$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: JzarOc4l5LW/AX/5ypu2Zsm2naZgM8abNvjGoC3oC94= Subject key identifier: 59:BB:B8:90:C6:3A:02:20:92:BF:C4:65:86:44:A9:08:6B:12:28:00 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 59A105D57E0F2299B2376AFAC22AC83BA5A1A296 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: 16 Signing time: Wed 13 May 2026 10:11:03 +0000 Manifest this update: Wed 13 May 2026 10:06:03 +0000 Manifest next update: Thu 14 May 2026 11:45:03 +0000 Files and hashes: 1: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) 2: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 3: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: 3ke8DyN9/JEus2YFQGp8Tc+9AThA5Bs9QaJjYXAgPew=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a1:05:d5:7e:0f:22:99:b2:37:6a:fa:c2:2a:c8:3b:a5:a1:a2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: May 13 10:06:03 2026 GMT Not After : May 14 11:45:03 2026 GMT Subject: CN=59BBB890C63A022092BFC4658644A9086B122800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:42:5c:a9:d6:ce:68:2c:98:7d:4d:6c:e2: d2:8f:3d:28:43:c5:1f:5b:0c:21:c4:24:22:22:50: 56:da:39:d0:71:8a:1b:df:e8:e1:7d:0c:4c:7b:b4: e1:b3:df:39:b3:ce:d4:a7:ce:45:a7:21:7e:fa:aa: 7a:2f:83:c3:cc:f6:71:9b:85:37:12:4e:eb:54:01: fa:78:82:0b:f8:21:32:15:0f:d9:6e:ab:1a:19:07: 56:0b:3e:f8:c5:cd:3b:1f:53:67:10:b5:44:f5:be: 0b:3b:33:cc:ce:49:b3:44:b6:31:34:14:85:3e:83: 43:ce:33:ef:dc:8d:c3:a1:6a:d9:eb:f5:14:be:9c: 93:37:0c:2f:07:09:fa:5a:f1:56:ff:07:b4:4d:b2: 23:4e:09:3f:6b:b2:e1:ea:36:16:0c:43:90:7c:15: 60:7a:a9:96:05:2b:ea:39:c5:0a:6b:7b:6d:94:b5: 73:4e:57:0f:87:c4:12:27:2d:c8:cf:1c:a4:42:0e: ad:4e:d4:a6:07:93:37:64:de:57:dd:fc:20:04:0b: 7b:a3:d5:60:e9:12:a3:86:a0:bc:a9:f1:7d:32:25: 03:e8:ad:b8:cd:16:e4:14:66:c9:d3:6e:98:05:96: 5c:72:9e:e7:e5:39:ff:e8:2c:f6:0a:76:64:66:bd: 7c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BB:B8:90:C6:3A:02:20:92:BF:C4:65:86:44:A9:08:6B:12:28:00 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c3:ca:69:23:ab:9b:2b:c2:24:8a:a1:45:8f:36:1a:ac:f2: 30:bc:8f:d9:11:f8:a5:9e:10:d3:63:9a:d8:03:95:2c:3b:59: ae:d6:2c:59:a3:0c:24:53:12:d3:0b:a1:ba:5e:35:53:4f:fe: 1c:19:d9:e7:bf:13:e3:b9:41:61:68:41:c6:6d:7a:25:1d:ff: d1:4e:17:77:e3:34:1d:24:c8:3d:b8:85:2f:96:fe:e0:fa:10: 38:a5:58:28:48:da:8f:b4:0d:f1:85:32:ad:e0:ee:f1:c4:48: 2b:28:22:bc:31:2e:a1:8d:d4:54:85:bb:aa:42:89:d0:bf:c4: 2c:69:03:2f:41:b4:1b:42:b5:d3:83:bd:c7:c1:91:95:d2:ba: 46:30:54:4e:40:ab:80:f6:37:3a:d4:9a:f5:74:38:c2:24:57: 1b:6f:b7:4b:fa:e1:d6:af:4b:2c:d7:8f:5a:10:a2:ad:1a:66: 09:e4:27:5f:5f:9f:2d:30:4b:45:8c:9c:17:21:e0:14:1f:47: 88:9c:bc:da:c9:19:31:03:ea:6a:c2:e3:d9:b4:07:a1:a5:98: 11:21:b2:7d:83:31:0d:8d:2b:ca:c6:f1:9a:b2:5c:65:86:97: 67:71:42:00:89:77:4e:f9:59:af:6d:cf:2c:25:c0:ff:9d:50: 06:47:46:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWaEF1X4PIpmyN2r6wirIO6WhopYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjA1MTMxMDA2MDNaFw0yNjA1MTQxMTQ1MDNaMDMxMTAvBgNV BAMTKDU5QkJCODkwQzYzQTAyMjA5MkJGQzQ2NTg2NDRBOTA4NkIxMjI4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cEJcqdbOaCyYfU1s4tKPPShD xR9bDCHEJCIiUFbaOdBxihvf6OF9DEx7tOGz3zmzztSnzkWnIX76qnovg8PM9nGb hTcSTutUAfp4ggv4ITIVD9luqxoZB1YLPvjFzTsfU2cQtUT1vgs7M8zOSbNEtjE0 FIU+g0POM+/cjcOhatnr9RS+nJM3DC8HCfpa8Vb/B7RNsiNOCT9rsuHqNhYMQ5B8 FWB6qZYFK+o5xQpre22UtXNOVw+HxBInLcjPHKRCDq1O1KYHkzdk3lfd/CAEC3uj 1WDpEqOGoLyp8X0yJQPorbjNFuQUZsnTbpgFllxynuflOf/oLPYKdmRmvXyVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWbu4kMY6AiCSv8RlhkSpCGsSKAAwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsPKaSOrmyvC JIqhRY82GqzyMLyP2RH4pZ4Q02Oa2AOVLDtZrtYsWaMMJFMS0wuhul41U0/+HBnZ 578T47lBYWhBxm16JR3/0U4Xd+M0HSTIPbiFL5b+4PoQOKVYKEjaj7QN8YUyreDu 8cRIKygivDEuoY3UVIW7qkKJ0L/ELGkDL0G0G0K104O9x8GRldK6RjBUTkCrgPY3 OtSa9XQ4wiRXG2+3S/rh1q9LLNePWhCirRpmCeQnX1+fLTBLRYycFyHgFB9HiJy8 2skZMQPqasLj2bQHoaWYESGyfYMxDY0rysbxmrJcZYaXZ3FCAIl3TvlZr23PLCXA /51QBkdG1w== -----END CERTIFICATE-----Generated at Wed May 13 13:54:21 2026 by rpki-client