$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft File: 4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json) Hash identifier: xodFJIWzTRjigZWxMUPtSd+RLbm9q1iPRaDULXSJejw= Subject key identifier: 8B:FE:6F:46:DA:E2:06:E0:FE:73:3F:3E:C6:AC:A4:0C:84:8B:21:2E Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Certificate serial: 2EB67032781DA3B82826E23A62B6F322E3950E18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft Manifest number: 22 Signing time: Wed 13 May 2026 11:36:04 +0000 Manifest this update: Wed 13 May 2026 11:31:04 +0000 Manifest next update: Thu 14 May 2026 12:04:04 +0000 Files and hashes: 1: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=) 2: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: C0nU4EBCpg4DUa9XIDzCl/fgGfucuS0qrGAS2Q5Yojg=) 3: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=) 4: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b6:70:32:78:1d:a3:b8:28:26:e2:3a:62:b6:f3:22:e3:95:0e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Validity Not Before: May 13 11:31:04 2026 GMT Not After : May 14 12:04:04 2026 GMT Subject: CN=8BFE6F46DAE206E0FE733F3EC6ACA40C848B212E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a3:69:75:2f:f7:d0:d0:80:3f:bf:d7:c3:75: 3c:63:d5:5b:ab:18:a9:ba:f2:cd:36:d2:9e:29:5c: 16:7d:e1:41:97:0f:1e:84:89:da:46:d9:55:0b:78: eb:9a:c4:2d:0f:05:c2:81:29:e6:06:0b:0b:34:54: ef:f3:80:d9:52:1e:95:d1:94:62:0e:01:8e:ed:c3: 9c:8e:f6:f5:95:b1:67:c2:c2:53:ae:1c:8b:d8:f7: ba:64:ec:f9:c1:50:99:19:b7:eb:87:72:c0:00:52: c4:89:09:d5:f0:5a:ce:61:fc:ba:71:a3:4b:62:e6: b2:a5:49:75:ab:0c:6f:1c:1c:1b:b2:2c:47:5c:f2: d8:ce:1c:4d:4d:bf:04:5a:3d:b0:df:6b:70:28:58: e9:e0:5b:8a:65:e7:e5:63:a5:72:9f:79:fa:c6:46: 18:c0:76:dd:45:dd:21:e3:ca:8f:a1:bf:ff:cb:7f: 19:7f:9d:5f:18:c7:a1:b9:74:23:53:59:99:d2:d7: f2:21:b0:fd:8c:c6:3b:94:24:54:f5:81:9c:75:18: 0f:32:11:4b:11:ed:a1:81:0f:28:6a:25:71:fc:f1: 96:fd:ee:52:a5:4e:57:b8:ac:78:dd:37:a9:eb:08: da:92:23:b7:00:eb:5e:6f:84:33:f2:9b:35:a3:3a: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FE:6F:46:DA:E2:06:E0:FE:73:3F:3E:C6:AC:A4:0C:84:8B:21:2E X509v3 Authority Key Identifier: keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:61:ce:d1:36:0c:d9:d2:ee:20:04:db:d3:99:c3:69:69:72: 61:b4:44:70:b3:bb:6e:1b:9e:b3:e3:be:05:7d:c6:20:d7:a8: 0f:4b:68:35:dd:6d:5e:58:91:81:40:76:14:c2:c5:a0:e6:9d: a9:2a:b2:b8:9f:36:3a:2c:a6:27:af:bf:fb:c9:85:ad:b6:28: e3:70:4d:bc:25:5b:c1:76:a9:64:dd:4b:aa:bf:3f:f0:58:6d: 68:98:f9:54:b8:a4:67:41:f9:07:14:df:f3:e9:c4:b9:2b:d5: f3:bd:9d:9b:0b:7e:3d:f8:4e:df:07:fb:db:80:21:63:0c:6a: 28:b9:46:c6:5b:a9:26:54:45:bb:7a:9f:8f:a4:c3:2c:05:b6: 77:7c:bc:01:97:6c:b9:70:3a:11:52:bd:2c:0c:9e:b8:68:05: a1:6a:71:67:f0:0a:ad:3f:90:ab:ba:06:f9:75:5a:85:8c:c0: c8:f3:37:36:01:c6:bc:bd:c3:94:e5:b1:d6:e2:38:94:8a:4d: 9d:10:09:09:26:cb:a0:43:b6:20:48:66:6a:28:fb:8a:7c:77: 88:b3:c5:21:81:eb:58:e1:bb:8b:12:06:9e:89:7d:f0:c0:c4: 29:0e:23:92:ed:3f:6f:99:f1:5f:7b:a0:8b:17:9b:5f:17:98: fc:dc:2f:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULrZwMngdo7goJuI6YrbzIuOVDhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0Mz NTc4Q0Q1NzAeFw0yNjA1MTMxMTMxMDRaFw0yNjA1MTQxMjA0MDRaMDMxMTAvBgNV BAMTKDhCRkU2RjQ2REFFMjA2RTBGRTczM0YzRUM2QUNBNDBDODQ4QjIxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRo2l1L/fQ0IA/v9fDdTxj1Vur GKm68s020p4pXBZ94UGXDx6EidpG2VULeOuaxC0PBcKBKeYGCws0VO/zgNlSHpXR lGIOAY7tw5yO9vWVsWfCwlOuHIvY97pk7PnBUJkZt+uHcsAAUsSJCdXwWs5h/Lpx o0ti5rKlSXWrDG8cHBuyLEdc8tjOHE1NvwRaPbDfa3AoWOngW4pl5+VjpXKfefrG RhjAdt1F3SHjyo+hv//Lfxl/nV8Yx6G5dCNTWZnS1/IhsP2MxjuUJFT1gZx1GA8y EUsR7aGBDyhqJXH88Zb97lKlTle4rHjdN6nrCNqSI7cA615vhDPymzWjOshHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi/5vRtriBuD+cz8+xqykDISLIS4wHwYDVR0j BBgwFoAUTsJ/zETUM/q8yxcwFEalfDV4zVcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTAyNzQ1Ny8wLzRFQzI3RkNDNDRENDMzRkFCQ0NCMTczMDE0NDZB NTdDMzU3OENENTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0MzNTc4Q0Q1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwMjc0NTcvMC80RUMyN0ZDQzQ0RDQz M0ZBQkNDQjE3MzAxNDQ2QTU3QzM1NzhDRDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2HO0TYM2dLu IATb05nDaWlyYbREcLO7bhues+O+BX3GINeoD0toNd1tXliRgUB2FMLFoOadqSqy uJ82OiymJ6+/+8mFrbYo43BNvCVbwXapZN1Lqr8/8FhtaJj5VLikZ0H5BxTf8+nE uSvV872dmwt+PfhO3wf724AhYwxqKLlGxlupJlRFu3qfj6TDLAW2d3y8AZdsuXA6 EVK9LAyeuGgFoWpxZ/AKrT+Qq7oG+XVahYzAyPM3NgHGvL3DlOWx1uI4lIpNnRAJ CSbLoEO2IEhmaij7inx3iLPFIYHrWOG7ixIGnol98MDEKQ4jku0/b5nxX3ugixeb XxeY/NwvsA== -----END CERTIFICATE-----Generated at Wed May 13 20:55:06 2026 by rpki-client