$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json) Hash identifier: PYc89UuesEzAhzl/gNxjYfWjoJx2dJ4+pYvx8pIKfAo= Subject key identifier: 0B:C5:9A:6A:0A:2E:44:42:52:23:0D:76:3E:B1:0E:FA:69:2C:BD:B4 Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 73048EEEADBC362495E9456D65A3F4ECC95DA617 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft Manifest number: 26 Signing time: Wed 13 May 2026 03:25:55 +0000 Manifest this update: Wed 13 May 2026 03:20:55 +0000 Manifest next update: Thu 14 May 2026 07:16:55 +0000 Files and hashes: 1: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=) 2: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=) 3: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=) 4: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=) 5: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: xpBF0np9ioB/DZy15Nl6z2uV5mylbCWTRCBzq2OPZSA=) 6: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=) 7: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:04:8e:ee:ad:bc:36:24:95:e9:45:6d:65:a3:f4:ec:c9:5d:a6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: May 13 03:20:55 2026 GMT Not After : May 14 07:16:55 2026 GMT Subject: CN=0BC59A6A0A2E444252230D763EB10EFA692CBDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:49:e7:ae:3a:eb:53:ee:17:ea:f8:ab:83: 2d:ce:f5:c5:0d:b4:36:49:30:08:3c:8d:4b:87:2d: 75:65:74:b1:40:2c:5a:4a:dd:dd:81:6a:c3:d6:c1: 35:53:68:24:01:d6:fb:a0:bb:b7:14:5e:63:ce:3b: 0b:22:03:c2:eb:de:d2:3a:69:93:db:66:57:1a:27: a4:ec:15:45:ea:91:b6:13:22:ea:ce:8a:9d:8c:fa: 49:31:14:da:3f:2f:e0:0b:9f:37:01:22:bc:2e:2a: fc:65:69:b7:33:f7:c1:55:2a:38:8b:5a:d2:97:a8: 1c:4f:90:83:61:b1:37:6f:5c:d1:50:29:69:8d:f0: ad:b9:cc:4b:18:06:ab:8b:54:4e:03:4d:b8:46:f9: 50:cd:5b:87:3f:9e:7c:c3:3b:c1:cc:67:9f:dc:76: b0:c5:d2:c1:bc:6b:59:54:6a:c4:67:5c:6f:e8:07: ff:61:05:6a:15:24:0d:32:10:3f:4d:7e:41:15:fc: fe:ae:20:12:54:c8:d8:4b:7e:d5:fc:6e:37:d5:3e: 9f:7b:f9:3d:51:d5:1b:b2:bd:e0:92:42:b6:ad:c3: 1b:4d:d4:ad:3c:c4:61:41:43:b3:b9:3b:63:a0:51: 8e:20:ac:bd:ec:6c:ae:f8:d5:51:5c:f1:62:27:92: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C5:9A:6A:0A:2E:44:42:52:23:0D:76:3E:B1:0E:FA:69:2C:BD:B4 X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4c:04:b9:42:12:11:d0:1b:ce:34:15:8a:0d:cf:52:93:b5: fb:06:88:b5:3d:6f:fb:2a:d5:79:13:e3:91:d0:0a:4f:d9:0b: c8:9a:42:5c:3c:30:1c:c2:da:05:90:c8:8b:03:70:fe:06:72: 60:fa:b4:1f:4d:46:b7:72:24:39:65:58:10:fd:c2:83:c4:bc: bf:9b:01:e2:73:ad:a9:d1:b6:83:f3:a8:60:d6:cb:e5:e2:9e: b9:cf:88:f5:b8:75:3e:8c:93:00:0c:0b:9d:78:7c:ac:34:3e: 5a:9f:df:c8:f3:db:21:fc:41:c5:d6:01:00:f0:10:db:35:6c: 20:84:ae:f7:fe:63:66:e6:e0:ed:0e:b4:a9:7d:18:da:84:36: 21:20:99:f5:b1:0c:bc:9a:65:ad:86:f8:ff:38:b9:f8:6a:e6: 2c:08:aa:67:d6:89:27:0f:ea:d1:d2:07:dc:00:d9:ba:7b:b0: f2:8e:46:4c:f9:4b:ce:de:bc:d2:2e:ad:ca:33:82:1c:d7:15: 14:9b:e9:b0:7b:40:cf:c0:78:c7:6b:9f:0e:5c:d8:05:d0:53: 3f:a6:78:1f:64:95:d5:fc:45:72:78:62:10:9e:4a:9e:43:99: f4:22:c8:09:3c:dc:32:c2:9f:9c:17:fc:66:4d:ce:aa:5e:c9: 4b:d7:df:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcwSO7q28NiSV6UVtZaP07MldphcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjA1MTMwMzIwNTVaFw0yNjA1MTQwNzE2NTVaMDMxMTAvBgNV BAMTKDBCQzU5QTZBMEEyRTQ0NDI1MjIzMEQ3NjNFQjEwRUZBNjkyQ0JEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnUnnrjrrU+4X6virgy3O9cUN tDZJMAg8jUuHLXVldLFALFpK3d2BasPWwTVTaCQB1vugu7cUXmPOOwsiA8Lr3tI6 aZPbZlcaJ6TsFUXqkbYTIurOip2M+kkxFNo/L+ALnzcBIrwuKvxlabcz98FVKjiL WtKXqBxPkINhsTdvXNFQKWmN8K25zEsYBquLVE4DTbhG+VDNW4c/nnzDO8HMZ5/c drDF0sG8a1lUasRnXG/oB/9hBWoVJA0yED9NfkEV/P6uIBJUyNhLftX8bjfVPp97 +T1R1RuyveCSQratwxtN1K08xGFBQ7O5O2OgUY4grL3sbK741VFc8WInkszRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC8WaagouREJSIw12PrEO+mksvbQwHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8wNDkxRjQyQTM5OTBC RDYwRDMyMjQ4NTgzNzQxRjE0MUFDNjFGMEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEwEuUISEdAb zjQVig3PUpO1+waItT1v+yrVeRPjkdAKT9kLyJpCXDwwHMLaBZDIiwNw/gZyYPq0 H01Gt3IkOWVYEP3Cg8S8v5sB4nOtqdG2g/OoYNbL5eKeuc+I9bh1PoyTAAwLnXh8 rDQ+Wp/fyPPbIfxBxdYBAPAQ2zVsIISu9/5jZubg7Q60qX0Y2oQ2ISCZ9bEMvJpl rYb4/zi5+GrmLAiqZ9aJJw/q0dIH3ADZunuw8o5GTPlLzt680i6tyjOCHNcVFJvp sHtAz8B4x2ufDlzYBdBTP6Z4H2SV1fxFcnhiEJ5KnkOZ9CLICTzcMsKfnBf8Zk3O ql7JS9ffPg== -----END CERTIFICATE-----Generated at Wed May 13 14:17:17 2026 by rpki-client