$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft File: 5F00140F672D031D0607493A021A46F1A9475AE8.mft (raw, json) Hash identifier: 2+s3YaX7hc6is796lkcDpTZAzAfDvFpyH+pozViLCsU= Subject key identifier: 37:05:75:13:51:E9:E9:A7:53:34:C9:BF:1E:58:68:EB:EF:CE:D8:56 Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8 Certificate serial: 20FD162E6BAF81DEC022DC82245DADA02FB8DFD1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft Manifest number: 42 Signing time: Fri 29 May 2026 17:03:03 +0000 Manifest this update: Fri 29 May 2026 16:58:03 +0000 Manifest next update: Sat 30 May 2026 20:34:03 +0000 Files and hashes: 1: 5F00140F672D031D0607493A021A46F1A9475AE8.crl (hash: 9CbC7HLXGWOS7TVL31Oa/FX327BFvUol6b7Wr4bDcnw=) 2: 3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa (hash: CKziFNu0LqXNWZ/lBrbX59kZ+YgYSz+Zo35FHCpodYY=) 3: 3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa (hash: hBscGvJr4AnNB3Ne2DqjxOugixWWQhpfuAEh32znKV0=) 4: 3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa (hash: 26nl4bikGp2Ci9HCEbZJ7fOjhWzaLL4wYwu2l9/Jgao=) 5: 3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa (hash: U7ZbArWBWfu8/5lcAVKldcUla2gFMo1Yu6PSfWaHzL8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fd:16:2e:6b:af:81:de:c0:22:dc:82:24:5d:ad:a0:2f:b8:df:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8 Validity Not Before: May 29 16:58:03 2026 GMT Not After : May 30 20:34:03 2026 GMT Subject: CN=3705751351E9E9A75334C9BF1E5868EBEFCED856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:18:0a:60:12:c3:67:4b:98:dc:18:b0:c5:48: bc:94:92:86:91:bc:5e:1b:48:2a:6c:d2:04:ad:e7: d8:14:4c:36:f8:94:7c:e6:1c:bb:69:30:94:de:aa: 83:13:44:46:a2:e7:ff:d7:42:aa:03:2b:d3:e7:63: 3a:7d:9f:5d:eb:35:f5:f6:32:30:a0:ce:49:55:22: 81:8b:9c:b8:bf:35:ee:48:48:88:28:f3:c3:2d:c5: 58:91:47:a7:a5:f8:f6:d5:8d:2e:fb:57:57:93:df: 7d:6b:61:c5:2f:5e:a0:0b:de:7b:67:aa:2d:ed:c5: 21:7d:0f:44:45:72:74:12:fb:28:d0:8e:21:38:7c: 98:cd:a0:d4:3d:57:c6:e8:fa:f0:e6:5f:3c:0f:39: 38:75:e3:cf:56:5b:61:c7:a0:90:ec:77:4f:03:8a: 02:d6:2a:5e:8f:17:c8:c7:65:ca:19:9e:30:fa:5b: ee:a8:20:4e:47:74:b1:fb:b6:1b:33:f3:09:a2:af: ea:64:3e:cb:b3:1b:66:a2:08:3a:47:74:cc:38:b8: 35:18:8b:c4:86:40:5c:c4:9b:ea:ec:ab:fb:b2:1b: a2:95:1e:c3:c0:4a:1f:29:b5:09:74:79:68:3b:a8: 88:7a:42:1d:dc:c4:71:a6:42:1e:c1:48:93:47:12: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:05:75:13:51:E9:E9:A7:53:34:C9:BF:1E:58:68:EB:EF:CE:D8:56 X509v3 Authority Key Identifier: keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:36:08:0b:59:11:72:fa:fa:b1:5d:64:9c:6f:79:45:60:e4: ad:2d:31:1a:2e:ee:07:3a:2f:b9:b6:5d:5f:fb:49:5b:78:b0: 7c:8c:73:b8:87:46:65:1f:8c:00:a5:fc:26:89:69:9e:19:b5: 15:bc:4d:f4:c4:87:34:6c:41:5e:bf:cf:1c:c0:e7:b5:c7:4c: 7d:ca:96:f8:e8:f0:a6:7e:01:ce:7d:ef:89:86:02:e1:7b:6d: 93:11:e2:a9:00:82:53:1f:c7:ae:7b:13:35:b6:ec:da:aa:d3: 30:e5:f0:5a:5a:77:17:4b:ff:aa:2b:ab:0c:70:b8:42:c7:0d: d9:4a:8a:7e:47:b1:9b:34:bc:38:a9:fb:fe:aa:2c:d3:65:ea: d3:38:22:2e:3a:90:8e:39:f2:e5:26:cd:ad:6a:cf:44:31:13: 7e:a8:c2:4a:fc:c8:92:e6:5a:64:f7:06:21:51:8a:bc:4c:b1: d3:c3:d3:96:7e:55:47:8c:b2:b9:48:13:8e:66:16:3c:ce:8b: 8d:65:47:c2:7e:e9:54:6d:44:e6:41:06:f6:af:9e:fb:99:4a: 2c:8f:1b:b7:f1:64:2e:d0:ca:dd:e5:5c:35:01:95:76:50:ac: 64:c8:44:f2:45:b3:7c:fd:78:fd:51:7f:3e:00:c1:40:d4:3a: 47:cf:18:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIP0WLmuvgd7AItyCJF2toC+439EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFB OTQ3NUFFODAeFw0yNjA1MjkxNjU4MDNaFw0yNjA1MzAyMDM0MDNaMDMxMTAvBgNV BAMTKDM3MDU3NTEzNTFFOUU5QTc1MzM0QzlCRjFFNTg2OEVCRUZDRUQ4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbGApgEsNnS5jcGLDFSLyUkoaR vF4bSCps0gSt59gUTDb4lHzmHLtpMJTeqoMTREai5//XQqoDK9PnYzp9n13rNfX2 MjCgzklVIoGLnLi/Ne5ISIgo88MtxViRR6el+PbVjS77V1eT331rYcUvXqAL3ntn qi3txSF9D0RFcnQS+yjQjiE4fJjNoNQ9V8bo+vDmXzwPOTh1489WW2HHoJDsd08D igLWKl6PF8jHZcoZnjD6W+6oIE5HdLH7thsz8wmir+pkPsuzG2aiCDpHdMw4uDUY i8SGQFzEm+rsq/uyG6KVHsPASh8ptQl0eWg7qIh6Qh3cxHGmQh7BSJNHEnx1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNwV1E1Hp6adTNMm/Hlho6+/O2FYwHwYDVR0j BBgwFoAUXwAUD2ctAx0GB0k6AhpG8alHWugwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4MTIxNTA2NTQ1NjY0Mi8wLzVGMDAxNDBGNjcyRDAzMUQwNjA3NDkzQTAyMUE0 NkYxQTk0NzVBRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFBOTQ3NUFFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODEyMTUwNjU0NTY2NDIvMC81RjAwMTQwRjY3MkQw MzFEMDYwNzQ5M0EwMjFBNDZGMUE5NDc1QUU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDYIC1kRcvr6 sV1knG95RWDkrS0xGi7uBzovubZdX/tJW3iwfIxzuIdGZR+MAKX8Jolpnhm1FbxN 9MSHNGxBXr/PHMDntcdMfcqW+Ojwpn4Bzn3viYYC4XttkxHiqQCCUx/HrnsTNbbs 2qrTMOXwWlp3F0v/qiurDHC4QscN2UqKfkexmzS8OKn7/qos02Xq0zgiLjqQjjny 5SbNrWrPRDETfqjCSvzIkuZaZPcGIVGKvEyx08PTln5VR4yyuUgTjmYWPM6LjWVH wn7pVG1E5kEG9q+e+5lKLI8bt/FkLtDK3eVcNQGVdlCsZMhE8kWzfP14/VF/PgDB QNQ6R88YZQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:28 2026 by rpki-client