$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json) Hash identifier: bSbSG1PQBH8YMyrNzkhMLv29QGUNFlfHAs+DrFigqkU= Subject key identifier: B9:0E:6F:11:9A:81:FD:13:03:25:77:07:A0:23:54:DD:BD:A3:6E:F5 Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Certificate serial: 70F5FDEDE388156F87EC930F0B81289343426097 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft Manifest number: 04 Signing time: Wed 13 May 2026 03:05:54 +0000 Manifest this update: Wed 13 May 2026 03:00:54 +0000 Manifest next update: Thu 14 May 2026 07:02:54 +0000 Files and hashes: 1: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=) 2: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=) 3: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=) 4: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=) 5: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: k+pS89YD4go7S1Dz6wRh1Pg39A61qQNGv5h0bJf7uZY=) 6: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f5:fd:ed:e3:88:15:6f:87:ec:93:0f:0b:81:28:93:43:42:60:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Validity Not Before: May 13 03:00:54 2026 GMT Not After : May 14 07:02:54 2026 GMT Subject: CN=B90E6F119A81FD1303257707A02354DDBDA36EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:20:44:bc:b6:01:07:e5:0c:7f:5f:ec:b6: b6:ca:f1:9f:4f:69:7c:96:18:fe:f2:17:5f:be:1b: 54:ab:67:90:a8:e5:e1:23:8e:35:83:97:31:8b:1d: 84:df:dc:0e:1e:41:b6:28:35:26:37:50:4c:b1:4e: a0:c2:78:82:b2:6d:d9:5e:72:4d:e0:1a:b4:65:5e: 20:88:7e:02:d9:cc:f9:43:49:87:4f:bb:b2:01:32: 4e:ce:50:a5:1c:74:dd:01:e9:f3:8e:b4:14:82:ae: ba:40:9b:b4:23:59:d1:53:a6:00:14:98:c2:88:be: 6a:43:0c:2d:3b:d1:8f:ca:08:c7:6f:39:bf:1a:bc: 43:a0:7c:c8:e5:01:97:3c:86:c7:41:37:d6:a8:1c: de:6d:95:a5:fd:3c:92:17:46:4f:37:87:b0:6c:41: b9:19:83:10:a2:3a:18:1b:b4:2e:5e:4b:87:bb:af: 84:9d:be:33:2d:b0:dc:d5:b6:4e:62:04:54:89:28: 73:3e:3c:2c:66:28:c5:02:bf:07:63:4b:d1:e3:c1: 02:7c:9b:71:dd:0d:ac:60:6b:6b:f4:58:78:4c:72: 11:fd:19:92:79:68:73:67:d1:83:99:63:ac:56:ee: 7c:a2:03:a6:ad:d4:2b:ef:fe:99:52:99:f3:e8:c5: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:6F:11:9A:81:FD:13:03:25:77:07:A0:23:54:DD:BD:A3:6E:F5 X509v3 Authority Key Identifier: keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:37:ce:95:74:5f:26:dd:3d:65:50:28:74:92:b7:ee:87:9a: 6a:fc:fb:7a:69:16:f2:6b:91:1e:a6:8d:19:48:bf:36:7c:b4: a0:12:6b:56:ed:61:02:63:5e:7a:6a:a2:73:7d:05:8d:c2:79: 2d:86:65:80:e0:81:9c:b8:d1:de:d8:4a:bb:5d:56:93:88:aa: 7b:e0:7d:3a:3f:48:43:ab:85:72:4e:c1:dd:c9:1a:a5:e3:44: 28:b3:89:88:1e:bc:12:ee:f7:49:0c:8c:fd:c1:b9:e5:1e:b2: 4a:02:b2:3f:d1:59:92:0b:57:a1:cb:a3:ba:2c:f2:b7:c9:6f: 19:77:d8:a8:a9:61:0c:93:40:77:d2:87:30:a6:0e:34:00:0c: c6:67:79:05:5b:78:1a:05:0b:59:2e:d9:44:5c:11:32:2c:81: cb:02:f8:6c:48:81:f1:94:77:f7:5b:be:2e:7e:92:fc:5e:2a: 90:af:86:b0:75:a8:9f:fb:ce:44:04:d0:ea:8e:24:3f:db:8f: 9a:90:50:68:f6:35:11:c8:45:03:56:7b:13:92:8b:34:07:b3: 46:09:21:90:ac:12:c2:e0:51:4e:ec:de:dc:8a:2c:84:20:4d: 2f:3d:73:c5:02:63:f8:0a:b1:08:ab:f5:6e:a3:44:17:f9:62: 7c:05:a1:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcPX97eOIFW+H7JMPC4Eok0NCYJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0 ODFDQzdEOTAeFw0yNjA1MTMwMzAwNTRaFw0yNjA1MTQwNzAyNTRaMDMxMTAvBgNV BAMTKEI5MEU2RjExOUE4MUZEMTMwMzI1NzcwN0EwMjM1NEREQkRBMzZFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/yBEvLYBB+UMf1/strbK8Z9P aXyWGP7yF1++G1SrZ5Co5eEjjjWDlzGLHYTf3A4eQbYoNSY3UEyxTqDCeIKybdle ck3gGrRlXiCIfgLZzPlDSYdPu7IBMk7OUKUcdN0B6fOOtBSCrrpAm7QjWdFTpgAU mMKIvmpDDC070Y/KCMdvOb8avEOgfMjlAZc8hsdBN9aoHN5tlaX9PJIXRk83h7Bs QbkZgxCiOhgbtC5eS4e7r4SdvjMtsNzVtk5iBFSJKHM+PCxmKMUCvwdjS9HjwQJ8 m3HdDaxga2v0WHhMchH9GZJ5aHNn0YOZY6xW7nyiA6at1Cvv/plSmfPoxUijAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuQ5vEZqB/RMDJXcHoCNU3b2jbvUwHwYDVR0j BBgwFoAUwikPL2FZ8cjBRq6cZGm/vEgcx9kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUxNjExNDk2OTQ2MDc1NS8wL0MyMjkwRjJGNjE1OUYxQzhDMTQ2QUU5QzY0NjlC RkJDNDgxQ0M3RDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0ODFDQzdEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MTYxMTQ5Njk0NjA3NTUvMC9DMjI5MEYyRjYxNTlG MUM4QzE0NkFFOUM2NDY5QkZCQzQ4MUNDN0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajfOlXRfJt09 ZVAodJK37oeaavz7emkW8muRHqaNGUi/Nny0oBJrVu1hAmNeemqic30FjcJ5LYZl gOCBnLjR3thKu11Wk4iqe+B9Oj9IQ6uFck7B3ckapeNEKLOJiB68Eu73SQyM/cG5 5R6ySgKyP9FZkgtXocujuizyt8lvGXfYqKlhDJNAd9KHMKYONAAMxmd5BVt4GgUL WS7ZRFwRMiyBywL4bEiB8ZR391u+Ln6S/F4qkK+GsHWon/vORATQ6o4kP9uPmpBQ aPY1EchFA1Z7E5KLNAezRgkhkKwSwuBRTuze3IoshCBNLz1zxQJj+AqxCKv1bqNE F/lifAWhXA== -----END CERTIFICATE-----Generated at Wed May 13 10:32:53 2026 by rpki-client