$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft (raw, json) Hash identifier: JKkMraOeZEVxm/iC/ZcpSZJpVhydXrUb0CfjCsAiwVE= Subject key identifier: 0C:2D:AE:F3:8B:85:4A:83:34:4E:7C:43:B1:8B:88:13:53:96:ED:4D Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 Certificate issuer: /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Certificate serial: 2A3F114D5B25E7AEDC19E2B1C68F97A64806FF20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft Manifest number: 21 Signing time: Tue 12 May 2026 20:00:43 +0000 Manifest this update: Tue 12 May 2026 19:55:43 +0000 Manifest next update: Wed 13 May 2026 23:05:43 +0000 Files and hashes: 1: 3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (hash: U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=) 2: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl (hash: CJ4tLk4DZRR9jMQm9N8x7d7NJ7EPtgBF/w2sE1YBE10=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3f:11:4d:5b:25:e7:ae:dc:19:e2:b1:c6:8f:97:a6:48:06:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8 Validity Not Before: May 12 19:55:43 2026 GMT Not After : May 13 23:05:43 2026 GMT Subject: CN=0C2DAEF38B854A83344E7C43B18B88135396ED4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:b3:b9:74:26:02:b6:10:5d:dc:ad:eb:d0: fc:17:14:ea:07:97:2c:34:0d:28:ad:e0:70:90:91: ec:01:32:b1:4a:66:b0:e4:36:4b:db:c2:20:1a:58: a2:df:79:7e:1b:f4:34:48:b2:74:09:0a:f7:78:48: 3e:04:ee:00:ea:c7:0d:79:11:16:33:96:87:b4:dd: 64:e8:52:f7:00:e2:0f:0d:88:5f:ac:ec:99:9c:4a: d8:2d:94:30:36:7e:f1:59:f7:11:10:19:12:f3:6d: 51:a2:28:d2:66:ae:39:f8:f0:ef:b2:0b:30:f3:6c: 2b:b0:d4:91:7b:8b:91:0e:0b:1a:14:0f:03:18:44: 3d:c7:53:33:7f:9d:33:65:59:2e:70:39:9b:6a:e6: a4:52:69:b0:76:0f:a0:fd:41:be:e8:62:d7:3e:3f: 15:bf:82:b1:9d:92:29:c7:f3:74:56:ae:78:e6:2a: 46:88:83:a8:7e:b9:bd:16:2a:94:d1:b2:4c:a4:7f: 15:8d:f3:fb:33:b9:cd:75:b8:da:17:c5:c0:af:92: c1:c9:4e:d9:6b:32:8b:26:24:c3:5b:71:a4:d8:8f: 55:a2:7c:40:db:5e:d4:59:d8:7f:ab:cf:fa:99:e9: d2:c6:d8:3c:16:1e:76:9c:26:b3:97:72:96:6d:17: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2D:AE:F3:8B:85:4A:83:34:4E:7C:43:B1:8B:88:13:53:96:ED:4D X509v3 Authority Key Identifier: keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:69:c6:31:d6:2b:3e:6d:09:c2:eb:d2:c2:74:43:83:76:37: 1d:77:31:73:1c:e3:c8:3d:af:ea:de:86:47:f7:ec:c9:fb:bc: e3:44:76:9f:cd:ee:37:9b:31:44:73:30:5d:45:e5:f3:05:66: 81:e9:b2:c8:56:b6:de:26:0d:85:8c:b7:5d:10:ad:5a:05:7f: 9b:34:37:a6:3e:3b:e0:c2:4a:3b:0e:4a:48:da:88:7f:09:90: c3:f0:f4:21:3b:ec:3f:be:d7:f0:b2:b5:1e:63:cb:b6:29:d6: 87:49:78:62:6f:fc:ae:8c:ab:90:b7:31:43:f5:a0:56:11:5f: b5:f9:d4:72:19:f8:47:47:23:e5:02:3b:e1:ae:e0:e7:cc:87: 54:e3:2e:d6:56:f7:92:1b:23:46:d3:46:4a:09:30:4e:4e:9a: a2:0a:10:4c:0b:1e:2e:c7:67:03:fd:08:34:e4:18:d6:ab:aa: aa:70:8d:d3:57:28:07:74:1f:2f:bf:47:a8:8f:cd:a9:51:d5: 4c:2a:de:83:c4:71:3e:f0:be:7a:92:49:cc:2a:f8:04:11:73: 88:29:a4:5c:fd:f3:a1:0e:ec:0f:8d:e2:1c:7a:c2:54:d3:a7: 86:70:fd:1c:c6:0e:24:4f:ff:7f:7b:e0:23:39:b7:c7:e2:c5: 8f:fb:2c:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKj8RTVsl567cGeKxxo+XpkgG/yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJB MUQ5MENDODAeFw0yNjA1MTIxOTU1NDNaFw0yNjA1MTMyMzA1NDNaMDMxMTAvBgNV BAMTKDBDMkRBRUYzOEI4NTRBODMzNDRFN0M0M0IxOEI4ODEzNTM5NkVENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/bO5dCYCthBd3K3r0PwXFOoH lyw0DSit4HCQkewBMrFKZrDkNkvbwiAaWKLfeX4b9DRIsnQJCvd4SD4E7gDqxw15 ERYzloe03WToUvcA4g8NiF+s7JmcStgtlDA2fvFZ9xEQGRLzbVGiKNJmrjn48O+y CzDzbCuw1JF7i5EOCxoUDwMYRD3HUzN/nTNlWS5wOZtq5qRSabB2D6D9Qb7oYtc+ PxW/grGdkinH83RWrnjmKkaIg6h+ub0WKpTRskykfxWN8/szuc11uNoXxcCvksHJ TtlrMosmJMNbcaTYj1WifEDbXtRZ2H+rz/qZ6dLG2DwWHnacJrOXcpZtF4+5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDC2u84uFSoM0TnxDsYuIE1OW7U0wHwYDVR0j BBgwFoAUy09txcSr73mvv+7PGLptgqHZDMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUzNzQwNTA1NDQ1MTcxNC8wL0NCNEY2REM1QzRBQkVGNzlBRkJGRUVDRjE4QkE2 RDgyQTFEOTBDQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0I0RjZEQzVDNEFCRUY3OUFGQkZFRUNGMThCQTZEODJBMUQ5MENDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1Mzc0MDUwNTQ0NTE3MTQvMC9DQjRGNkRDNUM0QUJF Rjc5QUZCRkVFQ0YxOEJBNkQ4MkExRDkwQ0M4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2nGMdYrPm0J wuvSwnRDg3Y3HXcxcxzjyD2v6t6GR/fsyfu840R2n83uN5sxRHMwXUXl8wVmgemy yFa23iYNhYy3XRCtWgV/mzQ3pj474MJKOw5KSNqIfwmQw/D0ITvsP77X8LK1HmPL tinWh0l4Ym/8royrkLcxQ/WgVhFftfnUchn4R0cj5QI74a7g58yHVOMu1lb3khsj RtNGSgkwTk6aogoQTAseLsdnA/0INOQY1quqqnCN01coB3QfL79HqI/NqVHVTCre g8RxPvC+epJJzCr4BBFziCmkXP3zoQ7sD43iHHrCVNOnhnD9HMYOJE//f3vgIzm3 x+LFj/ssEw== -----END CERTIFICATE-----Generated at Wed May 13 17:09:35 2026 by rpki-client