$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft File: 48394F266C145173319F25807E0F7F0C02A6894A.mft (raw, json) Hash identifier: 6JWZ/FzOPDCLypYU6qfMI6ulH9bhhbWi421h/btwYOM= Subject key identifier: AD:A9:98:31:10:23:C3:3D:31:0E:EF:B8:D2:20:00:8E:FD:E4:F7:95 Authority key identifier: 48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A Certificate issuer: /CN=48394F266C145173319F25807E0F7F0C02A6894A Certificate serial: 4402FAE538AD5EE68F0453232649BA37E59DC4A9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft Manifest number: 2C Signing time: Wed 13 May 2026 15:46:05 +0000 Manifest this update: Wed 13 May 2026 15:41:05 +0000 Manifest next update: Thu 14 May 2026 16:27:05 +0000 Files and hashes: 1: 48394F266C145173319F25807E0F7F0C02A6894A.crl (hash: qvadYKosHxMI7qt9YLqmaCIwu2hoe9Kk8uNKkITEiQk=) 2: 3231392e3233352e302e302f32302d3230203d3e20313339313534.roa (hash: huRlYO+09FxgnCnNVPyqhV/uiBFlNuHHw2ZsrH3jefA=) 3: 323430353a663934303a3a2f33322d3332203d3e20313339313534.roa (hash: lhgN0L9WHGTQkGTRCfQY8FavApS7jNFQ59DMwInIVKM=) 4: 3130332e3135302e32342e302f32332d3233203d3e20313339313534.roa (hash: D8YNJPMwU58KLUevFRebwhHA8dOoH0VTSkz2kVFv0Sw=) 5: 3131392e3134382e3136302e302f32302d3230203d3e20313339313534.roa (hash: wXAduiWjp7UFtX2sJ8+R8PFnchSO4/z/J9zAx35yjFM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:02:fa:e5:38:ad:5e:e6:8f:04:53:23:26:49:ba:37:e5:9d:c4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48394F266C145173319F25807E0F7F0C02A6894A Validity Not Before: May 13 15:41:05 2026 GMT Not After : May 14 16:27:05 2026 GMT Subject: CN=ADA998311023C33D310EEFB8D220008EFDE4F795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:b2:16:26:3a:75:ae:82:27:08:e3:13:cb: a8:0c:14:3a:91:5b:0b:b3:10:b5:24:67:2a:a8:30: 71:d6:d1:73:2c:a9:e1:83:62:74:81:61:49:89:9f: 17:b5:19:5f:40:4e:d2:b8:6f:9e:59:19:a4:1f:a6: 9c:31:b6:12:b7:c1:a9:9e:f2:0a:15:a1:77:18:72: 84:1d:36:70:b3:99:c8:79:a1:92:a7:02:11:61:61: 73:01:b2:2d:45:e3:01:e0:17:33:0e:72:b6:29:65: 0a:40:41:e3:5a:1b:a9:99:d8:ff:e0:50:06:51:6b: 30:df:59:ce:fb:e6:4c:6e:52:f2:79:72:9e:7d:7c: 9a:ab:3a:e9:fa:5e:44:58:73:54:a3:b2:21:bc:91: 34:75:f8:94:51:29:6c:77:f6:eb:85:67:7a:04:27: 8d:67:41:25:31:d5:c2:05:d6:97:4d:8b:fc:b0:b1: e0:85:a3:f4:34:7e:0f:2c:27:81:e4:4e:61:17:43: 83:f4:9c:17:35:08:74:a0:4d:8f:fe:84:12:13:87: 00:37:1d:53:29:a8:6e:48:1b:6a:7f:8f:d6:0f:47: e4:1b:72:90:f9:c2:7e:9b:03:9a:c8:c8:d7:fe:41: c8:7a:00:49:5d:07:ed:38:52:4d:7e:a9:31:9f:7c: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:98:31:10:23:C3:3D:31:0E:EF:B8:D2:20:00:8E:FD:E4:F7:95 X509v3 Authority Key Identifier: keyid:48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:63:96:de:bc:86:1c:75:6c:98:ae:71:b3:48:f2:1c:25:e8: ee:24:83:b5:90:35:2c:47:bb:e5:44:8c:0e:c4:42:14:68:25: 89:8f:39:62:21:80:60:c4:cc:ae:ea:09:52:e8:bc:27:48:ee: f2:a3:cd:d5:6a:49:14:17:55:9f:fa:85:37:f0:19:dc:ad:c3: cf:91:ef:5b:b4:aa:e5:6b:f6:86:c8:b0:60:35:2b:d0:22:8d: b7:98:20:af:f1:63:93:0b:67:dc:89:89:e4:c2:25:76:49:c3: c0:a8:6e:e8:2e:31:66:ac:f0:67:ee:af:4b:48:aa:c0:2e:82: a7:b1:5b:37:ce:ad:eb:7e:55:be:80:e2:fc:08:ed:1d:91:30: 5f:72:4d:21:70:be:50:65:cc:5f:5a:81:61:92:91:f4:e8:6f: 74:f0:18:9a:fb:50:08:9a:c4:8c:77:bf:40:75:5f:55:4c:2a: 69:5f:19:a0:4e:ff:e0:0a:e1:f1:f3:a0:2d:e7:fd:b6:d9:6f: 0d:81:da:78:f2:1c:2b:a4:c0:bc:ee:6f:86:5e:1f:a6:b8:20: 0d:dc:b9:4c:a7:ef:10:ac:ef:76:16:be:24:8e:e6:41:48:87: c8:80:ef:34:3b:1a:75:64:d7:47:df:5c:24:26:99:f4:d2:24: f2:fb:d9:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURAL65TitXuaPBFMjJkm6N+WdxKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgzOTRGMjY2QzE0NTE3MzMxOUYyNTgwN0UwRjdGMEMw MkE2ODk0QTAeFw0yNjA1MTMxNTQxMDVaFw0yNjA1MTQxNjI3MDVaMDMxMTAvBgNV BAMTKEFEQTk5ODMxMTAyM0MzM0QzMTBFRUZCOEQyMjAwMDhFRkRFNEY3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYLIWJjp1roInCOMTy6gMFDqR WwuzELUkZyqoMHHW0XMsqeGDYnSBYUmJnxe1GV9ATtK4b55ZGaQfppwxthK3wame 8goVoXcYcoQdNnCzmch5oZKnAhFhYXMBsi1F4wHgFzMOcrYpZQpAQeNaG6mZ2P/g UAZRazDfWc775kxuUvJ5cp59fJqrOun6XkRYc1SjsiG8kTR1+JRRKWx39uuFZ3oE J41nQSUx1cIF1pdNi/ywseCFo/Q0fg8sJ4HkTmEXQ4P0nBc1CHSgTY/+hBIThwA3 HVMpqG5IG2p/j9YPR+QbcpD5wn6bA5rIyNf+Qch6AEldB+04Uk1+qTGffJppAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUramYMRAjwz0xDu+40iAAjv3k95UwHwYDVR0j BBgwFoAUSDlPJmwUUXMxnyWAfg9/DAKmiUowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njc0MDg3NDk4Njk3OTMzMC8wLzQ4Mzk0RjI2NkMxNDUxNzMzMTlGMjU4MDdFMEY3 RjBDMDJBNjg5NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDgzOTRGMjY2QzE0NTE3MzMxOUYyNTgwN0UwRjdGMEMwMkE2ODk0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3NDA4NzQ5ODY5NzkzMzAvMC80ODM5NEYyNjZDMTQ1 MTczMzE5RjI1ODA3RTBGN0YwQzAyQTY4OTRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2OW3ryGHHVs mK5xs0jyHCXo7iSDtZA1LEe75USMDsRCFGgliY85YiGAYMTMruoJUui8J0ju8qPN 1WpJFBdVn/qFN/AZ3K3Dz5HvW7Sq5Wv2hsiwYDUr0CKNt5ggr/Fjkwtn3ImJ5MIl dknDwKhu6C4xZqzwZ+6vS0iqwC6Cp7FbN86t635VvoDi/AjtHZEwX3JNIXC+UGXM X1qBYZKR9OhvdPAYmvtQCJrEjHe/QHVfVUwqaV8ZoE7/4Arh8fOgLef9ttlvDYHa ePIcK6TAvO5vhl4fprggDdy5TKfvEKzvdha+JI7mQUiHyIDvNDsadWTXR99cJCaZ 9NIk8vvZVg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:05 2026 by rpki-client