$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft (raw, json) Hash identifier: OsV/IpMghBLTeNTy0/HkBW6L2+lJJMu0/wve40VKgoU= Subject key identifier: DD:FD:FA:D9:3A:CD:2E:C4:C9:CC:D1:12:F1:F0:A1:16:6C:E9:B5:C0 Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 72425B66BBE3208EAFC69FF8C8D0B1137869B132 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft Manifest number: 3D Signing time: Wed 13 May 2026 11:06:03 +0000 Manifest this update: Wed 13 May 2026 11:01:03 +0000 Manifest next update: Thu 14 May 2026 13:52:03 +0000 Files and hashes: 1: AS58466.roa (hash: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw=) 2: AS136958.roa (hash: 9evXBbv7x1TGnMGjCSgUJriu28GZk/4mc69qLBT6/pU=) 3: AS58542.roa (hash: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw=) 4: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl (hash: D8+/i+BmEFye+jW7Ezq9ZUBimJN8OWLbOPYOPqCJ2L4=) 5: AS23724.roa (hash: 94+lhcnOPv/NagJzLLgJuxzucoDhXRnaox75QFBxdnQ=) 6: AS133119.roa (hash: ps021oXDgvJp1gp7DKvql3eOYp4ThgrB+wE9FLk00M8=) 7: AS17621.roa (hash: zqF/e4Ga8PYrOc0X3iakiBwylpQsSQJawT12rZTF/6w=) 8: AS4811.roa (hash: I06tg0jWKnueyfETLHRJ/lJdRJ1PkCdBU+YK4bl/rio=) 9: AS59019.roa (hash: btzlAW4GYWUN2ma+FzW8EzxPd49tI0rJMZmEY5/oX/8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:42:5b:66:bb:e3:20:8e:af:c6:9f:f8:c8:d0:b1:13:78:69:b1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: May 13 11:01:03 2026 GMT Not After : May 14 13:52:03 2026 GMT Subject: CN=DDFDFAD93ACD2EC4C9CCD112F1F0A1166CE9B5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:33:f6:ad:4a:5b:d0:4b:0d:b5:32:50:7c: d2:8c:32:21:82:bc:fb:4c:90:23:b5:0d:af:67:93: ad:9e:12:40:d1:e6:f0:23:38:32:1b:ff:09:77:62: e0:a0:a9:0f:73:eb:35:6e:c7:be:26:45:49:0d:c8: 57:d2:9d:c8:2a:c6:4e:b2:83:88:15:54:0e:40:2b: df:f9:ed:a1:3b:f0:fe:d3:06:f7:fd:64:a3:bf:02: 87:bf:56:28:6f:53:ae:8a:86:37:02:11:80:4c:19: bc:fb:04:5c:a0:7d:ac:50:aa:f6:92:81:a3:ae:8d: 9e:a9:21:04:f9:a4:65:28:0c:4f:b6:79:0b:c2:90: 0e:37:74:eb:e5:c2:ab:34:c3:74:db:6d:14:7a:62: 1b:c5:15:42:0c:03:d9:26:97:e0:98:d8:68:23:0a: 0e:59:b3:ce:37:bc:f6:9b:a4:c1:cd:ba:01:db:aa: 13:d8:af:c4:a7:4f:8f:6a:21:37:96:b6:83:b7:27: bf:0f:f4:c0:47:53:b8:95:c0:7c:f3:5c:bb:ca:8f: 6f:33:a2:eb:c6:65:6d:2c:34:45:e3:64:0d:9e:c3: 61:f8:07:64:16:57:25:35:b5:3b:ae:49:f8:7d:02: 85:c9:5e:69:67:80:7f:e2:44:fe:ed:7e:b5:8b:51: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:FA:D9:3A:CD:2E:C4:C9:CC:D1:12:F1:F0:A1:16:6C:E9:B5:C0 X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d7:fa:95:0f:38:b8:fb:23:64:74:b8:94:4e:31:da:bf:c3: 36:5d:bf:20:46:91:d4:98:9d:9e:94:0e:96:1e:65:81:d9:8c: 02:e7:94:d3:28:5f:9b:0c:6d:27:17:01:4b:19:f7:3a:90:77: b8:28:67:29:a8:fc:b8:3b:f1:41:b3:cb:d5:37:d6:ff:fa:f7: 36:09:8a:77:72:96:8f:4f:b8:06:41:85:b1:b6:bb:67:38:59: 7b:34:c5:c4:3b:98:5b:ef:06:3e:15:4e:75:e2:31:e4:7a:0c: 71:24:f6:71:99:c0:57:05:cc:bd:8f:7e:a3:7c:d9:a1:ec:c3: e9:ea:ef:38:7e:b6:25:a2:28:71:77:dc:04:7c:37:96:a0:55: 6d:2c:30:8e:1c:01:a6:b6:4b:27:14:f8:9e:06:40:d9:65:11: 2f:2b:ef:94:1c:95:89:63:b3:26:bf:1e:be:59:bc:58:b7:b6: 51:b5:3e:23:6f:2f:5e:eb:ac:6c:82:60:c5:43:fe:64:67:44: ff:c3:09:7d:fc:e0:54:e4:3f:f4:a8:7d:e5:71:a1:41:6f:d6: 5b:07:44:54:95:79:3c:89:e0:aa:56:46:83:f4:ec:b5:13:02: f3:c3:77:69:7e:94:11:6a:5a:68:f6:a7:8e:65:eb:b4:76:b6: 5a:21:43:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUckJbZrvjII6vxp/4yNCxE3hpsTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjA1MTMxMTAxMDNaFw0yNjA1MTQxMzUyMDNaMDMxMTAvBgNV BAMTKERERkRGQUQ5M0FDRDJFQzRDOUNDRDExMkYxRjBBMTE2NkNFOUI1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnzP2rUpb0EsNtTJQfNKMMiGC vPtMkCO1Da9nk62eEkDR5vAjODIb/wl3YuCgqQ9z6zVux74mRUkNyFfSncgqxk6y g4gVVA5AK9/57aE78P7TBvf9ZKO/Aoe/VihvU66KhjcCEYBMGbz7BFygfaxQqvaS gaOujZ6pIQT5pGUoDE+2eQvCkA43dOvlwqs0w3TbbRR6YhvFFUIMA9kml+CY2Ggj Cg5Zs843vPabpMHNugHbqhPYr8SnT49qITeWtoO3J78P9MBHU7iVwHzzXLvKj28z ouvGZW0sNEXjZA2ew2H4B2QWVyU1tTuuSfh9AoXJXmlngH/iRP7tfrWLUSRLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3f362TrNLsTJzNES8fChFmzptcAwHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BOUVGNkJERTg0QThC MTE1QzgwNzIxQjI4MEM5NDcwQjNCQzBEODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNf6lQ84uPsj ZHS4lE4x2r/DNl2/IEaR1JidnpQOlh5lgdmMAueU0yhfmwxtJxcBSxn3OpB3uChn Kaj8uDvxQbPL1TfW//r3NgmKd3KWj0+4BkGFsba7ZzhZezTFxDuYW+8GPhVOdeIx 5HoMcST2cZnAVwXMvY9+o3zZoezD6ervOH62JaIocXfcBHw3lqBVbSwwjhwBprZL JxT4ngZA2WURLyvvlByViWOzJr8evlm8WLe2UbU+I28vXuusbIJgxUP+ZGdE/8MJ ffzgVOQ/9Kh95XGhQW/WWwdEVJV5PIngqlZGg/TstRMC88N3aX6UEWpaaPanjmXr tHa2WiFDpQ== -----END CERTIFICATE-----Generated at Wed May 13 14:37:03 2026 by rpki-client