$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft File: B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft (raw, json) Hash identifier: xcqxm4uLJlQ2+/0fngWRWi4SSdAuIsP20+GDHpr99tY= Subject key identifier: 1A:D9:BE:9E:9C:2E:4E:CC:B1:A7:71:B5:F5:26:64:D9:5C:EA:21:62 Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Certificate serial: 29209E8F5E21143A7E706CADBF765D627E61A025 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft Manifest number: 20 Signing time: Tue 12 May 2026 21:30:47 +0000 Manifest this update: Tue 12 May 2026 21:25:47 +0000 Manifest next update: Wed 13 May 2026 23:09:47 +0000 Files and hashes: 1: 3130332e32312e3134302e302f32332d3233203d3e2034383131.roa (hash: tcwtXl101EjdJnvoeZCk6mNf34pYvQGTfA6kEOpTAGA=) 2: 3130332e32312e3134302e302f32322d3232203d3e2034383132.roa (hash: yl0VnVjOJBB11Ksw/l6MI8tE6HFSWJZk+mBrBZTIapM=) 3: B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl (hash: A6kjYmQdRAFmLxh6rm56wARIsPhJ7qPI0HaR99kJAJk=) 4: 3231302e31362e3138382e302f32332d3233203d3e2034383131.roa (hash: I/skHLzMxhJEW53hMQb4kjDQldjO0bhyqUNU6juFZXk=) 5: 3231302e31362e3138352e302f32342d3234203d3e2034383132.roa (hash: bXqNYBH6dqp3XhjyABQOELGhYbAAx/VDEKU/yFMCeZM=) 6: 3130332e32312e3134322e302f32332d3233203d3e2034383131.roa (hash: zeQy36951EhzMb9y4+nhGStpafM9i+ny55leHQjqlo4=) 7: 3231302e31362e3138362e302f32332d3233203d3e2034383131.roa (hash: b4O2YO4xELxbphJVo2XTIR7dTO1KnPDV5e00+BSpHO8=) 8: 3231302e31362e3139302e302f32332d3233203d3e2034383131.roa (hash: 2XbC/CUrdrlSv7pBB2C4Ttv+wtm+9ZIR2uM6HjETEdI=) 9: 3231302e31362e3138302e302f32342d3234203d3e2034383132.roa (hash: pVbEirpbRHZqbSynsD8vPGMaGo+q4kutYI9/gkSkdY8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:20:9e:8f:5e:21:14:3a:7e:70:6c:ad:bf:76:5d:62:7e:61:a0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Validity Not Before: May 12 21:25:47 2026 GMT Not After : May 13 23:09:47 2026 GMT Subject: CN=1AD9BE9E9C2E4ECCB1A771B5F52664D95CEA2162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:82:53:ec:39:96:52:4a:bd:75:c2:63:0d: 81:08:db:59:e8:d7:6d:3d:37:6f:9f:b7:ea:97:d7: d5:c0:c8:d5:8a:51:e2:01:d3:db:b9:db:f1:c7:c4: dd:19:d1:bf:3c:a1:9c:54:d1:45:b6:cb:d2:70:6c: 8c:9d:73:f5:0f:2a:9d:b0:f8:64:74:f5:f1:cf:e9: 94:74:c2:2f:ad:99:5e:65:71:e5:ac:ce:62:d9:74: 73:94:18:2a:16:1b:46:f2:fc:7c:bf:d2:cf:a5:0d: 0c:18:98:4d:b0:f0:4a:5e:c8:ab:f0:d5:19:b8:2e: 6e:c8:69:9e:49:44:4c:9b:18:ac:00:e9:30:3c:d0: fc:0c:e9:22:8a:4d:77:ff:a4:30:78:75:63:97:dd: 61:60:2e:21:2f:4b:2d:f8:48:a3:aa:71:73:a0:41: fb:60:ce:ed:b2:eb:9e:af:ed:9e:a6:72:51:55:0f: 21:f5:30:c1:4d:35:6e:6c:ed:79:ae:17:22:ed:74: 95:0d:88:89:17:3d:56:d8:c5:95:4a:46:df:60:79: 94:c1:c1:33:14:5f:77:be:86:90:97:48:7c:2b:14: 5a:ef:60:a6:04:68:20:ee:6c:1a:e4:b6:c6:f0:19: 4e:66:03:db:0e:f2:bc:39:70:21:ec:48:28:66:17: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D9:BE:9E:9C:2E:4E:CC:B1:A7:71:B5:F5:26:64:D9:5C:EA:21:62 X509v3 Authority Key Identifier: keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:bc:a1:2b:5d:15:27:ea:49:d5:0e:6a:4a:43:84:b1:d6:dc: 74:90:00:16:d0:d1:8b:bb:9f:e1:d5:4f:ad:a2:b9:0e:bb:12: 06:69:c2:74:82:d3:70:ee:38:39:b7:d0:e9:91:5d:db:cb:a5: 4b:af:40:99:b2:94:8d:fe:08:cc:24:98:21:97:a6:97:06:5d: 09:c1:af:25:80:f5:fa:06:56:fc:58:5d:b3:10:e2:40:cd:4e: e0:d0:12:6d:52:97:a8:87:45:57:23:1d:13:c4:07:9d:cd:79: be:f8:7e:16:bd:97:b7:65:dc:06:28:b7:65:b9:a1:38:3d:39: 60:9b:a7:99:99:3a:61:21:9c:15:09:3c:6d:8a:e5:c1:c1:5e: 2c:0f:d7:23:68:1c:69:b0:35:f9:dd:60:b5:28:46:c1:ea:42: 5c:a7:89:bc:6b:6a:a1:8f:46:29:ea:7a:89:3c:5e:7a:32:a9: 83:c9:0e:cb:67:61:c0:fb:1d:46:c0:32:eb:1e:c6:5d:96:ed: 4c:cb:8b:94:14:e4:41:28:c8:9f:57:fe:94:51:42:32:83:3b: 8f:94:f9:01:60:c4:6e:4a:ac:37:9a:a3:3c:c6:91:69:89:bb: 41:2a:70:91:a5:cd:88:97:56:c6:17:b4:22:74:e0:75:83:6a: 68:2c:bf:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKSCej14hFDp+cGytv3ZdYn5hoCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkw NjdEMzVFQTAeFw0yNjA1MTIyMTI1NDdaFw0yNjA1MTMyMzA5NDdaMDMxMTAvBgNV BAMTKDFBRDlCRTlFOUMyRTRFQ0NCMUE3NzFCNUY1MjY2NEQ5NUNFQTIxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYb4JT7DmWUkq9dcJjDYEI21no 1209N2+ft+qX19XAyNWKUeIB09u52/HHxN0Z0b88oZxU0UW2y9JwbIydc/UPKp2w +GR09fHP6ZR0wi+tmV5lceWszmLZdHOUGCoWG0by/Hy/0s+lDQwYmE2w8EpeyKvw 1Rm4Lm7IaZ5JREybGKwA6TA80PwM6SKKTXf/pDB4dWOX3WFgLiEvSy34SKOqcXOg Qftgzu2y656v7Z6mclFVDyH1MMFNNW5s7XmuFyLtdJUNiIkXPVbYxZVKRt9geZTB wTMUX3e+hpCXSHwrFFrvYKYEaCDubBrktsbwGU5mA9sO8rw5cCHsSChmF6UlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGtm+npwuTsyxp3G19SZk2VzqIWIwHwYDVR0j BBgwFoAUtHm5tH+K/BBiuNRp9ipmiQZ9NeowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTA5Mjk5My8wL0I0NzlCOUI0N0Y4QUZDMTA2MkI4RDQ2OUY2MkE2 Njg5MDY3RDM1RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkwNjdEMzVFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwOTI5OTMvMC9CNDc5QjlCNDdGOEFG QzEwNjJCOEQ0NjlGNjJBNjY4OTA2N0QzNUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7yhK10VJ+pJ 1Q5qSkOEsdbcdJAAFtDRi7uf4dVPraK5DrsSBmnCdILTcO44ObfQ6ZFd28ulS69A mbKUjf4IzCSYIZemlwZdCcGvJYD1+gZW/FhdsxDiQM1O4NASbVKXqIdFVyMdE8QH nc15vvh+Fr2Xt2XcBii3ZbmhOD05YJunmZk6YSGcFQk8bYrlwcFeLA/XI2gcabA1 +d1gtShGwepCXKeJvGtqoY9GKep6iTxeejKpg8kOy2dhwPsdRsAy6x7GXZbtTMuL lBTkQSjIn1f+lFFCMoM7j5T5AWDEbkqsN5qjPMaRaYm7QSpwkaXNiJdWxhe0InTg dYNqaCy/rA== -----END CERTIFICATE-----Generated at Wed May 13 15:30:34 2026 by rpki-client