$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: G//+pQ4DtxbTXgwp7mASEWW/WydvCH6zekdaOUqQPZw= Subject key identifier: 64:44:AE:ED:C8:FE:32:05:DF:BC:96:37:CD:CA:38:81:D1:A6:0B:67 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 1CAB4D4BD5042F116CB71888A9E1AB038E0200EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: 2B Signing time: Wed 13 May 2026 07:56:02 +0000 Manifest this update: Wed 13 May 2026 07:51:02 +0000 Manifest next update: Thu 14 May 2026 09:09:02 +0000 Files and hashes: 1: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 2: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: Pji5ULpsg+7JLdzU1EOkqEcxi7ZHxJDWQFF9i7V3VKU=) 3: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 4: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) 5: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) 6: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ab:4d:4b:d5:04:2f:11:6c:b7:18:88:a9:e1:ab:03:8e:02:00:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: May 13 07:51:02 2026 GMT Not After : May 14 09:09:02 2026 GMT Subject: CN=6444AEEDC8FE3205DFBC9637CDCA3881D1A60B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c8:e2:fa:03:5c:dd:4c:7a:6c:18:f8:80:79: 90:dd:3d:16:c5:a5:14:ea:f2:3d:b6:c0:96:dc:35: 31:eb:64:3f:1d:bb:ec:7f:a0:a1:1b:03:80:54:4c: 08:a8:d4:20:eb:d2:1b:81:aa:30:03:de:16:41:ee: a2:40:d7:91:3f:fb:7b:ac:5c:60:a2:f7:c6:e1:33: 12:2b:1f:ef:7e:b1:b1:58:84:3f:0d:a3:c8:db:27: fc:f0:7b:4c:bf:5f:57:3b:dd:bb:f5:42:33:e4:75: 41:4f:0f:eb:10:a8:03:b4:a1:f4:0c:21:7d:b9:28: e2:49:09:1d:19:e6:ad:0c:07:28:b0:56:c8:6e:da: 43:01:59:ba:60:97:3f:25:26:00:dd:33:c8:69:05: c8:36:89:0f:0d:c5:2b:f3:4e:b0:12:63:09:0b:e3: 52:c3:c5:21:93:18:8e:ae:8d:f1:e4:22:cb:7b:df: 3e:57:4c:ae:08:35:5e:26:c6:b1:fa:19:83:16:2f: 3c:f0:dd:09:fb:7d:88:69:73:23:b8:41:2e:a1:e5: aa:ed:3e:e4:f6:b4:8b:62:40:67:7b:68:28:e7:a6: 84:e3:e4:dc:9c:b9:d3:f7:2c:0d:91:47:c5:5f:9f: cc:43:65:c5:1b:2c:eb:84:5b:ad:ba:4e:f3:75:a6: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:44:AE:ED:C8:FE:32:05:DF:BC:96:37:CD:CA:38:81:D1:A6:0B:67 X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4e:49:d6:38:03:62:c0:72:d2:02:f4:cf:d7:c5:b9:a2:85: f4:d0:2f:bf:da:c8:e2:3a:a1:36:b5:cf:01:4a:27:e5:60:ad: 5c:ed:69:68:f3:2d:16:25:67:db:4a:49:11:93:a9:53:b8:c0: 00:1f:cf:ec:30:48:8b:7b:14:75:3e:0d:06:ba:ab:1c:f8:55: 62:11:f8:7a:6f:e7:4f:eb:44:7b:66:e9:47:8c:87:7e:a6:46: ca:6e:5e:09:ce:af:59:b7:13:e5:7e:08:98:a1:ff:33:9f:98: 78:24:6e:ab:b2:ac:f5:03:3c:5f:a0:ae:5e:e5:49:c1:cb:51: a2:85:2a:bb:44:f3:3d:2f:43:65:54:f6:96:81:0d:5d:f4:e8: 7c:62:0b:8d:35:51:43:64:46:cb:1b:94:8e:5e:d1:ce:83:6e: b6:7f:21:5a:1b:b0:f1:cd:9c:b4:08:aa:bd:c3:85:69:44:1a: 4d:aa:48:f3:36:66:32:fc:f5:b0:db:e6:a8:60:83:67:2c:3f: 43:84:df:d3:b5:92:57:63:16:2e:7a:fa:2c:59:65:63:0c:2c: ba:22:97:52:41:de:58:be:65:a2:62:5c:4c:e9:56:f1:82:39: fb:d2:93:e4:34:c7:9f:29:8d:fd:cb:cd:88:b0:de:56:65:3a: e0:2e:b2:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHKtNS9UELxFstxiIqeGrA44CAO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA1MTMwNzUxMDJaFw0yNjA1MTQwOTA5MDJaMDMxMTAvBgNV BAMTKDY0NDRBRUVEQzhGRTMyMDVERkJDOTYzN0NEQ0EzODgxRDFBNjBCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPyOL6A1zdTHpsGPiAeZDdPRbF pRTq8j22wJbcNTHrZD8du+x/oKEbA4BUTAio1CDr0huBqjAD3hZB7qJA15E/+3us XGCi98bhMxIrH+9+sbFYhD8No8jbJ/zwe0y/X1c73bv1QjPkdUFPD+sQqAO0ofQM IX25KOJJCR0Z5q0MByiwVshu2kMBWbpglz8lJgDdM8hpBcg2iQ8NxSvzTrASYwkL 41LDxSGTGI6ujfHkIst73z5XTK4INV4mxrH6GYMWLzzw3Qn7fYhpcyO4QS6h5art PuT2tItiQGd7aCjnpoTj5NycudP3LA2RR8Vfn8xDZcUbLOuEW626TvN1pjtrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZESu7cj+MgXfvJY3zco4gdGmC2cwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU5J1jgDYsBy 0gL0z9fFuaKF9NAvv9rI4jqhNrXPAUon5WCtXO1paPMtFiVn20pJEZOpU7jAAB/P 7DBIi3sUdT4NBrqrHPhVYhH4em/nT+tEe2bpR4yHfqZGym5eCc6vWbcT5X4ImKH/ M5+YeCRuq7Ks9QM8X6CuXuVJwctRooUqu0TzPS9DZVT2loENXfTofGILjTVRQ2RG yxuUjl7RzoNutn8hWhuw8c2ctAiqvcOFaUQaTapI8zZmMvz1sNvmqGCDZyw/Q4Tf 07WSV2MWLnr6LFllYwwsuiKXUkHeWL5lomJcTOlW8YI5+9KT5DTHnymN/cvNiLDe VmU64C6y3w== -----END CERTIFICATE-----Generated at Wed May 13 12:25:23 2026 by rpki-client