$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: IMSlKp2Pa/GplRVRDq1JZz0fYxBX7qXJIUqHBHpWtFk= Subject key identifier: DF:75:42:B3:41:77:F3:6D:DA:15:EE:43:C0:1B:EF:45:C9:E7:BF:F0 Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 31B50EE4AB8D5EE59BE379DC36392876D857B107 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: 2E Signing time: Wed 13 May 2026 13:31:05 +0000 Manifest this update: Wed 13 May 2026 13:26:05 +0000 Manifest next update: Thu 14 May 2026 15:58:05 +0000 Files and hashes: 1: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) 2: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: EEO8S7VdJ2U7pEi47OpqEMhhKidnomJGLKRwyER0q/A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b5:0e:e4:ab:8d:5e:e5:9b:e3:79:dc:36:39:28:76:d8:57:b1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: May 13 13:26:05 2026 GMT Not After : May 14 15:58:05 2026 GMT Subject: CN=DF7542B34177F36DDA15EE43C01BEF45C9E7BFF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:49:40:20:0f:3f:72:03:d3:30:01:50:3a: a0:d7:f1:93:a4:dd:97:15:ae:56:ea:53:bb:36:72: 58:a6:66:e2:56:93:78:05:e4:76:7e:93:65:7d:e7: 3d:80:16:f1:1b:72:a5:4f:92:b9:d4:e4:b8:0e:cc: 79:9f:1b:ae:02:9b:87:5f:bb:e9:06:b6:ff:47:35: ed:af:b2:5e:16:4e:a2:81:7a:3b:14:fe:d5:34:44: b0:f0:73:b6:f7:68:3a:03:a7:fb:06:b1:69:04:88: 87:1f:bf:31:3c:de:d7:08:37:c3:6e:b7:f1:82:f8: 5c:97:61:e6:73:fd:67:c6:b6:21:31:e5:d8:1c:ac: 71:aa:10:ce:0c:ac:6d:03:bd:11:06:57:33:5e:e6: a8:1a:f0:7a:ba:9e:cf:28:a9:a2:57:74:fa:87:5d: f7:b2:e6:d6:c0:0c:0f:c7:94:ed:de:3e:55:bb:52: 35:e1:29:59:94:8c:dd:de:09:de:05:2b:ad:90:a1: 78:38:a9:8b:15:71:ff:e6:38:11:f8:4c:d3:a7:23: e7:e4:63:20:3f:04:b6:95:94:c4:97:01:79:64:04: 05:7e:b4:f0:f0:5d:60:e5:fe:fc:03:5e:6d:0f:64: 5b:51:a8:cc:82:0c:f7:6f:c1:db:19:5b:76:49:f5: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:75:42:B3:41:77:F3:6D:DA:15:EE:43:C0:1B:EF:45:C9:E7:BF:F0 X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4c:1f:32:28:2d:82:54:27:14:ea:31:6e:f3:77:de:a4:93: 24:15:0c:e6:c5:36:88:24:41:f4:5e:78:d7:9c:40:a5:b5:b3: e9:a2:cd:69:43:af:e5:84:ff:07:3b:02:d8:b1:44:c2:79:17: 22:eb:5e:c7:3f:8b:a6:01:69:ae:4a:3f:a6:13:12:48:6c:b8: a7:01:58:69:9b:ec:46:b9:74:aa:85:43:5a:3e:2f:99:ec:fc: fd:b6:1a:6b:5a:78:90:50:02:74:7d:5f:5b:11:d9:1a:cf:14: 9a:68:86:d0:20:f5:db:94:70:7a:e8:bd:4f:f4:3d:f4:c9:cf: ef:86:3f:01:9b:01:9b:c4:2d:ad:a3:a1:56:ca:4a:4d:77:ce: e6:aa:15:40:c0:65:cb:95:8d:9e:5d:99:41:20:d9:d6:77:4e: b5:32:8c:ec:a3:08:ee:d7:c4:79:3d:82:4f:40:3a:f9:60:1e: f3:c8:a3:33:ad:70:b9:82:f2:9b:8b:49:19:b1:35:4d:0b:0c: 46:66:61:83:da:31:66:fe:6f:b3:ed:4d:46:da:ce:d4:d8:18: 07:5b:5f:ff:7d:df:dc:43:7e:ca:36:64:2a:36:6c:47:68:34: c8:0e:c0:08:94:91:24:c6:89:9a:6c:06:4e:00:4c:31:bb:ec: e5:d2:fb:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMbUO5KuNXuWb43ncNjkodthXsQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjA1MTMxMzI2MDVaFw0yNjA1MTQxNTU4MDVaMDMxMTAvBgNV BAMTKERGNzU0MkIzNDE3N0YzNkREQTE1RUU0M0MwMUJFRjQ1QzlFN0JGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+ElAIA8/cgPTMAFQOqDX8ZOk 3ZcVrlbqU7s2climZuJWk3gF5HZ+k2V95z2AFvEbcqVPkrnU5LgOzHmfG64Cm4df u+kGtv9HNe2vsl4WTqKBejsU/tU0RLDwc7b3aDoDp/sGsWkEiIcfvzE83tcIN8Nu t/GC+FyXYeZz/WfGtiEx5dgcrHGqEM4MrG0DvREGVzNe5qga8Hq6ns8oqaJXdPqH Xfey5tbADA/HlO3ePlW7UjXhKVmUjN3eCd4FK62QoXg4qYsVcf/mOBH4TNOnI+fk YyA/BLaVlMSXAXlkBAV+tPDwXWDl/vwDXm0PZFtRqMyCDPdvwdsZW3ZJ9VMdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU33VCs0F3823aFe5DwBvvRcnnv/AwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEwfMigtglQn FOoxbvN33qSTJBUM5sU2iCRB9F5415xApbWz6aLNaUOv5YT/BzsC2LFEwnkXIute xz+LpgFprko/phMSSGy4pwFYaZvsRrl0qoVDWj4vmez8/bYaa1p4kFACdH1fWxHZ Gs8UmmiG0CD125Rweui9T/Q99MnP74Y/AZsBm8QtraOhVspKTXfO5qoVQMBly5WN nl2ZQSDZ1ndOtTKM7KMI7tfEeT2CT0A6+WAe88ijM61wuYLym4tJGbE1TQsMRmZh g9oxZv5vs+1NRtrO1NgYB1tf/33f3EN+yjZkKjZsR2g0yA7ACJSRJMaJmmwGTgBM Mbvs5dL7eg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:24 2026 by rpki-client