqyiu6FU2iMaIME38mvCgSmszZkFIcyt/SxdMPEoKos4sKmhjBgeyKMM wlyEEWDVUeTQM7xWinRm/ddPf/DKbrn3VQqKnUTWEhpMPBsBqNGZV+va01okylG5 8JvjS5h3gFhjB55Hi/3qAQPi/XgPHlfJepBNJDksnvYc9GSO7ytCN46sJRwrFisJ Mo50GM2k/tW+FqFQtLojh0wArE8Ywak6z1vlOG4vMfXYLTNYqr7qNbmEJUfEnHd6 hB47i8vpjwA4qWiCF+H9n95jYCeDnPT9RWlutGgbprHV8Wgq3bQ0VSGb1ZqoAABc mIygqgSbSA== -----END CERTIFICATE-----Generated at Wed May 13 20:54:59 2026 by rpki-client