$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: 3WwSp2Wwznuwn2u/LATY+ngl6OsUcruwGPe6xD74XVo= Subject key identifier: 78:9E:24:02:5A:A9:90:DF:E6:43:B2:D4:6C:C5:98:B8:D4:6C:24:05 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 2BAD3D845D476E50796D08D2E140908E917F8290 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: 24 Signing time: Wed 13 May 2026 11:16:04 +0000 Manifest this update: Wed 13 May 2026 11:11:04 +0000 Manifest next update: Thu 14 May 2026 14:00:04 +0000 Files and hashes: 1: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) 2: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) 3: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 4: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) 5: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 6: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: DpEAkNKnWuMRXxT4m8xuDAZW6PqQQW8gIu9Le/hmyzU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ad:3d:84:5d:47:6e:50:79:6d:08:d2:e1:40:90:8e:91:7f:82:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: May 13 11:11:04 2026 GMT Not After : May 14 14:00:04 2026 GMT Subject: CN=789E24025AA990DFE643B2D46CC598B8D46C2405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:35:f4:89:da:a9:3c:54:e7:c5:05:d7:79: 48:eb:b4:7f:e5:ec:34:d5:b5:e3:6b:16:91:24:40: 40:8b:f0:3c:80:4e:6f:34:1d:0c:8b:ec:25:10:c1: 10:e7:b2:ea:6a:b4:b5:b1:1a:2c:87:f8:da:57:8d: dd:1f:6f:e4:fd:8c:8d:6b:cb:4e:e5:ae:b6:56:85: a3:be:96:8a:8f:07:0a:67:28:db:69:47:9e:c6:98: c0:6e:8b:18:a0:a5:f9:93:14:73:80:f9:fd:a0:5a: a6:f8:e8:83:b3:76:5b:e5:1f:4c:b6:f9:47:4e:9b: 95:51:30:49:9d:8b:78:5d:c2:79:b0:b4:66:ce:69: 05:89:20:14:f4:c6:9f:75:51:0d:8c:23:57:bf:a2: 60:16:7b:32:4d:59:4b:06:b9:47:de:fd:0c:7e:92: 85:56:7f:eb:35:5e:f9:1f:b4:c1:2b:bd:02:7c:1c: b5:cd:fc:fe:90:09:f8:85:ea:4e:ec:77:25:52:60: 9b:96:60:d4:7d:47:06:bf:36:15:90:37:72:53:bd: 8a:64:97:1a:67:51:c1:a6:b3:e5:21:02:7c:8c:ee: 10:48:be:f0:ba:07:42:98:4b:88:ce:c2:dd:a9:88: 3e:dc:08:2f:96:f6:d7:45:18:2c:85:75:7f:77:b8: d6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9E:24:02:5A:A9:90:DF:E6:43:B2:D4:6C:C5:98:B8:D4:6C:24:05 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3c:61:fa:a4:8b:9e:1d:78:fc:cb:88:29:e8:e8:97:94:7d: cf:d9:5f:d8:37:6f:5f:0c:82:a8:98:5f:61:9c:ec:9e:4d:ad: 27:29:8f:b0:fd:b8:67:c9:c2:95:f2:d2:e4:29:ad:14:ab:52: b2:f4:42:79:73:05:97:a3:1e:ff:48:f6:0c:84:a5:81:05:19: 21:a6:f6:cc:d2:1f:c1:b3:35:6c:27:1a:3e:a1:67:d9:71:d9: 58:7c:5d:5b:f9:85:22:bc:60:21:51:6d:21:23:d5:59:ae:81: b4:7b:bf:a0:ec:a6:4a:7f:84:7a:9e:dd:09:90:0e:69:8b:97: 23:a6:d4:6c:53:2e:2d:9e:88:42:92:e5:25:6a:00:4d:f6:b5: fe:16:37:b2:e5:f1:09:f7:61:3a:5e:57:bd:4a:4f:5d:e5:b4: 52:a3:b0:01:52:60:ea:7a:5d:8e:bf:a6:85:00:63:f0:e4:13: 9c:9d:a2:92:4a:4e:81:11:ba:12:2d:5b:67:66:01:c8:84:14: a6:c3:61:40:41:cf:31:6d:ff:05:36:ea:52:47:f3:53:35:de: 80:ee:e5:b7:34:b5:7f:09:25:eb:8e:ca:f7:da:62:98:ef:d2: b0:c6:7a:1f:ad:1e:b3:c4:ba:05:9e:83:7f:87:c7:54:51:34: 3a:40:18:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK609hF1HblB5bQjS4UCQjpF/gpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA1MTMxMTExMDRaFw0yNjA1MTQxNDAwMDRaMDMxMTAvBgNV BAMTKDc4OUUyNDAyNUFBOTkwREZFNjQzQjJENDZDQzU5OEI4RDQ2QzI0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBDX0idqpPFTnxQXXeUjrtH/l 7DTVteNrFpEkQECL8DyATm80HQyL7CUQwRDnsupqtLWxGiyH+NpXjd0fb+T9jI1r y07lrrZWhaO+loqPBwpnKNtpR57GmMBuixigpfmTFHOA+f2gWqb46IOzdlvlH0y2 +UdOm5VRMEmdi3hdwnmwtGbOaQWJIBT0xp91UQ2MI1e/omAWezJNWUsGuUfe/Qx+ koVWf+s1XvkftMErvQJ8HLXN/P6QCfiF6k7sdyVSYJuWYNR9Rwa/NhWQN3JTvYpk lxpnUcGms+UhAnyM7hBIvvC6B0KYS4jOwt2piD7cCC+W9tdFGCyFdX93uNZPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeJ4kAlqpkN/mQ7LUbMWYuNRsJAUwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjxh+qSLnh14 /MuIKejol5R9z9lf2DdvXwyCqJhfYZzsnk2tJymPsP24Z8nClfLS5CmtFKtSsvRC eXMFl6Me/0j2DISlgQUZIab2zNIfwbM1bCcaPqFn2XHZWHxdW/mFIrxgIVFtISPV Wa6BtHu/oOymSn+Eep7dCZAOaYuXI6bUbFMuLZ6IQpLlJWoATfa1/hY3suXxCfdh Ol5XvUpPXeW0UqOwAVJg6npdjr+mhQBj8OQTnJ2ikkpOgRG6Ei1bZ2YByIQUpsNh QEHPMW3/BTbqUkfzUzXegO7ltzS1fwkl647K99pimO/SsMZ6H60es8S6BZ6Df4fH VFE0OkAYVg== -----END CERTIFICATE-----Generated at Wed May 13 17:37:10 2026 by rpki-client