$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: 8ug7tSsGqJ9JpuB/WS2lnjw7zzT/UdiUyOkfT1Z5tG4= Subject key identifier: F1:91:E2:6A:EF:AE:E0:33:C3:D8:57:AC:88:26:49:AC:0B:B0:A4:F2 Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 5608159FAF4A50FAA8B6E1C61C5E6352A6F34DCC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: 1F Signing time: Wed 13 May 2026 07:21:02 +0000 Manifest this update: Wed 13 May 2026 07:16:02 +0000 Manifest next update: Thu 14 May 2026 08:21:02 +0000 Files and hashes: 1: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) 2: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=) 3: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: N1e95nAtYkpHygJjwdxbsmT6KEILxK/432Ky8q/srC8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:08:15:9f:af:4a:50:fa:a8:b6:e1:c6:1c:5e:63:52:a6:f3:4d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: May 13 07:16:02 2026 GMT Not After : May 14 08:21:02 2026 GMT Subject: CN=F191E26AEFAEE033C3D857AC882649AC0BB0A4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:33:f1:50:51:aa:05:2c:08:bf:a8:23:67: 86:27:c3:23:12:0b:c4:84:23:f0:58:e7:f5:4b:cf: 44:44:d1:80:71:5c:e1:d2:8f:1f:90:21:5c:5a:df: ef:bf:3f:bb:23:ed:d1:5b:92:fa:70:a3:80:d6:17: e4:6e:1f:9b:5e:72:f3:8d:4e:b2:c2:e8:47:9a:13: 7e:82:43:b6:b7:59:fd:0b:19:39:c1:12:ee:af:55: 67:a6:86:95:13:4e:3f:83:a4:03:97:cd:70:94:dd: 6e:c8:6b:54:74:88:c1:98:66:1f:60:e7:0d:fe:a1: 23:d0:30:7d:11:65:79:88:30:90:ba:7a:39:c4:0a: 89:91:2f:d3:22:a5:5a:37:9b:3a:aa:b6:3d:f3:bf: ff:ed:48:5c:a3:66:a2:b6:04:0f:03:16:30:15:67: 87:3e:ff:ce:46:cb:5b:eb:e0:9d:2f:ba:20:a5:70: 9b:4e:cc:6d:b5:c0:67:ce:14:cc:d5:61:09:fa:92: 9e:be:52:4f:ea:59:de:e7:b0:9b:ec:df:f1:d2:dd: d0:8e:f4:9f:ce:07:24:e7:fb:27:17:23:90:86:c8: e7:22:46:9d:e8:c6:5f:6c:c8:50:8a:ec:e3:05:6b: 04:e9:ef:5d:86:b3:e8:c8:2b:05:9e:ec:14:b6:12: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:91:E2:6A:EF:AE:E0:33:C3:D8:57:AC:88:26:49:AC:0B:B0:A4:F2 X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:98:a8:25:6d:af:d4:fe:c7:6e:ad:42:53:40:53:34:9c:9b: 45:42:8e:e2:d4:60:5b:e6:dc:c3:06:48:7c:80:ed:69:5a:62: 74:60:88:6c:b3:53:f7:23:33:a6:18:86:f5:0a:af:ce:6e:9b: eb:23:7b:69:83:57:54:15:10:ec:a3:7a:04:07:c2:b2:0d:52: 03:06:4f:62:0e:71:d8:fa:d7:40:f1:aa:47:61:cd:fe:8c:a0: ee:d3:fa:c7:3f:b8:13:d4:7f:fd:7a:3b:b5:96:ff:7f:29:9a: 68:00:6a:0b:65:2c:6a:98:2d:22:b6:ea:ad:f9:4c:46:bf:0c: b3:dd:32:4b:fb:d9:f9:86:9d:f6:7d:3c:82:05:b7:5e:61:7d: 64:ee:d6:7b:49:e7:a2:e3:d3:f8:82:ac:96:0e:15:63:17:42: 6c:22:b5:18:68:e4:cb:f5:13:a2:70:41:a8:8a:d3:78:7d:7a: 18:c1:57:cb:cb:4d:4b:97:f9:61:16:7b:fe:25:27:88:cb:d2: b6:0a:c6:43:c8:de:3b:86:55:b0:2f:06:2b:a8:82:43:db:a0: 46:c0:e8:26:c2:3d:b4:25:04:cd:51:c5:f4:ac:9b:c6:95:14: df:6e:38:59:9a:86:48:9b:03:68:f7:3d:a5:68:fa:67:9e:3a: ac:1c:af:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVggVn69KUPqotuHGHF5jUqbzTcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjA1MTMwNzE2MDJaFw0yNjA1MTQwODIxMDJaMDMxMTAvBgNV BAMTKEYxOTFFMjZBRUZBRUUwMzNDM0Q4NTdBQzg4MjY0OUFDMEJCMEE0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmjPxUFGqBSwIv6gjZ4YnwyMS C8SEI/BY5/VLz0RE0YBxXOHSjx+QIVxa3++/P7sj7dFbkvpwo4DWF+RuH5tecvON TrLC6EeaE36CQ7a3Wf0LGTnBEu6vVWemhpUTTj+DpAOXzXCU3W7Ia1R0iMGYZh9g 5w3+oSPQMH0RZXmIMJC6ejnEComRL9MipVo3mzqqtj3zv//tSFyjZqK2BA8DFjAV Z4c+/85Gy1vr4J0vuiClcJtOzG21wGfOFMzVYQn6kp6+Uk/qWd7nsJvs3/HS3dCO 9J/OByTn+ycXI5CGyOciRp3oxl9syFCK7OMFawTp712Gs+jIKwWe7BS2Eu/ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8ZHiau+u4DPD2FesiCZJrAuwpPIwHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA55ioJW2v1P7H bq1CU0BTNJybRUKO4tRgW+bcwwZIfIDtaVpidGCIbLNT9yMzphiG9Qqvzm6b6yN7 aYNXVBUQ7KN6BAfCsg1SAwZPYg5x2PrXQPGqR2HN/oyg7tP6xz+4E9R//Xo7tZb/ fymaaABqC2UsapgtIrbqrflMRr8Ms90yS/vZ+Yad9n08ggW3XmF9ZO7We0nnouPT +IKslg4VYxdCbCK1GGjky/UTonBBqIrTeH16GMFXy8tNS5f5YRZ7/iUniMvStgrG Q8jeO4ZVsC8GK6iCQ9ugRsDoJsI9tCUEzVHF9KybxpUU3244WZqGSJsDaPc9pWj6 Z546rByvTw== -----END CERTIFICATE-----Generated at Wed May 13 13:54:12 2026 by rpki-client