$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft File: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json) Hash identifier: Zj06BP3OJBZy8gawqo/ETXRnNJvKufylrb7SsVrkZr4= Subject key identifier: E8:9B:7C:DA:27:B9:E7:0A:1A:55:F4:31:75:34:60:FB:B0:E3:85:31 Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 Certificate issuer: /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Certificate serial: 2E9E44E930E675DFA33E604969A2686B773EEE2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft Manifest number: 21 Signing time: Wed 13 May 2026 04:10:55 +0000 Manifest this update: Wed 13 May 2026 04:05:55 +0000 Manifest next update: Thu 14 May 2026 04:14:55 +0000 Files and hashes: 1: 3232332e32372e3138352e302f32342d3332203d3e203137363232.roa (hash: u5UXUe1gd5zL4uM/f36b5yYRCmNkN8QDkMKwvtQ/odg=) 2: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: yRmDtNgafa7fHNXYSpAMDa8amKjSb+m9tktI8Bbu0Vg=) 3: 3232332e32372e3138342e302f32342d3332203d3e203137363232.roa (hash: eUIKT8kQjRrNxwg18snwM5Babeyv0hxbM26TJtQTSr0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9e:44:e9:30:e6:75:df:a3:3e:60:49:69:a2:68:6b:77:3e:ee:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Validity Not Before: May 13 04:05:55 2026 GMT Not After : May 14 04:14:55 2026 GMT Subject: CN=E89B7CDA27B9E70A1A55F431753460FBB0E38531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:4b:8c:34:df:38:3d:82:ae:a0:1f:44:eb: 9a:7d:4d:0c:f9:71:a4:b5:9c:db:a8:93:34:7c:f0: 4e:8b:b2:a9:c1:15:83:eb:2c:b1:3b:5f:d4:ee:03: 5e:a0:8d:58:98:58:d5:62:a2:33:59:21:04:30:c8: cb:03:ca:17:c2:43:59:16:90:92:5b:37:ab:f6:fa: a9:71:bc:8d:5d:da:6c:5e:23:10:19:79:17:d8:06: 2f:d3:1d:98:07:59:23:56:5f:98:7a:3f:28:d2:3c: 8c:c1:5b:01:70:5e:34:1a:7c:04:05:8e:55:9c:41: c1:9f:5b:07:33:db:7a:8c:87:f4:81:b5:06:3f:52: 19:60:28:7f:71:7e:ba:b4:b1:3e:02:a4:45:ee:a1: a3:08:0d:47:8e:08:1f:40:94:20:d3:67:aa:b0:93: 9e:42:68:1b:c1:21:b8:42:bc:59:b1:1e:74:92:b8: 26:55:4a:9c:a7:b8:98:86:3f:f4:31:00:3a:e0:f6: c6:d3:7a:43:ee:76:f9:51:f9:6a:3b:e5:33:22:d7: 6a:99:bc:7f:ee:63:06:1d:9e:32:b4:a2:0b:69:fe: bc:56:e6:e2:29:bc:c1:05:eb:76:b9:3d:dc:0b:d7: c3:90:03:21:16:d6:54:ac:0c:40:16:a9:63:38:e3: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9B:7C:DA:27:B9:E7:0A:1A:55:F4:31:75:34:60:FB:B0:E3:85:31 X509v3 Authority Key Identifier: keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:10:1f:ec:38:90:3f:ee:d4:8f:be:fa:8a:da:e0:69:8d:db: ac:d9:e7:ca:22:c7:90:a7:8f:c8:02:6d:16:5f:79:ef:96:a4: fa:70:01:48:ce:98:1f:9d:76:91:58:d2:42:1e:34:fd:74:ed: 06:be:c6:c7:ab:c4:e0:31:c6:d5:69:0d:b2:39:e7:08:8c:27: f1:39:39:d8:21:af:e8:23:51:72:a4:d9:0a:82:7e:c6:18:c5: 5c:da:0b:0d:80:dc:c3:57:9e:50:e8:3f:cd:d1:d1:c9:f7:38: c4:ab:73:ec:a8:74:d3:93:4d:fa:c7:8c:5e:42:63:39:c9:d9: 23:78:5e:c2:af:76:2e:34:db:db:23:0d:f9:28:18:32:de:da: 78:e2:8e:6f:8b:7f:a3:ea:ed:40:d2:dc:92:0e:f2:6d:41:4c: 3e:0e:48:a7:4c:a5:89:30:a0:bf:45:59:ab:e5:97:98:5b:9c: 9a:c0:95:4c:74:34:97:73:6f:e5:b5:ea:58:08:bb:4d:c7:99: 8c:84:aa:54:88:7c:6c:f1:8d:c4:9e:e8:59:a7:29:23:56:9a: 10:43:fd:e1:e8:53:10:3e:62:0c:39:0c:ed:ae:ac:08:9b:63: 02:0d:e5:f2:41:43:67:88:71:64:fa:84:22:17:2a:ee:47:4c: a1:27:ca:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULp5E6TDmdd+jPmBJaaJoa3c+7iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEz QTUyODA5ODAeFw0yNjA1MTMwNDA1NTVaFw0yNjA1MTQwNDE0NTVaMDMxMTAvBgNV BAMTKEU4OUI3Q0RBMjdCOUU3MEExQTU1RjQzMTc1MzQ2MEZCQjBFMzg1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7EuMNN84PYKuoB9E65p9TQz5 caS1nNuokzR88E6LsqnBFYPrLLE7X9TuA16gjViYWNViojNZIQQwyMsDyhfCQ1kW kJJbN6v2+qlxvI1d2mxeIxAZeRfYBi/THZgHWSNWX5h6PyjSPIzBWwFwXjQafAQF jlWcQcGfWwcz23qMh/SBtQY/UhlgKH9xfrq0sT4CpEXuoaMIDUeOCB9AlCDTZ6qw k55CaBvBIbhCvFmxHnSSuCZVSpynuJiGP/QxADrg9sbTekPudvlR+Wo75TMi12qZ vH/uYwYdnjK0ogtp/rxW5uIpvMEF63a5PdwL18OQAyEW1lSsDEAWqWM449QtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6Jt82ie55woaVfQxdTRg+7DjhTEwHwYDVR0j BBgwFoAURAlJSMbj0yoaWb5nlc2KKjpSgJgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5MjA3NTE3Mzc3MzMxNS8wLzQ0MDk0OTQ4QzZFM0QzMkExQTU5QkU2Nzk1Q0Q4 QTJBM0E1MjgwOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTIwNzUxNzM3NzMzMTUvMC80NDA5NDk0OEM2RTNE MzJBMUE1OUJFNjc5NUNEOEEyQTNBNTI4MDk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxAf7DiQP+7U j776itrgaY3brNnnyiLHkKePyAJtFl9575ak+nABSM6YH512kVjSQh40/XTtBr7G x6vE4DHG1WkNsjnnCIwn8Tk52CGv6CNRcqTZCoJ+xhjFXNoLDYDcw1eeUOg/zdHR yfc4xKtz7Kh005NN+seMXkJjOcnZI3hewq92LjTb2yMN+SgYMt7aeOKOb4t/o+rt QNLckg7ybUFMPg5Ip0yliTCgv0VZq+WXmFucmsCVTHQ0l3Nv5bXqWAi7TceZjISq VIh8bPGNxJ7oWacpI1aaEEP94ehTED5iDDkM7a6sCJtjAg3l8kFDZ4hxZPqEIhcq 7kdMoSfK4A== -----END CERTIFICATE-----Generated at Wed May 13 19:33:07 2026 by rpki-client