$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: iilt5/GfDfEBdZcuOPJqW3E8bCZP2hsIZiwxY/Z037A= Subject key identifier: 97:93:96:2A:77:1A:75:A3:69:A2:C6:B8:C1:31:0B:EF:34:4A:DD:A8 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 7B9C8500C97A1740FFEDB4C4551D0BE8DAEA8005 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: AF Signing time: Fri 29 May 2026 16:58:03 +0000 Manifest this update: Fri 29 May 2026 16:53:03 +0000 Manifest next update: Sat 30 May 2026 20:30:03 +0000 Files and hashes: 1: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: ycCjYfH5RmmxUUhvGTnIa1vC/anE7mKfJUr0bCjVJ88=) 2: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 3: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 4: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 5: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 6: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9c:85:00:c9:7a:17:40:ff:ed:b4:c4:55:1d:0b:e8:da:ea:80:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: May 29 16:53:03 2026 GMT Not After : May 30 20:30:03 2026 GMT Subject: CN=9793962A771A75A369A2C6B8C1310BEF344ADDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:92:7c:82:9b:f5:85:82:59:ff:5d:5f:c7: 8c:92:c9:3f:46:5f:08:0d:1b:ed:e0:f4:a9:ed:23: 2c:3a:57:3f:3c:9b:5e:1a:d1:ee:f3:dd:c6:fd:0d: d9:40:41:19:87:0d:bf:2f:24:c0:5f:7c:52:99:02: 69:80:67:4f:82:74:c4:45:39:ca:ed:59:5e:45:84: 24:b5:dc:d6:41:85:ce:78:40:25:f5:74:ca:80:55: 4b:99:a4:30:0f:d8:52:2f:63:e1:24:02:ef:4a:30: 8b:1d:e4:8f:ac:9a:1f:f3:55:3f:0f:0f:b2:fa:68: 87:0a:5a:53:71:98:a2:da:11:af:23:66:ea:cc:c4: bf:a4:30:35:31:66:e3:75:9d:bd:25:ba:ca:79:c3: 7e:54:bf:27:fb:6f:84:25:b4:66:07:6b:1d:f9:05: 73:6b:8d:2b:9b:32:e6:26:cf:59:b9:23:30:d0:6c: 62:b0:8b:b2:b3:fb:bb:3a:0d:c6:51:b8:8b:1d:bd: ff:94:7b:ae:aa:63:ef:2c:88:3d:e2:32:ec:33:62: 8d:c9:56:14:14:d0:f3:11:7a:66:05:18:ac:f3:c6: 0c:57:89:74:f3:b9:84:65:bd:25:4a:a2:82:81:72: fe:cc:33:29:20:e4:d0:d0:30:15:9a:27:3a:84:98: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:93:96:2A:77:1A:75:A3:69:A2:C6:B8:C1:31:0B:EF:34:4A:DD:A8 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:ff:b8:bf:ee:e2:70:64:16:e5:f8:0b:2a:2a:c9:85:d9:99: 41:d6:02:34:18:07:3e:11:6a:bc:f9:de:3a:4b:ef:01:9f:e8: b8:45:e7:0a:9f:46:2b:2d:50:d5:61:a1:a3:75:b9:a8:5b:b9: 81:ec:2d:d7:20:ce:eb:c2:b6:e9:e2:c1:2f:8e:cf:a6:1f:3b: d5:17:aa:94:5a:9f:b6:b0:65:71:27:d1:00:dd:48:a2:8f:0a: 13:81:ad:63:61:f8:73:7e:cf:9c:d6:29:be:cf:9d:3c:7a:50: bd:0a:b0:37:fc:11:2c:a0:91:9b:28:ad:44:85:06:24:5c:76: 00:a6:a2:23:bc:36:fd:4f:dd:68:20:8b:8d:ad:7d:1e:e1:99: 55:b5:fd:6a:b9:c4:9a:97:ed:3d:66:6c:a0:04:c8:24:18:19: df:e9:13:9b:b3:b3:e0:a8:8f:07:15:21:bc:00:4b:e2:7a:14: 8a:bd:13:9b:07:04:48:8f:58:f0:d5:ef:52:0c:c0:6a:6b:6d: fe:40:8e:11:9d:3f:8b:39:7f:9f:50:01:a9:29:4b:c8:a3:f2: 83:91:6e:d3:41:ed:bb:61:d5:6a:a3:95:28:7d:f8:8a:cd:e2: d0:16:e0:fe:a7:61:e5:76:60:d6:52:b7:71:0f:82:37:c3:0c: e7:8c:4a:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe5yFAMl6F0D/7bTEVR0L6NrqgAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjA1MjkxNjUzMDNaFw0yNjA1MzAyMDMwMDNaMDMxMTAvBgNV BAMTKDk3OTM5NjJBNzcxQTc1QTM2OUEyQzZCOEMxMzEwQkVGMzQ0QUREQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0ZJ8gpv1hYJZ/11fx4ySyT9G XwgNG+3g9KntIyw6Vz88m14a0e7z3cb9DdlAQRmHDb8vJMBffFKZAmmAZ0+CdMRF OcrtWV5FhCS13NZBhc54QCX1dMqAVUuZpDAP2FIvY+EkAu9KMIsd5I+smh/zVT8P D7L6aIcKWlNxmKLaEa8jZurMxL+kMDUxZuN1nb0lusp5w35Uvyf7b4QltGYHax35 BXNrjSubMuYmz1m5IzDQbGKwi7Kz+7s6DcZRuIsdvf+Ue66qY+8siD3iMuwzYo3J VhQU0PMRemYFGKzzxgxXiXTzuYRlvSVKooKBcv7MMykg5NDQMBWaJzqEmJQTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl5OWKncadaNposa4wTEL7zRK3agwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzv+4v+7icGQW 5fgLKirJhdmZQdYCNBgHPhFqvPneOkvvAZ/ouEXnCp9GKy1Q1WGho3W5qFu5gewt 1yDO68K26eLBL47Pph871ReqlFqftrBlcSfRAN1Ioo8KE4GtY2H4c37PnNYpvs+d PHpQvQqwN/wRLKCRmyitRIUGJFx2AKaiI7w2/U/daCCLja19HuGZVbX9arnEmpft PWZsoATIJBgZ3+kTm7Oz4KiPBxUhvABL4noUir0TmwcESI9Y8NXvUgzAamtt/kCO EZ0/izl/n1ABqSlLyKPyg5Fu00Htu2HVaqOVKH34is3i0Bbg/qdh5XZg1lK3cQ+C N8MM54xKPA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:20 2026 by rpki-client