$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: C2Nmf7y/D7uliBVd6niF3/miybnnff/CzlQxJ9Z/7m8= Subject key identifier: FB:F7:94:C3:78:E6:69:79:60:9C:CD:E0:0B:B5:31:1C:E3:96:5B:26 Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 4E05B24F597246AB90575D7A6240E236FAC25F99 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: 17 Signing time: Wed 13 May 2026 02:55:54 +0000 Manifest this update: Wed 13 May 2026 02:50:54 +0000 Manifest next update: Thu 14 May 2026 04:00:54 +0000 Files and hashes: 1: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: PVIYnPfL9Xoy2xJV0twIwDBGnIfgY9ZPAgk7gVSa8Rs=) 2: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) 3: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) 4: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 5: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:05:b2:4f:59:72:46:ab:90:57:5d:7a:62:40:e2:36:fa:c2:5f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: May 13 02:50:54 2026 GMT Not After : May 14 04:00:54 2026 GMT Subject: CN=FBF794C378E66979609CCDE00BB5311CE3965B26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:11:52:0e:66:46:a4:5a:10:88:c1:08:12: 5d:b6:da:28:3f:05:a2:14:31:ad:7d:78:ca:68:2f: a8:14:75:87:0f:58:c8:06:0a:6f:d7:b4:c6:59:60: 57:cf:ee:7f:1e:de:a4:c3:09:3d:6b:cf:75:3c:77: 82:7c:dc:1e:25:1a:3d:bc:f6:a0:68:24:f6:5f:57: 16:d4:54:74:76:20:7f:68:23:58:1b:28:b4:df:91: c1:1f:94:fc:0a:ef:80:da:c3:52:64:54:f5:f2:75: c8:03:19:55:09:8a:a4:80:25:41:c3:16:08:ab:63: 60:9e:c1:54:40:97:88:56:67:cd:eb:d7:e5:13:3e: 81:d2:3a:2f:50:ee:82:54:31:43:68:1a:81:cc:85: f1:7b:ec:b7:79:5a:da:05:af:d4:14:a6:50:ba:22: ad:9c:b4:2f:2f:e2:5d:9f:b3:d9:86:a6:16:fe:68: e9:25:ed:39:dd:b3:08:1b:2c:c1:03:81:84:34:a3: 93:83:85:d0:5b:80:a2:9a:0d:6e:67:92:1e:78:b9: e4:ae:02:1d:e8:05:8a:3c:cf:0d:d4:b5:f0:15:1c: 20:9e:38:30:1a:99:a9:fd:3c:43:92:dd:50:81:92: 88:c5:54:dd:0a:22:30:f9:b6:dc:ff:d3:aa:3d:40: 5b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F7:94:C3:78:E6:69:79:60:9C:CD:E0:0B:B5:31:1C:E3:96:5B:26 X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:33:87:d3:c6:22:bb:39:ec:16:39:9c:2d:5a:e8:fb:a2:60: 7f:71:b3:57:33:b4:b8:9d:c6:e9:b2:11:4e:63:2b:d8:bc:09: e7:14:1d:c0:67:93:a7:a8:39:c7:27:cd:70:0b:63:af:34:82: c7:e8:9a:82:f4:06:3e:c1:56:d4:71:e7:77:3a:ef:53:9c:d3: 9a:fd:6d:89:03:cf:c9:2c:cc:47:b0:29:55:20:b5:9a:0f:66: 32:55:3f:53:95:9c:7b:d7:9d:ba:83:ce:a0:29:98:93:f5:7e: c0:ba:e4:8f:dd:f7:85:5d:c9:f6:13:8b:2e:c0:92:ed:4a:64: 19:17:6d:2c:1a:36:fd:47:43:4a:57:3a:e8:61:1d:18:cc:43: 8b:33:4b:3c:4b:6a:7d:3c:48:1b:9b:60:ba:07:59:0e:de:b4: 24:f0:18:6e:df:84:1b:a9:62:c1:bb:68:fc:05:e2:c7:61:c9: 5f:41:81:71:4e:bd:cb:23:07:89:fe:39:fb:59:3e:83:01:44: 53:e6:5f:90:b9:dd:73:ae:3c:fd:e9:b2:09:1b:5f:13:8c:c7: cb:b3:00:56:61:38:59:7e:31:70:8d:27:0d:2b:2a:a1:e3:82: b7:1b:67:f1:b7:53:3b:bb:39:02:22:7d:6f:c9:c6:d5:28:e4: d8:e1:ca:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTgWyT1lyRquQV116YkDiNvrCX5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjA1MTMwMjUwNTRaFw0yNjA1MTQwNDAwNTRaMDMxMTAvBgNV BAMTKEZCRjc5NEMzNzhFNjY5Nzk2MDlDQ0RFMDBCQjUzMTFDRTM5NjVCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1xFSDmZGpFoQiMEIEl222ig/ BaIUMa19eMpoL6gUdYcPWMgGCm/XtMZZYFfP7n8e3qTDCT1rz3U8d4J83B4lGj28 9qBoJPZfVxbUVHR2IH9oI1gbKLTfkcEflPwK74Daw1JkVPXydcgDGVUJiqSAJUHD FgirY2CewVRAl4hWZ83r1+UTPoHSOi9Q7oJUMUNoGoHMhfF77Ld5WtoFr9QUplC6 Iq2ctC8v4l2fs9mGphb+aOkl7TndswgbLMEDgYQ0o5ODhdBbgKKaDW5nkh54ueSu Ah3oBYo8zw3UtfAVHCCeODAaman9PEOS3VCBkojFVN0KIjD5ttz/06o9QFsTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+/eUw3jmaXlgnM3gC7UxHOOWWyYwHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjOH08Yiuzns FjmcLVro+6Jgf3GzVzO0uJ3G6bIRTmMr2LwJ5xQdwGeTp6g5xyfNcAtjrzSCx+ia gvQGPsFW1HHndzrvU5zTmv1tiQPPySzMR7ApVSC1mg9mMlU/U5Wce9eduoPOoCmY k/V+wLrkj933hV3J9hOLLsCS7UpkGRdtLBo2/UdDSlc66GEdGMxDizNLPEtqfTxI G5tgugdZDt60JPAYbt+EG6liwbto/AXix2HJX0GBcU69yyMHif45+1k+gwFEU+Zf kLndc648/emyCRtfE4zHy7MAVmE4WX4xcI0nDSsqoeOCtxtn8bdTO7s5AiJ9b8nG 1Sjk2OHKjA== -----END CERTIFICATE-----Generated at Wed May 13 20:17:12 2026 by rpki-client