$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json) Hash identifier: 38jT9P4idxh/qSTV0ELJ5ALWxKNSH3+pP0Q+VnO3ySc= Subject key identifier: FE:E9:80:53:50:40:4B:8D:04:36:7B:11:76:24:82:85:B6:B0:CB:2B Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Certificate serial: 7E372B1738FC1DFB2CFFAEF6B2A2047B5EA67C5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft Manifest number: 42 Signing time: Fri 29 May 2026 19:03:05 +0000 Manifest this update: Fri 29 May 2026 18:58:05 +0000 Manifest next update: Sat 30 May 2026 21:17:05 +0000 Files and hashes: 1: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (hash: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=) 2: 3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (hash: Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=) 3: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=) 4: 3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (hash: 8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=) 5: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: 3dPettZApiUlvS3AdlGNK+FWY/sISpTbbCQpW4uICE4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:37:2b:17:38:fc:1d:fb:2c:ff:ae:f6:b2:a2:04:7b:5e:a6:7c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Validity Not Before: May 29 18:58:05 2026 GMT Not After : May 30 21:17:05 2026 GMT Subject: CN=FEE9805350404B8D04367B1176248285B6B0CB2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:99:36:3f:fe:31:ff:9a:3d:1a:48:be:a6:64: bd:0f:b2:e6:9e:4e:26:af:68:ac:22:3f:ba:56:77: 91:bc:f5:ca:79:0a:4b:5d:49:a2:80:17:b7:b6:1d: e9:77:32:dd:4b:de:4c:82:16:b5:0c:3b:19:a7:f2: 07:26:8f:c5:81:a4:54:6f:86:5d:07:21:53:f1:b5: 1b:3c:34:7a:df:c4:d1:c9:dd:ab:5d:c2:c9:49:f3: 89:dd:04:cf:d7:9f:36:e8:a8:51:7e:56:4d:9d:2d: 36:8d:6e:8a:ef:04:7b:0d:9a:28:19:61:14:46:1c: a4:f7:6a:2c:71:b8:45:af:a9:f8:14:b0:9b:90:f0: a8:19:17:d6:68:b0:22:31:fc:90:3e:9f:f0:fd:c4: e3:25:78:58:b3:0e:1d:af:28:a9:4d:54:4d:ea:c8: 7e:fb:de:37:50:55:e3:32:9d:25:60:a3:8e:41:d5: 21:65:be:5a:c4:80:77:26:1f:20:32:f6:e8:ca:2c: 1a:24:93:5b:9f:e8:4d:b6:4d:f1:c1:1c:92:fb:0a: d0:61:15:cc:31:02:42:a9:70:b3:39:21:c1:ff:74: 06:6b:84:68:66:b3:f3:e5:0d:f9:2c:45:e6:76:56: 28:d1:12:f9:37:5c:7b:cb:32:3c:86:32:0b:b4:78: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:80:53:50:40:4B:8D:04:36:7B:11:76:24:82:85:B6:B0:CB:2B X509v3 Authority Key Identifier: keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:c0:fa:26:d8:14:9a:f3:90:3e:51:b0:7d:45:7a:89:49:6f: ad:91:71:2b:00:0d:ae:ab:3f:22:f5:85:c1:1b:b9:61:29:30: c7:14:63:85:bf:f4:3c:44:72:88:cf:ed:a7:98:b5:d3:58:86: 29:e3:a6:9a:67:65:19:0d:6b:72:73:33:f2:f2:66:7a:86:0a: 00:38:84:5f:f5:d5:fa:89:99:cc:71:01:cb:61:04:da:e5:67: 92:e0:b5:33:ee:83:c2:94:b7:d4:f3:f7:9b:a5:5c:b1:eb:49: e5:0c:2d:c4:bd:0b:0b:0f:f4:ca:94:c2:67:ec:e7:13:86:75: 1b:f2:46:37:ba:e4:ae:33:cc:2a:a7:9f:ad:1a:d5:a2:23:d9: 0e:e2:b8:6f:7d:6f:43:8f:3b:5c:b9:b6:9d:63:d4:db:1f:84: bb:f2:86:41:f2:49:ac:6b:2a:dd:9d:68:a0:b2:00:e4:90:c5: db:da:86:07:ad:85:4e:4c:fe:4e:5e:2f:c3:34:b1:da:c5:6e: f3:46:b9:6c:9e:0f:af:a2:b6:e7:91:b8:77:bb:b0:ec:59:31: df:6f:16:24:b0:73:98:e3:6b:4e:7f:b9:b0:ff:97:04:3e:32: 59:89:cf:96:04:77:49:84:83:29:d4:b9:e6:6a:f9:3e:6f:c1: d8:dc:b7:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfjcrFzj8Hfss/672sqIEe16mfF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4 OUZFNzYwODAeFw0yNjA1MjkxODU4MDVaFw0yNjA1MzAyMTE3MDVaMDMxMTAvBgNV BAMTKEZFRTk4MDUzNTA0MDRCOEQwNDM2N0IxMTc2MjQ4Mjg1QjZCMENCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4mTY//jH/mj0aSL6mZL0Psuae TiavaKwiP7pWd5G89cp5CktdSaKAF7e2Hel3Mt1L3kyCFrUMOxmn8gcmj8WBpFRv hl0HIVPxtRs8NHrfxNHJ3atdwslJ84ndBM/XnzboqFF+Vk2dLTaNborvBHsNmigZ YRRGHKT3aixxuEWvqfgUsJuQ8KgZF9ZosCIx/JA+n/D9xOMleFizDh2vKKlNVE3q yH773jdQVeMynSVgo45B1SFlvlrEgHcmHyAy9ujKLBokk1uf6E22TfHBHJL7CtBh FcwxAkKpcLM5IcH/dAZrhGhms/PlDfksReZ2VijREvk3XHvLMjyGMgu0eAd/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/umAU1BAS40ENnsRdiSChbawyyswHwYDVR0j BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1 MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8D6JtgUmvOQ PlGwfUV6iUlvrZFxKwANrqs/IvWFwRu5YSkwxxRjhb/0PERyiM/tp5i101iGKeOm mmdlGQ1rcnMz8vJmeoYKADiEX/XV+omZzHEBy2EE2uVnkuC1M+6DwpS31PP3m6Vc setJ5QwtxL0LCw/0ypTCZ+znE4Z1G/JGN7rkrjPMKqefrRrVoiPZDuK4b31vQ487 XLm2nWPU2x+Eu/KGQfJJrGsq3Z1ooLIA5JDF29qGB62FTkz+Tl4vwzSx2sVu80a5 bJ4Pr6K255G4d7uw7Fkx328WJLBzmONrTn+5sP+XBD4yWYnPlgR3SYSDKdS55mr5 Pm/B2Ny39Q== -----END CERTIFICATE-----Generated at Fri May 29 22:02:55 2026 by rpki-client