$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft File: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft (raw, json) Hash identifier: eGsYKcPzpWV+O+dgtEOKLMA3fLqmmxCEYAYlBuoWcFI= Subject key identifier: 17:71:AB:B9:3E:BB:A3:E3:39:F8:7E:92:50:B6:13:CE:E0:9E:61:A8 Authority key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D Certificate issuer: /CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Certificate serial: 27E60C37F8B52AA08C0260CF664CF114A14B2005 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft Manifest number: 18 Signing time: Wed 13 May 2026 18:36:06 +0000 Manifest this update: Wed 13 May 2026 18:31:06 +0000 Manifest next update: Thu 14 May 2026 21:38:06 +0000 Files and hashes: 1: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl (hash: oCY58xIsOnrJskvF656icLaDBXQLZlCLNSBmadYvhG4=) 2: 33362e3235352e3136342e302f32342d3234203d3e203633353731.roa (hash: 2qLuGhIatEDj10/f1gmTiMAq/S+SlYPjS3C1JK5kbkU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e6:0c:37:f8:b5:2a:a0:8c:02:60:cf:66:4c:f1:14:a1:4b:20:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D Validity Not Before: May 13 18:31:06 2026 GMT Not After : May 14 21:38:06 2026 GMT Subject: CN=1771ABB93EBBA3E339F87E9250B613CEE09E61A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:29:e7:d8:95:8b:5a:ad:f9:31:58:96:c0: 3a:08:87:cd:43:50:54:81:29:d1:e0:04:db:ee:f6: 23:75:20:04:a7:91:30:32:fc:5c:d6:17:00:99:27: c7:c7:10:28:39:85:4e:aa:f3:84:f9:db:81:c9:e8: 85:fb:39:83:36:05:9d:a0:4e:c3:20:a1:67:75:a0: e1:12:dc:88:fc:47:ea:2c:fe:d2:71:13:53:77:bb: 52:5d:21:8e:99:69:b3:45:c2:be:a6:ef:5c:08:05: 24:45:28:d8:88:b1:7e:41:01:2b:0f:f3:20:a7:f4: c8:94:15:55:5f:d7:6d:69:3f:1b:d2:f4:8e:2f:d6: 09:d3:e6:d4:19:57:f2:15:9b:94:53:bc:e3:9b:ec: a8:03:7e:26:86:ac:54:e3:cb:05:da:d0:0e:f5:a9: 90:df:b2:9a:61:45:6e:da:a8:fe:33:e1:35:61:12: da:7c:76:90:77:83:bb:2e:57:ef:d3:5f:22:98:87: cb:30:01:24:3d:f7:8f:50:13:d9:dc:f5:ca:63:35: f0:e3:b9:ff:a0:f4:f2:16:96:f0:0f:ef:ca:4f:9a: e5:29:65:f5:c8:7d:76:74:8b:b0:85:2f:a7:a6:7a: ad:a2:af:57:2c:70:0b:34:8d:e8:b1:0f:cb:1b:a0: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:71:AB:B9:3E:BB:A3:E3:39:F8:7E:92:50:B6:13:CE:E0:9E:61:A8 X509v3 Authority Key Identifier: keyid:94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:40:c3:3d:14:30:c2:7c:c9:6c:d6:a5:c7:6b:58:d8:c1:ea: f5:20:bc:87:6b:a2:bd:b2:77:3e:35:73:2b:83:60:d4:9d:87: 10:21:12:24:55:61:2c:cb:d8:84:0e:c1:82:24:a8:b5:d6:79: e6:7e:58:f7:15:dc:36:6d:e5:6c:76:78:18:c5:0e:29:d3:cf: c8:92:92:11:54:cd:e1:7e:ef:1f:7d:ea:02:a4:4b:ad:c2:ff: 53:5c:c7:63:aa:21:6d:02:92:2f:d6:1e:ba:3d:49:ff:6e:d2: 1b:b6:7d:c7:3d:e5:83:fc:c3:a0:37:65:71:0b:3b:9e:dd:41: 64:f8:3e:39:38:c2:8a:84:95:8a:24:83:ee:5f:81:76:82:40: 9f:7f:0d:c8:59:03:68:78:fc:67:b7:0e:93:03:49:6a:55:a5: 3e:13:30:8f:32:6a:16:a5:a7:af:77:34:8e:5a:24:6e:cf:bd: e7:82:0b:38:d6:91:3a:0c:92:d0:f5:de:02:58:24:ff:8e:a6: c2:df:c3:43:e8:8d:41:37:f8:68:2f:6c:59:03:1c:0b:ac:8b: 12:ec:0b:ff:2c:6b:34:b1:ad:c0:99:22:ec:19:f9:a7:3f:93: 8c:04:bb:16:11:da:81:67:26:42:90:f6:4e:ce:52:23:73:cf: 00:6a:0d:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ+YMN/i1KqCMAmDPZkzxFKFLIAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNF MEQ1MDg4RDAeFw0yNjA1MTMxODMxMDZaFw0yNjA1MTQyMTM4MDZaMDMxMTAvBgNV BAMTKDE3NzFBQkI5M0VCQkEzRTMzOUY4N0U5MjUwQjYxM0NFRTA5RTYxQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxinn2JWLWq35MViWwDoIh81D UFSBKdHgBNvu9iN1IASnkTAy/FzWFwCZJ8fHECg5hU6q84T524HJ6IX7OYM2BZ2g TsMgoWd1oOES3Ij8R+os/tJxE1N3u1JdIY6ZabNFwr6m71wIBSRFKNiIsX5BASsP 8yCn9MiUFVVf121pPxvS9I4v1gnT5tQZV/IVm5RTvOOb7KgDfiaGrFTjywXa0A71 qZDfspphRW7aqP4z4TVhEtp8dpB3g7suV+/TXyKYh8swASQ9949QE9nc9cpjNfDj uf+g9PIWlvAP78pPmuUpZfXIfXZ0i7CFL6emeq2ir1cscAs0jeixD8sboEoFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUF3GruT67o+M5+H6SULYTzuCeYagwHwYDVR0j BBgwFoAUlGGS22tjFk1/trV+6cRCnODVCI0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk4MTQ3MzM2MTUyNjc4NS8wLzk0NjE5MkRCNkI2MzE2NEQ3RkI2QjU3RUU5QzQ0 MjlDRTBENTA4OEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNFMEQ1MDg4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5ODE0NzMzNjE1MjY3ODUvMC85NDYxOTJEQjZCNjMx NjREN0ZCNkI1N0VFOUM0NDI5Q0UwRDUwODhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0DDPRQwwnzJ bNalx2tY2MHq9SC8h2uivbJ3PjVzK4Ng1J2HECESJFVhLMvYhA7BgiSotdZ55n5Y 9xXcNm3lbHZ4GMUOKdPPyJKSEVTN4X7vH33qAqRLrcL/U1zHY6ohbQKSL9Yeuj1J /27SG7Z9xz3lg/zDoDdlcQs7nt1BZPg+OTjCioSViiSD7l+BdoJAn38NyFkDaHj8 Z7cOkwNJalWlPhMwjzJqFqWnr3c0jlokbs+954ILONaROgyS0PXeAlgk/46mwt/D Q+iNQTf4aC9sWQMcC6yLEuwL/yxrNLGtwJki7Bn5pz+TjAS7FhHagWcmQpD2Ts5S I3PPAGoNNA== -----END CERTIFICATE-----Generated at Wed May 13 20:55:24 2026 by rpki-client