$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft File: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft (raw, json) Hash identifier: XXyUgdPUT4pWT2dG/7pkJLN9qXheGTom4aEseHdiFSk= Subject key identifier: 18:3A:04:06:67:54:1A:6F:2C:A0:3D:94:34:82:E9:78:68:88:C2:0A Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 Certificate issuer: /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Certificate serial: 75807765B3BA7E7597E1ACD16655FDFA123B047B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft Manifest number: 2B Signing time: Wed 13 May 2026 15:06:05 +0000 Manifest this update: Wed 13 May 2026 15:01:05 +0000 Manifest next update: Thu 14 May 2026 16:42:05 +0000 Files and hashes: 1: 323430313a633032303a393a3a2f34382d3438203d3e20313531323736.roa (hash: y9w/RzzaFHn59WCWUDJU3dqWd9yUIoo7JskGYPVr5WQ=) 2: 323430313a633032303a31343a3a2f34382d3438203d3e20313531323736.roa (hash: mr0/gxeIKI22glZxYzHulN1c0VopTHKnK1KsfVxMuu0=) 3: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl (hash: pNmpReQ6jjA9xaCJwieKXDNEF8Xrw1fLuya+DP2fdS8=) 4: 323430313a633032303a363a3a2f34382d3438203d3e20313531323736.roa (hash: WUqh1dTEpWIYsDvwBsYOOFvLpDV8qK8WxIPcIuTpcHk=) 5: 323430313a633032303a383a3a2f34382d3438203d3e20313531323736.roa (hash: eVZvU/XBvUrHPOqvp05KEbICvOmQPEZy0GrpXcWtlJ0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:80:77:65:b3:ba:7e:75:97:e1:ac:d1:66:55:fd:fa:12:3b:04:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Validity Not Before: May 13 15:01:05 2026 GMT Not After : May 14 16:42:05 2026 GMT Subject: CN=183A040667541A6F2CA03D943482E9786888C20A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:5c:56:52:0a:b4:09:9c:bf:aa:a2:58:d2: bd:df:53:aa:77:22:84:a2:74:56:6c:cd:5a:e3:50: cc:44:4d:69:b1:06:a6:2a:63:04:2b:b3:ce:ac:72: 74:55:ba:a5:09:a5:34:57:02:e2:da:4e:e9:e7:4d: ab:bf:a1:5a:2a:a2:a3:59:b2:51:9d:1a:7c:f3:f3: f3:95:8f:86:0d:44:03:11:40:7e:c8:0d:21:b7:6e: 1b:c6:6e:f6:1f:e9:ba:b8:1e:c7:da:3c:c3:27:36: 00:09:61:2b:4a:a0:7b:30:6e:b0:b5:3f:b2:6f:86: d1:c7:07:c4:15:12:30:df:91:49:a9:c8:c7:f1:f7: 6e:f8:40:89:da:a5:f4:5a:43:26:23:be:bc:96:79: cb:31:1a:5d:99:2f:64:a8:79:ab:5e:98:af:0c:b2: ee:cb:27:a1:12:75:92:19:3a:21:a6:cb:9f:7e:c8: 98:ae:24:8e:8a:75:16:cd:d5:f7:45:84:cc:69:3a: fa:cb:81:45:1f:94:2d:54:08:41:03:70:db:80:f8: 3a:7e:60:86:7a:db:d0:14:92:61:f3:c8:0a:c6:cd: d5:86:a5:99:98:23:f6:8a:21:90:24:4a:ea:e7:e4: 2e:de:8b:34:06:e5:38:5c:e7:89:fb:58:2d:eb:39: 50:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3A:04:06:67:54:1A:6F:2C:A0:3D:94:34:82:E9:78:68:88:C2:0A X509v3 Authority Key Identifier: keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f5:82:b3:c7:fa:92:3e:60:bc:7f:52:ee:42:0e:e2:de:34: 43:c5:7d:95:d7:0e:84:ca:1e:88:9f:39:e8:d3:14:0c:02:36: d0:31:f2:01:d7:e7:8c:94:3c:ae:52:a5:10:a0:8c:1a:3b:82: 12:e3:1a:96:b2:29:4f:d0:a6:c1:1a:89:16:fb:2d:4c:6e:8f: 0e:59:29:5b:22:5b:6b:db:1f:ad:b4:5a:f8:0a:c1:27:24:21: 4e:d8:e9:76:c1:59:21:2e:24:7c:af:79:fb:09:e6:bc:c6:8b: 17:c3:89:55:05:be:92:1b:a0:74:c9:43:e7:4f:d8:7a:2f:b5: 74:2d:dc:d1:cc:65:ff:bf:da:77:ba:3a:25:60:05:1c:be:b2: 5b:a8:ca:fa:21:ec:40:a1:73:45:69:31:0b:66:22:2e:96:28: a8:1e:20:ee:79:5c:95:a5:7a:cf:9a:64:c9:1c:ca:01:7f:42: 80:68:47:72:1d:af:c3:45:65:c3:ad:d5:d3:e3:9a:d1:3b:95: 7c:2e:71:3d:fa:98:1f:51:43:5a:d7:ca:b5:6c:40:0e:11:9e: d7:54:96:03:c3:4c:62:3a:a0:aa:87:54:ef:75:20:46:04:2a: 41:29:19:c4:5d:4e:4a:57:31:99:35:5d:d1:e2:5a:cc:0a:11: de:a1:dc:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdYB3ZbO6fnWX4azRZlX9+hI7BHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0 QjlBRDY4MjAeFw0yNjA1MTMxNTAxMDVaFw0yNjA1MTQxNjQyMDVaMDMxMTAvBgNV BAMTKDE4M0EwNDA2Njc1NDFBNkYyQ0EwM0Q5NDM0ODJFOTc4Njg4OEMyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi1FxWUgq0CZy/qqJY0r3fU6p3 IoSidFZszVrjUMxETWmxBqYqYwQrs86scnRVuqUJpTRXAuLaTunnTau/oVoqoqNZ slGdGnzz8/OVj4YNRAMRQH7IDSG3bhvGbvYf6bq4HsfaPMMnNgAJYStKoHswbrC1 P7JvhtHHB8QVEjDfkUmpyMfx9274QInapfRaQyYjvryWecsxGl2ZL2SoeatemK8M su7LJ6ESdZIZOiGmy59+yJiuJI6KdRbN1fdFhMxpOvrLgUUflC1UCEEDcNuA+Dp+ YIZ629AUkmHzyArGzdWGpZmYI/aKIZAkSurn5C7eizQG5Thc54n7WC3rOVC9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGDoEBmdUGm8soD2UNILpeGiIwgowHwYDVR0j BBgwFoAU0Itf0UH25LToIZ/z6Nl5ykua1oIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5MzkzMTI3NjU4MjkxNC8wL0QwOEI1RkQxNDFGNkU0QjRFODIxOUZGM0U4RDk3 OUNBNEI5QUQ2ODIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0QjlBRDY4Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTM5MzEyNzY1ODI5MTQvMC9EMDhCNUZEMTQxRjZF NEI0RTgyMTlGRjNFOEQ5NzlDQTRCOUFENjgyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/WCs8f6kj5g vH9S7kIO4t40Q8V9ldcOhMoeiJ856NMUDAI20DHyAdfnjJQ8rlKlEKCMGjuCEuMa lrIpT9CmwRqJFvstTG6PDlkpWyJba9sfrbRa+ArBJyQhTtjpdsFZIS4kfK95+wnm vMaLF8OJVQW+khugdMlD50/Yei+1dC3c0cxl/7/ad7o6JWAFHL6yW6jK+iHsQKFz RWkxC2YiLpYoqB4g7nlclaV6z5pkyRzKAX9CgGhHch2vw0Vlw63V0+Oa0TuVfC5x PfqYH1FDWtfKtWxADhGe11SWA8NMYjqgqodU73UgRgQqQSkZxF1OSlcxmTVd0eJa zAoR3qHcJw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:02 2026 by rpki-client