$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft File: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json) Hash identifier: S6cl/rLPkB8EQAlOtJjlpFqchFJlpLEmE0FNtF741DA= Subject key identifier: 9A:2A:6B:81:3B:A4:86:68:A0:9F:63:9A:D0:D9:52:D6:68:2D:EC:46 Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 2FE7CA36E210A7B8021B05438D088E8E8D35AE0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft Manifest number: 5A Signing time: Thu 21 May 2026 07:01:55 +0000 Manifest this update: Thu 21 May 2026 06:56:55 +0000 Manifest next update: Fri 22 May 2026 09:59:55 +0000 Files and hashes: 1: AS136959.roa (hash: 4tzNCgN2xzffcm2fo6LjIwqSC+f12SDmw5HLnXYOdEQ=) 2: AS135061.roa (hash: o7QMoE6yXiaPBeKMPORYz75XV9O2yjjIAjkdZa+zeeg=) 3: AS134543.roa (hash: zLbxbOu82VuXtqbF9JK7mJJ1ohb+kb0Mf68tOwD3TuI=) 4: AS136958.roa (hash: 0sXVTGnxfMIK7fLQdl8pzp8Tv76XWiZ4I5rNpwnTTwo=) 5: AS17622.roa (hash: bZYjaEB0Pfok/d1vWMQ/5nUp4+Gz0Pu1XFfMheq1y00=) 6: AS17623.roa (hash: esOT1VNBWv3E6FpbOB/Nd2hG38RKkm7VbjXURd90rVQ=) 7: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: 3qgaBb4NHcffVfniVoT/iI2AfSbtP43y6OXBIKm4xDM=) 8: AS9929.roa (hash: sUofUW3+B/VqY2U0WDmNcuPHkNNUDRJDmcmydUk/iXc=) 9: AS4837.roa (hash: 1l0sLoqhGel1nN0fa33wvkAdF1gl6jciDFj3oDd4Mro=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 09:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e7:ca:36:e2:10:a7:b8:02:1b:05:43:8d:08:8e:8e:8d:35:ae:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: May 21 06:56:55 2026 GMT Not After : May 22 09:59:55 2026 GMT Subject: CN=9A2A6B813BA48668A09F639AD0D952D6682DEC46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:25:7d:64:a4:fe:0a:af:c0:70:54:d8:df: b0:45:09:6c:10:40:22:80:aa:15:ad:77:be:b9:b3: 0c:aa:90:8c:ae:91:0f:13:cf:11:56:82:98:0b:99: 54:e2:25:8c:b2:85:1c:83:e3:ad:ec:5a:7d:6b:35: 53:9f:88:f2:d5:b8:61:f4:4d:6e:17:54:7c:c4:c8: cc:1b:46:14:57:6c:9c:4c:bc:84:01:ac:b4:8d:ad: e4:c9:27:a8:0b:ac:02:ab:fa:df:9e:4f:05:04:30: c5:82:a2:88:bb:16:b7:1b:55:7c:da:74:5d:13:cd: 59:fb:8f:50:f5:78:b3:13:98:3c:40:37:f8:32:05: 2e:37:0a:f7:4e:8c:76:25:ee:bb:e0:b1:1a:4a:ca: f6:28:c5:37:a9:cf:1d:d2:22:87:ac:4e:eb:de:eb: 9c:2c:8c:0c:38:14:b5:5f:fc:16:45:44:56:67:04: 85:f5:64:59:a9:63:65:5c:05:a3:fa:5e:6d:5c:cf: b9:bf:94:18:48:b5:6d:a3:b6:8d:06:8c:26:bf:9f: e2:33:40:52:93:1d:30:10:ef:b9:d4:b4:eb:d1:a1: c8:e1:c1:51:03:87:6e:22:74:d6:63:6a:51:85:5e: 14:32:f2:e7:3f:7b:58:25:b5:39:18:26:2a:34:51: b7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2A:6B:81:3B:A4:86:68:A0:9F:63:9A:D0:D9:52:D6:68:2D:EC:46 X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b7:40:aa:76:08:80:d7:ec:79:32:bb:cb:4b:11:1f:2d:ae: 9e:32:d0:e5:b1:9e:08:e0:55:78:c1:74:1a:c2:9e:89:49:54: 00:b0:3b:d7:a8:91:05:46:19:84:73:06:33:aa:49:31:0c:39: a4:a7:35:c8:87:5c:33:a3:39:86:53:7e:97:fc:55:06:55:3a: af:d7:74:c0:6a:98:2d:43:f2:31:d9:44:12:b8:53:a6:d7:f8: 4d:d2:7b:3e:7b:30:ee:30:04:35:c2:ba:2e:de:e6:15:fe:2a: e5:cf:fc:48:bd:29:ab:9f:5e:3b:28:0a:97:e5:60:d9:f8:73: ac:14:87:22:db:e6:12:fe:fa:fe:3b:d5:2c:8d:8d:66:2a:15: 31:14:54:be:a0:8f:e5:87:46:eb:b8:b9:ff:d0:7e:ca:04:f1: d9:92:d0:90:95:86:5f:1a:90:dd:3b:ef:9b:54:50:94:b6:d7: 71:6e:8a:3b:79:68:c6:b8:31:7c:2d:ee:8c:4a:f3:a9:cf:1b: 1e:05:43:e7:28:bf:4a:56:ab:8a:d3:f6:43:06:34:89:5e:2a: 80:5f:f9:3a:b4:c8:74:86:4e:d9:f1:84:a3:ba:14:25:5e:5b: b2:24:0c:cd:ac:c4:d8:31:6c:c1:4f:d4:e3:a6:2f:0f:32:47: 7e:e3:5a:7e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUL+fKNuIQp7gCGwVDjQiOjo01rg0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUyMTA2NTY1NVoX DTI2MDUyMjA5NTk1NVowMzExMC8GA1UEAxMoOUEyQTZCODEzQkE0ODY2OEEwOUY2 MzlBRDBEOTUyRDY2ODJERUM0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0jJX1kpP4Kr8BwVNjfsEUJbBBAIoCqFa13vrmzDKqQjK6RDxPPEVaCmAuZ VOIljLKFHIPjrexafWs1U5+I8tW4YfRNbhdUfMTIzBtGFFdsnEy8hAGstI2t5Mkn qAusAqv6355PBQQwxYKiiLsWtxtVfNp0XRPNWfuPUPV4sxOYPEA3+DIFLjcK906M diXuu+CxGkrK9ijFN6nPHdIih6xO697rnCyMDDgUtV/8FkVEVmcEhfVkWaljZVwF o/pebVzPub+UGEi1baO2jQaMJr+f4jNAUpMdMBDvudS069GhyOHBUQOHbiJ01mNq UYVeFDLy5z97WCW1ORgmKjRRt3sCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSaKmuB O6SGaKCfY5rQ2VLWaC3sRjAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8xLzhBMUI0RTRBNjMyOTVGMThCNEYwNkZGRjZBRDAyQzMxNjVCRjk5 MjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCFt0CqdgiA1+x5MrvLSxEfLa6eMtDlsZ4I4FV4wXQawp6J SVQAsDvXqJEFRhmEcwYzqkkxDDmkpzXIh1wzozmGU36X/FUGVTqv13TAapgtQ/Ix 2UQSuFOm1/hN0ns+ezDuMAQ1wrou3uYV/irlz/xIvSmrn147KAqX5WDZ+HOsFIci 2+YS/vr+O9UsjY1mKhUxFFS+oI/lh0bruLn/0H7KBPHZktCQlYZfGpDdO++bVFCU ttdxboo7eWjGuDF8Le6MSvOpzxseBUPnKL9KVquK0/ZDBjSJXiqAX/k6tMh0hk7Z 8YSjuhQlXluyJAzNrMTYMWzBT9Tjpi8PMkd+41p+ -----END CERTIFICATE-----Generated at Thu May 21 09:39:32 2026 by rpki-client