$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json) Hash identifier: KO/4dwIQiUvUOzQw+/3Lk0ZATmLI+y8y3uAUebIfgps= Subject key identifier: 47:68:2E:88:8B:26:43:48:12:BC:89:B6:62:22:54:EE:54:53:C7:3B Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F Certificate serial: 337AA1BA86E7B128E4E99E9CE7FCADC611621DC3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft Manifest number: 22 Signing time: Tue 12 May 2026 19:00:42 +0000 Manifest this update: Tue 12 May 2026 18:55:42 +0000 Manifest next update: Wed 13 May 2026 21:24:42 +0000 Files and hashes: 1: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=) 2: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=) 3: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: VvfhBUSp/q6/M3GkdUlGQvOvyEnY+88zIBycupMZ7MQ=) 4: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=) 5: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=) 6: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=) 7: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7a:a1:ba:86:e7:b1:28:e4:e9:9e:9c:e7:fc:ad:c6:11:62:1d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F Validity Not Before: May 12 18:55:42 2026 GMT Not After : May 13 21:24:42 2026 GMT Subject: CN=47682E888B26434812BC89B6622254EE5453C73B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:d0:02:67:08:06:51:2f:48:d6:49:25:0f: 3b:e9:45:a3:30:8f:60:a6:2b:c8:5d:b2:6d:95:71: e6:86:f5:23:1c:80:f6:2b:fe:49:1a:94:34:51:34: f1:35:43:c4:8e:2b:89:d6:c8:5e:f6:0b:45:35:0d: 5f:11:f0:15:42:07:d6:f6:8c:d6:ad:65:b0:ca:94: ad:42:17:bb:fd:04:ed:a0:0b:31:b8:d2:19:7d:34: b2:8d:35:a2:72:7d:84:d2:ca:73:02:b1:f2:97:bd: 86:af:70:91:14:42:40:92:b0:5e:e6:a4:a5:f5:1c: 21:b0:6f:6b:5d:21:d3:6e:42:9a:02:8d:ee:29:9c: bd:d9:ac:7f:12:ff:c0:d8:aa:63:3f:9c:eb:b1:5c: 79:44:a1:76:7c:39:26:aa:56:0d:ff:e4:ba:37:07: 6f:14:5f:c7:e0:b8:f3:91:5e:60:98:9d:f8:d8:be: 49:aa:dc:e8:f3:e7:8f:69:91:e2:ee:cd:01:45:c4: 26:63:05:ae:10:3e:6c:fa:07:cd:77:6c:e3:eb:78: db:37:92:aa:ff:c4:09:05:68:97:57:2d:15:f8:f0: de:09:b8:0e:d3:b6:04:f3:fb:7e:80:18:23:82:98: 2a:5f:06:d6:87:41:64:da:35:e3:bc:c0:12:93:11: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:68:2E:88:8B:26:43:48:12:BC:89:B6:62:22:54:EE:54:53:C7:3B X509v3 Authority Key Identifier: keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ed:63:bc:82:f0:3e:f5:1e:0e:80:f5:62:af:61:e3:1f:77: 86:78:c0:98:b9:40:42:ee:8a:3f:22:34:91:ab:8b:a9:7b:9c: 6a:15:49:d4:56:5c:a7:5b:d3:5b:61:63:f2:7b:2e:28:85:f3: 0a:d8:bc:d9:6f:de:84:0d:df:05:92:0a:50:49:36:a6:5d:7a: 92:80:46:24:da:6e:02:d5:68:fc:3b:f2:99:ba:73:9c:cc:49: 92:04:9b:93:89:cf:79:37:21:e3:46:81:a1:1f:63:50:16:e0: 1b:fa:99:59:e8:82:65:5a:a2:48:ab:35:53:df:ae:16:aa:c2: 53:e3:3d:3c:a2:02:84:09:47:8f:98:1c:05:f4:a6:36:dc:61: 99:62:51:7c:0b:5b:6b:30:ce:0c:3d:12:fc:a7:19:a6:ee:17: 8f:2f:8f:0a:c2:ec:1b:82:01:c9:79:93:fe:a2:3e:4a:f9:7c: 6b:14:cc:63:0d:d3:da:62:0d:fe:f4:56:3e:bd:2b:ec:da:66: ab:04:47:ad:eb:45:e4:28:66:00:c5:84:5d:66:b0:da:f5:5e: e1:09:ef:46:5d:1d:ce:52:7d:ba:7d:08:f2:66:ff:2e:3c:1e: 26:2e:ec:f1:b9:fe:46:21:4f:4a:82:cf:fe:6d:51:b8:47:74: 30:db:13:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM3qhuobnsSjk6Z6c5/ytxhFiHcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4 MEMwRDY0RjAeFw0yNjA1MTIxODU1NDJaFw0yNjA1MTMyMTI0NDJaMDMxMTAvBgNV BAMTKDQ3NjgyRTg4OEIyNjQzNDgxMkJDODlCNjYyMjI1NEVFNTQ1M0M3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfb9ACZwgGUS9I1kklDzvpRaMw j2CmK8hdsm2VceaG9SMcgPYr/kkalDRRNPE1Q8SOK4nWyF72C0U1DV8R8BVCB9b2 jNatZbDKlK1CF7v9BO2gCzG40hl9NLKNNaJyfYTSynMCsfKXvYavcJEUQkCSsF7m pKX1HCGwb2tdIdNuQpoCje4pnL3ZrH8S/8DYqmM/nOuxXHlEoXZ8OSaqVg3/5Lo3 B28UX8fguPORXmCYnfjYvkmq3Ojz549pkeLuzQFFxCZjBa4QPmz6B813bOPreNs3 kqr/xAkFaJdXLRX48N4JuA7TtgTz+36AGCOCmCpfBtaHQWTaNeO8wBKTEb/JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR2guiIsmQ0gSvIm2YiJU7lRTxzswHwYDVR0j BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4 MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg5ODg0ODk0NjQwODY1MzAvMC9BNzEzM0EwOUFDMDc4 QjEwMUNCNzk4MEZFNjQ2ODEwMjgwQzBENjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO1jvILwPvUe DoD1Yq9h4x93hnjAmLlAQu6KPyI0kauLqXucahVJ1FZcp1vTW2Fj8nsuKIXzCti8 2W/ehA3fBZIKUEk2pl16koBGJNpuAtVo/DvymbpznMxJkgSbk4nPeTch40aBoR9j UBbgG/qZWeiCZVqiSKs1U9+uFqrCU+M9PKIChAlHj5gcBfSmNtxhmWJRfAtbazDO DD0S/KcZpu4Xjy+PCsLsG4IByXmT/qI+Svl8axTMYw3T2mIN/vRWPr0r7NpmqwRH retF5ChmAMWEXWaw2vVe4QnvRl0dzlJ9un0I8mb/LjweJi7s8bn+RiFPSoLP/m1R uEd0MNsTcg== -----END CERTIFICATE-----Generated at Wed May 13 14:47:15 2026 by rpki-client