$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json) Hash identifier: WjEgmL8GLTo68z7mb383S/Wi7Ophn7+4x6S9AfCizUk= Subject key identifier: B2:9E:B8:59:19:20:1B:AF:CE:FD:D4:1F:C7:D2:69:65:DF:BC:A2:A8 Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 7DF125C39FC9CC9F035B4C6E73A4D2EDC228B088 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft Manifest number: 31 Signing time: Thu 21 May 2026 08:21:13 +0000 Manifest this update: Thu 21 May 2026 08:16:13 +0000 Manifest next update: Fri 22 May 2026 09:30:13 +0000 Files and hashes: 1: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=) 2: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=) 3: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=) 4: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: hh+54nURq1CXhslMQ8bjA+xPbPomjXYnNSZhdTp/ZP0=) 5: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=) 6: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=) 7: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 07:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f1:25:c3:9f:c9:cc:9f:03:5b:4c:6e:73:a4:d2:ed:c2:28:b0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: May 21 08:16:13 2026 GMT Not After : May 22 09:30:13 2026 GMT Subject: CN=B29EB85919201BAFCEFDD41FC7D26965DFBCA2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:c9:b9:98:dc:7b:c2:72:b5:13:0f:8e:88: 99:01:d5:60:7f:5c:ff:8a:6b:c6:c2:72:e9:d0:0d: a3:21:00:ff:cc:ae:db:42:03:22:24:a4:c1:ad:89: c9:ae:0f:fb:45:80:31:7e:a7:92:0d:49:88:c4:fc: 29:28:a6:0d:17:ec:e8:5a:b3:53:45:03:a2:3b:6b: b3:6f:a5:57:79:6e:e6:26:ed:4e:cb:9c:09:6a:32: 02:f3:18:e0:8c:71:57:57:da:78:dc:64:a0:82:9a: e9:f3:5e:a4:8a:5b:3a:63:0b:ef:41:f7:68:b1:da: c7:6a:cc:72:20:db:18:5a:6f:28:1d:6e:6c:ac:d2: f3:d8:53:ca:b5:e9:ab:58:c6:2e:c1:8f:08:33:6d: 8e:93:79:84:6e:22:e4:45:c9:6a:70:aa:b0:da:4d: 1b:4e:ca:06:a3:10:c6:99:1c:1c:82:e7:a9:54:05: bf:43:a8:b4:46:0f:cd:46:0f:ce:06:21:42:ef:0b: 3d:b0:89:28:32:0b:61:ac:43:8c:ab:6f:4c:f9:c6: 6a:87:fb:9b:d7:db:c5:77:85:54:49:dd:7e:fa:3e: 34:78:e0:00:8a:6a:bd:f8:1d:b0:a0:b0:bd:7a:2f: 3f:72:ab:cc:fd:9c:9c:4c:b6:7b:67:db:02:6d:23: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9E:B8:59:19:20:1B:AF:CE:FD:D4:1F:C7:D2:69:65:DF:BC:A2:A8 X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e1:97:cb:96:95:a0:b2:b8:0d:c1:b1:05:0c:ad:7e:65:13: c9:ee:a1:17:10:c2:06:7b:31:c4:3d:4a:93:36:e7:f4:2c:08: 6e:20:cd:77:c7:a8:f9:fe:d3:18:9f:88:3e:c4:06:00:ac:86: b7:bf:28:06:07:c4:f5:87:e3:45:78:6d:f1:4c:da:c8:7c:76: a1:cf:d4:f2:13:f2:30:1f:85:f0:19:8b:4f:90:48:78:5c:b5: 23:3f:39:3b:3c:c2:69:fa:c4:de:e2:fb:83:81:b7:9f:68:e3: 31:1f:5f:de:9a:ad:a7:d8:ee:6f:d3:6e:62:af:45:53:d1:cf: 58:c1:8b:87:eb:b7:68:06:ad:77:13:da:21:bc:cb:b0:e0:36: cb:4c:89:88:17:a0:7a:80:d0:6d:c9:d4:f6:dc:aa:f6:36:51: 49:a4:88:ad:5c:8c:5e:2a:bd:57:1b:29:4a:f6:7d:7a:03:62: 14:16:bb:cd:dd:dd:ba:c8:0b:31:8d:88:59:fc:e8:cf:0f:ee: 51:e9:7d:89:54:09:0d:1e:d4:8c:62:70:f3:09:a0:ff:8e:af: d5:14:29:62:1c:9e:4d:24:75:65:3a:98:ed:fe:4f:41:45:ea: a2:f0:ae:ca:c7:fb:1e:18:8c:dd:26:11:e6:8a:42:1a:93:2c: 51:96:ab:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUffElw5/JzJ8DW0xuc6TS7cIosIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjA1MjEwODE2MTNaFw0yNjA1MjIwOTMwMTNaMDMxMTAvBgNV BAMTKEIyOUVCODU5MTkyMDFCQUZDRUZERDQxRkM3RDI2OTY1REZCQ0EyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR08m5mNx7wnK1Ew+OiJkB1WB/ XP+Ka8bCcunQDaMhAP/MrttCAyIkpMGticmuD/tFgDF+p5INSYjE/Ckopg0X7Oha s1NFA6I7a7NvpVd5buYm7U7LnAlqMgLzGOCMcVdX2njcZKCCmunzXqSKWzpjC+9B 92ix2sdqzHIg2xhabygdbmys0vPYU8q16atYxi7BjwgzbY6TeYRuIuRFyWpwqrDa TRtOygajEMaZHByC56lUBb9DqLRGD81GD84GIULvCz2wiSgyC2GsQ4yrb0z5xmqH +5vX28V3hVRJ3X76PjR44ACKar34HbCgsL16Lz9yq8z9nJxMtntn2wJtI7iPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsp64WRkgG6/O/dQfx9JpZd+8oqgwHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8wNDkxRjQyQTM5OTBC RDYwRDMyMjQ4NTgzNzQxRjE0MUFDNjFGMEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+GXy5aVoLK4 DcGxBQytfmUTye6hFxDCBnsxxD1Kkzbn9CwIbiDNd8eo+f7TGJ+IPsQGAKyGt78o BgfE9YfjRXht8UzayHx2oc/U8hPyMB+F8BmLT5BIeFy1Iz85OzzCafrE3uL7g4G3 n2jjMR9f3pqtp9jub9NuYq9FU9HPWMGLh+u3aAatdxPaIbzLsOA2y0yJiBegeoDQ bcnU9tyq9jZRSaSIrVyMXiq9VxspSvZ9egNiFBa7zd3dusgLMY2IWfzozw/uUel9 iVQJDR7UjGJw8wmg/46v1RQpYhyeTSR1ZTqY7f5PQUXqovCuysf7HhiM3SYR5opC GpMsUZarkg== -----END CERTIFICATE-----Generated at Thu May 21 12:32:54 2026 by rpki-client