$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: 0CFDBLULiaVTt2dd7FDBKUBt/hbpgwWtyAqifGYpBLY= Subject key identifier: 05:D8:66:7D:7F:17:40:95:20:33:B0:87:08:00:64:D8:F7:22:E5:90 Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 3CD7C1E6FB59B7E22BE86E51BB1DFFAB9339BCCF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: 20 Signing time: Tue 12 May 2026 23:05:49 +0000 Manifest this update: Tue 12 May 2026 23:00:49 +0000 Manifest next update: Thu 14 May 2026 02:37:49 +0000 Files and hashes: 1: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: OK+xK/cgntD2Qv96L0FqKUSeBGxQHnSWBMT3We3qKr4=) 2: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d7:c1:e6:fb:59:b7:e2:2b:e8:6e:51:bb:1d:ff:ab:93:39:bc:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: May 12 23:00:49 2026 GMT Not After : May 14 02:37:49 2026 GMT Subject: CN=05D8667D7F1740952033B087080064D8F722E590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:cd:1e:f1:9c:89:af:32:fb:50:2a:18:6a: 20:ed:e5:16:42:2e:b9:8b:7c:9c:46:e5:1d:b5:31: 15:c8:c6:56:6a:53:13:bd:8b:d5:ee:40:67:1a:e0: c7:4b:2b:54:d7:59:87:a4:85:0c:d9:8c:ec:67:28: 30:5a:b8:75:ef:0e:7b:ea:e0:2e:3e:b4:48:ce:ae: 5c:ea:ba:13:e8:11:58:13:53:cf:8a:23:37:64:80: 27:44:0a:43:4e:74:63:f5:dc:a9:20:14:c7:70:48: ff:0e:ae:2a:a6:1a:31:60:15:c6:08:57:5f:99:ef: 3b:54:c5:44:b1:a9:4b:94:99:21:2b:1c:b8:6b:df: 79:0b:0a:ab:66:4f:7f:99:5c:c4:b4:d9:48:fb:38: 1d:21:1e:eb:b6:41:32:f2:de:12:4c:c8:64:01:8a: 3d:ed:18:48:0b:dc:e2:1f:9a:38:df:00:4d:3c:b0: 6e:b3:7d:b3:83:1f:cd:5a:ac:ef:1b:05:64:4b:e3: 30:b9:01:9e:0d:0c:b2:c1:db:e1:99:e7:83:37:65: d0:d6:d4:1b:66:63:50:c0:f2:3a:dc:39:53:59:09: fb:51:82:7a:63:35:ae:2d:95:ce:c7:50:72:34:c4: 7e:12:26:e5:79:41:f2:82:c8:ce:1e:dd:59:26:c6: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:66:7D:7F:17:40:95:20:33:B0:87:08:00:64:D8:F7:22:E5:90 X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5b:b8:48:6d:64:55:6f:6d:12:9d:56:b6:e6:ab:09:f8:70: 90:00:2c:0c:9e:bb:3b:81:76:fb:d5:ad:c5:3a:8a:de:cc:1a: 5c:7f:88:7c:56:47:3c:47:3a:dd:ce:88:82:a7:15:0f:0a:65: 66:66:f6:83:b0:d6:03:ad:4b:55:07:47:28:7b:be:9e:2c:85: 8b:b9:ee:1f:08:1f:ad:10:51:89:95:45:59:68:f0:18:3c:9a: 90:9a:c9:ed:8a:4f:dd:31:cb:95:0c:08:0c:30:17:62:9c:57: d7:61:99:34:d6:f3:dc:ae:4e:56:ff:ba:69:ee:dc:22:55:e4: 80:e9:3a:a0:e1:53:29:57:87:d1:14:a3:60:d6:e7:93:58:f9: cc:cd:6f:35:8f:e8:01:6c:2e:70:4e:02:7d:0a:65:8c:e9:f2: 59:83:86:a7:a5:a1:77:6d:b6:76:80:36:aa:5d:a0:a8:77:f5: e7:d5:ee:e8:84:1b:17:70:4e:42:01:af:9b:f4:13:ca:80:0f: 3e:61:d3:06:fe:b4:17:87:26:80:5f:b9:27:db:9a:69:c4:b1: 99:fb:ed:45:ae:8a:c7:34:94:ac:9b:17:8f:69:35:55:0e:2b: 17:b2:17:0d:60:e7:e7:fc:75:0e:6a:b6:96:8f:18:aa:97:b7: a3:7e:67:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPNfB5vtZt+Ir6G5Rux3/q5M5vM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA1MTIyMzAwNDlaFw0yNjA1MTQwMjM3NDlaMDMxMTAvBgNV BAMTKDA1RDg2NjdEN0YxNzQwOTUyMDMzQjA4NzA4MDA2NEQ4RjcyMkU1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNKc0e8ZyJrzL7UCoYaiDt5RZC LrmLfJxG5R21MRXIxlZqUxO9i9XuQGca4MdLK1TXWYekhQzZjOxnKDBauHXvDnvq 4C4+tEjOrlzquhPoEVgTU8+KIzdkgCdECkNOdGP13KkgFMdwSP8OriqmGjFgFcYI V1+Z7ztUxUSxqUuUmSErHLhr33kLCqtmT3+ZXMS02Uj7OB0hHuu2QTLy3hJMyGQB ij3tGEgL3OIfmjjfAE08sG6zfbODH81arO8bBWRL4zC5AZ4NDLLB2+GZ54M3ZdDW 1BtmY1DA8jrcOVNZCftRgnpjNa4tlc7HUHI0xH4SJuV5QfKCyM4e3Vkmxhr3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBdhmfX8XQJUgM7CHCABk2Pci5ZAwHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1u4SG1kVW9t Ep1WtuarCfhwkAAsDJ67O4F2+9WtxTqK3swaXH+IfFZHPEc63c6IgqcVDwplZmb2 g7DWA61LVQdHKHu+niyFi7nuHwgfrRBRiZVFWWjwGDyakJrJ7YpP3THLlQwIDDAX YpxX12GZNNbz3K5OVv+6ae7cIlXkgOk6oOFTKVeH0RSjYNbnk1j5zM1vNY/oAWwu cE4CfQpljOnyWYOGp6Whd222doA2ql2gqHf159Xu6IQbF3BOQgGvm/QTyoAPPmHT Bv60F4cmgF+5J9uaacSxmfvtRa6KxzSUrJsXj2k1VQ4rF7IXDWDn5/x1Dmq2lo8Y qpe3o35nCA== -----END CERTIFICATE-----Generated at Wed May 13 15:44:44 2026 by rpki-client