$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json) Hash identifier: LigpdyVJDXUYrfoQTZkMbNTzbtdDkosc0ykxbAcR+XA= Subject key identifier: 33:68:7E:4D:32:CA:BC:5D:24:1A:FD:0D:A6:22:FC:3A:7C:6E:AB:D6 Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E Certificate serial: 21594018ED7D4D10F7AE1D9C34F1740F91DA27B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft Manifest number: 1F Signing time: Tue 12 May 2026 21:35:47 +0000 Manifest this update: Tue 12 May 2026 21:30:47 +0000 Manifest next update: Thu 14 May 2026 01:03:47 +0000 Files and hashes: 1: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: pLyVnD95KJackAsggNptZxNXLQrqTtd2wos+fTuThJo=) 2: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: DP23poGQDkc48xamlAUIWnFQUmEr6Se+WcaeU4nY26I=) 3: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:59:40:18:ed:7d:4d:10:f7:ae:1d:9c:34:f1:74:0f:91:da:27:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E Validity Not Before: May 12 21:30:47 2026 GMT Not After : May 14 01:03:47 2026 GMT Subject: CN=33687E4D32CABC5D241AFD0DA622FC3A7C6EABD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:bb:18:7e:c5:c6:38:e0:b0:c6:82:bc:21: 0a:f3:1d:f6:18:c7:22:17:12:65:a0:1c:c4:89:14: 9a:8d:42:fd:f8:17:97:17:90:93:b8:c7:a1:cd:11: f2:7a:69:a0:42:cc:1b:0c:0c:e6:75:c8:15:bf:53: a1:cd:7a:d5:54:4c:b8:5e:6c:da:63:63:45:8a:09: 7e:ca:db:91:32:37:8e:6f:04:d8:fe:a7:06:ec:2b: 44:a6:81:3b:13:78:26:72:a8:d7:df:35:46:c3:0f: c3:24:f7:70:b2:24:1f:e2:31:6c:a2:e5:29:a3:59: 63:ad:71:d7:61:4e:f0:71:fd:33:06:b5:7f:a9:67: 80:4d:8b:8b:09:b3:b4:ac:bc:a4:69:24:30:37:cf: 33:7d:f0:52:59:26:97:c8:ec:2e:9f:c9:f3:61:02: 81:6f:82:c9:ca:9a:62:7c:0c:fb:a5:78:d7:1f:46: cb:50:c5:87:de:c0:21:fd:b0:83:eb:81:47:2e:c5: 00:88:86:6e:1b:4e:da:47:3e:1a:b1:44:e6:7d:4d: b3:b2:83:8f:71:3f:77:c5:13:d3:48:9c:6f:d6:5f: d2:94:9d:6e:bc:58:06:e7:52:c0:d3:a7:77:29:8b: 1d:d1:70:cc:da:6b:38:50:06:21:19:b4:62:ed:2e: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:7E:4D:32:CA:BC:5D:24:1A:FD:0D:A6:22:FC:3A:7C:6E:AB:D6 X509v3 Authority Key Identifier: keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b3:bb:97:4f:d6:62:d6:05:08:57:44:f8:3d:7b:32:60:0c: 69:25:d2:05:25:54:11:b9:00:25:2d:8d:c2:db:1e:5c:07:01: 88:68:53:fc:06:a5:5b:6a:f5:50:74:93:3f:f3:0f:65:69:10: 95:0a:78:b8:86:55:89:b9:95:8c:4a:36:38:c6:f4:3d:34:5e: d5:6e:eb:c7:2e:b7:63:fc:6b:cb:7c:d2:86:b5:10:f0:84:8e: 19:89:40:5b:c7:d3:dc:d5:a2:df:9f:ba:21:33:19:c5:77:50: 83:4f:b7:e3:44:11:0c:78:f5:64:db:b0:23:2e:e1:a1:e6:0c: 7c:12:f3:25:68:ab:94:82:f6:e6:b8:04:af:bd:1b:9d:9c:87: 8b:2e:1c:44:8b:a7:e1:cd:3d:3d:04:a5:a4:c2:e5:42:94:ce: 4f:24:de:76:9c:be:94:ce:05:4c:0c:27:b5:78:32:c2:bb:6f: 9d:6d:fb:8b:5b:a6:e0:93:10:36:0e:40:48:4c:25:25:d8:53: 0a:c0:85:39:64:3d:10:f6:f7:bd:0a:6b:89:00:7e:10:d0:87: 5c:17:65:1d:c0:61:0d:9e:be:1d:5e:f7:5f:c0:97:a5:8c:41: dd:8b:e2:a5:7c:66:25:a0:07:b3:bc:e7:c0:7d:9a:3a:b8:eb: 23:b8:49:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIVlAGO19TRD3rh2cNPF0D5HaJ7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4 Njk3RTU5RTAeFw0yNjA1MTIyMTMwNDdaFw0yNjA1MTQwMTAzNDdaMDMxMTAvBgNV BAMTKDMzNjg3RTREMzJDQUJDNUQyNDFBRkQwREE2MjJGQzNBN0M2RUFCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRLsYfsXGOOCwxoK8IQrzHfYY xyIXEmWgHMSJFJqNQv34F5cXkJO4x6HNEfJ6aaBCzBsMDOZ1yBW/U6HNetVUTLhe bNpjY0WKCX7K25EyN45vBNj+pwbsK0SmgTsTeCZyqNffNUbDD8Mk93CyJB/iMWyi 5SmjWWOtcddhTvBx/TMGtX+pZ4BNi4sJs7SsvKRpJDA3zzN98FJZJpfI7C6fyfNh AoFvgsnKmmJ8DPuleNcfRstQxYfewCH9sIPrgUcuxQCIhm4bTtpHPhqxROZ9TbOy g49xP3fFE9NInG/WX9KUnW68WAbnUsDTp3cpix3RcMzaazhQBiEZtGLtLtyrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM2h+TTLKvF0kGv0NpiL8Onxuq9YwHwYDVR0j BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3 MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTQ1Nzg1ODYxMDc5MDYvMC9DOTk5MzAyNTZCMjY4 MUI2NzZDM0Y5NjlCOUUwNzAyMDg2OTdFNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbO7l0/WYtYF CFdE+D17MmAMaSXSBSVUEbkAJS2NwtseXAcBiGhT/AalW2r1UHSTP/MPZWkQlQp4 uIZVibmVjEo2OMb0PTRe1W7rxy63Y/xry3zShrUQ8ISOGYlAW8fT3NWi35+6ITMZ xXdQg0+340QRDHj1ZNuwIy7hoeYMfBLzJWirlIL25rgEr70bnZyHiy4cRIun4c09 PQSlpMLlQpTOTyTedpy+lM4FTAwntXgywrtvnW37i1um4JMQNg5ASEwlJdhTCsCF OWQ9EPb3vQpriQB+ENCHXBdlHcBhDZ6+HV73X8CXpYxB3YvipXxmJaAHs7znwH2a OrjrI7hJ0A== -----END CERTIFICATE-----Generated at Wed May 13 17:41:15 2026 by rpki-client