$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft File: 833355AAAB477A3A1D2F649973B483982F9BA6CE.mft (raw, json) Hash identifier: K2uHGyTcVpSUmhSjXWZI7nuEZBURYwTchb8cq/Ci3Xs= Subject key identifier: 93:89:C9:40:C2:7D:4F:9A:78:E9:9C:7D:F0:BA:05:51:89:9C:A3:59 Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Certificate serial: 2327ADD85BC79BBF050B29783079CD5659F3E91A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft Manifest number: 27 Signing time: Wed 13 May 2026 11:41:04 +0000 Manifest this update: Wed 13 May 2026 11:36:04 +0000 Manifest next update: Thu 14 May 2026 12:51:04 +0000 Files and hashes: 1: 3130332e3233382e3235322e302f32322d3232203d3e203234313337.roa (hash: hvPHlirHDecyBdSPetseNQaYzkpvvym+uBRstvU2nAo=) 2: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (hash: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=) 3: 34332e3235352e342e302f32322d3232203d3e203234313337.roa (hash: +gOi9g7AvYMGXZweSvI7M0D/yREUi2fnQBbiw9Ibq0Q=) 4: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (hash: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=) 5: 833355AAAB477A3A1D2F649973B483982F9BA6CE.crl (hash: QZPxqx+oaIpbp04ufLorzZ1O+WDKSf+bXSy3oT/NLbo=) 6: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (hash: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=) 7: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (hash: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=) 8: 3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (hash: A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:27:ad:d8:5b:c7:9b:bf:05:0b:29:78:30:79:cd:56:59:f3:e9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Validity Not Before: May 13 11:36:04 2026 GMT Not After : May 14 12:51:04 2026 GMT Subject: CN=9389C940C27D4F9A78E99C7DF0BA0551899CA359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:44:4b:e9:a3:4f:81:9a:5e:42:88:05:54: 2b:72:33:37:f7:2b:22:9d:75:c3:f1:aa:1e:4d:e7: 05:23:e3:69:83:26:2b:cc:0e:11:e8:1c:83:12:13: 6f:4c:1d:3a:18:de:c8:83:61:8e:64:ae:e3:5c:3f: 26:ba:66:44:be:32:af:4a:41:ba:77:fc:91:04:c3: 3d:b6:86:ab:02:49:c3:64:9f:8e:51:b0:7f:8c:29: 22:19:bb:9c:f3:df:69:33:a3:34:84:1a:98:df:89: e4:c7:29:b1:39:46:8c:ef:3b:a3:84:cd:b6:fc:23: 7d:01:50:b3:6f:44:ca:60:20:ef:9e:c0:77:b4:8a: 29:f0:98:92:d2:9a:1a:5a:b6:22:35:90:6d:db:9a: 4e:28:36:13:ef:3c:2a:72:91:5f:ef:51:25:f2:2c: 6b:f9:42:ca:1c:c7:9b:14:09:fc:f8:75:21:58:d2: 12:f6:6a:c0:6f:85:b2:20:13:d7:5b:95:60:d5:58: 15:4e:9d:ae:70:7e:52:44:ca:e8:09:51:7f:11:89: 72:22:7d:dc:46:4a:2c:e9:61:7e:2c:9f:21:69:69: 33:71:83:ba:59:d3:41:c8:ad:d3:7c:c8:89:a1:13: 1e:5c:ab:7c:12:17:19:ed:a6:92:e3:01:31:86:0b: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:89:C9:40:C2:7D:4F:9A:78:E9:9C:7D:F0:BA:05:51:89:9C:A3:59 X509v3 Authority Key Identifier: keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:35:f8:82:10:13:34:52:a6:7c:0a:3d:e6:ab:76:61:4b:a6: d2:90:5d:e0:98:71:50:d5:db:10:19:62:7e:93:85:2e:cf:99: 13:45:eb:f1:ca:d7:bd:22:05:c7:52:3f:72:9e:6d:af:04:7f: 82:d7:aa:b1:11:3b:e3:77:76:86:13:e3:7f:2e:50:f1:7d:fc: 8b:12:dc:93:8b:7e:6f:ea:f2:06:23:c0:a8:3f:74:a9:e5:9d: 8e:1b:33:35:fd:1d:68:80:0a:44:2a:b3:6d:6d:8d:ed:6d:df: 67:98:17:e8:e6:05:82:c5:23:80:82:a5:b5:fb:28:1e:32:7d: e5:60:20:bd:32:f0:0a:e1:d2:22:95:fb:df:ff:ab:42:e8:f0: e0:12:9b:d9:e4:1d:8b:ca:f4:cc:76:f3:fa:11:cd:e8:20:9f: 8c:fa:e5:9d:3c:0c:d0:49:ed:3c:87:23:6c:23:9a:ff:61:ac: 25:75:4f:53:ff:c4:b0:91:17:ed:93:b7:c3:3f:5a:2b:58:7b: 85:f3:02:32:8f:c2:4a:83:24:33:db:d7:29:77:ef:cf:9f:35: 47:13:df:6c:f2:f6:d0:09:a3:27:89:ee:42:cd:4e:3f:85:94: 05:a3:59:0e:ee:e3:30:1d:4b:23:a4:02:52:fc:fa:2c:1a:4c: 34:9a:b6:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIyet2FvHm78FCyl4MHnNVlnz6RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgy RjlCQTZDRTAeFw0yNjA1MTMxMTM2MDRaFw0yNjA1MTQxMjUxMDRaMDMxMTAvBgNV BAMTKDkzODlDOTQwQzI3RDRGOUE3OEU5OUM3REYwQkEwNTUxODk5Q0EzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrkRL6aNPgZpeQogFVCtyMzf3 KyKddcPxqh5N5wUj42mDJivMDhHoHIMSE29MHToY3siDYY5kruNcPya6ZkS+Mq9K Qbp3/JEEwz22hqsCScNkn45RsH+MKSIZu5zz32kzozSEGpjfieTHKbE5RozvO6OE zbb8I30BULNvRMpgIO+ewHe0iinwmJLSmhpatiI1kG3bmk4oNhPvPCpykV/vUSXy LGv5Qsocx5sUCfz4dSFY0hL2asBvhbIgE9dblWDVWBVOna5wflJEyugJUX8RiXIi fdxGSizpYX4snyFpaTNxg7pZ00HIrdN8yImhEx5cq3wSFxntppLjATGGC+4jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk4nJQMJ9T5p46Zx98LoFUYmco1kwHwYDVR0j BBgwFoAUgzNVqqtHejodL2SZc7SDmC+bps4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjY1MTY1MC8wLzgzMzM1NUFBQUI0NzdBM0ExRDJGNjQ5OTczQjQ4 Mzk4MkY5QkE2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI2NTE2NTAvMC84MzMzNTVBQUFCNDc3 QTNBMUQyRjY0OTk3M0I0ODM5ODJGOUJBNkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTX4ghATNFKm fAo95qt2YUum0pBd4JhxUNXbEBlifpOFLs+ZE0Xr8crXvSIFx1I/cp5trwR/gteq sRE743d2hhPjfy5Q8X38ixLck4t+b+ryBiPAqD90qeWdjhszNf0daIAKRCqzbW2N 7W3fZ5gX6OYFgsUjgIKltfsoHjJ95WAgvTLwCuHSIpX73/+rQujw4BKb2eQdi8r0 zHbz+hHN6CCfjPrlnTwM0EntPIcjbCOa/2GsJXVPU//EsJEX7ZO3wz9aK1h7hfMC Mo/CSoMkM9vXKXfvz581RxPfbPL20AmjJ4nuQs1OP4WUBaNZDu7jMB1LI6QCUvz6 LBpMNJq2Cg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:05 2026 by rpki-client