$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft File: 69D8917902AD24A5AC6751655C29BB7E9171C796.mft (raw, json) Hash identifier: DXkpNZw+6BDtY0E+qcwR+Y27rfWudvo244NuWlOaWBY= Subject key identifier: 74:9C:E5:2E:AE:E2:71:A1:C3:3A:DE:A4:DD:1B:6C:66:0A:DC:9E:DE Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Certificate serial: 1CBE1B5CB0C4741F8D8CEB483ED3FD1A823C3686 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft Manifest number: 2A Signing time: Wed 13 May 2026 06:31:00 +0000 Manifest this update: Wed 13 May 2026 06:26:00 +0000 Manifest next update: Thu 14 May 2026 09:43:00 +0000 Files and hashes: 1: 3130332e33362e36332e302f32342d3234203d3e20313334373731.roa (hash: u7z58nWlWiDRubuwIx6Q3OblARyxG5pc0EGoNiPOh4I=) 2: 34332e3234312e31382e302f32332d3233203d3e20313334373731.roa (hash: 1K798ucF+bdQ/QsgppkbYcgqjEV7ynXCRD0z+USCQUA=) 3: 3130332e33362e3136352e302f32342d3234203d3e20313334373731.roa (hash: G9v1KPz5Flcq9LDq1tg8DoL6SKebPJ1ejmcmypa8BD8=) 4: 3130332e33372e31382e302f32342d3234203d3e20313334373731.roa (hash: ffDSmjBwjUaAh6lymcPk4TvG/WhbWj1XHzVMTW9blTs=) 5: 69D8917902AD24A5AC6751655C29BB7E9171C796.crl (hash: /Gq7tomtigmcPXkJkciFIxKqNcxOE6Pnq+SVd2Pxdl4=) 6: 3130332e33372e31382e302f32332d3233203d3e20313334373731.roa (hash: 8hFX86to9/eGPettKuWyn5hjTsPjj2Hpr3Dg3H1fRmc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:be:1b:5c:b0:c4:74:1f:8d:8c:eb:48:3e:d3:fd:1a:82:3c:36:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Validity Not Before: May 13 06:26:00 2026 GMT Not After : May 14 09:43:00 2026 GMT Subject: CN=749CE52EAEE271A1C33ADEA4DD1B6C660ADC9EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:80:48:7e:36:85:5e:3a:48:5c:e3:2a:3c:37: b3:fa:bd:41:08:30:cf:7b:14:fb:fb:89:d0:2a:ba: 6b:58:4a:39:c4:b0:70:c8:2d:c5:21:81:b3:aa:11: fd:ca:c8:6a:b8:17:b4:0b:fc:85:d3:5f:31:09:36: aa:4e:09:82:12:58:71:c4:5e:19:93:d2:d1:64:6a: 2c:d2:5b:f9:a9:cd:29:cd:c7:26:63:c5:1f:7e:d9: 87:e8:d0:e2:c8:63:b3:a6:84:44:0d:20:fe:07:42: ec:26:f2:fe:81:24:9d:61:b6:80:58:eb:78:82:be: 09:75:e5:11:1d:ce:de:1b:d0:5f:4b:b7:03:3f:98: 3f:5d:43:9a:3e:28:e7:bd:a7:d7:29:1a:33:b7:e7: bf:24:60:67:a9:08:b6:6a:b0:f9:18:e8:ac:10:a7: 55:07:b2:1d:33:56:04:c8:82:db:50:f6:db:75:21: 50:61:65:bf:86:b8:9b:01:4a:f8:ba:af:e5:11:9e: b5:a7:93:42:2d:ac:b9:92:81:7a:df:dd:d3:db:2b: 2c:ef:1e:ef:76:81:2c:0a:c9:1d:55:70:67:48:85: d0:18:20:a4:2a:7e:33:0a:b8:29:8f:03:1a:09:d6: 7b:91:e9:32:a6:78:8a:d4:c2:57:23:75:f3:89:f6: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9C:E5:2E:AE:E2:71:A1:C3:3A:DE:A4:DD:1B:6C:66:0A:DC:9E:DE X509v3 Authority Key Identifier: keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:a9:d1:a8:64:d0:de:84:cb:40:4d:6d:09:82:1a:ca:d7:9f: f2:05:75:7a:85:98:5c:dc:a8:51:a4:b2:98:a8:6c:aa:78:9e: bf:dd:b6:26:4b:67:47:d5:29:78:23:d5:02:47:eb:c4:da:de: bf:d1:29:f1:9a:13:71:1d:5f:0b:5c:4b:71:d0:d6:a2:9c:16: 15:85:47:11:0c:cf:28:b6:1b:3f:2f:dd:b8:c7:a2:d5:59:65: a5:71:8f:09:cf:cd:38:50:12:29:d7:ed:44:5c:01:3e:df:eb: 6b:9b:4d:2c:e7:44:c7:8d:17:9c:fb:75:ed:e8:43:69:dc:ef: ce:20:a9:8f:d8:6d:90:80:6e:da:d9:c1:75:2e:df:cf:4b:84: 07:80:3e:30:fd:c5:78:5e:e6:0f:ab:10:d7:47:d0:21:77:9b: 7d:b2:e2:ee:54:2e:01:64:36:26:59:d3:37:82:cd:f8:02:de: d0:a8:08:bd:86:07:26:9b:fc:b2:46:ca:c8:0c:78:21:63:ba: 25:ff:65:4a:e3:06:ab:de:78:76:6d:f0:05:c8:04:00:a6:c2: 73:2e:34:04:43:44:e7:b0:5a:6f:8f:d5:e5:6a:6a:38:4d:8a: 0f:b3:e1:27:3b:57:21:ff:10:5a:77:23:05:27:6e:c5:06:7a: eb:0c:10:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHL4bXLDEdB+NjOtIPtP9GoI8NoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5 MTcxQzc5NjAeFw0yNjA1MTMwNjI2MDBaFw0yNjA1MTQwOTQzMDBaMDMxMTAvBgNV BAMTKDc0OUNFNTJFQUVFMjcxQTFDMzNBREVBNEREMUI2QzY2MEFEQzlFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKgEh+NoVeOkhc4yo8N7P6vUEI MM97FPv7idAqumtYSjnEsHDILcUhgbOqEf3KyGq4F7QL/IXTXzEJNqpOCYISWHHE XhmT0tFkaizSW/mpzSnNxyZjxR9+2Yfo0OLIY7OmhEQNIP4HQuwm8v6BJJ1htoBY 63iCvgl15REdzt4b0F9LtwM/mD9dQ5o+KOe9p9cpGjO3578kYGepCLZqsPkY6KwQ p1UHsh0zVgTIgttQ9tt1IVBhZb+GuJsBSvi6r+URnrWnk0ItrLmSgXrf3dPbKyzv Hu92gSwKyR1VcGdIhdAYIKQqfjMKuCmPAxoJ1nuR6TKmeIrUwlcjdfOJ9hQVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdJzlLq7icaHDOt6k3RtsZgrcnt4wHwYDVR0j BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODY3MzA4MjU3NjA3NzEvMC82OUQ4OTE3OTAyQUQy NEE1QUM2NzUxNjU1QzI5QkI3RTkxNzFDNzk2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzqnRqGTQ3oTL QE1tCYIaytef8gV1eoWYXNyoUaSymKhsqniev922JktnR9UpeCPVAkfrxNrev9Ep 8ZoTcR1fC1xLcdDWopwWFYVHEQzPKLYbPy/duMei1VllpXGPCc/NOFASKdftRFwB Pt/ra5tNLOdEx40XnPt17ehDadzvziCpj9htkIBu2tnBdS7fz0uEB4A+MP3FeF7m D6sQ10fQIXebfbLi7lQuAWQ2JlnTN4LN+ALe0KgIvYYHJpv8skbKyAx4IWO6Jf9l SuMGq954dm3wBcgEAKbCcy40BENE57Bab4/V5WpqOE2KD7PhJztXIf8QWncjBSdu xQZ66wwQVg== -----END CERTIFICATE-----Generated at Wed May 13 20:17:12 2026 by rpki-client