$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json) Hash identifier: b7duF9TykP4+CpW3y/Ii6WO8RQfCxJIZCQhYa3wlRQs= Subject key identifier: 67:E6:36:51:58:48:DD:2A:01:32:26:1D:0C:21:B3:A3:08:18:08:26 Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Certificate serial: 468867459047315F086D8EDAF2105151C6017274 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft Manifest number: 41 Signing time: Fri 29 May 2026 12:02:49 +0000 Manifest this update: Fri 29 May 2026 11:57:49 +0000 Manifest next update: Sat 30 May 2026 14:58:49 +0000 Files and hashes: 1: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=) 2: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: 2exaJxSx6PYTp73Tolg3sAFcQGahlHM1phV2rZwBEEg=) 3: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:88:67:45:90:47:31:5f:08:6d:8e:da:f2:10:51:51:c6:01:72:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Validity Not Before: May 29 11:57:49 2026 GMT Not After : May 30 14:58:49 2026 GMT Subject: CN=67E636515848DD2A0132261D0C21B3A308180826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:2e:d9:0c:42:a5:16:7b:02:3b:c5:e4:5b: ad:f1:03:67:d8:c5:e9:5a:4e:0c:fa:24:97:60:4a: 7d:e2:62:97:7c:ec:5c:f4:7c:29:cc:00:13:2b:96: 74:bb:8b:06:b9:ea:7d:58:9b:56:93:1c:16:67:bb: 3a:48:8f:74:41:43:71:39:45:f0:17:29:b8:a2:e0: 4a:ef:a5:72:08:29:0a:af:bc:13:99:ce:83:c0:95: 36:fe:e8:99:21:96:35:8b:d7:1f:28:45:67:07:df: 9f:7a:f9:65:4c:cc:47:9d:93:56:93:77:43:ce:6d: 9e:e4:8b:41:0a:6a:cf:58:1a:e8:ec:76:95:a4:72: 42:d0:cf:e9:50:01:bd:3b:de:21:b1:0d:f3:3b:b9: bc:9e:07:92:a6:f3:29:55:0a:ab:3e:16:16:b2:36: 1e:3a:f2:14:3f:c1:87:7d:85:0a:aa:99:26:1b:86: 93:22:04:18:38:9a:67:5a:28:aa:51:be:71:4e:d5: b7:e7:b1:33:58:57:f4:42:40:e2:81:db:34:0f:b7: f3:9e:87:b1:3c:76:b8:10:16:e2:e3:85:52:a1:b7: 05:13:49:37:0c:eb:1c:65:4b:70:aa:9e:96:00:b6: a9:9f:c3:a2:7c:d7:ed:42:95:58:a9:e1:78:65:e8: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E6:36:51:58:48:DD:2A:01:32:26:1D:0C:21:B3:A3:08:18:08:26 X509v3 Authority Key Identifier: keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:82:e9:b1:c5:70:a4:30:60:63:b5:c4:83:73:15:69:fd:00: 5f:bb:a2:45:b3:c1:ca:86:41:8b:c7:88:86:86:da:90:28:76: 0a:c8:67:4c:dc:90:9b:ed:aa:f7:e9:09:74:c4:27:2c:e3:f1: 83:68:1b:32:14:31:a1:45:f3:2b:f8:d3:23:4d:59:aa:21:19: a8:59:50:b0:17:42:ca:7c:64:9f:57:bb:0b:f8:88:a6:3c:fa: ab:a0:f6:a7:2e:0e:4f:17:1c:d9:23:14:6e:d2:69:a7:94:ce: b9:6c:e0:17:0b:fc:9f:09:f6:a7:a3:eb:74:7d:bd:8f:9c:a2: 2d:86:10:41:bc:9f:56:da:20:5d:c3:65:b1:75:39:e6:bd:20: ce:86:fd:3c:e8:07:ee:a0:d4:09:81:2a:4a:7f:e2:56:55:2d: 5b:ac:37:d2:c2:e2:20:89:3f:ce:94:39:aa:c5:ca:94:2c:f0: fe:18:52:7d:a6:0c:cc:c0:49:96:b7:0d:9a:ae:da:b4:6f:fe: d0:15:b4:1c:e7:72:30:05:56:7a:8e:6e:f9:7d:6f:be:04:f7: 8a:9e:12:98:4a:c8:2b:97:7c:c5:88:a0:fb:56:1e:2a:14:4c: f4:0d:36:5d:3e:dd:36:6c:76:56:45:ab:83:28:59:f2:d8:28: d4:11:5e:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURohnRZBHMV8IbY7a8hBRUcYBcnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2 RUFCNTJENDAeFw0yNjA1MjkxMTU3NDlaFw0yNjA1MzAxNDU4NDlaMDMxMTAvBgNV BAMTKDY3RTYzNjUxNTg0OEREMkEwMTMyMjYxRDBDMjFCM0EzMDgxODA4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpei7ZDEKlFnsCO8XkW63xA2fY xelaTgz6JJdgSn3iYpd87Fz0fCnMABMrlnS7iwa56n1Ym1aTHBZnuzpIj3RBQ3E5 RfAXKbii4ErvpXIIKQqvvBOZzoPAlTb+6JkhljWL1x8oRWcH3596+WVMzEedk1aT d0PObZ7ki0EKas9YGujsdpWkckLQz+lQAb073iGxDfM7ubyeB5Km8ylVCqs+Fhay Nh468hQ/wYd9hQqqmSYbhpMiBBg4mmdaKKpRvnFO1bfnsTNYV/RCQOKB2zQPt/Oe h7E8drgQFuLjhVKhtwUTSTcM6xxlS3CqnpYAtqmfw6J81+1ClVip4Xhl6CWFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZ+Y2UVhI3SoBMiYdDCGzowgYCCYwHwYDVR0j BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI0NDMxMzcvMC85QjU0QTgyMkQ4QjFF QUI3RTYwQzg1RDJCMzFEQTQ4ODZFQUI1MkQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYLpscVwpDBg Y7XEg3MVaf0AX7uiRbPByoZBi8eIhobakCh2CshnTNyQm+2q9+kJdMQnLOPxg2gb MhQxoUXzK/jTI01ZqiEZqFlQsBdCynxkn1e7C/iIpjz6q6D2py4OTxcc2SMUbtJp p5TOuWzgFwv8nwn2p6PrdH29j5yiLYYQQbyfVtogXcNlsXU55r0gzob9POgH7qDU CYEqSn/iVlUtW6w30sLiIIk/zpQ5qsXKlCzw/hhSfaYMzMBJlrcNmq7atG/+0BW0 HOdyMAVWeo5u+X1vvgT3ip4SmErIK5d8xYig+1YeKhRM9A02XT7dNmx2VkWrgyhZ 8tgo1BFeUQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:57 2026 by rpki-client