$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft File: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft (raw, json) Hash identifier: eiJ3A8OgAH3sugjp74Y5MTf7P2kOmN5Cem7qyjjxMPg= Subject key identifier: 90:9B:7F:99:DA:B9:55:11:76:8A:1E:B5:C7:C1:A0:67:9C:3A:5F:42 Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 Certificate issuer: /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Certificate serial: 3E43299E83893E4A1C784737C5D33F503585DDF6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft Manifest number: 41 Signing time: Fri 29 May 2026 20:08:18 +0000 Manifest this update: Fri 29 May 2026 20:03:18 +0000 Manifest next update: Sat 30 May 2026 23:46:18 +0000 Files and hashes: 1: 323430313a633032303a31343a3a2f34382d3438203d3e20313531323736.roa (hash: mr0/gxeIKI22glZxYzHulN1c0VopTHKnK1KsfVxMuu0=) 2: 323430313a633032303a363a3a2f34382d3438203d3e20313531323736.roa (hash: WUqh1dTEpWIYsDvwBsYOOFvLpDV8qK8WxIPcIuTpcHk=) 3: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl (hash: +XRUkjj8trmE4Ui9L8b0ljr//EIE0BjkdMlgkhACzWg=) 4: 323430313a633032303a383a3a2f34382d3438203d3e20313531323736.roa (hash: eVZvU/XBvUrHPOqvp05KEbICvOmQPEZy0GrpXcWtlJ0=) 5: 323430313a633032303a393a3a2f34382d3438203d3e20313531323736.roa (hash: y9w/RzzaFHn59WCWUDJU3dqWd9yUIoo7JskGYPVr5WQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:43:29:9e:83:89:3e:4a:1c:78:47:37:c5:d3:3f:50:35:85:dd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Validity Not Before: May 29 20:03:18 2026 GMT Not After : May 30 23:46:18 2026 GMT Subject: CN=909B7F99DAB95511768A1EB5C7C1A0679C3A5F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:27:e5:b9:93:9c:92:74:8a:2b:16:b5:5f: 04:6c:58:7d:4d:c9:30:93:ae:7d:59:bb:ee:74:4f: f2:d6:9a:50:76:0d:44:a0:b2:ad:96:89:bb:4e:89: 58:9d:c5:49:11:ea:f0:84:60:8a:6f:ba:cf:85:3d: e3:04:13:5f:d3:ab:c1:10:6b:55:f1:59:b9:fe:e8: 38:65:19:29:3e:68:ac:c8:d1:1a:0f:9c:a4:6d:d8: e1:05:00:16:c7:67:36:0a:e9:7b:16:10:30:c5:e3: 2f:2a:45:35:6f:76:14:2f:ba:ec:3f:46:14:11:56: 96:70:39:3f:a9:77:64:85:62:01:b3:f0:04:ec:5d: c6:42:d0:c4:23:8f:76:de:f3:c9:ea:76:49:30:9f: 1e:40:3a:00:05:b8:d2:09:1f:dd:79:65:20:6b:8f: 0a:41:76:32:64:e6:25:3c:b1:9d:9a:6f:62:d7:cd: e7:f0:97:2d:33:68:23:f7:f2:be:57:4a:67:1a:47: 5f:97:e0:cb:40:de:99:f3:f0:a6:6a:e5:05:ba:d1: a8:a8:4a:ee:1d:e9:ea:71:93:1e:7a:0f:06:93:66: da:82:33:3e:7b:6c:fd:17:38:a3:39:17:3f:a7:9d: a1:cc:3a:e7:06:0b:b3:fc:7c:49:07:aa:e0:c4:7d: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9B:7F:99:DA:B9:55:11:76:8A:1E:B5:C7:C1:A0:67:9C:3A:5F:42 X509v3 Authority Key Identifier: keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:98:dd:d7:de:19:6f:fb:e6:e6:64:0f:12:1d:0b:3b:50:b0: 7c:37:d8:cf:43:09:0c:19:3c:02:60:59:40:6a:2e:a4:43:05: cd:90:e3:38:4b:ff:05:c4:0e:c4:ba:7a:77:a6:d0:b3:cb:ff: 2f:b8:a4:df:47:83:ee:22:d9:b4:8c:41:97:5f:6b:bd:ef:48: 79:01:ee:2b:ed:b2:43:6b:87:5c:44:02:55:c6:fe:36:bc:64: ec:36:a7:13:bb:a0:f6:69:75:6b:bc:2a:9d:70:03:cb:99:94: 9d:23:e4:e4:f8:92:56:fa:0e:eb:2c:c8:ac:0e:39:41:d4:1e: 1c:1a:97:19:02:3b:d0:f0:28:65:58:e9:18:ae:c3:17:66:d2: de:08:55:1e:c1:a0:4f:85:e5:e6:22:6b:ca:42:eb:4a:07:7f: 60:24:53:81:aa:60:64:08:45:cd:68:77:34:b6:f0:9e:af:93: 54:61:f0:09:c6:1f:88:e0:3c:79:23:1c:6a:ed:4e:0d:1a:e2: f7:d6:99:3d:5d:5e:1a:25:8a:d8:06:8d:87:57:f9:85:26:12: ff:6b:a1:2f:ef:1a:7f:84:1c:ab:9c:25:93:55:55:0a:85:8a: fb:2b:8b:87:33:cb:2d:3b:37:35:fc:59:4c:6b:47:6b:8a:ac: 38:af:c7:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPkMpnoOJPkoceEc3xdM/UDWF3fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0 QjlBRDY4MjAeFw0yNjA1MjkyMDAzMThaFw0yNjA1MzAyMzQ2MThaMDMxMTAvBgNV BAMTKDkwOUI3Rjk5REFCOTU1MTE3NjhBMUVCNUM3QzFBMDY3OUMzQTVGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SCfluZOcknSKKxa1XwRsWH1N yTCTrn1Zu+50T/LWmlB2DUSgsq2WibtOiVidxUkR6vCEYIpvus+FPeMEE1/Tq8EQ a1XxWbn+6DhlGSk+aKzI0RoPnKRt2OEFABbHZzYK6XsWEDDF4y8qRTVvdhQvuuw/ RhQRVpZwOT+pd2SFYgGz8ATsXcZC0MQjj3be88nqdkkwnx5AOgAFuNIJH915ZSBr jwpBdjJk5iU8sZ2ab2LXzefwly0zaCP38r5XSmcaR1+X4MtA3pnz8KZq5QW60aio Su4d6epxkx56DwaTZtqCMz57bP0XOKM5Fz+nnaHMOucGC7P8fEkHquDEfYaPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkJt/mdq5VRF2ih61x8GgZ5w6X0IwHwYDVR0j BBgwFoAU0Itf0UH25LToIZ/z6Nl5ykua1oIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5MzkzMTI3NjU4MjkxNC8wL0QwOEI1RkQxNDFGNkU0QjRFODIxOUZGM0U4RDk3 OUNBNEI5QUQ2ODIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0QjlBRDY4Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTM5MzEyNzY1ODI5MTQvMC9EMDhCNUZEMTQxRjZF NEI0RTgyMTlGRjNFOEQ5NzlDQTRCOUFENjgyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpjd194Zb/vm 5mQPEh0LO1CwfDfYz0MJDBk8AmBZQGoupEMFzZDjOEv/BcQOxLp6d6bQs8v/L7ik 30eD7iLZtIxBl19rve9IeQHuK+2yQ2uHXEQCVcb+Nrxk7DanE7ug9ml1a7wqnXAD y5mUnSPk5PiSVvoO6yzIrA45QdQeHBqXGQI70PAoZVjpGK7DF2bS3ghVHsGgT4Xl 5iJrykLrSgd/YCRTgapgZAhFzWh3NLbwnq+TVGHwCcYfiOA8eSMcau1ODRri99aZ PV1eGiWK2AaNh1f5hSYS/2uhL+8af4Qcq5wlk1VVCoWK+yuLhzPLLTs3NfxZTGtH a4qsOK/HzQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:56 2026 by rpki-client