$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft File: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json) Hash identifier: uG92V6v/IFALFcYwjcPscEplGZSxiT6RRnYd1uDtOOs= Subject key identifier: 53:C9:36:7A:42:42:E4:AB:82:F7:DF:F0:E8:06:7F:E6:3C:6F:92:24 Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4 Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4 Certificate serial: 2A8AC3AF596BFC9A0437E33F54EFD2E9C0DF73F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft Manifest number: 02AC Signing time: Thu 21 May 2026 08:06:12 +0000 Manifest this update: Thu 21 May 2026 08:01:12 +0000 Manifest next update: Fri 22 May 2026 11:59:12 +0000 Files and hashes: 1: AS134810.roa (hash: F0rC88P0kP7/diiVfvqbrQU+TH+tYavlUt81NN5oOYs=) 2: AS56046.roa (hash: G57xoSmV3d3oL1M2b7TcQzvJbXBS68r1SOFK/hffVU0=) 3: AS56045.roa (hash: BXiQ73bYnIPzvweJ3MG4TbzdPHqtAxi44Bh8ZonaiBA=) 4: AS24547.roa (hash: i+FfhIhPn4lWH3Kbmm241D2YEkcshr6T6ZEePSUPnLg=) 5: AS140105.roa (hash: 4CoCTTMS/eeu0EpGjk4DxYUflM1XsLpulc5dXV5pH28=) 6: AS56047.roa (hash: 3V1gbU+6Bdba783idzKM5G47Je/1rV8dlG4NS9xzi2Q=) 7: AS24444.roa (hash: bj4nNc0sL2ZVkEgbqfQ1FEhzkIw4xKEHPn9eUq4lwhE=) 8: AS56041.roa (hash: rdRoaU9bg99l9uwYVwCC9cGW64/8233w1TVQaVkfISc=) 9: AS138407.roa (hash: mdEstKPY1PmZmoFkGYyReJHsModWrzGLYeFCK9C526M=) 10: AS139080.roa (hash: 0FkJ+X+G0MS/Skou8Id8N9zGTkmyNJNJJkepvNEoaMQ=) 11: AS56044.roa (hash: iMn3j2h1N9hlu1Bzfj5oXgesd0wBlyGhElVlD25SXhI=) 12: AS56040.roa (hash: vYBGbbP5aHagwp0WcUCyc0Q/bXmWV8kEfjt5BBc/F/g=) 13: AS56042.roa (hash: wdHRqSk+KVgQ6JXF4VSjcPxI7skPMMBfA1drhM+bJpA=) 14: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: nlQR3+QnSutQqE1+WgTYIt3mpp7SGEUt2J2PlvLmhUY=) 15: AS9808.roa (hash: JXDR3lldh6yj3stekGrPSYi4GrkgLg2BXBTYFdchY+8=) 16: AS24445.roa (hash: cIvggsN8SRwfzAabGDa6XI5Nq08NtpONSqpVduw5uRc=) 17: AS141425.roa (hash: Ft3gcPRgzZF03pcET2Hfk5NMcpdzVu8lQnP+RR6WRYA=) 18: AS132510.roa (hash: RCGN4bjUzpiUIrzZWsR3QRUgYUOWLIfyyglTNJhkRoo=) 19: AS132525.roa (hash: 8IB0CwTotR8AId5ZT71gxeyEU6Li0YdV++X2zglR978=) 20: AS38019.roa (hash: FdVBqrSZCNMzyIGNZfKptOmc0gPpcrb/61h7Ab+ovps=) 21: AS24400.roa (hash: pajZgsXSCAUxq+mEYE0FACzVEuCULxjHQPRzJEx6Xqg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 11:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8a:c3:af:59:6b:fc:9a:04:37:e3:3f:54:ef:d2:e9:c0:df:73:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4 Validity Not Before: May 21 08:01:12 2026 GMT Not After : May 22 11:59:12 2026 GMT Subject: CN=53C9367A4242E4AB82F7DFF0E8067FE63C6F9224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7a:a8:ce:62:e9:36:63:9e:5d:c8:40:18:26: cb:cc:ae:c8:1b:32:2c:32:31:bf:b9:fa:13:f4:09: 9b:38:37:c1:34:d1:7f:31:cd:ec:4e:94:39:a5:e3: f2:a0:a8:4a:04:d9:34:67:c9:64:1f:51:23:de:29: a1:77:e5:a7:23:e5:76:3b:be:94:7f:60:5b:a8:a3: e6:85:d4:13:83:d1:36:44:96:0f:97:50:8d:f1:2e: 7b:54:8a:a3:d4:f5:bd:10:84:06:3d:b5:36:be:a3: 2d:df:a6:23:e2:24:8d:a7:76:2d:31:99:24:3a:bf: 19:bc:cf:f9:e5:3a:21:be:13:02:bc:e8:ea:66:3b: d4:51:19:a6:b2:8e:89:96:6a:02:f1:62:ff:1e:cd: 1a:9f:40:3b:10:c3:7a:78:11:3d:ee:c6:91:40:ec: 35:44:89:6b:2c:2a:b2:13:55:6c:2a:68:34:7d:32: 51:7b:31:15:7a:4d:e4:3a:5a:30:d2:2b:9c:96:79: 84:76:80:f0:6a:c1:0f:af:07:9b:de:3d:9f:20:36: 26:0d:94:09:10:4d:b8:bd:36:c2:dd:0b:44:65:ed: 68:6c:69:b8:a1:5a:0e:a2:d6:91:7a:8d:4b:8a:8b: 4f:58:0f:0c:a4:55:c8:a0:02:48:9d:a6:e2:3c:4e: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C9:36:7A:42:42:E4:AB:82:F7:DF:F0:E8:06:7F:E6:3C:6F:92:24 X509v3 Authority Key Identifier: keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5b:5d:75:e6:fa:05:33:a7:16:01:f0:a0:45:ba:89:c3:43: 00:ff:aa:63:8c:1c:71:b7:9c:30:da:38:60:e0:6b:3f:96:1b: b8:07:66:c8:34:60:9e:d8:8c:c9:72:ef:d9:08:07:9c:2a:bb: 44:aa:ad:2b:55:b3:e3:6b:b6:12:c7:8c:de:61:30:60:23:a7: 88:98:94:c5:68:f9:3c:2d:8e:5a:84:73:fd:bc:e2:41:cc:72: 2a:c7:bc:d4:a5:ba:92:3d:e4:44:8b:8b:1e:e0:6f:a9:fd:80: dc:57:80:27:0d:4c:eb:57:36:6f:a4:52:e8:05:a4:62:9b:e6: bc:35:29:81:cd:a2:62:64:7c:46:08:3d:8a:db:08:6f:24:71: 8a:fd:25:c3:52:09:f0:54:84:f3:07:5d:f5:2a:30:2b:f6:bd: d6:d2:1e:a0:ca:24:3a:e8:b5:b8:fb:29:9d:a5:a4:c3:86:b8: 28:fe:9c:b4:d7:f4:60:49:01:b2:fb:91:da:28:aa:97:fa:a9: f7:3f:ca:fe:a4:a8:bb:4d:d4:2b:4c:2d:99:40:2e:c8:c3:a4: b6:95:ab:bc:68:ea:41:4a:94:4b:e5:4d:47:cf:89:8a:d8:3c: 11:10:6b:16:f9:4d:c6:28:86:94:86:55:7b:10:25:66:19:72: 59:1e:e8:b9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKorDr1lr/JoEN+M/VO/S6cDfc/cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDVGM0QwMDAwMTEwLwYDVQQFEyhEQkIyM0M3RUU0 OTIyMTJFQTg1OEI3OEUxQzY2QkYyMjk4RTVBQ0Q0MB4XDTI2MDUyMTA4MDExMloX DTI2MDUyMjExNTkxMlowMzExMC8GA1UEAxMoNTNDOTM2N0E0MjQyRTRBQjgyRjdE RkYwRTgwNjdGRTYzQzZGOTIyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI16qM5i6TZjnl3IQBgmy8yuyBsyLDIxv7n6E/QJmzg3wTTRfzHN7E6UOaXj 8qCoSgTZNGfJZB9RI94poXflpyPldju+lH9gW6ij5oXUE4PRNkSWD5dQjfEue1SK o9T1vRCEBj21Nr6jLd+mI+Ikjad2LTGZJDq/GbzP+eU6Ib4TArzo6mY71FEZprKO iZZqAvFi/x7NGp9AOxDDengRPe7GkUDsNUSJaywqshNVbCpoNH0yUXsxFXpN5Dpa MNIrnJZ5hHaA8GrBD68Hm949nyA2Jg2UCRBNuL02wt0LRGXtaGxpuKFaDqLWkXqN S4qLT1gPDKRVyKACSJ2m4jxOU2UCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRTyTZ6 QkLkq4L33/DoBn/mPG+SJDAfBgNVHSMEGDAWgBTbsjx+5JIhLqhYt44cZr8imOWs 1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1Nzc1NzQ3LzAvREJCMjND N0VFNDkyMjEyRUE4NThCNzhFMUM2NkJGMjI5OEU1QUNENC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMjdJOGZ1U1NJ UzZvV0xlT0hHYV9JcGpsck5RLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5 NTc3NTc0Ny8wL0RCQjIzQzdFRTQ5MjIxMkVBODU4Qjc4RTFDNjZCRjIyOThFNUFD RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA5W1115voFM6cWAfCgRbqJw0MA/6pjjBxxt5ww2jhg4Gs/ lhu4B2bINGCe2IzJcu/ZCAecKrtEqq0rVbPja7YSx4zeYTBgI6eImJTFaPk8LY5a hHP9vOJBzHIqx7zUpbqSPeREi4se4G+p/YDcV4AnDUzrVzZvpFLoBaRim+a8NSmB zaJiZHxGCD2K2whvJHGK/SXDUgnwVITzB131KjAr9r3W0h6gyiQ66LW4+ymdpaTD hrgo/py01/RgSQGy+5HaKKqX+qn3P8r+pKi7TdQrTC2ZQC7Iw6S2lau8aOpBSpRL 5U1Hz4mK2DwREGsW+U3GKIaUhlV7ECVmGXJZHui5 -----END CERTIFICATE-----Generated at Thu May 21 09:39:31 2026 by rpki-client