$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: 3Ql8cK3S4/2h2TIrf7upfKCGGKmQQGlPMWAJ9SknwAA= Subject key identifier: 43:8A:85:F8:A6:DA:0A:E2:10:7A:63:27:A4:6C:C4:80:6F:1C:8D:F3 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 1D304C314B599657E6B09CD64F4AA541443D6264 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: 30 Signing time: Fri 22 May 2026 15:27:23 +0000 Manifest this update: Fri 22 May 2026 15:22:23 +0000 Manifest next update: Sat 23 May 2026 17:32:23 +0000 Files and hashes: 1: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) 2: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) 3: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: nILVPUz+wVHuQYLZuWXfyk39C1eFBnj77xb4oeGJGnY=) 4: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 5: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 6: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 17:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:30:4c:31:4b:59:96:57:e6:b0:9c:d6:4f:4a:a5:41:44:3d:62:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: May 22 15:22:23 2026 GMT Not After : May 23 17:32:23 2026 GMT Subject: CN=438A85F8A6DA0AE2107A6327A46CC4806F1C8DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:c6:c6:d7:5c:b1:1c:c4:8c:47:16:ac:23: d8:db:46:be:9c:2d:28:75:76:4a:f7:db:d9:f9:8f: e8:25:49:4b:ad:5c:23:18:67:48:df:fe:d4:02:a3: 1e:3c:16:72:1e:df:91:b8:93:35:93:58:20:6c:71: 9f:a4:51:26:77:9b:ea:51:57:0e:cf:8b:52:26:e2: 99:67:55:6f:24:3c:fb:d8:ef:27:71:7d:b9:ec:2c: 95:90:35:48:89:4d:60:e3:5e:33:4c:ca:0f:34:51: 99:2d:e6:cc:03:95:8b:54:30:8d:02:d8:61:8f:90: 9c:72:39:d1:5a:32:c9:59:69:bb:bf:e0:cf:4b:5d: a9:de:01:0a:8f:32:14:06:d6:11:d7:6e:20:60:80: c0:7a:7a:dd:c3:28:08:11:56:df:54:e1:5e:d5:c9: 97:59:fd:5d:79:8f:69:2e:f6:13:90:fb:c7:14:a9: 2c:ea:f6:75:77:36:45:e1:86:ff:ae:75:a9:e9:f7: cd:20:2f:2a:a0:2f:44:e4:16:ec:19:5d:95:e4:f6: df:27:48:b2:68:70:29:7a:d5:68:5c:fe:ce:b5:50: 40:bd:44:14:58:cc:a7:0f:32:8d:52:2b:b9:07:2e: 87:3b:55:2f:f2:cd:3b:6e:48:bc:ee:8c:27:13:fe: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:85:F8:A6:DA:0A:E2:10:7A:63:27:A4:6C:C4:80:6F:1C:8D:F3 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0b:8d:8c:9e:1d:0f:94:27:9b:13:82:00:b8:e0:2c:75:3d: b4:02:18:ba:40:cd:c5:05:3c:ac:c6:ad:7b:4a:b3:da:cd:64: c2:c6:53:2a:e6:d9:e7:ae:70:ce:97:cc:42:d7:4e:85:ce:c2: 62:02:bb:cd:de:19:e5:70:a8:d3:3d:6d:1d:4a:e7:e2:3f:7b: 2f:01:e7:cb:69:6f:5b:8f:3a:3c:a3:60:c1:1c:03:14:cf:06: 69:c6:ad:34:25:2d:8a:01:ab:72:d7:8e:89:84:30:b1:63:53: 89:a2:d4:93:4c:ae:8d:06:b9:fb:c0:f4:64:71:a3:45:6a:97: 3d:c2:6c:0d:c7:5c:27:d7:21:b1:01:e2:db:fc:18:3e:b0:0d: 5d:82:27:8a:f3:3a:cb:58:22:e1:ae:bf:df:51:1f:9d:84:64: 92:49:7d:b0:e9:c6:c9:66:e3:8e:ab:5b:31:58:95:ce:49:cb: bd:bd:a9:07:51:da:27:32:ba:d7:f3:c4:eb:3e:05:23:20:1f: 3d:14:77:e1:d1:7c:b8:a9:52:56:9a:d4:c0:47:26:67:16:dc: 48:91:59:b2:4e:b7:7c:15:de:64:95:69:50:f2:79:4c:bf:4d: c4:98:0e:e1:5c:7d:d5:4b:07:b9:b6:ac:07:cd:9b:f9:64:f4: 67:e2:ec:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHTBMMUtZllfmsJzWT0qlQUQ9YmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA1MjIxNTIyMjNaFw0yNjA1MjMxNzMyMjNaMDMxMTAvBgNV BAMTKDQzOEE4NUY4QTZEQTBBRTIxMDdBNjMyN0E0NkNDNDgwNkYxQzhERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hcbG11yxHMSMRxasI9jbRr6c LSh1dkr329n5j+glSUutXCMYZ0jf/tQCox48FnIe35G4kzWTWCBscZ+kUSZ3m+pR Vw7Pi1Im4plnVW8kPPvY7ydxfbnsLJWQNUiJTWDjXjNMyg80UZkt5swDlYtUMI0C 2GGPkJxyOdFaMslZabu/4M9LXaneAQqPMhQG1hHXbiBggMB6et3DKAgRVt9U4V7V yZdZ/V15j2ku9hOQ+8cUqSzq9nV3NkXhhv+udanp980gLyqgL0TkFuwZXZXk9t8n SLJocCl61Whc/s61UEC9RBRYzKcPMo1SK7kHLoc7VS/yzTtuSLzujCcT/q81AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ4qF+KbaCuIQemMnpGzEgG8cjfMwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwuNjJ4dD5Qn mxOCALjgLHU9tAIYukDNxQU8rMate0qz2s1kwsZTKubZ565wzpfMQtdOhc7CYgK7 zd4Z5XCo0z1tHUrn4j97LwHny2lvW486PKNgwRwDFM8GacatNCUtigGrcteOiYQw sWNTiaLUk0yujQa5+8D0ZHGjRWqXPcJsDcdcJ9chsQHi2/wYPrANXYInivM6y1gi 4a6/31EfnYRkkkl9sOnGyWbjjqtbMViVzknLvb2pB1HaJzK61/PE6z4FIyAfPRR3 4dF8uKlSVprUwEcmZxbcSJFZsk63fBXeZJVpUPJ5TL9NxJgO4Vx91UsHubasB82b +WT0Z+LsJg== -----END CERTIFICATE-----Generated at Sat May 23 03:46:32 2026 by rpki-client