$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json) Hash identifier: QpctKoAEiY1A/D+t7JiMJXjRlKVO66kEDuRH1wXrNVA= Subject key identifier: C6:FD:98:4A:EC:9D:96:98:FA:EE:B3:0F:08:A2:9F:C9:D7:72:0D:A4 Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 0BCEB7C6891602331727E08D1955DFB247A20CFE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft Manifest number: 1B Signing time: Wed 13 May 2026 01:50:50 +0000 Manifest this update: Wed 13 May 2026 01:45:50 +0000 Manifest next update: Thu 14 May 2026 02:11:50 +0000 Files and hashes: 1: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=) 2: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=) 3: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=) 4: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: 8948TgYA62dsDmf7JTP/wpx5uC1ePBQoQo0QMMhLjyU=) 5: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=) 6: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ce:b7:c6:89:16:02:33:17:27:e0:8d:19:55:df:b2:47:a2:0c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: May 13 01:45:50 2026 GMT Not After : May 14 02:11:50 2026 GMT Subject: CN=C6FD984AEC9D9698FAEEB30F08A29FC9D7720DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:6d:ff:c4:bf:41:2f:57:2a:09:fc:fe:60: ce:cc:12:de:85:d5:03:4c:0c:81:ce:76:7d:f1:0d: 07:55:4c:f5:78:5c:85:25:ee:4d:cd:f4:03:67:1a: e7:1d:c3:fb:07:50:15:21:c9:89:69:bc:d0:e9:9a: a7:89:ba:72:c2:94:b7:20:a0:fa:85:e5:5c:4f:43: 36:68:0b:08:13:85:6c:6e:e9:ae:c8:e8:ec:ef:ec: f5:61:1c:47:05:e6:19:53:65:7e:96:5b:4c:14:d1: 17:d1:a0:22:e1:3c:fe:49:81:aa:d5:9e:2e:ad:77: 2d:23:01:15:dd:0a:0b:65:46:ce:03:a8:83:27:21: 02:d6:19:94:67:c1:80:43:0a:05:56:10:4f:2d:59: 2d:58:64:cb:f6:a0:d8:8e:41:8d:5f:03:8c:c4:03: 47:60:54:40:78:4a:3f:69:c3:53:de:38:d5:81:f8: 68:ff:fe:19:7b:c2:cc:f0:a6:2b:c0:bf:31:da:a9: e0:d1:00:4c:ad:e8:7a:bf:4d:91:db:2b:02:80:cf: da:07:e1:4e:48:1f:d6:e4:be:a9:65:5f:6a:ec:d5: f8:62:fa:14:3b:a7:28:eb:bb:3a:e8:4c:44:c3:78: 2a:b2:d4:04:95:95:16:77:0f:6d:c2:16:3b:3e:2e: e5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FD:98:4A:EC:9D:96:98:FA:EE:B3:0F:08:A2:9F:C9:D7:72:0D:A4 X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c1:e7:37:56:80:0c:d4:0a:1d:0a:71:80:e9:5a:dd:58:a2: f9:bf:5e:74:fc:30:62:24:ed:8f:10:af:59:ba:a0:26:c6:27: 15:57:2a:e1:57:a9:0a:6d:87:5e:5f:94:fd:5d:e7:aa:cc:ed: d7:68:b2:da:33:65:2e:59:be:9f:d2:64:63:01:32:5c:45:dc: 8c:e8:3d:d1:a1:eb:ee:4d:81:52:62:e8:32:1a:f8:40:5b:3f: b4:9a:88:a7:54:7a:12:e6:7b:21:e7:5e:5d:2a:ae:c6:02:42: bb:11:9e:bc:0a:62:3e:02:08:34:a4:80:83:ec:42:ff:19:f1: 02:da:bd:a0:9e:76:73:23:8c:e0:91:d4:cb:1b:9c:53:b2:eb: a5:a2:4d:8b:22:4b:9c:08:c0:74:87:a9:a1:8b:60:68:73:7f: b9:e4:1f:16:83:8c:3d:f8:16:fc:8a:ce:f5:e8:52:3b:d3:b1: dc:06:5a:64:17:b1:d4:f5:77:fb:f0:71:33:42:88:54:29:25: 02:32:dc:6a:12:0e:71:53:ac:37:43:b1:71:5a:1a:28:0b:88: 25:39:32:fa:90:33:3e:b5:e9:d7:96:ad:82:0b:62:82:d3:88: 85:0e:5d:2b:07:4f:eb:71:b6:30:c3:9d:e7:18:cc:5a:e6:e7: f4:74:c1:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC863xokWAjMXJ+CNGVXfskeiDP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjA1MTMwMTQ1NTBaFw0yNjA1MTQwMjExNTBaMDMxMTAvBgNV BAMTKEM2RkQ5ODRBRUM5RDk2OThGQUVFQjMwRjA4QTI5RkM5RDc3MjBEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Gm3/xL9BL1cqCfz+YM7MEt6F 1QNMDIHOdn3xDQdVTPV4XIUl7k3N9ANnGucdw/sHUBUhyYlpvNDpmqeJunLClLcg oPqF5VxPQzZoCwgThWxu6a7I6Ozv7PVhHEcF5hlTZX6WW0wU0RfRoCLhPP5JgarV ni6tdy0jARXdCgtlRs4DqIMnIQLWGZRnwYBDCgVWEE8tWS1YZMv2oNiOQY1fA4zE A0dgVEB4Sj9pw1PeONWB+Gj//hl7wszwpivAvzHaqeDRAEyt6Hq/TZHbKwKAz9oH 4U5IH9bkvqllX2rs1fhi+hQ7pyjruzroTETDeCqy1ASVlRZ3D23CFjs+LuVtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxv2YSuydlpj67rMPCKKfyddyDaQwHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwNTkxNjg3MzI3MDg4NjUvMC9EOEU5NzQ1QjUwNUND RDdEMjIxMDVDQjg5RDU1NzRFNTk5QjQ1RTEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8HnN1aADNQK HQpxgOla3Vii+b9edPwwYiTtjxCvWbqgJsYnFVcq4VepCm2HXl+U/V3nqszt12iy 2jNlLlm+n9JkYwEyXEXcjOg90aHr7k2BUmLoMhr4QFs/tJqIp1R6EuZ7IedeXSqu xgJCuxGevApiPgIINKSAg+xC/xnxAtq9oJ52cyOM4JHUyxucU7LrpaJNiyJLnAjA dIepoYtgaHN/ueQfFoOMPfgW/IrO9ehSO9Ox3AZaZBex1PV3+/BxM0KIVCklAjLc ahIOcVOsN0OxcVoaKAuIJTky+pAzPrXp15atggtigtOIhQ5dKwdP63G2MMOd5xjM Wubn9HTBBg== -----END CERTIFICATE-----Generated at Wed May 13 13:04:27 2026 by rpki-client