$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json) Hash identifier: o3fG8G8IGDUcNSmzcpP/a4Q0EiZDzyKnTEf9+GOzcAY= Subject key identifier: 15:1E:2F:02:77:63:3A:F9:AF:A2:29:42:87:2F:56:A4:E0:5C:5F:B0 Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Certificate serial: 7C3C9CFAD474296E812C363234AF7A87F03A39F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft Manifest number: 23 Signing time: Wed 13 May 2026 01:25:50 +0000 Manifest this update: Wed 13 May 2026 01:20:50 +0000 Manifest next update: Thu 14 May 2026 04:02:50 +0000 Files and hashes: 1: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: ti9e6gc15e1PlgwFtDVYJR9LtjeAlj7YWU9iBqwzQ2M=) 2: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=) 3: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=) 4: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=) 5: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=) 6: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3c:9c:fa:d4:74:29:6e:81:2c:36:32:34:af:7a:87:f0:3a:39:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Validity Not Before: May 13 01:20:50 2026 GMT Not After : May 14 04:02:50 2026 GMT Subject: CN=151E2F0277633AF9AFA22942872F56A4E05C5FB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:4d:53:bd:c9:21:ed:38:95:fa:52:ff:10: db:74:10:7e:f2:b5:53:e5:72:1b:52:d9:37:16:09: 5c:59:7c:42:03:a7:cf:17:c6:79:6f:c8:a2:ae:e0: 9b:8d:ec:f2:5a:ec:39:db:70:0f:20:d1:77:8e:7b: 02:8d:f8:de:c4:5d:90:de:e2:f0:1c:c5:51:f1:35: 4c:7b:31:2e:a4:09:ec:0c:3c:3e:c7:e5:5e:4c:9f: 66:4a:20:00:8b:76:f8:55:b3:7a:a4:80:e3:7a:32: b2:3c:1f:a3:ee:01:75:6e:5f:24:26:77:aa:12:4b: 93:7e:dd:11:cc:a9:25:d4:28:8e:13:c0:07:53:fd: 8d:06:a1:3f:1e:4e:a1:fb:8f:41:ca:64:b3:9a:5d: 39:f5:79:ff:3f:67:02:b3:90:f3:e3:18:f0:b0:28: 9f:fc:b1:78:ae:93:2d:2d:00:6c:05:4d:9b:7c:58: 67:cf:80:f2:a9:3d:84:b0:82:d7:cb:0f:a6:9d:8d: 81:c9:86:40:b7:5d:2d:fd:a3:ed:76:a5:27:7f:4c: b2:91:86:3e:3e:d7:58:07:85:15:e9:e0:04:63:df: ad:3f:5e:be:4c:70:6f:83:37:89:a5:6a:e8:3d:5f: 85:00:ed:b2:d0:f3:e2:22:1a:29:a6:79:33:bb:03: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1E:2F:02:77:63:3A:F9:AF:A2:29:42:87:2F:56:A4:E0:5C:5F:B0 X509v3 Authority Key Identifier: keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6a:b9:a9:c5:49:11:3c:c3:9e:dd:28:0f:9e:6d:02:8b:bd: db:6c:55:68:a9:06:f9:1c:6f:59:99:e4:7e:d2:73:cc:d3:d2: 34:e6:9a:15:4c:d9:c9:7f:f7:a9:4f:4a:ef:67:57:68:62:c4: 51:c5:ca:fe:2e:19:2e:64:30:1a:80:40:06:ed:7f:8e:cf:48: 3d:d9:8b:dc:dc:8f:79:a0:58:c3:50:59:a0:97:e1:c2:ec:31: c2:bd:ee:11:7d:8b:64:73:02:29:21:d2:c0:c1:d3:38:eb:45: 1c:ca:0e:bb:09:84:18:70:3a:af:31:06:9e:8c:1a:d5:e0:bc: 70:0d:dd:28:51:22:60:9d:62:0c:cc:15:91:15:75:1f:98:81: e3:a3:71:49:58:2d:a1:c2:5b:fa:7e:a6:e5:b8:96:de:19:d1: 7a:57:6f:a6:1d:7f:a7:96:e0:bd:68:5c:4f:b3:95:57:c7:18: 53:0e:f6:37:fb:98:90:d0:c4:84:97:f1:41:a8:5f:3f:f9:50: ed:70:93:2a:c2:57:82:73:58:f5:82:45:d9:22:54:f8:84:46: 47:a8:db:0a:67:40:1f:4a:75:6d:4e:ad:25:64:1e:17:59:64: 6f:03:5e:6c:87:a2:17:85:7f:ec:e6:7f:10:fd:97:48:03:d0: 5e:8a:ff:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfDyc+tR0KW6BLDYyNK96h/A6OfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYw MjU3QkRDNzAeFw0yNjA1MTMwMTIwNTBaFw0yNjA1MTQwNDAyNTBaMDMxMTAvBgNV BAMTKDE1MUUyRjAyNzc2MzNBRjlBRkEyMjk0Mjg3MkY1NkE0RTA1QzVGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYVU1Tvckh7TiV+lL/ENt0EH7y tVPlchtS2TcWCVxZfEIDp88XxnlvyKKu4JuN7PJa7DnbcA8g0XeOewKN+N7EXZDe 4vAcxVHxNUx7MS6kCewMPD7H5V5Mn2ZKIACLdvhVs3qkgON6MrI8H6PuAXVuXyQm d6oSS5N+3RHMqSXUKI4TwAdT/Y0GoT8eTqH7j0HKZLOaXTn1ef8/ZwKzkPPjGPCw KJ/8sXiuky0tAGwFTZt8WGfPgPKpPYSwgtfLD6adjYHJhkC3XS39o+12pSd/TLKR hj4+11gHhRXp4ARj360/Xr5McG+DN4mlaug9X4UA7bLQ8+IiGimmeTO7A2/jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFR4vAndjOvmvoilChy9WpOBcX7AwHwYDVR0j BBgwFoAUtjJQLo1tI2nFGiNGy6Vp5gJXvccwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzUxNTgxMzkzMTMxOTI5OS8wL0I2MzI1MDJFOEQ2RDIzNjlDNTFBMjM0NkNCQTU2 OUU2MDI1N0JEQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc1MTU4MTM5MzEzMTkyOTkvMC9CNjMyNTAyRThENkQy MzY5QzUxQTIzNDZDQkE1NjlFNjAyNTdCREM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGq5qcVJETzD nt0oD55tAou922xVaKkG+RxvWZnkftJzzNPSNOaaFUzZyX/3qU9K72dXaGLEUcXK /i4ZLmQwGoBABu1/js9IPdmL3NyPeaBYw1BZoJfhwuwxwr3uEX2LZHMCKSHSwMHT OOtFHMoOuwmEGHA6rzEGnowa1eC8cA3dKFEiYJ1iDMwVkRV1H5iB46NxSVgtocJb +n6m5biW3hnReldvph1/p5bgvWhcT7OVV8cYUw72N/uYkNDEhJfxQahfP/lQ7XCT KsJXgnNY9YJF2SJU+IRGR6jbCmdAH0p1bU6tJWQeF1lkbwNebIeiF4V/7OZ/EP2X SAPQXor/FQ== -----END CERTIFICATE-----Generated at Wed May 13 15:57:06 2026 by rpki-client