$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: h/UEhiQm6mJLjD7n4GIQA+e6HmZnMslBrR9vJkZhy3g= Subject key identifier: F0:C5:41:8F:52:D4:FC:CB:4E:EF:01:A2:6E:74:F7:2E:EA:87:A2:A7 Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 2C32FD949D01F254C98E6058E39CE0417FDEC5ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: 25 Signing time: Wed 13 May 2026 03:30:55 +0000 Manifest this update: Wed 13 May 2026 03:25:55 +0000 Manifest next update: Thu 14 May 2026 06:34:55 +0000 Files and hashes: 1: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: +ID0RU6E1zMYyu2r7xc64hTObyAw781aK0LtFcOuvE0=) 2: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:32:fd:94:9d:01:f2:54:c9:8e:60:58:e3:9c:e0:41:7f:de:c5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: May 13 03:25:55 2026 GMT Not After : May 14 06:34:55 2026 GMT Subject: CN=F0C5418F52D4FCCB4EEF01A26E74F72EEA87A2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:53:e2:f2:8c:cb:f3:f4:ae:8e:9f:b3:cf:bb: 07:63:70:6f:14:51:5b:e4:5e:40:30:a9:50:c5:51: 54:d6:07:e8:1c:84:af:96:1e:52:6c:48:85:14:11: 05:53:49:42:b3:0f:9a:00:18:28:83:4d:05:34:42: 01:f5:64:e0:fe:fa:31:53:02:87:90:60:a2:92:10: 82:d4:65:8e:52:ee:eb:b0:c3:ce:5d:a4:61:90:32: ae:60:1e:a9:8f:14:9a:28:ea:6c:52:7a:04:a9:3b: 23:6b:c0:48:fd:50:29:33:98:e9:07:33:11:e5:6e: c8:bc:48:ab:a4:4c:9d:eb:09:ca:80:3d:da:e1:ae: 4e:b2:82:89:5b:df:3f:29:bc:72:e5:86:c7:0a:82: 8b:37:a7:e8:f3:16:5a:c7:95:51:52:3d:48:f0:68: 4a:ae:05:16:c0:5c:04:36:be:4e:a5:03:fa:77:06: 16:ec:de:76:1f:6c:d4:a9:c9:35:ff:a1:44:d0:4b: 31:32:8a:36:00:1e:32:f8:40:8c:71:09:4d:bd:ec: f9:59:fa:c8:c3:1b:af:96:51:85:5b:e1:ca:12:15: 61:a9:83:21:b2:d9:83:3d:f3:fa:35:66:c5:f3:40: ae:a5:49:0a:2f:76:2c:ae:98:58:82:7b:39:43:13: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C5:41:8F:52:D4:FC:CB:4E:EF:01:A2:6E:74:F7:2E:EA:87:A2:A7 X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:a2:f1:cd:fa:08:82:32:e6:70:ac:68:48:7f:c8:3c:ad:38: fc:a6:bc:7f:31:52:c1:70:e2:fe:a2:99:2b:36:1a:99:8f:7b: 4c:db:97:d1:cc:ad:86:e2:0e:9b:7f:42:a1:d0:66:62:57:31: ca:8b:e8:7e:e4:04:31:8a:6c:14:ce:fc:d1:c9:86:fa:cf:3e: e9:1f:f0:37:e9:ce:7d:94:41:75:46:4e:38:ba:50:7b:d8:66: 96:94:87:11:66:7e:09:90:9a:81:6c:d3:cf:2e:f7:2b:8a:a4: 34:0f:0d:7e:79:43:9f:75:df:2f:75:00:06:5d:5a:ae:f5:dc: 92:c8:46:3a:b7:90:bd:96:39:98:14:2a:d1:ec:9b:fd:96:57: 96:d3:27:db:93:6d:b9:ce:4c:c2:b6:fe:cd:8e:01:60:3c:3a: 64:4d:fd:99:e5:ab:b1:ee:fc:73:d7:f9:ee:b0:71:dc:f4:7a: 1a:be:6e:4e:54:a0:bc:3f:45:a9:38:81:f0:34:17:5c:21:e0: 0c:d8:fb:e9:78:ec:04:ea:95:52:af:08:c5:b7:c8:ee:1d:c3: 3a:ec:7f:3f:29:a0:e1:89:40:1c:ed:48:0c:63:6e:27:c1:73: ae:86:6d:53:61:09:b3:ae:d7:97:b1:17:7b:3d:8c:f7:a5:ee: 33:0a:d4:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULDL9lJ0B8lTJjmBY45zgQX/exe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjA1MTMwMzI1NTVaFw0yNjA1MTQwNjM0NTVaMDMxMTAvBgNV BAMTKEYwQzU0MThGNTJENEZDQ0I0RUVGMDFBMjZFNzRGNzJFRUE4N0EyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmU+LyjMvz9K6On7PPuwdjcG8U UVvkXkAwqVDFUVTWB+gchK+WHlJsSIUUEQVTSUKzD5oAGCiDTQU0QgH1ZOD++jFT AoeQYKKSEILUZY5S7uuww85dpGGQMq5gHqmPFJoo6mxSegSpOyNrwEj9UCkzmOkH MxHlbsi8SKukTJ3rCcqAPdrhrk6ygolb3z8pvHLlhscKgos3p+jzFlrHlVFSPUjw aEquBRbAXAQ2vk6lA/p3Bhbs3nYfbNSpyTX/oUTQSzEyijYAHjL4QIxxCU297PlZ +sjDG6+WUYVb4coSFWGpgyGy2YM98/o1ZsXzQK6lSQovdiyumFiCezlDE4JnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8MVBj1LU/MtO7wGibnT3LuqHoqcwHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyaLxzfoIgjLm cKxoSH/IPK04/Ka8fzFSwXDi/qKZKzYamY97TNuX0cythuIOm39CodBmYlcxyovo fuQEMYpsFM780cmG+s8+6R/wN+nOfZRBdUZOOLpQe9hmlpSHEWZ+CZCagWzTzy73 K4qkNA8NfnlDn3XfL3UABl1arvXckshGOreQvZY5mBQq0eyb/ZZXltMn25Ntuc5M wrb+zY4BYDw6ZE39meWrse78c9f57rBx3PR6Gr5uTlSgvD9FqTiB8DQXXCHgDNj7 6XjsBOqVUq8IxbfI7h3DOux/Pymg4YlAHO1IDGNuJ8FzroZtU2EJs67Xl7EXez2M 96XuMwrUrA== -----END CERTIFICATE-----Generated at Wed May 13 14:17:55 2026 by rpki-client