$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft File: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft (raw, json) Hash identifier: thlIsjChcifCAMp/vGdk8d7gmZ+wz6XHIPctllvhQzw= Subject key identifier: 0D:7E:9F:39:53:DC:BC:5E:7A:00:1D:E6:7D:DC:FD:18:4D:DF:3E:54 Authority key identifier: 0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64 Certificate issuer: /CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164 Certificate serial: 281BE619C21829B84D169D6C48464C65D3350B0D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft Manifest number: 1E Signing time: Tue 12 May 2026 14:05:34 +0000 Manifest this update: Tue 12 May 2026 14:00:34 +0000 Manifest next update: Wed 13 May 2026 15:49:34 +0000 Files and hashes: 1: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl (hash: 3dZdVgB2tLCkpfWxcpCNc6h3Ewlo+vbkPs0QY6V9Bqo=) 2: 3130332e3139382e32302e302f32322d3232203d3e2030.roa (hash: e6hTGBhyacWvz5ZBxIlb+wH+74wFHyksuzPVaP5ExnQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1b:e6:19:c2:18:29:b8:4d:16:9d:6c:48:46:4c:65:d3:35:0b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164 Validity Not Before: May 12 14:00:34 2026 GMT Not After : May 13 15:49:34 2026 GMT Subject: CN=0D7E9F3953DCBC5E7A001DE67DDCFD184DDF3E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:9d:be:ae:a5:7c:d7:82:f2:a3:95:61:3a: d3:b6:be:31:60:25:45:11:6a:55:87:d6:9b:f5:66: c8:91:29:3d:8e:b3:9a:18:06:7a:37:bb:bd:27:e6: 5b:e5:8b:ab:21:da:c7:f7:66:00:db:14:1f:95:c7: e9:c4:01:10:26:a4:f9:7f:2e:df:77:b4:5e:b8:23: ab:88:c4:c0:ff:6d:ed:90:10:5f:00:f9:61:a9:76: b4:b0:2f:d3:95:3d:81:4c:10:37:39:15:68:ea:bd: fe:19:11:c0:36:b4:44:46:6c:70:91:22:c0:a6:b3: 84:23:c4:7b:4e:23:39:38:42:3f:e5:90:d3:ba:7e: 75:0b:10:49:e4:5f:7b:10:39:dc:d9:aa:e7:c9:36: 74:08:11:49:69:04:43:4a:a2:b0:6a:c7:04:8f:8d: 03:85:87:60:bf:c7:21:bc:91:1d:f8:ba:e1:65:20: f2:f9:a1:74:e1:74:3a:21:db:83:2f:70:0f:45:6e: 2e:52:f5:50:3a:13:56:f9:9e:d7:31:fd:ef:d0:28: d2:5f:2c:1d:15:60:0b:8c:e8:4b:7f:70:d8:30:7c: b3:b5:f4:f5:4e:e8:7c:94:b5:c7:b2:49:fd:e8:7d: ff:84:90:1a:3c:d2:b2:fc:d7:ae:ee:3c:8f:dd:f8: bb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7E:9F:39:53:DC:BC:5E:7A:00:1D:E6:7D:DC:FD:18:4D:DF:3E:54 X509v3 Authority Key Identifier: keyid:0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:61:9e:3c:f5:74:ca:7b:2e:3d:c2:73:3e:74:01:2d:e0:45: 27:db:a7:52:c4:c7:a6:72:a4:91:ba:c5:69:4f:24:f9:d6:91: 2c:b6:e7:7e:65:21:cb:ae:ac:d4:9d:01:48:d5:35:67:4f:ff: 8f:85:a1:ad:2e:20:51:52:51:2f:be:d2:53:f4:17:d5:a8:44: 6f:4a:64:18:fe:3c:cd:15:24:81:ea:79:9c:03:d7:be:01:e4: 72:b6:f0:7e:d2:ac:bc:57:e5:97:88:3e:e5:1e:a3:66:6a:31: 28:98:58:8b:0a:fa:3a:18:5e:d4:ee:05:22:cb:e8:d5:05:8f: b3:fc:3e:d2:af:5d:5a:ff:fa:5a:0b:aa:61:44:b9:3d:42:8c: a2:64:13:26:d7:9d:40:9d:fd:b4:2a:5f:5e:06:5f:57:3a:bd: b9:f0:c5:13:3d:68:43:40:a9:7e:54:7b:64:fe:a5:ff:52:bd: 57:7f:6b:38:25:c0:d6:83:a5:8c:0e:46:70:75:28:65:64:8c: c2:1f:3c:91:db:0a:5f:29:29:2f:f8:fc:f1:7e:a0:dd:f2:56: e0:4a:51:2c:0c:25:f2:e6:81:2b:ca:81:54:c8:b9:19:bd:ec: 35:4f:f3:ac:4a:c3:49:3e:c8:45:cf:85:d3:1d:79:e5:12:d7: 8a:5e:b2:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKBvmGcIYKbhNFp1sSEZMZdM1Cw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0RUI3ODg3NzI4OUZENzJFOTZCQUVDRjFCQkRGRjZD NkQ3QTE2NDAeFw0yNjA1MTIxNDAwMzRaFw0yNjA1MTMxNTQ5MzRaMDMxMTAvBgNV BAMTKDBEN0U5RjM5NTNEQ0JDNUU3QTAwMURFNjdERENGRDE4NERERjNFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUvZ2+rqV814Lyo5VhOtO2vjFg JUURalWH1pv1ZsiRKT2Os5oYBno3u70n5lvli6sh2sf3ZgDbFB+Vx+nEARAmpPl/ Lt93tF64I6uIxMD/be2QEF8A+WGpdrSwL9OVPYFMEDc5FWjqvf4ZEcA2tERGbHCR IsCms4QjxHtOIzk4Qj/lkNO6fnULEEnkX3sQOdzZqufJNnQIEUlpBENKorBqxwSP jQOFh2C/xyG8kR34uuFlIPL5oXThdDoh24MvcA9Fbi5S9VA6E1b5ntcx/e/QKNJf LB0VYAuM6Et/cNgwfLO19PVO6HyUtceySf3off+EkBo80rL8167uPI/d+LufAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDX6fOVPcvF56AB3mfdz9GE3fPlQwHwYDVR0j BBgwFoAUC063iHcon9culrrs8bvf9sbXoWQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTI1Njk0MTkwNzAxNzczMC8wLzBCNEVCNzg4NzcyODlGRDcyRTk2QkFFQ0YxQkJE RkY2QzZEN0ExNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEI0RUI3ODg3NzI4OUZENzJFOTZCQUVDRjFCQkRGRjZDNkQ3QTE2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkyNTY5NDE5MDcwMTc3MzAvMC8wQjRFQjc4ODc3Mjg5 RkQ3MkU5NkJBRUNGMUJCREZGNkM2RDdBMTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGGePPV0ynsu PcJzPnQBLeBFJ9unUsTHpnKkkbrFaU8k+daRLLbnfmUhy66s1J0BSNU1Z0//j4Wh rS4gUVJRL77SU/QX1ahEb0pkGP48zRUkgep5nAPXvgHkcrbwftKsvFfll4g+5R6j ZmoxKJhYiwr6Ohhe1O4FIsvo1QWPs/w+0q9dWv/6WguqYUS5PUKMomQTJtedQJ39 tCpfXgZfVzq9ufDFEz1oQ0CpflR7ZP6l/1K9V39rOCXA1oOljA5GcHUoZWSMwh88 kdsKXykpL/j88X6g3fJW4EpRLAwl8uaBK8qBVMi5Gb3sNU/zrErDST7IRc+F0x15 5RLXil6yog== -----END CERTIFICATE-----Generated at Wed May 13 08:25:06 2026 by rpki-client