$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft File: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft (raw, json) Hash identifier: TZZxd66tbbg0N61mNCi2tXEj446HI+ETFTPkOQzUoso= Subject key identifier: 88:6D:36:6B:30:F7:67:03:A6:FC:74:E9:A3:6E:6A:1A:04:FA:9C:26 Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 Certificate issuer: /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Certificate serial: 185424BF5902B173567F5284C81AAE511896EF04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft Manifest number: 1D Signing time: Wed 06 May 2026 00:21:35 +0000 Manifest this update: Wed 06 May 2026 00:16:35 +0000 Manifest next update: Thu 07 May 2026 02:36:35 +0000 Files and hashes: 1: 3130332e3137312e3136362e302f32342d3332203d3e20313333313135.roa (hash: 9haZlqw9n325weK408mIds9agQ45PHZJ+Cb9a2drg54=) 2: 3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (hash: eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=) 3: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl (hash: 5vTeFvLSDNM+EtwdoMY4lB3FDaNAM57Ayy72lxKb38c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 16:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:54:24:bf:59:02:b1:73:56:7f:52:84:c8:1a:ae:51:18:96:ef:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Validity Not Before: May 6 00:16:35 2026 GMT Not After : May 7 02:36:35 2026 GMT Subject: CN=886D366B30F76703A6FC74E9A36E6A1A04FA9C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:07:2c:92:56:6c:cd:db:a3:89:53:59:af: 2e:63:12:82:6f:0f:ee:98:48:53:9b:e6:ae:eb:8b: 0f:46:14:7f:50:62:a1:e9:f3:d5:ef:e3:f0:72:d3: 5a:79:42:40:ed:65:5c:13:6e:62:fb:91:32:31:7a: 86:6b:13:c8:1b:8b:9c:a8:38:0b:62:30:a2:68:fb: b3:d7:88:ea:72:d4:59:0b:da:bd:d8:fa:35:d0:03: 3a:05:e7:b7:0e:88:a1:7e:48:97:cb:ec:b0:ad:10: 40:d4:be:d8:b6:42:0c:99:8c:d2:c3:ee:c1:e4:1d: 43:10:5e:da:bb:f2:62:99:a2:ec:48:86:e1:86:8d: fb:8b:34:38:68:0a:64:24:21:65:0c:10:e7:91:5e: de:c5:85:9e:22:3b:a6:2a:a5:4c:1c:79:74:38:f3: 54:2a:b3:97:c3:81:43:c0:33:74:bf:fd:15:d2:7b: 6b:29:8a:1b:7c:ec:49:06:11:d2:cb:8b:9b:85:23: 7a:6b:ca:90:53:06:f4:55:fb:7b:30:f5:9d:18:1a: 89:d3:9d:30:93:ac:b2:91:56:63:02:57:99:9c:9e: 5c:4f:fb:94:7b:92:ef:d7:aa:8e:aa:77:90:72:ff: 9f:78:e6:9a:42:62:91:2d:bf:4e:af:ec:b1:05:70: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6D:36:6B:30:F7:67:03:A6:FC:74:E9:A3:6E:6A:1A:04:FA:9C:26 X509v3 Authority Key Identifier: keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:16:b6:b1:7e:d9:22:2f:ac:88:43:28:d9:35:98:2e:9a:67: de:39:13:31:2f:be:f7:79:3c:02:72:e7:cd:ce:20:ff:29:d4: 4e:f9:2e:22:22:2a:9e:94:df:a5:6a:7f:d9:29:1e:46:d7:7e: 0f:29:ba:59:ab:52:f3:1e:11:40:d3:38:56:ee:17:2d:49:81: 1d:92:02:fa:63:9e:f0:16:d9:71:33:d5:63:e8:25:8b:8c:a7: 0c:d2:af:2a:4f:24:e1:a4:ab:3f:cb:e0:8b:0c:7b:32:4e:0a: 9d:27:84:1a:c9:93:76:d5:3c:8f:09:0d:33:a7:40:7f:f5:c9: 58:9c:9e:96:43:55:d2:cf:35:22:ca:d1:e3:35:86:46:2d:a7: 09:6d:b8:f1:06:51:d8:20:84:bb:68:0a:5f:09:69:57:c2:ec: b9:9c:36:97:f9:be:b9:a4:1a:d3:c7:91:fc:35:ec:d2:ad:1b: f9:cc:9a:e0:a4:04:f4:c5:db:7b:94:d1:9b:78:48:60:65:c2: f6:24:eb:ac:ea:f4:fd:ae:d8:d5:e2:ed:98:0f:33:15:aa:5e: 51:e1:bc:43:ba:26:4e:c5:f6:9a:c1:89:9e:85:cc:e2:21:fd: 08:fb:c9:de:28:28:55:0a:ef:8f:2c:0d:0b:18:ce:c2:a4:a9: f8:ab:e1:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGFQkv1kCsXNWf1KEyBquURiW7wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVF OUJDMDBGNzAeFw0yNjA1MDYwMDE2MzVaFw0yNjA1MDcwMjM2MzVaMDMxMTAvBgNV BAMTKDg4NkQzNjZCMzBGNzY3MDNBNkZDNzRFOUEzNkU2QTFBMDRGQTlDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecgcsklZszdujiVNZry5jEoJv D+6YSFOb5q7riw9GFH9QYqHp89Xv4/By01p5QkDtZVwTbmL7kTIxeoZrE8gbi5yo OAtiMKJo+7PXiOpy1FkL2r3Y+jXQAzoF57cOiKF+SJfL7LCtEEDUvti2QgyZjNLD 7sHkHUMQXtq78mKZouxIhuGGjfuLNDhoCmQkIWUMEOeRXt7FhZ4iO6YqpUwceXQ4 81Qqs5fDgUPAM3S//RXSe2spiht87EkGEdLLi5uFI3prypBTBvRV+3sw9Z0YGonT nTCTrLKRVmMCV5mcnlxP+5R7ku/Xqo6qd5By/5945ppCYpEtv06v7LEFcGWfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiG02azD3ZwOm/HTpo25qGgT6nCYwHwYDVR0j BBgwFoAU4V0KTdPD+zgT6/feKvwODum8APcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1Mzc0OTc2MS8wL0UxNUQwQTRERDNDM0ZCMzgxM0VCRjdERTJBRkMw RTBFRTlCQzAwRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVFOUJDMDBGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM3NDk3NjEvMC9FMTVEMEE0REQzQzNG QjM4MTNFQkY3REUyQUZDMEUwRUU5QkMwMEY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRa2sX7ZIi+s iEMo2TWYLppn3jkTMS++93k8AnLnzc4g/ynUTvkuIiIqnpTfpWp/2SkeRtd+Dym6 WatS8x4RQNM4Vu4XLUmBHZIC+mOe8BbZcTPVY+gli4ynDNKvKk8k4aSrP8vgiwx7 Mk4KnSeEGsmTdtU8jwkNM6dAf/XJWJyelkNV0s81IsrR4zWGRi2nCW248QZR2CCE u2gKXwlpV8LsuZw2l/m+uaQa08eR/DXs0q0b+cya4KQE9MXbe5TRm3hIYGXC9iTr rOr0/a7Y1eLtmA8zFapeUeG8Q7omTsX2msGJnoXM4iH9CPvJ3igoVQrvjywNCxjO wqSp+KvheA== -----END CERTIFICATE-----Generated at Wed May 6 10:17:43 2026 by rpki-client