$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: fu0l5ZXGbTNp1l2d9uPdk2JDdlzcO9HAuYp34qJI0ls= Subject key identifier: 56:12:F6:41:A5:FD:AD:AD:F7:F0:6A:A8:22:D4:78:14:1E:63:B9:B9 Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 011C01F16DB2150CC2093F27596B5F10947D6504 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: 26 Signing time: Tue 12 May 2026 19:30:42 +0000 Manifest this update: Tue 12 May 2026 19:25:42 +0000 Manifest next update: Wed 13 May 2026 19:49:42 +0000 Files and hashes: 1: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: JGqBVGUXPK1BTfNPZGKtxn+AR1SyfU6+7HsXJg00skI=) 2: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) 3: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 4: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 5: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1c:01:f1:6d:b2:15:0c:c2:09:3f:27:59:6b:5f:10:94:7d:65:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: May 12 19:25:42 2026 GMT Not After : May 13 19:49:42 2026 GMT Subject: CN=5612F641A5FDADADF7F06AA822D478141E63B9B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:72:5f:03:7d:80:8a:b7:12:c7:f8:25:db: 93:00:6a:ea:71:c4:9b:3c:10:09:04:bc:a8:6d:a7: 95:fd:7b:ce:ef:fd:83:4a:d1:e8:06:e7:4d:fa:f4: c5:44:42:ba:6c:c7:49:6f:57:29:08:15:08:75:36: 84:1e:d9:d3:ee:e6:f0:bf:a6:af:74:ea:7a:a9:35: 4d:16:37:47:e3:32:6e:92:ff:36:3f:25:dd:32:7f: 52:d4:b9:c9:b3:76:cb:18:56:1e:3c:ce:12:42:2c: 52:98:91:30:b3:d6:b8:90:da:70:7e:6d:d5:5d:23: 1e:38:df:ca:df:41:a7:38:6f:32:b9:1b:5b:de:5d: a9:bc:e3:19:22:3c:61:3b:22:12:dd:fa:17:af:4c: 08:da:55:38:ca:d5:8e:41:e4:65:8c:15:22:b3:d6: b6:06:a0:cc:6a:d2:91:c1:ad:7c:52:09:02:7b:47: 40:86:8f:a4:ec:0e:b6:a4:14:ab:f5:65:e5:ac:5c: 1d:b1:69:4c:0e:fc:e2:22:cd:d1:c7:2d:fd:5a:4f: e7:cb:3a:31:99:2b:73:f5:1d:28:71:60:99:92:54: 5e:14:68:22:de:72:f4:3f:4d:32:1b:0d:05:11:ac: 81:2f:61:88:fc:f8:d2:2b:be:82:26:82:3b:b8:27: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:12:F6:41:A5:FD:AD:AD:F7:F0:6A:A8:22:D4:78:14:1E:63:B9:B9 X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:8f:97:16:68:5f:11:35:e3:7c:86:87:0c:81:6b:34:d1: 14:93:6f:80:89:1f:83:74:28:58:0f:53:cf:67:7e:d6:98:38: 70:e9:82:7d:b9:de:dd:5e:e7:88:a4:3e:7d:c1:62:d7:13:12: fe:d0:a7:85:72:7e:14:f9:a0:6e:40:4f:22:03:f4:80:23:e1: 25:0a:e3:be:b7:25:4b:31:ad:25:56:29:83:ff:1e:25:5f:09: e6:46:2d:fd:1f:52:31:0a:3d:6f:e7:9c:a7:67:b1:18:28:df: e3:d7:c4:4f:27:5d:8c:38:e3:52:53:e2:da:0a:af:08:46:03: 81:76:c5:c3:15:35:ac:cb:96:a3:42:d7:3a:71:bf:6b:6f:92: bd:1f:23:cf:fc:34:d0:ac:40:04:da:1c:a0:8d:38:26:ae:81: 8a:34:75:f8:db:69:e1:d8:f8:92:89:8f:5e:34:2e:8f:ae:3b: 74:99:51:cb:d8:bf:d1:2d:06:84:b5:be:73:78:8c:22:ec:a9: 9e:62:0c:be:a9:84:96:46:7f:83:27:df:1a:37:9e:a1:db:9c: 98:de:0d:17:99:3b:38:07:f3:94:2b:c8:8e:9b:e8:d3:59:46: d2:f9:fe:b4:b3:88:42:be:48:50:a0:04:65:98:d2:59:95:ea: 4e:03:2e:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUARwB8W2yFQzCCT8nWWtfEJR9ZQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA1MTIxOTI1NDJaFw0yNjA1MTMxOTQ5NDJaMDMxMTAvBgNV BAMTKDU2MTJGNjQxQTVGREFEQURGN0YwNkFBODIyRDQ3ODE0MUU2M0I5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAU3JfA32AircSx/gl25MAaupx xJs8EAkEvKhtp5X9e87v/YNK0egG50369MVEQrpsx0lvVykIFQh1NoQe2dPu5vC/ pq906nqpNU0WN0fjMm6S/zY/Jd0yf1LUucmzdssYVh48zhJCLFKYkTCz1riQ2nB+ bdVdIx4438rfQac4bzK5G1veXam84xkiPGE7IhLd+hevTAjaVTjK1Y5B5GWMFSKz 1rYGoMxq0pHBrXxSCQJ7R0CGj6TsDrakFKv1ZeWsXB2xaUwO/OIizdHHLf1aT+fL OjGZK3P1HShxYJmSVF4UaCLecvQ/TTIbDQURrIEvYYj8+NIrvoImgju4J6M1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVhL2QaX9ra338GqoItR4FB5jubkwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIh+PlxZoXxE1 43yGhwyBazTRFJNvgIkfg3QoWA9Tz2d+1pg4cOmCfbne3V7niKQ+fcFi1xMS/tCn hXJ+FPmgbkBPIgP0gCPhJQrjvrclSzGtJVYpg/8eJV8J5kYt/R9SMQo9b+ecp2ex GCjf49fETyddjDjjUlPi2gqvCEYDgXbFwxU1rMuWo0LXOnG/a2+SvR8jz/w00KxA BNocoI04Jq6BijR1+Ntp4dj4komPXjQuj647dJlRy9i/0S0GhLW+c3iMIuypnmIM vqmElkZ/gyffGjeeoducmN4NF5k7OAfzlCvIjpvo01lG0vn+tLOIQr5IUKAEZZjS WZXqTgMu8A== -----END CERTIFICATE-----Generated at Wed May 13 11:18:58 2026 by rpki-client