$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: TQvmvpFeyLYr0kPT0lnRnwLjash4JeMPvp7e/6rAZ4s= Subject key identifier: 59:E3:F7:34:92:08:99:62:DC:39:AF:82:78:E9:19:F7:FE:29:F7:60 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 47457639CE5756BD0E92055397A6C16B761C6261 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: 26 Signing time: Wed 13 May 2026 08:46:15 +0000 Manifest this update: Wed 13 May 2026 08:41:15 +0000 Manifest next update: Thu 14 May 2026 12:11:15 +0000 Files and hashes: 1: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) 2: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) 3: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: aw8XBtK69Kyzxnx+AE35JwBzPphcPHJboA8TkJ5frso=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:45:76:39:ce:57:56:bd:0e:92:05:53:97:a6:c1:6b:76:1c:62:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: May 13 08:41:15 2026 GMT Not After : May 14 12:11:15 2026 GMT Subject: CN=59E3F73492089962DC39AF8278E919F7FE29F760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2e:07:e6:e1:b4:ab:f7:5d:06:b6:2c:aa:c4: 2d:e7:d1:09:78:34:d7:99:84:8b:70:91:24:95:36: 63:d5:59:07:2f:8b:1d:54:87:24:e1:d4:fd:ea:8b: 20:f4:e9:da:da:51:a7:eb:e6:7a:18:57:8f:13:12: 5f:74:95:e8:5f:25:2c:ff:c3:64:03:89:df:07:0b: fe:93:ed:7b:ad:c9:eb:26:66:f8:e7:b7:63:96:20: 9e:12:ba:ca:04:aa:dd:2b:25:b2:b9:ff:b3:72:6f: d1:97:7f:b0:b5:82:10:70:ea:e4:41:02:b7:69:85: 73:96:2b:e2:dc:a0:71:8b:2b:49:7f:a5:37:33:c9: b5:be:96:33:59:7e:a2:30:07:d4:1a:e7:90:b9:2c: cc:ef:dc:6c:a3:f5:f3:62:0d:45:54:77:1d:86:2b: 88:0d:c3:64:91:4f:8c:68:c6:f2:d6:a7:92:24:d0: 8d:0b:e9:bf:07:b0:24:b6:37:34:6f:5c:9b:68:af: 23:c6:de:d4:7e:9c:9b:90:00:9e:02:1a:40:ca:d4: 12:a4:c3:65:a5:77:6f:15:35:7a:38:8c:ed:30:c6: 73:9b:bf:a6:ab:16:0d:e2:46:9a:08:02:79:8d:b8: 2c:4f:65:4c:f2:7d:68:de:a0:56:00:b2:9f:19:2a: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E3:F7:34:92:08:99:62:DC:39:AF:82:78:E9:19:F7:FE:29:F7:60 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:cb:17:3d:e8:ee:87:9c:dc:df:ae:d7:0f:64:d0:ca:d6:7a: 5c:bf:8c:c1:c0:14:d8:85:a7:45:0c:40:8d:b6:37:92:bd:ff: 5c:27:fb:ef:03:9f:8d:c9:4e:4f:44:a5:12:21:a6:a5:6d:a6: 64:98:d3:17:05:64:d0:5c:7d:90:85:fa:5d:6e:e6:c8:00:db: a0:27:45:d8:3e:16:5e:e7:01:81:5d:94:38:e2:a6:32:2e:6a: 20:67:63:15:c4:bd:96:6d:f5:7c:cf:ea:03:0d:6f:85:1e:72: 6b:0a:ae:e8:25:ff:f6:be:39:9e:47:0d:15:a8:6c:81:c4:32: 7d:f2:16:8a:41:82:a8:c2:1c:3d:3d:c2:ff:b9:7c:dc:f4:5e: 48:43:d4:81:fc:97:02:fa:70:86:98:75:26:d6:b0:f4:16:0c: da:8e:f2:44:dc:7d:54:f8:cb:46:42:ab:fd:4d:5e:4b:b2:b5: 06:bf:9e:51:7b:77:3c:f9:c4:ca:15:5c:4c:79:23:17:0d:73: ef:2f:52:5e:f0:4f:d3:28:9b:33:a2:cf:f7:d7:bc:89:43:da: 1b:ef:ef:1b:bc:39:d0:df:cb:12:4c:77:6d:e2:76:51:c4:84: fb:b1:70:95:ce:da:8b:3b:b4:d2:d2:c2:c7:6c:fc:c7:a9:b6: 2a:2b:d2:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR0V2Oc5XVr0OkgVTl6bBa3YcYmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjA1MTMwODQxMTVaFw0yNjA1MTQxMjExMTVaMDMxMTAvBgNV BAMTKDU5RTNGNzM0OTIwODk5NjJEQzM5QUY4Mjc4RTkxOUY3RkUyOUY3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Lgfm4bSr910GtiyqxC3n0Ql4 NNeZhItwkSSVNmPVWQcvix1UhyTh1P3qiyD06draUafr5noYV48TEl90lehfJSz/ w2QDid8HC/6T7XutyesmZvjnt2OWIJ4SusoEqt0rJbK5/7Nyb9GXf7C1ghBw6uRB ArdphXOWK+LcoHGLK0l/pTczybW+ljNZfqIwB9Qa55C5LMzv3Gyj9fNiDUVUdx2G K4gNw2SRT4xoxvLWp5Ik0I0L6b8HsCS2NzRvXJtoryPG3tR+nJuQAJ4CGkDK1BKk w2Wld28VNXo4jO0wxnObv6arFg3iRpoIAnmNuCxPZUzyfWjeoFYAsp8ZKqNTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWeP3NJIImWLcOa+CeOkZ9/4p92AwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYssXPejuh5zc 367XD2TQytZ6XL+MwcAU2IWnRQxAjbY3kr3/XCf77wOfjclOT0SlEiGmpW2mZJjT FwVk0Fx9kIX6XW7myADboCdF2D4WXucBgV2UOOKmMi5qIGdjFcS9lm31fM/qAw1v hR5yawqu6CX/9r45nkcNFahsgcQyffIWikGCqMIcPT3C/7l83PReSEPUgfyXAvpw hph1Jtaw9BYM2o7yRNx9VPjLRkKr/U1eS7K1Br+eUXt3PPnEyhVcTHkjFw1z7y9S XvBP0yibM6LP99e8iUPaG+/vG7w50N/LEkx3beJ2UcSE+7Fwlc7aizu00tLCx2z8 x6m2KivSAg== -----END CERTIFICATE-----Generated at Wed May 13 12:25:34 2026 by rpki-client