$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft File: C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft (raw, json) Hash identifier: O/Y9/hZh/RpUngRV8xEpQ/mymlpwQczzaVJjDhYkHRk= Subject key identifier: B7:E2:CD:3F:4E:76:C6:2B:19:B0:21:7A:26:85:00:4A:10:2A:AF:35 Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Certificate serial: 0A338E362F625CD992227AC0CAAE4AC9F3CBDDCE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft Manifest number: 0A Signing time: Wed 13 May 2026 02:37:04 +0000 Manifest this update: Wed 13 May 2026 02:32:04 +0000 Manifest next update: Thu 14 May 2026 06:26:04 +0000 Files and hashes: 1: C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl (hash: wjWQEk6JhDkV/5Pv4s3R6TA/0euUa02ItiEL4YAqAPY=) 2: 3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa (hash: scGhEFxgH/ByJtrtN2ud+ajw7/RRYqrFOrOwg0+UZ/Y=) 3: 3130312e3139382e3138372e302f32342d3234203d3e203535393932.roa (hash: gwZSyam7qczfq7xPisJsM8i1pn3x4wAGWjUkQMmUPfk=) 4: 3130312e3139382e3230302e302f32322d3232203d3e203535393932.roa (hash: 3jZZIGgHNNPdExy6+4ba6lwGGqONFoWQ+/8Ou/P8x7Q=) 5: 3130312e3139382e3137322e302f32322d3232203d3e203535393932.roa (hash: 5Kb1min/2rIHSsm+B1D1d89sBXIwJ4FnSzTWz8KufBE=) 6: 3130312e3139382e3138302e302f32322d3232203d3e203535393932.roa (hash: rkrYae0XoBZeFBWjHIkdRXy907nfouGrDmL2Z7ZxpOc=) 7: 3130312e3139382e3137362e302f32322d3232203d3e203535393932.roa (hash: fCjsOZtnw4nGDn9abm6owAHPuFVqkWmA5M7Dcbm5+hM=) 8: 3130312e3139382e3138392e302f32342d3234203d3e203535393932.roa (hash: WkSTH3diUKPM7YeEWlFR4Botaw/ZnICgxutTYj7QYMo=) 9: 3130312e3139382e3137302e302f32332d3233203d3e203535393932.roa (hash: fmXSeYFH7IWYbDtIisi+JYVD1ikJPF7fXdnqpi8Ww2U=) 10: 3130312e3139382e3138362e302f32332d3233203d3e203535393932.roa (hash: Uvod8dBdbsXZksgUTaLPKnNSQB2Vac2SLIXlL+Cd+qc=) 11: 3130312e3139382e3138342e302f32342d3234203d3e203535393932.roa (hash: xkLXXhh6dA+NUe5FBoeFBFT0Qfe21ZfH2kricSUswOM=) 12: 3130312e3139382e3137382e302f32332d3233203d3e203535393932.roa (hash: mggjl9jx41i7oUGab9P2gxy4nza4AgEYuhpfR2Sg9c0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:33:8e:36:2f:62:5c:d9:92:22:7a:c0:ca:ae:4a:c9:f3:cb:dd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Validity Not Before: May 13 02:32:04 2026 GMT Not After : May 14 06:26:04 2026 GMT Subject: CN=B7E2CD3F4E76C62B19B0217A2685004A102AAF35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:c7:e1:0b:93:37:4f:45:49:62:7c:6e:74: 2b:8e:de:92:64:8c:50:a3:48:8f:42:2e:04:1b:5f: 59:f3:84:3e:5a:ce:7b:1d:14:8a:de:86:27:18:af: 67:2e:41:4e:cb:86:64:f2:4a:4c:3c:4f:a0:ee:e9: be:1d:2b:8c:97:f1:2a:9f:7d:a8:9e:a5:2f:5f:3c: 04:a3:5e:61:7e:94:bf:3f:e7:d7:2f:fb:7c:ed:2f: a8:e8:f3:54:c1:57:f3:55:62:2d:f1:31:5e:34:11: da:73:41:a5:f5:38:0c:10:af:bd:87:47:0f:8d:bd: 4f:89:b8:a4:ee:b0:61:b2:00:a1:c2:4f:b9:85:42: 04:d1:41:18:b2:b8:59:40:17:f3:c9:9c:ae:35:0c: 7f:59:68:bc:1f:90:7f:01:f1:b9:0c:c5:da:7f:37: 8a:88:2e:98:aa:94:36:9c:f4:49:6d:b1:3b:a9:d3: 8e:7e:47:a1:fd:38:7b:22:9a:6d:a2:f6:05:e3:62: e9:b7:e6:fb:1b:dc:4c:f2:36:66:a7:84:d6:fe:e7: d6:7e:4a:c8:c4:4c:76:06:dd:0a:8c:46:18:73:85: 28:fb:7b:85:89:5e:08:d6:a6:18:f1:e6:00:e6:c2: f4:be:be:e4:24:99:f7:d3:cc:1d:14:71:00:9c:14: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:CD:3F:4E:76:C6:2B:19:B0:21:7A:26:85:00:4A:10:2A:AF:35 X509v3 Authority Key Identifier: keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e8:a4:79:2a:d8:71:4d:26:a1:7c:f2:f9:27:87:b7:5d:d5: a0:fa:33:08:8a:63:ba:5b:10:0e:bc:21:b6:d9:b6:76:64:95: 4c:52:a2:84:7c:5c:da:ef:1f:eb:bd:a9:da:2f:9d:e4:84:18: a4:c7:92:84:2c:13:b3:28:b5:5a:ae:4a:77:8a:9a:1f:88:fc: 28:be:5f:da:48:70:40:0a:fe:ed:c9:a8:2b:b3:e7:1a:7b:9c: 61:31:11:68:98:14:57:4f:9c:4a:df:55:06:d8:3c:94:b8:a3: 75:c8:0c:b0:3f:a0:9e:39:80:19:8e:11:ed:a1:74:59:e3:2c: eb:ff:79:6a:21:0c:28:62:dd:91:d4:73:16:52:de:87:72:09: 1c:3e:3d:fa:1b:16:96:ac:37:9a:e3:4a:36:ef:be:f0:c0:66: 56:5e:81:db:ad:4d:3f:b9:3e:a2:f9:e3:9f:d8:7f:ce:a6:69: ff:7b:6b:91:62:b1:35:e0:cd:31:64:01:c9:97:ff:af:30:4a: 91:69:b1:77:29:27:96:d3:1a:a0:50:04:c4:8d:2d:45:ef:e1: e5:34:8f:e4:24:82:8b:d8:69:1f:8c:d9:a4:40:1e:55:60:25: 5d:c3:71:de:60:2a:4a:90:40:43:f9:95:87:a1:9d:bb:09:82: 5a:ca:86:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCjOONi9iXNmSInrAyq5KyfPL3c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2 OUZERjk4NDAeFw0yNjA1MTMwMjMyMDRaFw0yNjA1MTQwNjI2MDRaMDMxMTAvBgNV BAMTKEI3RTJDRDNGNEU3NkM2MkIxOUIwMjE3QTI2ODUwMDRBMTAyQUFGMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzsfhC5M3T0VJYnxudCuO3pJk jFCjSI9CLgQbX1nzhD5aznsdFIrehicYr2cuQU7LhmTySkw8T6Du6b4dK4yX8Sqf faiepS9fPASjXmF+lL8/59cv+3ztL6jo81TBV/NVYi3xMV40EdpzQaX1OAwQr72H Rw+NvU+JuKTusGGyAKHCT7mFQgTRQRiyuFlAF/PJnK41DH9ZaLwfkH8B8bkMxdp/ N4qILpiqlDac9EltsTup045+R6H9OHsimm2i9gXjYum35vsb3EzyNmanhNb+59Z+ SsjETHYG3QqMRhhzhSj7e4WJXgjWphjx5gDmwvS+vuQkmffTzB0UcQCcFLgNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt+LNP052xisZsCF6JoUAShAqrzUwHwYDVR0j BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY3NjcwODQ5MjQxNzQzNTUvMC9DNTI3RUVGMjJFRDRC OTAzNDk0OUM5MUUzRDM5QjI0QTY5RkRGOTg0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeikeSrYcU0m oXzy+SeHt13VoPozCIpjulsQDrwhttm2dmSVTFKihHxc2u8f672p2i+d5IQYpMeS hCwTsyi1Wq5Kd4qaH4j8KL5f2khwQAr+7cmoK7PnGnucYTERaJgUV0+cSt9VBtg8 lLijdcgMsD+gnjmAGY4R7aF0WeMs6/95aiEMKGLdkdRzFlLeh3IJHD49+hsWlqw3 muNKNu++8MBmVl6B261NP7k+ovnjn9h/zqZp/3trkWKxNeDNMWQByZf/rzBKkWmx dyknltMaoFAExI0tRe/h5TSP5CSCi9hpH4zZpEAeVWAlXcNx3mAqSpBAQ/mVh6Gd uwmCWsqG+A== -----END CERTIFICATE-----Generated at Wed May 13 14:17:59 2026 by rpki-client