$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json) Hash identifier: cyFi+FRE6HMsZG7A07g2q7naRROtpk6btNuvEJVEDYY= Subject key identifier: 1A:A4:6B:79:25:B5:F0:66:4D:4C:5E:53:B9:B5:77:BC:E7:31:B9:F0 Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 2C22053E6B4C872F2A9F6D3FA2F702C93129AA8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft Manifest number: 07 Signing time: Wed 13 May 2026 02:20:52 +0000 Manifest this update: Wed 13 May 2026 02:15:52 +0000 Manifest next update: Thu 14 May 2026 02:23:52 +0000 Files and hashes: 1: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=) 2: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=) 3: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: ANWlvUeMgLD2jmP1gkbGI3KkEXpd2OX0vRs7dzKDPcI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:22:05:3e:6b:4c:87:2f:2a:9f:6d:3f:a2:f7:02:c9:31:29:aa:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: May 13 02:15:52 2026 GMT Not After : May 14 02:23:52 2026 GMT Subject: CN=1AA46B7925B5F0664D4C5E53B9B577BCE731B9F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:c9:e0:de:f4:ea:d7:13:26:50:b7:27:d1: ee:8c:ec:79:5b:ca:9b:0f:c4:eb:54:a1:4f:20:08: 14:84:ce:dd:70:28:1f:e2:83:b0:65:80:ec:21:f6: c6:49:bb:45:aa:2c:ea:b6:26:2d:d1:e8:86:a2:6e: e3:fa:94:52:19:64:41:0e:32:f2:6b:4c:dd:0a:25: 30:e3:2a:ae:96:ec:8f:06:4f:fb:f2:9f:0e:e7:cd: 48:30:cf:72:37:9e:a0:b7:78:84:09:0f:3d:40:2a: bf:11:ab:95:c5:a3:0e:9f:ac:25:bf:4b:23:52:e9: f8:b5:6e:de:e3:3b:6c:01:63:f3:7a:93:8f:6e:35: 8b:06:96:2a:49:89:21:50:99:f1:ef:7a:ef:f0:6e: 92:40:e7:bb:d4:8d:f8:03:5e:39:38:c4:96:02:bc: fe:bf:ae:fe:c2:10:b6:14:e7:18:86:11:72:be:d2: 23:8d:f0:0d:6d:c8:21:28:d7:95:87:64:75:72:b0: 52:ed:69:98:32:c6:29:45:47:a7:0d:b7:63:60:3e: 63:75:5a:50:cc:12:39:c3:5a:6a:39:9f:62:ec:25: 44:74:41:97:5e:d2:2c:7b:7a:6f:00:17:43:45:1f: 91:f3:7a:26:67:ab:25:da:68:25:47:72:59:9d:4f: 5d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A4:6B:79:25:B5:F0:66:4D:4C:5E:53:B9:B5:77:BC:E7:31:B9:F0 X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ec:90:52:61:bc:4e:a6:78:3c:bb:e5:13:fe:dc:9a:77:63: 14:dd:9e:57:df:79:52:32:69:d6:38:49:53:f6:0c:ff:0d:2e: 93:f8:12:3a:a3:b4:45:a8:b3:2a:e6:eb:a7:10:53:ff:2c:26: a0:f0:cb:36:93:d7:66:ec:d5:7c:53:3b:65:58:25:70:73:31: 0c:73:4e:31:be:38:75:22:4d:6c:6c:e0:77:c7:0f:93:02:8e: b4:6a:2d:39:cd:2f:e1:14:5a:cd:6a:f3:ff:a5:f2:bc:34:e5: a5:2e:75:68:d3:dd:72:fb:a3:2d:0a:4e:af:ed:bf:57:dd:8f: ef:41:a9:e7:ad:8a:4d:49:14:b2:6d:76:b4:64:ce:c5:91:f1: 41:c8:f4:81:8c:b0:d5:30:21:c0:d0:a9:60:6b:86:7b:9d:3e: 23:f2:43:e7:e0:b4:12:67:fa:03:32:db:89:6f:05:70:9f:68: b3:ba:b8:a9:e5:bd:18:48:3f:3b:47:57:4c:64:3d:ef:ce:43: 9e:fb:a9:b3:55:36:cd:c2:31:ae:d8:8a:c3:33:0f:55:f5:6d: 71:03:33:11:de:44:e1:13:ba:88:43:0c:9a:e4:82:6c:0a:d3: 38:2d:35:82:74:2a:18:ea:5c:c1:9f:78:a2:6b:3f:71:28:b2: 67:17:6f:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULCIFPmtMhy8qn20/ovcCyTEpqo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjA1MTMwMjE1NTJaFw0yNjA1MTQwMjIzNTJaMDMxMTAvBgNV BAMTKDFBQTQ2Qjc5MjVCNUYwNjY0RDRDNUU1M0I5QjU3N0JDRTczMUI5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOsng3vTq1xMmULcn0e6M7Hlb ypsPxOtUoU8gCBSEzt1wKB/ig7BlgOwh9sZJu0WqLOq2Ji3R6IaibuP6lFIZZEEO MvJrTN0KJTDjKq6W7I8GT/vynw7nzUgwz3I3nqC3eIQJDz1AKr8Rq5XFow6frCW/ SyNS6fi1bt7jO2wBY/N6k49uNYsGlipJiSFQmfHveu/wbpJA57vUjfgDXjk4xJYC vP6/rv7CELYU5xiGEXK+0iON8A1tyCEo15WHZHVysFLtaZgyxilFR6cNt2NgPmN1 WlDMEjnDWmo5n2LsJUR0QZde0ix7em8AF0NFH5HzeiZnqyXaaCVHclmdT12rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGqRreSW18GZNTF5TubV3vOcxufAwHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzODY0ODA4Nzc5NjEyMzEvMC80NDA1ODk0RERBMzFE NDE4MURCMzlGNUM0MTNFQUQyMEI0RUFERTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+yQUmG8TqZ4 PLvlE/7cmndjFN2eV995UjJp1jhJU/YM/w0uk/gSOqO0RaizKubrpxBT/ywmoPDL NpPXZuzVfFM7ZVglcHMxDHNOMb44dSJNbGzgd8cPkwKOtGotOc0v4RRazWrz/6Xy vDTlpS51aNPdcvujLQpOr+2/V92P70Gp562KTUkUsm12tGTOxZHxQcj0gYyw1TAh wNCpYGuGe50+I/JD5+C0Emf6AzLbiW8FcJ9os7q4qeW9GEg/O0dXTGQ9785Dnvup s1U2zcIxrtiKwzMPVfVtcQMzEd5E4RO6iEMMmuSCbArTOC01gnQqGOpcwZ94oms/ cSiyZxdvvw== -----END CERTIFICATE-----Generated at Wed May 13 06:48:58 2026 by rpki-client