$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft File: C1686602F57C97BDB7058DB5F05623F79F733F08.mft (raw, json) Hash identifier: 5eI3pyol9EJHATutSRKRLYH3OqqhBUsGgjsspt5cZHI= Subject key identifier: E7:F6:03:96:DE:2F:A4:D8:5C:6F:46:C8:5F:BC:F9:13:42:41:60:49 Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 Certificate issuer: /CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Certificate serial: 5001516BB7A0CCC51AFEE10EA1EC95B7A81520EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft Manifest number: 02 Signing time: Wed 13 May 2026 09:21:04 +0000 Manifest this update: Wed 13 May 2026 09:16:04 +0000 Manifest next update: Thu 14 May 2026 10:20:04 +0000 Files and hashes: 1: 35392e3135332e3131362e302f32322d3232203d3e203633363230.roa (hash: 7R0HqxHOl8psiPTmoioP+yiWqxO71oxXvgRWvUwoxqQ=) 2: C1686602F57C97BDB7058DB5F05623F79F733F08.crl (hash: ck8GLR2SKfFBrawsjWx+rhtEzbjSPo8BgwjWGkufthQ=) 3: 3130332e37302e3232302e302f32322d3232203d3e203633363230.roa (hash: 3qFSuhseOlQYOClfmoRUWVSL78nGJzbZToh19IkyDe0=) 4: 323430363a336438303a3a2f33322d3332203d3e203633363230.roa (hash: S7ogy1GUCLHfddt1QMmppgk2+axfyM/l/Np8aUOiq9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:01:51:6b:b7:a0:cc:c5:1a:fe:e1:0e:a1:ec:95:b7:a8:15:20:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Validity Not Before: May 13 09:16:04 2026 GMT Not After : May 14 10:20:04 2026 GMT Subject: CN=E7F60396DE2FA4D85C6F46C85FBCF91342416049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:c2:3c:1c:52:87:c6:f7:d2:c8:26:a1:8b: b7:78:4e:6b:ad:d2:44:2d:dd:d4:b9:0d:e8:47:96: b3:51:38:6e:19:9f:b1:5d:81:08:62:8a:94:58:61: c1:a2:4c:6a:93:6c:ba:31:d6:22:62:19:ab:4f:03: 9f:88:31:8b:ad:b7:93:ac:c2:f5:0d:50:8e:85:76: 24:46:9b:11:5a:8f:99:a0:b8:6f:9b:1d:95:5e:be: 2c:5a:35:59:47:27:9c:a4:55:fe:de:c4:e8:1f:af: a1:e9:e9:51:e6:fb:43:71:16:6f:df:0b:01:c5:53: b7:d6:70:6c:f2:78:42:04:e8:9c:ff:f6:33:45:07: 3c:ef:8f:d6:e1:26:b9:aa:0e:e5:fb:38:94:27:53: 45:45:93:4c:e8:29:57:a8:f4:b6:33:de:2e:e2:f8: f2:b8:4b:ee:12:c2:a1:f9:cb:25:ea:4e:87:b1:23: 96:e8:14:31:af:5b:c7:7d:f9:99:25:ff:df:f4:fe: a8:0b:d7:2c:7b:f2:33:d3:76:1e:fc:8f:0d:89:2a: a5:b2:d9:07:76:39:54:be:2e:0e:9f:f4:52:5d:d8: 8e:67:02:06:a5:3d:17:4f:fd:0c:64:92:45:7b:85: bc:df:69:e8:e9:5c:92:2a:90:46:16:b8:d7:07:5e: de:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F6:03:96:DE:2F:A4:D8:5C:6F:46:C8:5F:BC:F9:13:42:41:60:49 X509v3 Authority Key Identifier: keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:df:64:5a:14:8b:44:c4:fb:20:9c:b7:74:9d:55:76:cc:ee: a1:4b:5e:28:15:2d:1b:bd:37:23:22:ae:48:04:d3:cd:ce:7b: 02:b1:74:72:1d:eb:94:d2:e0:3a:f1:0e:c1:c3:ad:91:d3:60: b9:8f:d7:f8:b0:ac:ee:48:6b:e7:01:30:2b:d4:f7:96:c6:18: f1:47:1d:f1:52:66:15:70:c2:31:80:ff:ea:ff:6c:4d:3b:95: e3:0f:c6:b4:9d:83:4f:bf:c3:a1:5b:d2:df:13:b5:3f:49:60: 4a:f4:a3:22:2e:85:25:ed:45:15:1d:34:24:78:1b:d0:9f:03: 59:22:35:6e:1b:3b:4a:11:30:c2:44:29:24:fa:b8:a0:43:4f: 62:66:ba:d4:13:28:90:2b:7e:d9:64:89:3a:80:36:39:8c:5a: 00:d6:41:25:ce:9c:18:aa:32:d4:cc:17:b9:ac:d2:1d:cd:13: 12:a5:87:d3:cf:db:07:f1:d1:9a:0f:36:75:93:37:33:ec:6b: e1:fe:6c:ff:32:d4:4d:44:f8:30:74:a1:53:f3:3d:4f:07:77: 8b:66:df:84:34:98:82:b9:e4:8d:df:83:1c:b3:00:0e:52:81: 59:eb:c2:79:1a:41:cc:58:0f:3d:6e:e6:1e:6c:53:32:f2:de: 7e:59:42:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUAFRa7egzMUa/uEOoeyVt6gVIO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5 RjczM0YwODAeFw0yNjA1MTMwOTE2MDRaFw0yNjA1MTQxMDIwMDRaMDMxMTAvBgNV BAMTKEU3RjYwMzk2REUyRkE0RDg1QzZGNDZDODVGQkNGOTEzNDI0MTYwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+S8I8HFKHxvfSyCahi7d4Tmut 0kQt3dS5DehHlrNROG4Zn7FdgQhiipRYYcGiTGqTbLox1iJiGatPA5+IMYutt5Os wvUNUI6FdiRGmxFaj5mguG+bHZVevixaNVlHJ5ykVf7exOgfr6Hp6VHm+0NxFm/f CwHFU7fWcGzyeEIE6Jz/9jNFBzzvj9bhJrmqDuX7OJQnU0VFk0zoKVeo9LYz3i7i +PK4S+4SwqH5yyXqToexI5boFDGvW8d9+Zkl/9/0/qgL1yx78jPTdh78jw2JKqWy 2Qd2OVS+Lg6f9FJd2I5nAgalPRdP/QxkkkV7hbzfaejpXJIqkEYWuNcHXt4BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5/YDlt4vpNhcb0bIX7z5E0JBYEkwHwYDVR0j BBgwFoAUwWhmAvV8l723BY218FYj959zPwgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDEwODgxOS8wL0MxNjg2NjAyRjU3Qzk3QkRCNzA1OERCNUYwNTYy M0Y3OUY3MzNGMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5RjczM0YwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAxMDg4MTkvMC9DMTY4NjYwMkY1N0M5 N0JEQjcwNThEQjVGMDU2MjNGNzlGNzMzRjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWN9kWhSLRMT7 IJy3dJ1VdszuoUteKBUtG703IyKuSATTzc57ArF0ch3rlNLgOvEOwcOtkdNguY/X +LCs7khr5wEwK9T3lsYY8Ucd8VJmFXDCMYD/6v9sTTuV4w/GtJ2DT7/DoVvS3xO1 P0lgSvSjIi6FJe1FFR00JHgb0J8DWSI1bhs7ShEwwkQpJPq4oENPYma61BMokCt+ 2WSJOoA2OYxaANZBJc6cGKoy1MwXuazSHc0TEqWH08/bB/HRmg82dZM3M+xr4f5s /zLUTUT4MHShU/M9Twd3i2bfhDSYgrnkjd+DHLMADlKBWevCeRpBzFgPPW7mHmxT MvLefllCGA== -----END CERTIFICATE-----Generated at Wed May 13 20:55:08 2026 by rpki-client