$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: ZTHRd8asz1j4+SUWvNB4HpQt1nJmRlBtDOpqaWw5Pjg= Subject key identifier: 87:72:5C:F3:96:DD:40:D6:37:F4:27:7D:62:99:BD:EC:AC:6D:14:E3 Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 1159577C595F2D855A07DA92B80F7BC9F8B2EE00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: 45 Signing time: Fri 29 May 2026 17:13:03 +0000 Manifest this update: Fri 29 May 2026 17:08:03 +0000 Manifest next update: Sat 30 May 2026 18:44:03 +0000 Files and hashes: 1: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: M/hu05DEOIdmLjo56jnIoDy4NORg3576QboT6UEyDss=) 2: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) 3: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) 4: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:59:57:7c:59:5f:2d:85:5a:07:da:92:b8:0f:7b:c9:f8:b2:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: May 29 17:08:03 2026 GMT Not After : May 30 18:44:03 2026 GMT Subject: CN=87725CF396DD40D637F4277D6299BDECAC6D14E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:4d:d5:01:ba:1f:97:f4:68:a1:12:12:88: 48:d2:2a:7a:e2:ba:1f:92:de:26:70:49:2b:3f:d9: b5:84:d1:de:c5:b2:f8:df:3c:ef:30:aa:f3:d4:9c: d2:62:2b:bd:4d:50:9d:58:52:42:fc:6f:a6:10:c6: 49:cd:92:5b:8f:d1:81:6f:6a:9d:98:5c:0c:7b:88: cb:23:01:3d:5c:c0:5f:09:10:68:33:01:4f:4a:ed: fd:fc:bf:d7:b9:4d:a2:88:b8:56:dc:2d:e2:e2:09: a2:93:92:54:35:15:aa:dd:ca:29:86:a0:6c:fd:9d: 9d:42:71:a3:af:bb:d9:35:63:4a:15:89:04:6f:7e: 99:b2:b4:ec:b4:4c:1e:b2:49:40:95:ee:76:83:37: e5:f0:62:e5:9c:6a:75:73:bd:55:1f:41:4d:4f:e8: 3e:ef:1e:1c:93:89:a0:97:95:23:5e:6c:ff:4a:bd: 12:6d:a4:cf:09:76:fd:7a:67:95:43:47:7a:b1:34: 31:07:1d:f5:9a:3a:6e:dd:23:ec:81:59:24:4c:63: 2d:e7:ed:39:37:1b:b2:a1:62:fc:98:ca:dc:73:a8: 4f:f7:77:c9:cf:44:a4:ce:75:49:25:97:b4:b6:8c: 26:b3:f4:7a:ad:13:e3:ca:1f:8b:18:b7:91:a4:58: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:72:5C:F3:96:DD:40:D6:37:F4:27:7D:62:99:BD:EC:AC:6D:14:E3 X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:99:fe:27:8c:f2:f6:35:ba:f4:e6:6b:49:e3:15:f4:ad:de: 9e:1e:85:92:73:f7:93:c0:86:da:cb:f3:23:94:1f:74:4c:e4: e8:a6:4f:3d:38:cf:94:5b:a1:55:2b:88:78:e1:d1:fe:d8:2d: 0e:11:56:3f:35:68:3c:43:f4:ff:25:35:5f:c5:a7:1e:c7:80: 94:4a:11:ce:8a:c0:88:88:b8:80:ae:2b:d8:ae:f0:bf:0f:b2: 06:50:a0:ec:ee:a0:6b:62:4a:e8:e0:85:9e:0e:51:1e:d7:46: b0:16:f1:32:7b:87:e1:d0:5c:35:e9:fb:04:51:e1:53:2e:7e: 63:79:0a:f2:b1:92:aa:c1:21:ff:63:d2:a3:aa:e6:b9:60:47: ad:ab:43:24:5d:84:2e:7a:42:02:04:0d:f5:cf:3b:17:0d:88: 24:6f:99:02:a5:10:6a:fe:60:39:82:a3:d4:22:b3:ad:e5:6a: 81:a0:09:ac:45:4f:ea:cd:90:35:6f:b3:86:9c:9a:e7:d8:d1: 45:7e:a8:a5:d1:c7:36:3a:62:34:bd:e6:c0:c6:db:f5:f6:9f: 78:44:20:e1:32:81:ca:b2:03:68:32:a7:47:2f:67:48:e5:a4: 5d:63:d4:f7:69:78:c8:84:69:d1:14:3c:08:27:9f:58:ce:e5: 6f:ba:54:10 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEVlXfFlfLYVaB9qSuA97yfiy7gAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA1MjkxNzA4MDNaFw0yNjA1MzAxODQ0MDNaMDMxMTAvBgNV BAMTKDg3NzI1Q0YzOTZERDQwRDYzN0Y0Mjc3RDYyOTlCREVDQUM2RDE0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZE3VAbofl/RooRISiEjSKnri uh+S3iZwSSs/2bWE0d7FsvjfPO8wqvPUnNJiK71NUJ1YUkL8b6YQxknNkluP0YFv ap2YXAx7iMsjAT1cwF8JEGgzAU9K7f38v9e5TaKIuFbcLeLiCaKTklQ1FardyimG oGz9nZ1CcaOvu9k1Y0oViQRvfpmytOy0TB6ySUCV7naDN+XwYuWcanVzvVUfQU1P 6D7vHhyTiaCXlSNebP9KvRJtpM8Jdv16Z5VDR3qxNDEHHfWaOm7dI+yBWSRMYy3n 7Tk3G7KhYvyYytxzqE/3d8nPRKTOdUkll7S2jCaz9HqtE+PKH4sYt5GkWA+XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh3Jc85bdQNY39Cd9Ypm97KxtFOMwHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJn+J4zy9jW6 9OZrSeMV9K3enh6FknP3k8CG2svzI5QfdEzk6KZPPTjPlFuhVSuIeOHR/tgtDhFW PzVoPEP0/yU1X8WnHseAlEoRzorAiIi4gK4r2K7wvw+yBlCg7O6ga2JK6OCFng5R HtdGsBbxMnuH4dBcNen7BFHhUy5+Y3kK8rGSqsEh/2PSo6rmuWBHratDJF2ELnpC AgQN9c87Fw2IJG+ZAqUQav5gOYKj1CKzreVqgaAJrEVP6s2QNW+zhpya59jRRX6o pdHHNjpiNL3mwMbb9fafeEQg4TKByrIDaDKnRy9nSOWkXWPU92l4yIRp0RQ8CCef WM7lb7pUEA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:22 2026 by rpki-client