$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft File: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json) Hash identifier: kodtaQiSX07qkFpEuQaaTe0y0y94BIM6N0SNe9EXdIg= Subject key identifier: 82:F8:61:B0:EB:D9:84:43:13:A9:E7:E0:D8:19:0B:5E:D9:76:C1:01 Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Certificate serial: 2F8DB5AAC478E1F2A8159AD164C968276F4E9B33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft Manifest number: 1B Signing time: Wed 13 May 2026 08:36:03 +0000 Manifest this update: Wed 13 May 2026 08:31:03 +0000 Manifest next update: Thu 14 May 2026 12:23:03 +0000 Files and hashes: 1: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: 0xMxXRZuiaf8VJxASJxd9FuHIl49R92dyVDldJcevCA=) 2: 323430363a636163303a3a2f34302d3430203d3e20313337373438.roa (hash: aRLvXYoRtvP7clHuuxr1krpZ56utFOKI5wmAeoYmk/w=) 3: 323430363a636163303a3230303a3a2f34302d3430203d3e20313337373438.roa (hash: x2XSJIwCKDpp3rwcXVq5g4z1/eZ8OIbDQxrdTRlIM0k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8d:b5:aa:c4:78:e1:f2:a8:15:9a:d1:64:c9:68:27:6f:4e:9b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Validity Not Before: May 13 08:31:03 2026 GMT Not After : May 14 12:23:03 2026 GMT Subject: CN=82F861B0EBD9844313A9E7E0D8190B5ED976C101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:61:7f:9a:76:b2:88:5d:f8:25:6f:f8:2d: 6b:a2:9f:69:b4:e0:10:3d:e7:bc:b1:8a:a7:eb:8b: fa:64:86:5a:ab:63:2e:79:85:a3:81:77:5d:53:ba: fa:45:3d:d1:8d:a0:ff:6f:e4:41:ca:20:b6:7c:29: 7b:89:48:fc:95:73:3e:3d:f5:e2:5a:cc:5d:e7:86: b7:ea:4c:a5:27:cd:89:60:a1:44:be:8a:68:f1:2e: 29:1d:f7:fa:ff:d2:e5:59:93:4d:47:bd:88:51:3a: 7b:9f:91:1c:7e:37:ba:29:47:dd:52:6e:7c:40:70: 31:eb:af:6f:28:af:20:c7:e2:fc:f0:0a:25:78:1f: d1:5a:5a:ba:d4:51:37:e6:04:b9:5f:b2:a8:22:40: 61:a3:9b:fa:4f:ce:e9:d2:a8:f9:f7:72:24:05:08: 45:95:63:2b:cc:c8:7f:f4:df:b2:6e:c3:c3:53:08: 18:d8:c3:e0:33:24:69:fe:3f:7d:fa:eb:b2:39:cf: 49:f2:0f:9a:e6:b7:2a:46:a3:82:42:cf:4c:a4:88: 20:2e:28:72:a4:b8:98:7f:d7:4c:42:9b:b1:6c:53: 68:b8:96:33:6a:fd:6d:4a:e4:86:83:9c:e2:42:fc: 72:1e:51:d1:44:b4:2d:53:ed:38:fd:d2:0d:23:5a: 27:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F8:61:B0:EB:D9:84:43:13:A9:E7:E0:D8:19:0B:5E:D9:76:C1:01 X509v3 Authority Key Identifier: keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:13:bf:2a:07:d5:fe:c1:d1:94:cb:9c:2e:1d:45:5b:66:51: c2:c5:6a:6b:fd:8d:86:52:40:51:fa:cf:e5:10:9d:87:62:e8: d3:07:9f:59:39:73:ac:cb:cf:ab:06:41:c8:f0:47:e2:53:80: 27:1d:be:7b:88:e4:1e:68:15:1e:e6:8e:02:da:2e:cc:aa:8c: fd:32:22:70:2e:dc:66:ec:92:6c:1c:a6:2e:24:6a:35:8b:ad: 93:57:55:23:ee:9d:d2:a0:dd:a7:49:09:f1:97:cd:fc:e3:70: 0a:40:3c:c5:6d:1a:15:80:77:a1:9f:8b:d6:23:6e:e0:10:60: c1:48:8a:7f:5a:7d:d7:d6:4b:f4:1b:bb:eb:8f:72:ff:9b:a1: 2a:53:1d:65:a7:53:ee:ef:ee:35:da:d4:f0:c5:94:5f:be:31: 72:7e:02:78:5f:15:74:eb:28:8f:ea:f2:42:30:41:f6:5a:d5: 43:90:22:da:86:10:af:88:d6:63:ed:33:55:65:34:24:a3:b7: f9:45:ca:d1:59:72:ea:b6:ff:47:23:81:87:81:f6:2d:74:11: d8:8a:37:b1:1c:fc:91:c7:82:ae:2f:68:5c:b9:2e:c8:4f:43: a7:92:b6:70:25:81:4a:56:a6:4a:47:70:4c:5a:27:3b:64:ae: e5:09:97:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL421qsR44fKoFZrRZMloJ29OmzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2 MUMxRjhFRjAeFw0yNjA1MTMwODMxMDNaFw0yNjA1MTQxMjIzMDNaMDMxMTAvBgNV BAMTKDgyRjg2MUIwRUJEOTg0NDMxM0E5RTdFMEQ4MTkwQjVFRDk3NkMxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVWF/mnayiF34JW/4LWuin2m0 4BA957yxiqfri/pkhlqrYy55haOBd11TuvpFPdGNoP9v5EHKILZ8KXuJSPyVcz49 9eJazF3nhrfqTKUnzYlgoUS+imjxLikd9/r/0uVZk01HvYhROnufkRx+N7opR91S bnxAcDHrr28oryDH4vzwCiV4H9FaWrrUUTfmBLlfsqgiQGGjm/pPzunSqPn3ciQF CEWVYyvMyH/037Juw8NTCBjYw+AzJGn+P33667I5z0nyD5rmtypGo4JCz0ykiCAu KHKkuJh/10xCm7FsU2i4ljNq/W1K5IaDnOJC/HIeUdFEtC1T7Tj90g0jWieDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgvhhsOvZhEMTqefg2BkLXtl2wQEwHwYDVR0j BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1 M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5MTkzMzQzNzkwOTQwMTcvMC81RDJEQ0JCNkQ4MjQw MUI1RTBFNTgwMjU0MkJCNTNFNTYxQzFGOEVGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxO/KgfV/sHR lMucLh1FW2ZRwsVqa/2NhlJAUfrP5RCdh2Lo0wefWTlzrMvPqwZByPBH4lOAJx2+ e4jkHmgVHuaOAtouzKqM/TIicC7cZuySbBymLiRqNYutk1dVI+6d0qDdp0kJ8ZfN /ONwCkA8xW0aFYB3oZ+L1iNu4BBgwUiKf1p919ZL9Bu7649y/5uhKlMdZadT7u/u NdrU8MWUX74xcn4CeF8VdOsoj+ryQjBB9lrVQ5Ai2oYQr4jWY+0zVWU0JKO3+UXK 0Vly6rb/RyOBh4H2LXQR2Io3sRz8kceCri9oXLkuyE9Dp5K2cCWBSlamSkdwTFon O2Su5QmXug== -----END CERTIFICATE-----Generated at Wed May 13 20:17:37 2026 by rpki-client