$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: sBwnC/0u0NM0HvaBWWSEztBumQNM/ndlZvipiufHWRA= Subject key identifier: B8:49:EB:E0:60:7F:67:21:4C:A0:1A:25:22:71:E7:EB:F2:48:68:69 Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 6435DCF26F1309BF4CB8AC6BD1C1DDD2DECEA32F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: 08 Signing time: Tue 12 May 2026 14:00:33 +0000 Manifest this update: Tue 12 May 2026 13:55:33 +0000 Manifest next update: Wed 13 May 2026 17:16:33 +0000 Files and hashes: 1: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: ryQ20HJ8pKCqys9EuDXN8DPILrtgk8wWtyiSwmL3LeU=) 2: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:35:dc:f2:6f:13:09:bf:4c:b8:ac:6b:d1:c1:dd:d2:de:ce:a3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: May 12 13:55:33 2026 GMT Not After : May 13 17:16:33 2026 GMT Subject: CN=B849EBE0607F67214CA01A252271E7EBF2486869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:a9:24:8e:36:d3:93:69:89:1f:cd:06:2c: 67:0a:40:24:7d:e4:3d:33:51:99:48:51:26:93:81: fd:20:f5:be:1a:f9:25:6c:46:28:8a:2a:3f:58:bc: 95:81:a2:b4:ec:97:c0:9d:9b:15:57:7c:15:1c:41: d1:c0:48:e2:71:b4:b4:4e:9d:7b:bc:ec:7c:8a:bd: 71:a3:10:ae:79:0b:87:3f:74:22:e0:47:13:b0:9f: 0c:81:88:f4:82:ef:cd:9f:de:28:fd:62:51:d1:b4: 69:e2:23:d2:6e:95:f0:e4:8d:5b:52:36:99:d8:3a: ff:91:f9:b4:00:af:78:d3:81:c5:d5:1b:06:25:04: 9a:fd:5f:4e:5d:4e:ea:f1:7f:04:49:6c:81:bf:28: 9f:d2:70:cd:2b:75:39:aa:8a:44:d0:6e:a7:cb:4d: 47:36:d6:61:18:bc:49:e7:4a:d8:79:90:ef:3d:4d: e4:0e:0e:d5:15:18:29:d2:61:d0:93:96:d6:c6:26: 6b:58:a1:92:0b:a2:f1:5b:a5:92:d0:f2:da:aa:b8: e3:ae:f0:d6:a9:b6:e9:92:8d:33:e5:26:6c:65:64: 48:36:0b:32:21:0a:3a:d0:2e:38:58:f3:0e:fd:0f: 9b:50:fc:c1:80:07:02:73:40:54:81:2c:e7:76:c2: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:EB:E0:60:7F:67:21:4C:A0:1A:25:22:71:E7:EB:F2:48:68:69 X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:87:12:0c:48:bf:70:6c:f6:69:96:2e:3b:43:e2:98:a2:54: e8:76:34:52:a4:df:9b:a2:a4:65:7d:e3:e2:d0:79:71:8a:ad: c5:48:61:c6:1e:d4:25:f6:b7:b5:e6:2d:10:b3:99:86:ef:49: bf:33:18:14:dc:b6:ca:86:cc:df:48:75:d6:47:cf:33:04:ce: 49:2a:78:10:9f:23:8f:16:18:1e:06:bb:a8:6c:f1:0e:98:88: 2d:68:5e:c1:47:b8:c4:09:a4:2b:a8:00:e5:1e:49:12:03:e4: 88:de:fc:80:61:26:63:ba:f6:64:54:71:36:d6:b8:b1:38:c5: 99:76:49:9e:93:e9:73:c1:e9:be:5b:0e:72:6d:cb:eb:10:fb: fd:21:a9:e9:9f:23:f7:6a:d9:03:b4:7c:78:42:28:60:46:7c: 5a:b4:40:2e:53:2c:73:5f:77:fb:a3:23:91:0c:98:a1:be:3e: c0:e9:48:d3:5b:47:df:10:1d:38:ff:b6:bc:05:1f:30:15:68: 12:91:18:a2:2f:57:ff:a9:f2:49:54:ab:1f:a5:2d:20:7b:cf: a4:95:c8:45:55:d0:29:2f:8b:50:f5:90:41:34:6d:a1:1c:45: e8:e6:ab:d3:01:ea:40:ca:74:ae:34:33:50:1f:ec:cb:30:92: db:23:57:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZDXc8m8TCb9MuKxr0cHd0t7Ooy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA1MTIxMzU1MzNaFw0yNjA1MTMxNzE2MzNaMDMxMTAvBgNV BAMTKEI4NDlFQkUwNjA3RjY3MjE0Q0EwMUEyNTIyNzFFN0VCRjI0ODY4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1qkkjjbTk2mJH80GLGcKQCR9 5D0zUZlIUSaTgf0g9b4a+SVsRiiKKj9YvJWBorTsl8CdmxVXfBUcQdHASOJxtLRO nXu87HyKvXGjEK55C4c/dCLgRxOwnwyBiPSC782f3ij9YlHRtGniI9JulfDkjVtS NpnYOv+R+bQAr3jTgcXVGwYlBJr9X05dTurxfwRJbIG/KJ/ScM0rdTmqikTQbqfL TUc21mEYvEnnSth5kO89TeQODtUVGCnSYdCTltbGJmtYoZILovFbpZLQ8tqquOOu 8NaptumSjTPlJmxlZEg2CzIhCjrQLjhY8w79D5tQ/MGABwJzQFSBLOd2wkBDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuEnr4GB/ZyFMoBolInHn6/JIaGkwHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIcSDEi/cGz2 aZYuO0PimKJU6HY0UqTfm6KkZX3j4tB5cYqtxUhhxh7UJfa3teYtELOZhu9JvzMY FNy2yobM30h11kfPMwTOSSp4EJ8jjxYYHga7qGzxDpiILWhewUe4xAmkK6gA5R5J EgPkiN78gGEmY7r2ZFRxNta4sTjFmXZJnpPpc8HpvlsOcm3L6xD7/SGp6Z8j92rZ A7R8eEIoYEZ8WrRALlMsc193+6MjkQyYob4+wOlI01tH3xAdOP+2vAUfMBVoEpEY oi9X/6nySVSrH6UtIHvPpJXIRVXQKS+LUPWQQTRtoRxF6Oar0wHqQMp0rjQzUB/s yzCS2yNXQQ== -----END CERTIFICATE-----Generated at Wed May 13 08:29:16 2026 by rpki-client