$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json) Hash identifier: ETIP88wyemK5TdAijfFuSxcIfaZRnKniRuWL9UlCP78= Subject key identifier: 0B:A6:59:E9:FF:6D:60:2C:B9:E6:69:39:54:DE:67:92:FE:41:F8:6A Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Certificate serial: 0C22B4B3AA466FFA2E44E10311316C9021CA8731 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft Manifest number: 0A Signing time: Tue 12 May 2026 20:10:43 +0000 Manifest this update: Tue 12 May 2026 20:05:43 +0000 Manifest next update: Wed 13 May 2026 21:45:43 +0000 Files and hashes: 1: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: a7i/Q9IE/sZyhK/U3QPDNc7bXTyuLib5K3laLWDuo+I=) 2: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=) 3: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:22:b4:b3:aa:46:6f:fa:2e:44:e1:03:11:31:6c:90:21:ca:87:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Validity Not Before: May 12 20:05:43 2026 GMT Not After : May 13 21:45:43 2026 GMT Subject: CN=0BA659E9FF6D602CB9E6693954DE6792FE41F86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f2:78:f5:35:fa:89:f9:4c:39:d1:35:6b:7b: db:32:d4:da:22:42:9b:b6:cf:07:0e:ad:e8:6e:8a: 93:bf:23:aa:90:29:05:41:a3:9b:a5:e7:81:a3:c4: fb:9a:be:dd:a7:15:68:85:84:ad:1f:6f:ea:fc:c7: 12:ed:2c:c2:29:c4:7d:81:13:6d:b1:01:c9:45:b8: db:a8:7b:b4:eb:55:de:fb:30:62:ab:55:4c:70:76: 9f:26:43:f5:fa:aa:6b:03:f2:78:f5:7d:bc:c9:90: bc:8d:b6:c2:cd:b1:a8:9d:b0:d2:86:22:c1:19:63: c9:8f:b8:f7:cb:38:17:b9:bf:d5:36:7c:cf:e4:f5: e2:fb:73:6e:44:32:c0:5e:98:a1:32:18:bf:4e:4f: b6:85:ed:2a:a5:64:74:79:66:71:d8:90:55:d7:72: 26:72:4d:ff:1c:c5:3f:83:33:a5:cc:b6:a9:b4:5c: c3:26:63:59:93:51:9f:16:d1:1b:47:d5:60:20:08: 06:bf:52:b5:8c:8a:c9:27:23:5d:96:a3:9c:30:60: 93:12:bb:8a:00:25:8f:44:fd:3a:8e:95:5e:2d:29: 66:99:fd:66:55:b3:4f:1a:98:46:e4:de:a6:c3:64: 73:53:f4:4e:d9:50:b9:35:0e:33:b3:5a:1c:f2:29: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A6:59:E9:FF:6D:60:2C:B9:E6:69:39:54:DE:67:92:FE:41:F8:6A X509v3 Authority Key Identifier: keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f1:ee:19:54:8b:5d:03:98:f2:e2:89:ea:de:a0:79:5a:e0: 1f:e1:c8:ad:69:81:63:01:2c:b7:e5:7e:e1:14:5e:ef:70:29: a9:27:99:12:0d:2e:a9:b8:38:45:1c:4e:a7:7b:a6:94:48:a7: c4:b0:4f:f7:b7:25:1a:15:b2:1e:29:7e:86:0c:7d:2c:d1:5e: 23:c0:6f:ab:4b:50:81:bb:31:ab:3f:2a:c3:7e:e8:2a:97:f3: c7:f1:cd:c6:b7:2a:75:ab:9f:a9:76:90:20:11:4e:1d:2d:f3: 73:fd:68:14:48:b8:13:1b:98:88:32:d1:28:13:93:65:32:89: 07:1b:54:aa:8b:da:ac:dd:97:bb:b4:2a:d6:dc:d3:93:a4:8e: 39:ae:26:46:b9:89:ae:95:3c:cb:87:fe:26:f6:75:14:94:ed: 23:fc:63:30:e3:3f:8a:fa:f5:31:81:7d:5c:af:d9:8f:62:3c: 3e:a7:dd:8d:4f:ca:63:ba:c2:5d:a7:8a:93:06:30:04:72:2b: ac:3f:ec:18:29:35:3b:10:7f:fa:31:3a:96:42:f5:b1:3b:50: c9:72:89:23:77:11:98:06:12:eb:4f:19:1a:17:06:8a:cb:28: 4f:b8:a4:e1:44:b7:5f:34:9c:e9:f3:db:1b:57:24:4e:ff:ac: 75:b8:b3:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDCK0s6pGb/ouROEDETFskCHKhzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0Ix NDlCRTAzQjAeFw0yNjA1MTIyMDA1NDNaFw0yNjA1MTMyMTQ1NDNaMDMxMTAvBgNV BAMTKDBCQTY1OUU5RkY2RDYwMkNCOUU2NjkzOTU0REU2NzkyRkU0MUY4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8nj1NfqJ+Uw50TVre9sy1Noi Qpu2zwcOrehuipO/I6qQKQVBo5ul54GjxPuavt2nFWiFhK0fb+r8xxLtLMIpxH2B E22xAclFuNuoe7TrVd77MGKrVUxwdp8mQ/X6qmsD8nj1fbzJkLyNtsLNsaidsNKG IsEZY8mPuPfLOBe5v9U2fM/k9eL7c25EMsBemKEyGL9OT7aF7SqlZHR5ZnHYkFXX ciZyTf8cxT+DM6XMtqm0XMMmY1mTUZ8W0RtH1WAgCAa/UrWMisknI12Wo5wwYJMS u4oAJY9E/TqOlV4tKWaZ/WZVs08amEbk3qbDZHNT9E7ZULk1DjOzWhzyKauPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC6ZZ6f9tYCy55mk5VN5nkv5B+GowHwYDVR0j BBgwFoAUhyQDTqnAbRBg7PcCLXVzyxSb4DswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM2MzgzNzM1NzM5MTg4NS8wLzg3MjQwMzRFQTlDMDZEMTA2MEVDRjcwMjJENzU3 M0NCMTQ5QkUwM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNjM4MzczNTczOTE4ODUvMC84NzI0MDM0RUE5QzA2 RDEwNjBFQ0Y3MDIyRDc1NzNDQjE0OUJFMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/HuGVSLXQOY 8uKJ6t6geVrgH+HIrWmBYwEst+V+4RRe73ApqSeZEg0uqbg4RRxOp3umlEinxLBP 97clGhWyHil+hgx9LNFeI8Bvq0tQgbsxqz8qw37oKpfzx/HNxrcqdaufqXaQIBFO HS3zc/1oFEi4ExuYiDLRKBOTZTKJBxtUqovarN2Xu7Qq1tzTk6SOOa4mRrmJrpU8 y4f+JvZ1FJTtI/xjMOM/ivr1MYF9XK/Zj2I8PqfdjU/KY7rCXaeKkwYwBHIrrD/s GCk1OxB/+jE6lkL1sTtQyXKJI3cRmAYS608ZGhcGissoT7ik4US3XzSc6fPbG1ck Tv+sdbizgw== -----END CERTIFICATE-----Generated at Wed May 13 12:06:23 2026 by rpki-client