$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: Oyh3aD/pXsKveJZXYX3E94j1T6KrTeaF8bgMyHGQYt0= Subject key identifier: 2A:A0:73:97:00:17:0C:26:61:49:89:4A:D0:3A:29:C3:11:43:FC:1A Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 5A33EB147F5D93BA34A69335D1105C165B66154F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: 20 Signing time: Wed 13 May 2026 09:56:03 +0000 Manifest this update: Wed 13 May 2026 09:51:03 +0000 Manifest next update: Thu 14 May 2026 13:26:03 +0000 Files and hashes: 1: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) 2: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) 3: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) 4: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: +t6kFYePPUMn+5k5bEGWa0a6QMqX3EG4J9BIUfNxHiE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:33:eb:14:7f:5d:93:ba:34:a6:93:35:d1:10:5c:16:5b:66:15:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: May 13 09:51:03 2026 GMT Not After : May 14 13:26:03 2026 GMT Subject: CN=2AA0739700170C266149894AD03A29C31143FC1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:7f:16:b6:b4:7e:67:0c:f4:5c:b5:04:a2: a6:22:f2:4e:82:67:fe:6c:be:6e:18:ea:f5:6e:75: 0f:bf:d8:96:d5:1e:d3:89:32:a8:1e:dc:0d:ad:d5: f2:bf:e2:13:e1:f1:48:c1:50:81:d3:25:a5:3e:74: 2a:e9:da:1e:38:ef:8a:2d:8f:d2:8c:92:df:0c:80: 5d:76:79:6a:9c:05:48:23:e1:d5:fb:1e:9d:6c:95: d6:f7:ed:5d:38:86:b6:3e:cb:5d:80:ef:11:48:1a: fd:bb:e9:eb:ba:77:53:32:15:9e:af:83:cc:80:8d: c3:99:39:de:26:b4:9e:a6:3a:83:a6:aa:5a:07:8c: 06:2c:12:62:7d:9d:da:38:11:69:03:62:17:15:e5: e6:99:34:c0:30:35:05:c7:ef:3a:ab:4a:14:bd:6a: a3:3d:e8:f4:9b:7b:ba:9d:03:81:22:10:51:06:8c: cd:25:66:ec:d4:68:1c:e9:a2:f7:9f:9c:fb:91:b7: 41:19:45:9f:cd:f4:dc:1b:4a:d2:0d:f5:8b:c7:d5: f0:96:40:e6:18:f3:5d:35:ee:c1:b7:d7:82:89:bf: ab:7b:9a:44:de:37:7e:66:84:46:a6:59:4c:ea:61: 5d:95:db:e1:a4:5f:57:19:80:07:40:0e:1a:b1:af: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A0:73:97:00:17:0C:26:61:49:89:4A:D0:3A:29:C3:11:43:FC:1A X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0b:df:66:53:ee:d1:15:82:d2:8d:3c:61:d9:32:86:01:7c: 62:8f:84:34:23:a6:eb:68:96:5d:42:6a:ac:4a:f6:9b:b6:ae: 7e:c2:0b:c5:7b:3d:c7:81:9a:1a:97:a7:cf:8f:5f:68:d2:bc: 14:3e:db:3d:62:29:ba:0b:35:e0:0d:b0:20:cf:d8:d8:94:a1: 51:87:b7:63:39:d5:a5:1a:b2:47:f7:16:62:32:6f:83:54:16: 73:b9:26:45:21:08:20:6c:d3:e6:46:a5:88:eb:6e:2e:00:6a: a5:fe:b7:73:45:53:c5:ba:6f:b0:54:aa:47:a9:4f:62:af:5e: b5:2b:f0:6e:2b:17:7d:c6:b4:78:9f:ad:60:8e:ec:78:73:cf: c6:10:41:12:ab:64:c8:90:7e:0e:62:52:ed:47:ce:90:7d:7b: ea:1c:1e:2f:a0:c7:cd:58:13:bf:d6:a4:f2:aa:b5:f1:29:94: ef:7e:e8:f9:b4:02:c4:63:ab:76:1c:87:c8:23:33:3c:bd:d5: b6:94:cf:f9:49:a3:b6:97:19:16:40:6f:4c:bf:62:7a:99:4f: 94:9c:b2:d1:e0:dd:da:fb:ab:95:52:2e:61:c8:80:ea:b9:02: a9:e0:27:51:5e:84:6b:20:3c:f6:c8:eb:a2:9c:72:12:55:91: 2c:23:cd:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWjPrFH9dk7o0ppM10RBcFltmFU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjA1MTMwOTUxMDNaFw0yNjA1MTQxMzI2MDNaMDMxMTAvBgNV BAMTKDJBQTA3Mzk3MDAxNzBDMjY2MTQ5ODk0QUQwM0EyOUMzMTE0M0ZDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk738WtrR+Zwz0XLUEoqYi8k6C Z/5svm4Y6vVudQ+/2JbVHtOJMqge3A2t1fK/4hPh8UjBUIHTJaU+dCrp2h4474ot j9KMkt8MgF12eWqcBUgj4dX7Hp1sldb37V04hrY+y12A7xFIGv276eu6d1MyFZ6v g8yAjcOZOd4mtJ6mOoOmqloHjAYsEmJ9ndo4EWkDYhcV5eaZNMAwNQXH7zqrShS9 aqM96PSbe7qdA4EiEFEGjM0lZuzUaBzpovefnPuRt0EZRZ/N9NwbStIN9YvH1fCW QOYY81017sG314KJv6t7mkTeN35mhEamWUzqYV2V2+GkX1cZgAdADhqxr4xxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKqBzlwAXDCZhSYlK0DopwxFD/BowHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwvfZlPu0RWC 0o08YdkyhgF8Yo+ENCOm62iWXUJqrEr2m7aufsILxXs9x4GaGpenz49faNK8FD7b PWIpugs14A2wIM/Y2JShUYe3YznVpRqyR/cWYjJvg1QWc7kmRSEIIGzT5kaliOtu LgBqpf63c0VTxbpvsFSqR6lPYq9etSvwbisXfca0eJ+tYI7seHPPxhBBEqtkyJB+ DmJS7UfOkH176hweL6DHzVgTv9ak8qq18SmU737o+bQCxGOrdhyHyCMzPL3VtpTP +UmjtpcZFkBvTL9ieplPlJyy0eDd2vurlVIuYciA6rkCqeAnUV6EayA89sjropxy ElWRLCPNgw== -----END CERTIFICATE-----Generated at Wed May 13 13:44:41 2026 by rpki-client