$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft File: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft (raw, json) Hash identifier: OXKJxNnE/zF1n5kGybvhA7UQyMY3hb5hdcgACCpT4Cg= Subject key identifier: E8:23:3A:38:2B:41:91:C8:B1:E6:23:41:5D:94:39:32:B8:1A:68:7D Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 324BC3DADE02CCA7490660C7B2869EAEC03F8CF0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft Manifest number: 2A Signing time: Sat 23 May 2026 10:43:00 +0000 Manifest this update: Sat 23 May 2026 10:38:00 +0000 Manifest next update: Sun 24 May 2026 11:16:00 +0000 Files and hashes: 1: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (hash: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ=) 2: 3231312e3135342e3137362e302f32312d3231203d3e203538383334.roa (hash: tEDyLaYRb0pvyhNQEaIWXhzDwecCkMS3qTgzbIUEgJE=) 3: 3230322e34312e3135362e302f32322d3232203d3e203538383334.roa (hash: T+pvuiks6kPGPp4EB9NR96xMgNADrbCbZHwEyEfSpGU=) 4: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl (hash: EA+VSpjSIetjgJUgd2UaFayXD6VA6dCIRxWWp/KGsn4=) 5: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (hash: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A=) 6: 3230322e34312e3135322e302f32312d3231203d3e203137383136.roa (hash: 8TG6MQgO1lI3vkKTh0hsJ8yHBg2b506eCK0j3rcCfdM=) 7: 3230322e34312e3135322e302f32322d3232203d3e203538383334.roa (hash: XaJzJb9eUd+kmvH/ZQyTu8LXtqPHpbXPuRyXM039t3E=) 8: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (hash: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30=) 9: 3230322e34312e3135322e302f32312d3231203d3e203538383334.roa (hash: BNbF7LCHL9eJXgA/NHfhqhVICBytivhioqO9DDkr7Oc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 11:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4b:c3:da:de:02:cc:a7:49:06:60:c7:b2:86:9e:ae:c0:3f:8c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: May 23 10:38:00 2026 GMT Not After : May 24 11:16:00 2026 GMT Subject: CN=E8233A382B4191C8B1E623415D943932B81A687D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:24:24:78:7f:83:78:22:ec:9a:f9:87:c8: 55:89:78:cc:e7:28:0c:ca:23:fd:00:b5:51:12:e3: 4a:31:bd:eb:b0:3d:bf:bb:e1:00:b2:ab:3a:66:2b: 5c:a3:2a:7d:f0:69:aa:6c:d0:e8:d5:f3:6a:04:f5: fd:e0:05:ba:58:1c:0a:27:dd:17:84:cf:a7:7c:ae: 8d:7a:5d:55:7c:a4:a3:03:71:c5:ca:74:f2:46:43: d0:24:e9:d8:ab:af:c7:96:65:8b:95:5e:27:dc:51: 79:fc:20:18:4d:72:68:95:5c:85:65:7a:e1:ad:f8: 8e:c4:58:bb:2d:89:66:d5:ec:6f:14:a8:93:1f:27: 3a:6c:de:d3:d9:68:ed:49:77:ae:ab:99:0d:0f:e4: 70:5c:95:33:0c:b5:58:8b:1f:9f:ab:e3:96:e2:b4: 42:00:9a:30:de:14:db:72:af:7b:38:68:52:c8:bc: 5e:45:0a:b8:27:16:8e:d2:4e:6a:d3:43:fa:cb:c6: dc:19:87:56:a5:2b:11:fe:41:f6:11:60:b6:8b:c6: d7:b5:7b:fc:76:d8:00:42:94:ff:91:b0:a8:9d:79: b9:51:87:7b:54:8e:00:ea:b7:bf:89:83:37:70:74: 65:a9:80:b1:cb:77:cc:1b:6f:45:d7:86:24:b4:ca: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:23:3A:38:2B:41:91:C8:B1:E6:23:41:5D:94:39:32:B8:1A:68:7D X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7e:31:49:69:47:37:d5:95:87:39:72:d0:b2:32:9d:7c:28: 03:d5:32:1b:ea:2a:64:b7:a9:8b:8c:09:0a:a2:89:3b:80:68: f5:b1:43:af:df:6b:c9:a7:23:6b:dc:d6:2c:94:0b:09:c8:1b: 3e:a2:88:1c:6a:c0:d3:7b:1e:6d:c3:b1:79:61:4f:14:81:e4: ee:b9:0d:5c:ec:1b:2f:8c:7b:4e:50:8b:dc:d9:2c:7f:2c:5f: 76:35:bc:c1:45:2b:58:d5:f2:fb:7f:3c:6e:4b:73:c8:b1:d2: e4:ef:b1:98:de:74:b2:0b:d8:07:44:cd:a0:33:17:ff:dc:90: 82:48:52:0b:35:c8:bd:3b:36:ba:f4:f8:f9:cc:82:34:34:6e: 02:41:a1:7e:12:0f:29:c7:80:47:70:2e:29:30:c9:ed:67:80: 83:30:e2:27:49:2b:3f:eb:50:a9:64:e2:03:58:e1:65:18:f2: df:ec:de:a0:b9:f0:6b:5c:bf:a0:c9:eb:ca:63:0d:86:44:96: 89:5d:38:eb:9d:63:1e:13:c3:58:be:79:29:81:4b:48:a0:04: 3f:99:9e:28:26:c2:3a:e0:3b:e4:4e:99:c1:9c:4f:c8:11:c3: bf:62:2b:29:15:28:c4:37:1a:a9:5e:6a:e3:e1:e2:7e:d1:dc: 51:f7:08:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMkvD2t4CzKdJBmDHsoaersA/jPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjA1MjMxMDM4MDBaFw0yNjA1MjQxMTE2MDBaMDMxMTAvBgNV BAMTKEU4MjMzQTM4MkI0MTkxQzhCMUU2MjM0MTVEOTQzOTMyQjgxQTY4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mCQkeH+DeCLsmvmHyFWJeMzn KAzKI/0AtVES40oxveuwPb+74QCyqzpmK1yjKn3waaps0OjV82oE9f3gBbpYHAon 3ReEz6d8ro16XVV8pKMDccXKdPJGQ9Ak6dirr8eWZYuVXifcUXn8IBhNcmiVXIVl euGt+I7EWLstiWbV7G8UqJMfJzps3tPZaO1Jd66rmQ0P5HBclTMMtViLH5+r45bi tEIAmjDeFNtyr3s4aFLIvF5FCrgnFo7STmrTQ/rLxtwZh1alKxH+QfYRYLaLxte1 e/x22ABClP+RsKideblRh3tUjgDqt7+JgzdwdGWpgLHLd8wbb0XXhiS0ynAFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6CM6OCtBkcix5iNBXZQ5MrgaaH0wHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMkExQjlDQTBCNEUx RDM0NUVGMzc1NDI0MDc2NTNDNkU1OEVCQzUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnn4xSWlHN9WV hzly0LIynXwoA9UyG+oqZLepi4wJCqKJO4Bo9bFDr99ryacja9zWLJQLCcgbPqKI HGrA03sebcOxeWFPFIHk7rkNXOwbL4x7TlCL3NksfyxfdjW8wUUrWNXy+388bktz yLHS5O+xmN50sgvYB0TNoDMX/9yQgkhSCzXIvTs2uvT4+cyCNDRuAkGhfhIPKceA R3AuKTDJ7WeAgzDiJ0krP+tQqWTiA1jhZRjy3+zeoLnwa1y/oMnrymMNhkSWiV04 651jHhPDWL55KYFLSKAEP5meKCbCOuA75E6ZwZxPyBHDv2IrKRUoxDcaqV5q4+Hi ftHcUfcISw== -----END CERTIFICATE-----Generated at Sat May 23 21:34:51 2026 by rpki-client