$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: yWDD9HiUw2RnzmSEB9w7WRRYyf0jcEJFLtQiCayKPRs= Subject key identifier: DF:5A:58:15:FC:AD:29:F4:01:E8:F7:80:45:E3:22:DD:24:36:64:5A Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 25937795A87B876B262B097D6539399264A61DCE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 90 Signing time: Tue 05 May 2026 00:21:25 +0000 Manifest this update: Tue 05 May 2026 00:16:25 +0000 Manifest next update: Wed 06 May 2026 04:13:25 +0000 Files and hashes: 1: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 2: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 3: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: i1CMs8BNiovO+upB2fzuwMyXm8uN1jczvPGJP5mQAn0=) 4: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 5: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 6: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) 7: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 04:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:93:77:95:a8:7b:87:6b:26:2b:09:7d:65:39:39:92:64:a6:1d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: May 5 00:16:25 2026 GMT Not After : May 6 04:13:25 2026 GMT Subject: CN=DF5A5815FCAD29F401E8F78045E322DD2436645A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:72:bd:1d:2f:f1:62:e9:d3:c2:45:1e:c6:59: af:3f:8e:d8:84:2b:c1:bf:e6:b3:e9:13:d7:7a:ff: 00:10:2d:f6:b1:b4:f9:33:e5:99:4b:2b:f6:91:71: d7:46:6f:cc:7b:07:2e:b3:e5:75:2f:f2:5b:c6:46: d4:82:4c:6d:59:d9:79:97:94:33:3b:aa:5a:a4:f7: a2:e3:2a:9a:35:dc:de:6f:7c:bb:be:7a:15:14:e1: 29:67:7b:bf:51:2f:ed:b9:45:d3:55:f2:71:c2:09: 19:42:0c:61:61:da:83:e0:05:9a:07:88:ed:e3:38: 26:40:d6:f2:90:e7:82:78:98:57:b5:b1:9e:07:91: 27:e1:77:81:de:e6:2e:07:ae:02:fc:55:c6:fd:29: 34:fd:22:68:47:2e:6f:c5:b8:52:5c:c3:be:dc:91: dc:63:18:3c:59:63:03:27:0d:37:0d:f9:a3:4a:dd: 6b:25:26:ec:83:e3:f3:01:02:8c:3e:a2:04:42:fc: 5e:bb:f8:47:e0:03:17:0d:d2:f4:6f:1c:dd:6d:34: d8:80:7d:8f:39:5b:07:96:8f:4c:f2:32:b0:9b:30: 2a:b1:4e:9d:58:ea:fe:e9:c0:b5:4b:78:3c:90:5a: e9:ab:b4:dd:bd:a9:55:66:74:d5:16:0d:77:e7:5b: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5A:58:15:FC:AD:29:F4:01:E8:F7:80:45:E3:22:DD:24:36:64:5A X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:ea:7e:ad:63:4b:1e:62:4d:7b:6b:49:c5:6f:02:4d:08:62: 5c:01:a1:8f:e1:1b:ad:b2:78:21:9a:f7:3a:48:16:f6:74:3c: 08:3b:67:35:02:e0:c5:5a:9d:eb:22:c8:67:d2:d1:e9:75:a9: 71:70:3b:19:6e:72:3f:16:54:a5:79:e5:87:cf:24:43:b3:8a: 9e:12:87:34:1e:4c:fa:ac:05:fe:af:db:a5:a3:6e:fc:4c:e5: 46:5a:c2:40:90:f7:5b:88:51:a1:36:f1:64:f3:c3:fd:c8:36: 3e:bf:65:72:33:91:a3:ed:bf:34:72:a5:f2:89:bf:94:cd:6e: fd:71:6b:54:ae:08:91:21:c9:70:f0:45:85:da:77:04:32:ea: e8:6f:23:5a:c7:50:28:a1:8b:71:21:71:11:d5:fd:e2:54:5b: 02:07:54:6c:14:2e:c7:f1:93:54:b9:88:09:09:95:80:bf:15: 5c:34:13:0c:41:6b:4f:5b:05:fe:ac:53:5d:4e:d5:b9:57:00: 04:2a:cf:74:66:9b:1d:81:06:dc:7e:fe:c6:58:39:b5:61:64: c5:97:04:97:66:96:d0:0d:ec:dd:2c:61:60:22:dc:64:00:a8: f1:41:63:d8:da:81:19:53:88:cf:7b:1f:99:74:c5:5f:4d:28: 8f:c8:c3:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJZN3lah7h2smKwl9ZTk5kmSmHc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA1MDUwMDE2MjVaFw0yNjA1MDYwNDEzMjVaMDMxMTAvBgNV BAMTKERGNUE1ODE1RkNBRDI5RjQwMUU4Rjc4MDQ1RTMyMkREMjQzNjY0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKcr0dL/Fi6dPCRR7GWa8/jtiE K8G/5rPpE9d6/wAQLfaxtPkz5ZlLK/aRcddGb8x7By6z5XUv8lvGRtSCTG1Z2XmX lDM7qlqk96LjKpo13N5vfLu+ehUU4Slne79RL+25RdNV8nHCCRlCDGFh2oPgBZoH iO3jOCZA1vKQ54J4mFe1sZ4HkSfhd4He5i4HrgL8Vcb9KTT9ImhHLm/FuFJcw77c kdxjGDxZYwMnDTcN+aNK3WslJuyD4/MBAow+ogRC/F67+EfgAxcN0vRvHN1tNNiA fY85WweWj0zyMrCbMCqxTp1Y6v7pwLVLeDyQWumrtN29qVVmdNUWDXfnWyhPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU31pYFfytKfQB6PeAReMi3SQ2ZFowHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0+p+rWNLHmJN e2tJxW8CTQhiXAGhj+EbrbJ4IZr3OkgW9nQ8CDtnNQLgxVqd6yLIZ9LR6XWpcXA7 GW5yPxZUpXnlh88kQ7OKnhKHNB5M+qwF/q/bpaNu/EzlRlrCQJD3W4hRoTbxZPPD /cg2Pr9lcjORo+2/NHKl8om/lM1u/XFrVK4IkSHJcPBFhdp3BDLq6G8jWsdQKKGL cSFxEdX94lRbAgdUbBQux/GTVLmICQmVgL8VXDQTDEFrT1sF/qxTXU7VuVcABCrP dGabHYEG3H7+xlg5tWFkxZcEl2aW0A3s3SxhYCLcZACo8UFj2NqBGVOIz3sfmXTF X00oj8jDTQ== -----END CERTIFICATE-----Generated at Tue May 5 20:12:10 2026 by rpki-client