$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft File: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft (raw, json) Hash identifier: MZUrXGK48Wk+4i9LT5XbQgYNsDxoMxhq/5uGE+/g3ps= Subject key identifier: F8:E3:44:3B:D5:A4:28:F1:40:F7:C4:C8:3E:51:77:A3:A9:6E:40:2F Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 29D2D97C62F11C811D8B57B42C9D2C766B352EDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft Manifest number: 2A Signing time: Wed 13 May 2026 07:26:02 +0000 Manifest this update: Wed 13 May 2026 07:21:02 +0000 Manifest next update: Thu 14 May 2026 10:20:02 +0000 Files and hashes: 1: 3130332e33362e3138342e302f32322d3234203d3e203535393939.roa (hash: ILEAKEw/avhbDeu4m2ADmVhOPgaksn/x3+BPKu++ptU=) 2: 34332e3234302e3138302e302f32322d3234203d3e203535393939.roa (hash: 6hVPd1lMuKUrEarp0zQuo5D+Zot2aNV8wE88G4h6rDc=) 3: 34332e3234302e3136342e302f32322d3234203d3e203535393939.roa (hash: S3OJ70919gSGQdFu+Fl7QUfepTBEXi5Q2KBXDNH4k8U=) 4: 34332e3234302e3137322e302f32322d3234203d3e203535393939.roa (hash: mo7Tlq7icLlWZZrE0DBNoPZPSx4BjXOEepnaJmmFW2A=) 5: 34332e3234302e3136302e302f32322d3234203d3e203535393939.roa (hash: 9JcjLYz4oF6pH0laB4eyeAqU+/WWtj3ZXZoHc/zYEJU=) 6: 3130332e33362e3138382e302f32322d3234203d3e203535393939.roa (hash: CSVfya++arvHuYMasShJSRsQQS2NF/zkIZBUVm3nf70=) 7: 323430323a353832303a3a2f33322d3438203d3e203535393939.roa (hash: TkMoNhxqxanWVebdWp3tiOB/dRJMGnbvd0EVuiJe5eM=) 8: 289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl (hash: TcCzW18wDmmRLgmFQM1u0ReGNsBZFUS9/Uaz44ySl8g=) 9: 34332e3234302e3136382e302f32322d3234203d3e203535393939.roa (hash: UlvDqd+sZsCM1IT0FLHFXuu0FBnnLVYjAhKlTjcyc6M=) 10: 34332e3234302e3138342e302f32322d3234203d3e203535393939.roa (hash: 1z9YhBL4mANr+MTfVawRwh8WOH/nnoSQGneVA1K0Ees=) 11: 3136332e3132382e3233362e302f32332d3234203d3e203535393939.roa (hash: Ffs5m/bCSZ4yG5HoL5gNLWdfNoTnNUZzl65WVT8K/0I=) 12: 3130332e33362e3137362e302f32322d3234203d3e203535393939.roa (hash: 2LnjFG+Q2LripW/PfbwL7eiTUvlgsDP08f4mqEdQzY8=) 13: 34332e3234302e3138382e302f32322d3234203d3e203535393939.roa (hash: 4FP9rm3jQvabKWgTZtIEXK2vYYzk4TblYNjZ7mIhX1w=) 14: 3130332e33362e3138302e302f32322d3234203d3e203535393939.roa (hash: O6P1nJZq+NIRw0lpZM4G5mpjEJVkMUy02Fgiskir+iw=) 15: 34332e3234302e3137362e302f32322d3234203d3e203535393939.roa (hash: R0KVCUcJsMhiZNoSh/iH+0lgr3+OS5OBI1etaOPAPR0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d2:d9:7c:62:f1:1c:81:1d:8b:57:b4:2c:9d:2c:76:6b:35:2e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: May 13 07:21:02 2026 GMT Not After : May 14 10:20:02 2026 GMT Subject: CN=F8E3443BD5A428F140F7C4C83E5177A3A96E402F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:b9:16:f7:ab:ce:42:6d:f4:ed:e0:72:7c: 34:d1:c8:cf:29:af:a5:e6:d4:c7:23:97:30:fe:08: 7e:ac:82:e4:f7:b9:87:69:45:a4:93:67:f6:65:63: b7:93:5b:9a:3e:cd:eb:4b:10:d8:7f:99:35:bf:32: 6b:0d:5a:65:9f:e4:fc:c6:0a:5d:45:07:12:ae:3e: 6d:8f:12:10:62:4c:58:4a:b6:7f:2b:04:17:04:96: 97:48:39:f1:0f:5f:ac:4d:f8:a7:88:c6:66:02:0a: 55:9e:44:c9:12:db:58:fc:fc:7c:3a:a5:4d:b8:83: 3e:9c:8e:70:a1:a6:53:d8:62:6f:04:dc:87:e0:4d: a3:4b:1a:9b:ad:f2:45:24:e3:11:b9:f4:21:15:6d: 91:4b:4a:c7:cd:89:4e:c5:68:8d:6d:ce:41:8f:9a: f6:e9:21:cf:b6:50:ed:82:8d:cc:01:1f:55:41:c0: 4c:1c:2a:93:76:d6:3b:12:47:8b:82:37:92:46:2f: 42:55:86:f9:71:3f:15:18:15:8e:22:db:79:80:0d: 8a:bd:8e:6d:ec:09:d1:4c:78:cf:3f:c2:cb:11:b8: 2a:a1:8b:e7:77:66:86:97:99:bc:d1:7f:00:9b:67: 1f:98:27:40:20:98:fc:43:47:86:d3:83:fe:6b:fe: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E3:44:3B:D5:A4:28:F1:40:F7:C4:C8:3E:51:77:A3:A9:6E:40:2F X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f8:ad:51:5f:78:57:70:20:37:50:95:e6:b4:fd:67:21:45: 2a:23:c2:ec:b3:7a:04:cd:b0:ba:0e:5e:47:60:aa:05:4c:31: aa:59:cc:33:7d:72:ef:91:32:97:a1:c8:34:12:11:00:72:3a: 6c:76:a6:43:0d:1d:49:b3:30:d0:25:07:ea:dc:e3:96:1f:7e: b8:0f:86:2f:24:6b:bf:a8:13:1b:89:a4:7c:4d:f9:2c:5e:d6: 95:68:15:fa:6b:62:c0:e7:60:94:ce:fd:37:51:70:29:9c:ca: cd:eb:56:f0:66:5b:25:da:e9:31:d5:18:47:f7:97:f4:fd:b3: b0:d4:43:13:22:94:15:7c:bb:62:94:c5:ea:8c:d1:de:a5:f7: f1:bb:d4:b6:e8:7e:cf:ab:43:17:ec:ab:bd:7b:d4:c6:dc:f6: b8:17:e5:ff:49:5c:18:43:34:0e:90:5a:a8:a9:dd:60:cd:0e: f7:f8:f0:7c:7f:3b:d1:62:ec:c8:ea:57:5c:63:41:5e:f4:f8: 6f:9c:dd:88:41:be:79:5e:f0:da:60:de:d8:03:4c:cf:63:d2: c0:77:f5:f2:19:a0:85:5f:7b:a0:2d:7b:bd:be:03:b4:e9:62: 1c:be:9b:bb:94:1f:c1:97:f2:48:a8:a2:75:9f:ea:27:23:2c: 3a:2f:a2:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKdLZfGLxHIEdi1e0LJ0sdms1LtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjA1MTMwNzIxMDJaFw0yNjA1MTQxMDIwMDJaMDMxMTAvBgNV BAMTKEY4RTM0NDNCRDVBNDI4RjE0MEY3QzRDODNFNTE3N0EzQTk2RTQwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TrkW96vOQm307eByfDTRyM8p r6Xm1McjlzD+CH6sguT3uYdpRaSTZ/ZlY7eTW5o+zetLENh/mTW/MmsNWmWf5PzG Cl1FBxKuPm2PEhBiTFhKtn8rBBcElpdIOfEPX6xN+KeIxmYCClWeRMkS21j8/Hw6 pU24gz6cjnChplPYYm8E3IfgTaNLGput8kUk4xG59CEVbZFLSsfNiU7FaI1tzkGP mvbpIc+2UO2CjcwBH1VBwEwcKpN21jsSR4uCN5JGL0JVhvlxPxUYFY4i23mADYq9 jm3sCdFMeM8/wssRuCqhi+d3ZoaXmbzRfwCbZx+YJ0AgmPxDR4bTg/5r/s6vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+ONEO9WkKPFA98TIPlF3o6luQC8wHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTM4OTk1OTU4NzQzMDUvMC8yODlCQTlDQkVCNzFE OTYwM0JFRDk2M0UzQjYwQjE3OTBFOEY3OEEyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfitUV94V3Ag N1CV5rT9ZyFFKiPC7LN6BM2wug5eR2CqBUwxqlnMM31y75Eyl6HINBIRAHI6bHam Qw0dSbMw0CUH6tzjlh9+uA+GLyRrv6gTG4mkfE35LF7WlWgV+mtiwOdglM79N1Fw KZzKzetW8GZbJdrpMdUYR/eX9P2zsNRDEyKUFXy7YpTF6ozR3qX38bvUtuh+z6tD F+yrvXvUxtz2uBfl/0lcGEM0DpBaqKndYM0O9/jwfH870WLsyOpXXGNBXvT4b5zd iEG+eV7w2mDe2ANMz2PSwHf18hmghV97oC17vb4DtOliHL6bu5QfwZfySKiidZ/q JyMsOi+iBQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:01 2026 by rpki-client