$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json) Hash identifier: EJOhcgkSdOCkU5JH6DLAjhJ+deEwmHmb6XDbAOGvbPY= Subject key identifier: DC:5C:C7:5F:D9:76:1D:11:40:06:1F:9F:6F:8E:85:0B:62:CA:CE:1E Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 31B7C25294147AF7E54A2E5D55269C7E242F102E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft Manifest number: 07 Signing time: Wed 13 May 2026 00:25:49 +0000 Manifest this update: Wed 13 May 2026 00:20:49 +0000 Manifest next update: Thu 14 May 2026 01:20:49 +0000 Files and hashes: 1: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=) 2: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=) 3: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=) 4: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=) 5: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: GCFex6NcXjBTsyxefyULHcuDfzppHQ/4Syg3zcOdSzg=) 6: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b7:c2:52:94:14:7a:f7:e5:4a:2e:5d:55:26:9c:7e:24:2f:10:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: May 13 00:20:49 2026 GMT Not After : May 14 01:20:49 2026 GMT Subject: CN=DC5CC75FD9761D1140061F9F6F8E850B62CACE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:b4:84:b8:bb:4b:9b:1a:69:3b:86:2d:d0: da:8d:4b:bf:70:7a:38:8e:e2:13:fa:3c:86:46:89: 7c:48:73:8c:2b:15:18:bb:25:d7:03:35:14:f3:31: 37:2f:dd:9f:66:8e:36:5b:47:a9:3a:79:86:8d:75: 7a:28:29:b5:8d:c2:37:6b:c7:ff:49:99:37:99:90: f2:b8:a6:d7:c5:f4:cc:01:24:de:86:db:c7:4a:fc: fe:0d:27:fd:89:9f:64:41:9a:61:9f:8c:83:fb:dc: a4:1a:33:74:5d:e8:29:54:ad:42:4c:05:09:c3:66: 19:8d:65:41:b8:94:67:78:02:9b:27:f9:f7:c3:44: c7:32:0b:95:6d:66:14:ed:2b:90:ba:d0:83:2a:72: 2c:67:57:85:a3:cd:9d:a6:87:69:3d:db:d6:cb:6d: 02:fc:0c:25:64:77:77:0a:7a:82:cc:bf:fe:09:2b: 6b:91:97:b9:a7:63:a4:bd:4c:2f:3b:28:73:a8:ef: 5d:91:19:a8:85:59:16:62:c7:72:a8:aa:f4:ab:8c: 28:a3:a8:2d:6e:43:1a:27:75:85:de:be:dd:91:78: da:1c:f7:66:2b:d6:d7:36:05:2c:4f:ce:1d:42:22: 26:52:44:7e:71:eb:f7:06:fd:8e:df:76:cc:74:e7: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5C:C7:5F:D9:76:1D:11:40:06:1F:9F:6F:8E:85:0B:62:CA:CE:1E X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:2a:d4:a6:dc:ca:ca:32:75:7b:aa:04:1e:e4:54:33:31:e2: b2:34:e3:50:d5:da:b4:b7:89:89:ff:f4:e1:ed:a3:25:22:e4: 81:90:00:f7:57:cf:1f:a2:1d:ca:05:1a:58:a5:f4:f9:40:53: b1:4e:49:6f:ab:0b:b9:f6:2b:5b:3f:38:b2:dc:c2:51:f0:9b: 75:db:03:8f:b6:66:2c:e2:17:55:1b:df:e8:5a:67:67:72:66: bf:24:b4:8d:0b:9f:cb:39:b9:97:a0:40:59:d8:29:65:e1:b5: 79:e3:64:a5:82:b6:98:81:38:7a:fc:c6:df:92:e1:1e:e7:1c: b1:f2:a2:a8:39:54:cb:a0:6b:96:c3:a8:c9:ae:02:14:d0:d1: 6b:ef:49:56:d3:77:55:d8:d9:cf:89:ba:82:bd:36:6f:c0:cf: f1:b4:0b:b7:68:ba:fe:2a:9b:5d:f9:3d:18:ab:01:bb:92:5c: 1e:01:3d:c8:79:e7:fb:3a:b6:de:e8:2e:b8:ef:d1:dc:c5:ef: 59:1b:a2:2e:7a:b8:60:9a:22:09:45:6c:f5:44:ea:f7:22:47: af:ca:47:fc:23:4b:6e:d5:6f:a1:0a:7f:c1:20:85:f2:d9:9f: af:a7:55:5c:af:5c:d1:66:24:f9:ce:72:76:40:07:73:74:46: 04:26:16:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMbfCUpQUevflSi5dVSacfiQvEC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjA1MTMwMDIwNDlaFw0yNjA1MTQwMTIwNDlaMDMxMTAvBgNV BAMTKERDNUNDNzVGRDk3NjFEMTE0MDA2MUY5RjZGOEU4NTBCNjJDQUNFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDLSEuLtLmxppO4Yt0NqNS79w ejiO4hP6PIZGiXxIc4wrFRi7JdcDNRTzMTcv3Z9mjjZbR6k6eYaNdXooKbWNwjdr x/9JmTeZkPK4ptfF9MwBJN6G28dK/P4NJ/2Jn2RBmmGfjIP73KQaM3Rd6ClUrUJM BQnDZhmNZUG4lGd4Apsn+ffDRMcyC5VtZhTtK5C60IMqcixnV4WjzZ2mh2k929bL bQL8DCVkd3cKeoLMv/4JK2uRl7mnY6S9TC87KHOo712RGaiFWRZix3KoqvSrjCij qC1uQxondYXevt2ReNoc92Yr1tc2BSxPzh1CIiZSRH5x6/cG/Y7fdsx052iHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3FzHX9l2HRFABh+fb46FC2LKzh4wHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2 NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtirUptzKyjJ1 e6oEHuRUMzHisjTjUNXatLeJif/04e2jJSLkgZAA91fPH6IdygUaWKX0+UBTsU5J b6sLufYrWz84stzCUfCbddsDj7ZmLOIXVRvf6FpnZ3JmvyS0jQufyzm5l6BAWdgp ZeG1eeNkpYK2mIE4evzG35LhHuccsfKiqDlUy6BrlsOoya4CFNDRa+9JVtN3VdjZ z4m6gr02b8DP8bQLt2i6/iqbXfk9GKsBu5JcHgE9yHnn+zq23uguuO/R3MXvWRui Lnq4YJoiCUVs9UTq9yJHr8pH/CNLbtVvoQp/wSCF8tmfr6dVXK9c0WYk+c5ydkAH c3RGBCYWhw== -----END CERTIFICATE-----Generated at Wed May 13 12:40:27 2026 by rpki-client