$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft File: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft (raw, json) Hash identifier: RqE2bL6RA1/Xrp1NhvXP9yCteDst928XXFAZrGEopSI= Subject key identifier: 91:D1:F6:56:B5:A0:C2:79:35:40:60:5E:71:B0:5F:20:80:06:B0:62 Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Certificate serial: 551AEE591C2C4E1F1F454933C0803F8CD0B23F24 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft Manifest number: 1D Signing time: Wed 13 May 2026 18:06:06 +0000 Manifest this update: Wed 13 May 2026 18:01:06 +0000 Manifest next update: Thu 14 May 2026 21:47:06 +0000 Files and hashes: 1: 3130332e38352e3134342e302f32322d3232203d3e203538383532.roa (hash: AP2XkGbQdxNfpeDQ85zmsd8wo9vC7UwbtiBOtnaRaHE=) 2: 3130332e3234322e3231322e302f32322d3232203d3e203538383532.roa (hash: 7YLOWSplaC6A9YgX/81dw0AOBbV73OAfQnQ7fMmRL3M=) 3: 3230332e3138392e3234302e302f32322d3232203d3e203538383532.roa (hash: QQsr5nExhTx2dN0ARCzWPgFcMFxYhPf9PyL07Mlhh44=) 4: 3130332e38312e342e302f32322d3232203d3e203538383532.roa (hash: qs8B1AYsYifc164CtYkt5JlXrM0x3Tyc/h8DdyMlUaM=) 5: 49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl (hash: ASOtRsVhQrUmNawf5+JcrCyb3eujQ/LXFBLAmVOzexw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1a:ee:59:1c:2c:4e:1f:1f:45:49:33:c0:80:3f:8c:d0:b2:3f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Validity Not Before: May 13 18:01:06 2026 GMT Not After : May 14 21:47:06 2026 GMT Subject: CN=91D1F656B5A0C2793540605E71B05F208006B062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:37:a0:15:4e:c7:a1:a8:e4:be:a1:26:81:9b: 82:24:0a:a9:da:99:05:42:3b:3a:46:7b:b9:37:f6: 1c:cc:d1:70:fb:ef:0e:e0:1a:e8:66:f9:7f:16:94: 7a:f8:00:43:b6:08:a2:28:b7:99:d7:2e:23:6f:7d: 89:b0:79:4a:ac:28:65:ff:df:5a:28:85:fb:5a:3d: c5:76:20:1c:97:4f:43:c2:6e:29:1a:db:90:79:7c: 28:83:5d:e5:1d:c2:f8:bb:97:ea:63:4b:86:e3:3b: 4d:54:91:ae:7d:d1:d1:bd:18:fc:2a:a9:bc:c0:ef: 87:98:a8:72:53:38:eb:3c:7b:a2:54:57:f5:99:55: a6:f5:ad:06:f0:61:70:04:64:9d:ac:66:3e:40:8e: 9a:46:2f:d4:e6:0c:02:e5:ec:05:aa:bf:5f:3c:49: 95:95:83:70:11:cb:53:13:a1:ee:d6:24:a0:fb:d4: 61:e3:a0:96:09:43:b1:28:3d:62:87:73:32:07:3d: a3:da:05:e4:0c:16:40:bb:ba:5d:b7:1a:c4:94:c4: ce:06:55:51:d5:0a:06:37:c3:6e:73:ad:7a:e5:9a: b4:0f:5b:90:3a:17:d0:c1:f9:7c:95:75:d4:1a:a2: 0c:68:25:bd:18:26:68:ad:59:99:1f:e2:11:37:dd: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:F6:56:B5:A0:C2:79:35:40:60:5E:71:B0:5F:20:80:06:B0:62 X509v3 Authority Key Identifier: keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:37:de:76:80:4f:5d:93:f6:13:84:75:90:e6:9b:69:52:5e: 76:11:34:8d:7e:a5:07:ca:1e:ee:8a:1b:1f:dd:46:cb:52:c8: 84:f9:98:a5:e2:2b:80:7f:f5:1d:1b:0d:22:eb:1d:6b:b7:3c: 62:40:e6:70:4f:68:11:71:72:35:93:69:fc:82:dd:8b:9f:84: b6:ab:82:d2:7a:d5:14:d5:9e:70:27:16:ab:be:a5:02:3f:1f: 05:62:3d:1c:8a:73:bb:ab:3c:ec:e3:31:55:9d:07:c6:2e:35: 76:3d:76:24:73:45:00:d5:a3:3b:e1:49:b9:67:ea:a4:90:ab: 08:10:64:f6:9b:d5:3c:32:ad:bf:84:5e:a5:58:dc:aa:09:ac: c9:7a:db:5a:23:a6:76:14:93:db:02:95:01:ad:37:31:b8:c7: 11:bd:ec:28:6c:8e:a9:4a:e0:10:8e:89:20:e7:33:8f:1f:a5: a4:51:91:40:7f:7e:5e:c5:c9:00:47:d6:af:1c:24:9b:5b:63: 69:87:b2:26:2b:8f:c7:5b:75:b2:2d:65:05:eb:0d:49:38:ec: f8:0b:18:4f:84:f0:5a:5b:7b:3f:41:79:8f:bb:f7:8e:33:14: de:22:f1:77:de:1d:fc:01:4b:b2:b2:b2:cc:6c:95:fc:c0:a1: 64:e2:be:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVRruWRwsTh8fRUkzwIA/jNCyPyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB QjNCRjc3MjAeFw0yNjA1MTMxODAxMDZaFw0yNjA1MTQyMTQ3MDZaMDMxMTAvBgNV BAMTKDkxRDFGNjU2QjVBMEMyNzkzNTQwNjA1RTcxQjA1RjIwODAwNkIwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9N6AVTsehqOS+oSaBm4IkCqna mQVCOzpGe7k39hzM0XD77w7gGuhm+X8WlHr4AEO2CKIot5nXLiNvfYmweUqsKGX/ 31oohftaPcV2IByXT0PCbika25B5fCiDXeUdwvi7l+pjS4bjO01Uka590dG9GPwq qbzA74eYqHJTOOs8e6JUV/WZVab1rQbwYXAEZJ2sZj5AjppGL9TmDALl7AWqv188 SZWVg3ARy1MToe7WJKD71GHjoJYJQ7EoPWKHczIHPaPaBeQMFkC7ul23GsSUxM4G VVHVCgY3w25zrXrlmrQPW5A6F9DB+XyVddQaogxoJb0YJmitWZkf4hE33SpZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkdH2VrWgwnk1QGBecbBfIIAGsGIwHwYDVR0j BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MjIzMjAwOTc0NjAyMjUvMC80OTM0M0QyQkU0QTU0 M0FDM0FGRTkxODk5NTVDQzA4QUFCM0JGNzcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzfedoBPXZP2 E4R1kOabaVJedhE0jX6lB8oe7oobH91Gy1LIhPmYpeIrgH/1HRsNIusda7c8YkDm cE9oEXFyNZNp/ILdi5+EtquC0nrVFNWecCcWq76lAj8fBWI9HIpzu6s87OMxVZ0H xi41dj12JHNFANWjO+FJuWfqpJCrCBBk9pvVPDKtv4RepVjcqgmsyXrbWiOmdhST 2wKVAa03MbjHEb3sKGyOqUrgEI6JIOczjx+lpFGRQH9+XsXJAEfWrxwkm1tjaYey JiuPx1t1si1lBesNSTjs+AsYT4TwWlt7P0F5j7v3jjMU3iLxd94d/AFLsrKyzGyV /MChZOK+uQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:05 2026 by rpki-client