$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft File: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft (raw, json) Hash identifier: hskpDcaBjB5MLdBY4kqbOjNGXxtjA6JqCJk5tivwxnU= Subject key identifier: CD:27:EE:C4:FE:C5:77:D7:1F:61:A1:75:CB:9B:91:38:2A:7D:80:99 Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 Certificate issuer: /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Certificate serial: 172068BD5588894634C54C012B933ADFB70E52ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft Manifest number: 26 Signing time: Wed 13 May 2026 01:35:50 +0000 Manifest this update: Wed 13 May 2026 01:30:50 +0000 Manifest next update: Thu 14 May 2026 04:04:50 +0000 Files and hashes: 1: 3231312e3135382e32352e302f32342d3234203d3e2034383337.roa (hash: XBntutEvCNeXCggvauZz+rp2o18De8TFbKQWAGRJfMk=) 2: 3231312e3135382e32352e302f32342d3234203d3e203233383531.roa (hash: lgcHC+1PIJ23YX/sNOoex75tU2ptb0Da5GWkVFKpu/Y=) 3: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl (hash: JrRML9/Lq3LTirLsnRfpmDdS5I3xjeYNWb26TVkl8Ew=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:20:68:bd:55:88:89:46:34:c5:4c:01:2b:93:3a:df:b7:0e:52:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Validity Not Before: May 13 01:30:50 2026 GMT Not After : May 14 04:04:50 2026 GMT Subject: CN=CD27EEC4FEC577D71F61A175CB9B91382A7D8099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:3b:fc:24:3b:52:a6:0c:a9:9d:4e:58:d3: 10:d1:11:8d:25:1b:33:22:6b:1e:5d:88:3f:98:ba: 00:61:27:e5:bd:c2:d7:e2:81:23:69:08:c6:c9:8e: 5e:d3:25:67:42:1c:98:e6:46:fd:db:34:06:23:bd: af:3d:6b:57:33:36:71:0d:f5:04:72:d7:cd:6d:6b: 40:b0:3a:44:ad:9c:cc:53:fd:ff:c5:b8:e7:42:9c: 2a:f6:ff:6c:9a:8a:fd:59:75:58:17:87:93:1b:23: b2:9f:1f:70:d0:99:71:50:66:35:ca:0f:1f:b4:e3: cb:98:ed:3a:6a:86:56:57:89:1d:d9:ce:4d:96:71: 68:8e:c7:c0:20:84:6a:06:67:b0:08:ba:5d:a2:9d: e9:09:0a:3d:da:fe:83:c5:8c:de:db:05:e8:5e:cf: 2c:52:9e:51:34:32:38:88:bb:98:c0:95:4f:19:5e: 8a:ee:7d:7e:fe:01:9e:eb:a6:37:40:43:9b:e6:05: a2:61:4d:1a:30:09:9f:da:5a:32:0c:d2:a2:17:77: 22:69:1f:8c:5a:48:44:2f:a6:6e:f5:83:68:a4:63: 5c:bc:5b:7a:23:cc:d3:7c:f3:1c:66:3f:d6:b9:44: 1c:39:cd:72:bc:18:d0:00:f7:58:36:67:86:fb:7a: 57:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:27:EE:C4:FE:C5:77:D7:1F:61:A1:75:CB:9B:91:38:2A:7D:80:99 X509v3 Authority Key Identifier: keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:68:04:2c:f7:ae:e1:0f:3c:a1:c8:4e:15:2d:ed:e8:14:3d: 77:66:90:79:57:c7:9c:52:d7:cd:ba:87:b8:c3:74:02:db:00: 20:9e:e9:d4:1e:6d:b9:b6:2e:8a:89:3a:10:f5:97:af:ac:8e: 7e:12:e0:69:c9:22:9d:31:51:f5:75:a1:30:4c:28:e1:86:66: 7d:24:bc:3c:d1:15:c0:c3:0a:98:1a:70:fc:0d:90:e7:f4:0a: bf:39:db:25:20:dc:25:dc:95:7c:da:5a:78:d1:b3:57:3e:07: 3c:00:c6:86:13:0d:1a:ea:12:51:70:26:bc:64:72:b5:6e:58: dc:96:59:03:8a:7c:85:ac:a8:02:71:83:71:e8:61:93:35:aa: 37:ab:8b:35:a3:54:a5:b2:8d:31:24:4e:92:c3:6a:46:3c:03: c4:22:d8:1a:8b:9c:ff:3f:b7:83:24:4c:c9:8b:e5:71:62:08: 31:01:0a:21:3d:00:4a:a1:83:05:f5:0f:3a:58:76:f6:c1:77: 64:b5:c6:63:6c:76:50:44:cf:87:85:19:bb:56:6d:d6:7a:e3: db:af:95:1e:04:7f:28:18:f9:f1:39:08:48:b0:d6:20:6b:4a: 09:32:53:0e:af:53:59:2f:c0:7a:37:59:6c:23:dc:6f:27:4b: 09:1e:1c:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFyBovVWIiUY0xUwBK5M637cOUu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0 QkQwRURFMDAeFw0yNjA1MTMwMTMwNTBaFw0yNjA1MTQwNDA0NTBaMDMxMTAvBgNV BAMTKENEMjdFRUM0RkVDNTc3RDcxRjYxQTE3NUNCOUI5MTM4MkE3RDgwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyTv8JDtSpgypnU5Y0xDREY0l GzMiax5diD+YugBhJ+W9wtfigSNpCMbJjl7TJWdCHJjmRv3bNAYjva89a1czNnEN 9QRy181ta0CwOkStnMxT/f/FuOdCnCr2/2yaiv1ZdVgXh5MbI7KfH3DQmXFQZjXK Dx+048uY7TpqhlZXiR3Zzk2WcWiOx8AghGoGZ7AIul2inekJCj3a/oPFjN7bBehe zyxSnlE0MjiIu5jAlU8ZXorufX7+AZ7rpjdAQ5vmBaJhTRowCZ/aWjIM0qIXdyJp H4xaSEQvpm71g2ikY1y8W3ojzNN88xxmP9a5RBw5zXK8GNAA91g2Z4b7elcTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzSfuxP7Fd9cfYaF1y5uROCp9gJkwHwYDVR0j BBgwFoAU6afZto/wQLXO4sT2Vpl0LkvQ7eAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzMTcyNTU0NjAxMjY3My8wL0U5QTdEOUI2OEZGMDQwQjVDRUUyQzRGNjU2OTk3 NDJFNEJEMEVERTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0QkQwRURFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzE3MjU1NDYwMTI2NzMvMC9FOUE3RDlCNjhGRjA0 MEI1Q0VFMkM0RjY1Njk5NzQyRTRCRDBFREUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2gELPeu4Q88 ochOFS3t6BQ9d2aQeVfHnFLXzbqHuMN0AtsAIJ7p1B5tubYuiok6EPWXr6yOfhLg ackinTFR9XWhMEwo4YZmfSS8PNEVwMMKmBpw/A2Q5/QKvznbJSDcJdyVfNpaeNGz Vz4HPADGhhMNGuoSUXAmvGRytW5Y3JZZA4p8hayoAnGDcehhkzWqN6uLNaNUpbKN MSROksNqRjwDxCLYGouc/z+3gyRMyYvlcWIIMQEKIT0ASqGDBfUPOlh29sF3ZLXG Y2x2UETPh4UZu1Zt1nrj26+VHgR/KBj58TkISLDWIGtKCTJTDq9TWS/AejdZbCPc bydLCR4c2g== -----END CERTIFICATE-----Generated at Wed May 13 14:09:16 2026 by rpki-client