$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft File: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft (raw, json) Hash identifier: z9137C0P0tWReLVgvAA1Gb2udKURMQLGvFI+uSZiDUI= Subject key identifier: 9E:7B:22:11:D1:57:3D:A2:26:A1:2E:92:CD:E5:4C:02:1C:BA:FA:A2 Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Certificate serial: 3D3D5647B5538F9544BF006B5223E5903925404C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft Manifest number: 1F Signing time: Tue 12 May 2026 18:10:38 +0000 Manifest this update: Tue 12 May 2026 18:05:38 +0000 Manifest next update: Wed 13 May 2026 20:32:38 +0000 Files and hashes: 1: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (hash: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI=) 2: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (hash: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8=) 3: 3132312e34362e3139322e302f32322d3232203d3e203536303436.roa (hash: eS3fIU3qyAFP/R9AYBNjmWcu/ek4BsGa+9vz4CrGdkE=) 4: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (hash: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=) 5: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (hash: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo=) 6: 3132312e34362e3230302e302f32322d3232203d3e203536303436.roa (hash: ctS4EHMva7f1SKBENENSA56WVaEq0k2ByBGUs33Z5FA=) 7: 3132312e34362e3139362e302f32322d3232203d3e20313430373137.roa (hash: r1OrvrQbOG3CWpMBVfsfGJEW6xW4KGBKQR94p3XbtMs=) 8: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (hash: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM=) 9: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (hash: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc=) 10: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl (hash: CylFw5kAGMlJC0R6rKYG/fSFWvzt0pyfcB65tjbMN9Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3d:56:47:b5:53:8f:95:44:bf:00:6b:52:23:e5:90:39:25:40:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Validity Not Before: May 12 18:05:38 2026 GMT Not After : May 13 20:32:38 2026 GMT Subject: CN=9E7B2211D1573DA226A12E92CDE54C021CBAFAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:95:85:f1:d1:2a:a1:c5:43:8e:f8:d6:b9: fb:43:d7:07:9f:75:4d:b0:1e:83:a1:4b:f9:a4:7f: f4:98:7d:71:5d:ba:48:5e:c6:75:63:68:68:3b:d6: f7:01:84:57:8d:b9:40:5a:fc:9f:4b:1d:05:50:e3: 6d:9b:fe:5e:d6:d1:d9:13:bb:2f:6e:bb:9c:51:0a: 5a:3f:06:0a:05:25:30:1b:2a:41:c8:fc:b1:f8:b2: 9b:9f:c7:28:ca:93:1d:6e:ad:b4:4e:b9:f1:06:fb: cd:39:4a:77:83:87:24:cd:e1:0f:dd:d8:9b:eb:6d: 6a:5f:ca:63:ef:0c:5a:c1:76:ca:c3:04:9a:3f:c2: e7:56:41:df:45:4d:c3:20:b6:1b:54:6f:91:e1:2e: 9c:72:99:c2:be:4a:80:cd:cd:54:ad:5f:8f:ee:9e: 9f:d0:6f:6d:6e:99:9c:17:0b:61:53:ca:0f:01:93: 35:76:cf:83:e6:ff:f5:14:09:fb:2a:f3:f1:b2:08: a0:71:ea:cb:c9:9f:bf:cd:75:ed:69:14:d9:b2:35: 22:46:f6:8b:f4:0a:92:85:c5:8e:94:48:a4:1c:d5: c6:e2:df:a5:21:ae:1d:84:1a:b9:de:24:91:d6:93: 5e:c1:69:93:04:95:c0:4d:4a:c5:9c:aa:1f:8d:f0: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7B:22:11:D1:57:3D:A2:26:A1:2E:92:CD:E5:4C:02:1C:BA:FA:A2 X509v3 Authority Key Identifier: keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:31:62:21:74:f5:0b:f1:d2:5e:6b:6d:45:0c:e3:25:f9:b8: b4:2d:5c:5c:04:e3:dc:4d:c6:ee:6f:11:69:82:62:56:90:2b: 81:d5:35:cc:2c:dc:ab:5d:b8:5a:d8:69:b9:b2:cb:56:98:fa: 0a:b8:3e:bc:b0:32:b6:7a:09:84:c1:16:03:7f:b5:2e:cc:3d: da:13:66:ba:36:ba:54:5e:f1:01:39:7d:a0:00:e5:9e:f4:17: ea:84:d0:90:14:87:04:bf:8c:b8:9e:d4:a6:ec:b2:4a:7f:75: 90:84:56:b9:22:1a:b1:41:52:e3:5c:9f:5f:f6:0f:6c:b5:35: db:08:96:8e:d6:56:df:73:18:87:8b:2a:37:91:1a:fd:65:9d: 18:93:39:c5:a1:d0:c6:5a:2c:c2:8a:2f:ab:d3:f5:f5:2c:b9: 45:2a:1d:9e:46:21:7e:7c:34:6d:f1:27:11:b4:dc:d3:8f:20: 4b:a6:06:77:d2:8b:f8:22:93:72:74:a3:16:12:74:41:cc:4e: 4a:c7:75:d5:60:17:11:67:5d:c5:25:65:71:87:be:f6:d2:68: 66:de:e5:f4:80:dc:cb:bc:97:aa:df:27:27:96:6a:08:d2:b6: e4:84:f0:d1:17:9e:27:20:17:cb:5f:12:fb:25:df:91:17:95: a3:b5:91:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPT1WR7VTj5VEvwBrUiPlkDklQEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMw RTkzMzczRjAeFw0yNjA1MTIxODA1MzhaFw0yNjA1MTMyMDMyMzhaMDMxMTAvBgNV BAMTKDlFN0IyMjExRDE1NzNEQTIyNkExMkU5MkNERTU0QzAyMUNCQUZBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzpWF8dEqocVDjvjWuftD1wef dU2wHoOhS/mkf/SYfXFdukhexnVjaGg71vcBhFeNuUBa/J9LHQVQ422b/l7W0dkT uy9uu5xRClo/BgoFJTAbKkHI/LH4spufxyjKkx1urbROufEG+805SneDhyTN4Q/d 2JvrbWpfymPvDFrBdsrDBJo/wudWQd9FTcMgthtUb5HhLpxymcK+SoDNzVStX4/u np/Qb21umZwXC2FTyg8BkzV2z4Pm//UUCfsq8/GyCKBx6svJn7/Nde1pFNmyNSJG 9ov0CpKFxY6USKQc1cbi36Uhrh2EGrneJJHWk17BaZMElcBNSsWcqh+N8MP/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnnsiEdFXPaImoS6SzeVMAhy6+qIwHwYDVR0j BBgwFoAUpfV5/TtA273kDfYteuxxXA6TNz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTMyNDM0MjUzMDE0NjMwNy8wL0E1RjU3OUZEM0I0MERCQkRFNDBERjYyRDdBRUM3 MTVDMEU5MzM3M0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMwRTkzMzczRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEzMjQzNDI1MzAxNDYzMDcvMC9BNUY1NzlGRDNCNDBE QkJERTQwREY2MkQ3QUVDNzE1QzBFOTMzNzNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTFiIXT1C/HS XmttRQzjJfm4tC1cXATj3E3G7m8RaYJiVpArgdU1zCzcq124WthpubLLVpj6Crg+ vLAytnoJhMEWA3+1Lsw92hNmuja6VF7xATl9oADlnvQX6oTQkBSHBL+MuJ7Upuyy Sn91kIRWuSIasUFS41yfX/YPbLU12wiWjtZW33MYh4sqN5Ea/WWdGJM5xaHQxlos woovq9P19Sy5RSodnkYhfnw0bfEnEbTc048gS6YGd9KL+CKTcnSjFhJ0QcxOSsd1 1WAXEWddxSVlcYe+9tJoZt7l9IDcy7yXqt8nJ5ZqCNK25ITw0ReeJyAXy18S+yXf kReVo7WRrA== -----END CERTIFICATE-----Generated at Wed May 13 12:40:33 2026 by rpki-client