$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: O37toWGm4Cgl3lUb7qxBAcQbsqJNcyMN1OibtmZdXrc= Subject key identifier: CB:E8:16:8B:3B:73:AD:2C:16:E8:71:61:44:78:2D:FC:D3:03:2C:E4 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 43DC5EC87BFB7A4D505B522717C89990AFABED57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: 31 Signing time: Fri 22 May 2026 18:07:26 +0000 Manifest this update: Fri 22 May 2026 18:02:26 +0000 Manifest next update: Sat 23 May 2026 21:41:26 +0000 Files and hashes: 1: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=) 2: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: QcK7MLV+FKxSuPxxXzdazkriSx58sI8fM0rNQNT2lC4=) 3: 3231302e37372e3139322e302f32312d3231203d3e2030.roa (hash: WfbvNX93kQjBJL0FXE2FBSdr09UfIAVD1IN6lHyh0Tc=) 4: 3231302e37372e3230302e302f32312d3231203d3e2030.roa (hash: n6DlSUA+FzSwEXmdTC0EuhRQME0ZQ/wePSzEFioF7+U=) 5: 3231302e37372e3230382e302f32302d3230203d3e2030.roa (hash: V8CJqCjvjDtIPGw4nc30/IhvUVAHMewbKoIi+GYs1uo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 21:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:dc:5e:c8:7b:fb:7a:4d:50:5b:52:27:17:c8:99:90:af:ab:ed:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: May 22 18:02:26 2026 GMT Not After : May 23 21:41:26 2026 GMT Subject: CN=CBE8168B3B73AD2C16E8716144782DFCD3032CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:d6:22:10:fc:12:c2:14:74:39:46:27:96: cb:01:0d:9c:01:5d:35:3c:af:2f:7c:13:13:8e:43: 49:9a:c1:41:c7:0a:4f:7a:d9:0c:b4:a8:00:6c:45: c9:20:c9:38:56:eb:20:f8:ce:ee:5e:fc:13:0c:96: 58:14:f8:7a:89:0b:df:0d:1e:de:be:15:38:e3:de: 7d:76:c4:83:a2:5f:88:fb:4b:73:9a:35:ae:73:14: 33:d7:66:51:33:d4:41:c5:90:cc:2f:50:d6:65:10: 8b:03:cc:30:ce:32:81:b9:6e:5e:92:45:c8:45:b3: 59:46:e9:fd:5f:5c:2c:3b:1c:ce:cb:ee:3b:f2:a2: ea:28:db:85:cf:ae:b3:a8:a5:b9:b2:b8:ff:4e:af: d7:92:13:6a:fa:49:9c:8e:f3:8d:91:ae:50:5d:ee: b8:1b:8b:88:55:16:ca:80:ff:2b:8d:4e:b1:a1:c8: ad:bf:41:6c:98:3b:5f:f4:53:0a:61:1a:fb:e8:ce: a6:eb:23:c7:08:d0:e8:1b:b9:e5:9c:74:61:74:5e: c3:07:6f:d6:16:94:3a:e5:a6:9c:b0:ea:b4:e6:c2: 05:37:9a:d6:a1:c7:32:1e:e3:5a:16:ee:d8:e8:49: 01:7f:7f:a3:54:cb:4f:80:d7:35:ed:8f:bc:9d:7a: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E8:16:8B:3B:73:AD:2C:16:E8:71:61:44:78:2D:FC:D3:03:2C:E4 X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:66:ad:89:f8:28:9b:56:22:76:48:f6:89:6a:5b:9d:80:d5: 44:6d:cd:5f:16:8e:a2:56:83:93:3b:00:ef:a6:ef:ab:8d:35: 08:1b:f7:f2:b4:0b:96:6d:17:23:de:a5:29:4f:3c:61:fd:f2: c5:7b:39:1f:ef:22:4d:18:80:63:20:d1:e1:64:eb:de:c0:64: a9:6b:58:b3:66:31:aa:62:23:f8:65:4c:c8:cb:dc:af:27:ab: 57:6e:95:45:eb:5f:5b:9f:94:36:b7:9d:9f:68:48:8c:64:07: 0b:36:c1:ce:71:23:60:41:64:dd:73:e5:6a:70:ec:63:cd:b5: 52:82:1d:4e:e7:a9:e2:f4:41:7c:7b:dc:7d:26:e8:a1:46:60: 31:b6:66:38:df:c7:f0:15:6a:46:f9:47:2d:3d:07:c4:58:fa: ae:8c:ca:88:24:87:3a:6e:1e:05:37:9b:8d:3e:ec:eb:bc:92: 9a:27:d8:2f:48:0e:c6:48:4b:2a:f0:87:9f:16:a7:b4:ae:15: 58:25:87:43:1f:8b:6c:d1:d5:38:d8:26:8d:21:b5:a3:7a:05: 47:d3:4e:16:b0:9d:4d:aa:5e:0b:1b:aa:0e:fb:d7:64:14:cb: 89:18:93:77:1a:e4:19:82:25:74:d8:ae:4f:7e:a8:67:25:c7: ae:dc:35:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ9xeyHv7ek1QW1InF8iZkK+r7VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA1MjIxODAyMjZaFw0yNjA1MjMyMTQxMjZaMDMxMTAvBgNV BAMTKENCRTgxNjhCM0I3M0FEMkMxNkU4NzE2MTQ0NzgyREZDRDMwMzJDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZdtYiEPwSwhR0OUYnlssBDZwB XTU8ry98ExOOQ0mawUHHCk962Qy0qABsRckgyThW6yD4zu5e/BMMllgU+HqJC98N Ht6+FTjj3n12xIOiX4j7S3OaNa5zFDPXZlEz1EHFkMwvUNZlEIsDzDDOMoG5bl6S RchFs1lG6f1fXCw7HM7L7jvyouoo24XPrrOopbmyuP9Or9eSE2r6SZyO842RrlBd 7rgbi4hVFsqA/yuNTrGhyK2/QWyYO1/0UwphGvvozqbrI8cI0OgbueWcdGF0XsMH b9YWlDrlppyw6rTmwgU3mtahxzIe41oW7tjoSQF/f6NUy0+A1zXtj7ydevLNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy+gWiztzrSwW6HFhRHgt/NMDLOQwHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmatifgom1Yi dkj2iWpbnYDVRG3NXxaOolaDkzsA76bvq401CBv38rQLlm0XI96lKU88Yf3yxXs5 H+8iTRiAYyDR4WTr3sBkqWtYs2YxqmIj+GVMyMvcryerV26VRetfW5+UNredn2hI jGQHCzbBznEjYEFk3XPlanDsY821UoIdTuep4vRBfHvcfSbooUZgMbZmON/H8BVq RvlHLT0HxFj6rozKiCSHOm4eBTebjT7s67ySmifYL0gOxkhLKvCHnxantK4VWCWH Qx+LbNHVONgmjSG1o3oFR9NOFrCdTapeCxuqDvvXZBTLiRiTdxrkGYIldNiuT36o ZyXHrtw1IA== -----END CERTIFICATE-----Generated at Sat May 23 03:44:04 2026 by rpki-client