$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft File: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft (raw, json) Hash identifier: +uNafmlm5PwSTw+VjUKHMOXUIRBPrrEptnE4/dVEYmk= Subject key identifier: E3:BD:84:2D:AB:7B:FB:88:63:99:FE:AA:D3:1C:2B:8C:8D:8C:DE:5C Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 Certificate issuer: /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Certificate serial: 75A983463B75979FA074D59B9B279358A4A880EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft Manifest number: 39 Signing time: Fri 29 May 2026 03:47:31 +0000 Manifest this update: Fri 29 May 2026 03:42:31 +0000 Manifest next update: Sat 30 May 2026 06:06:31 +0000 Files and hashes: 1: 3230332e3137352e3133342e302f32342d3234203d3e203233383432.roa (hash: +D2YJXhi7gkd5ruX2Q97ZdkQnhtzpkhpP5Bhit0l6oQ=) 2: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (hash: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE=) 3: 3230332e39312e33322e302f31392d3139203d3e203233383432.roa (hash: ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=) 4: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl (hash: l/fIEKautm0Th6VhW9IKgqIqEcBrdjnNHQI96XonXpo=) 5: 3230332e3137352e3132382e302f32342d3234203d3e203233383432.roa (hash: XQccSce6jCVjp9IhoZfR0ihzWQ6r0oB8bbRQKHnlpXU=) 6: 3230332e3137352e3133332e302f32342d3234203d3e203233383432.roa (hash: AlGk3Gjnc1it8DaDJwzzaa6Lz3S7VWaXMCWafM/0c28=) 7: 3230332e39312e35312e302f32342d3234203d3e203233383432.roa (hash: uIbjQjR2A2bqo/dxkWbU5Bw/TQzIU7lTSy+MSJAp7ow=) 8: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (hash: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=) 9: 3230332e39312e35322e302f32342d3234203d3e203233383432.roa (hash: BnR9tde6g4JR7s+u2o2QtkVnknrXtCl8GjZCZV9iNhI=) 10: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (hash: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k=) 11: 3230332e3137352e3133372e302f32342d3234203d3e203233383432.roa (hash: A9OF+LYDehr6q1VSW8RvE7BSot6C4lLWA5bD1r+geMI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a9:83:46:3b:75:97:9f:a0:74:d5:9b:9b:27:93:58:a4:a8:80:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Validity Not Before: May 29 03:42:31 2026 GMT Not After : May 30 06:06:31 2026 GMT Subject: CN=E3BD842DAB7BFB886399FEAAD31C2B8C8D8CDE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:21:4e:d5:ad:c4:ba:8b:9e:d5:60:b3:f7: f6:2c:86:37:0b:2d:e0:a5:e8:2e:a1:89:ee:ae:7d: 40:37:43:ac:80:60:e4:b2:28:53:db:cd:aa:01:f5: 2c:77:6d:6f:e0:66:5d:ed:bd:9e:56:0e:83:8f:b3: 87:97:7e:bd:e0:90:34:bf:4f:48:33:66:25:8f:e6: 78:af:44:67:63:bb:e9:da:f8:6e:87:cf:60:cd:a2: 7d:06:d5:2a:85:71:82:44:19:8f:f1:66:5a:70:93: 52:3b:48:81:0b:c7:7f:d1:0b:14:39:ac:e8:82:15: c1:a7:3a:58:62:88:87:38:70:ef:70:1c:a2:85:dc: 7a:05:f7:7e:67:fb:64:d4:f7:15:1b:99:1d:e5:91: 9a:55:d6:c5:ce:54:40:3c:cd:2d:fa:b3:a8:8b:d1: 25:9d:7c:af:24:3d:da:d8:43:9e:75:90:aa:a1:17: 3f:22:43:0a:fa:3f:b2:82:ad:b8:4f:b8:05:7e:5e: 69:5f:77:7a:6a:72:92:89:5d:fb:57:4d:10:e3:01: 8c:98:e2:ed:2a:83:97:0c:db:31:d6:97:a6:6f:c7: 9a:e8:ed:83:d9:62:eb:82:0d:41:fa:b0:89:5e:7f: a8:5a:de:c1:72:e2:0b:93:92:d4:23:41:09:9d:be: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:84:2D:AB:7B:FB:88:63:99:FE:AA:D3:1C:2B:8C:8D:8C:DE:5C X509v3 Authority Key Identifier: keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:11:4d:62:fa:00:12:64:f1:db:1f:b6:25:ef:0f:42:d1:28: 24:20:86:9d:93:a1:7e:a6:05:f1:dd:8c:6d:1b:01:70:c0:7a: 2c:97:8b:98:54:55:32:1a:c0:8e:53:92:c4:d8:eb:aa:c0:6b: af:b0:2b:50:68:8f:86:0d:8b:f6:68:16:b3:47:26:b4:44:dd: bf:6a:a4:ae:92:25:32:14:06:79:91:80:72:2e:ce:67:8a:7a: 6c:a1:4a:89:45:20:7d:8d:6c:00:69:76:62:ae:9a:96:b0:a9: 0e:1c:70:5e:7e:b9:06:03:09:1b:23:db:9f:dc:44:57:3b:d3: 6d:c7:a5:1f:a0:ed:89:a0:d0:62:5d:b4:f0:79:97:19:90:96: 6a:46:df:56:07:47:7b:f0:6c:1d:2d:b0:bd:e8:8e:88:45:7b: 6a:54:c4:a8:11:b6:b6:58:e5:f0:a2:f8:98:cd:5e:c6:ed:74: 85:88:fa:82:8b:08:65:85:f4:6b:b2:bd:b5:1b:0f:34:7e:11: b7:da:dd:4f:2b:e8:6a:ef:0d:25:7c:a5:2e:e1:18:34:f9:64: 2d:94:21:7c:83:55:77:35:8f:92:6c:43:d8:fc:2f:a7:7d:17: ad:ba:0c:9d:89:4a:e0:e8:ce:ca:c7:c5:40:93:df:2a:4a:ed: c6:9b:b2:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdamDRjt1l5+gdNWbmyeTWKSogOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0Njgw RTVEMzE3MjAeFw0yNjA1MjkwMzQyMzFaFw0yNjA1MzAwNjA2MzFaMDMxMTAvBgNV BAMTKEUzQkQ4NDJEQUI3QkZCODg2Mzk5RkVBQUQzMUMyQjhDOEQ4Q0RFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhCFO1a3Euoue1WCz9/YshjcL LeCl6C6hie6ufUA3Q6yAYOSyKFPbzaoB9Sx3bW/gZl3tvZ5WDoOPs4eXfr3gkDS/ T0gzZiWP5nivRGdju+na+G6Hz2DNon0G1SqFcYJEGY/xZlpwk1I7SIELx3/RCxQ5 rOiCFcGnOlhiiIc4cO9wHKKF3HoF935n+2TU9xUbmR3lkZpV1sXOVEA8zS36s6iL 0SWdfK8kPdrYQ551kKqhFz8iQwr6P7KCrbhPuAV+Xmlfd3pqcpKJXftXTRDjAYyY 4u0qg5cM2zHWl6Zvx5ro7YPZYuuCDUH6sIlef6ha3sFy4guTktQjQQmdvgsjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU472ELat7+4hjmf6q0xwrjI2M3lwwHwYDVR0j BBgwFoAUsNEkp9px8cdGbrngcQ50aA5dMXIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk4OTQwOTU5NzQ4OTE1My8wL0IwRDEyNEE3REE3MUYxQzc0NjZFQjlFMDcxMEU3 NDY4MEU1RDMxNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0NjgwRTVEMzE3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5ODk0MDk1OTc0ODkxNTMvMC9CMEQxMjRBN0RBNzFG MUM3NDY2RUI5RTA3MTBFNzQ2ODBFNUQzMTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxFNYvoAEmTx 2x+2Je8PQtEoJCCGnZOhfqYF8d2MbRsBcMB6LJeLmFRVMhrAjlOSxNjrqsBrr7Ar UGiPhg2L9mgWs0cmtETdv2qkrpIlMhQGeZGAci7OZ4p6bKFKiUUgfY1sAGl2Yq6a lrCpDhxwXn65BgMJGyPbn9xEVzvTbcelH6DtiaDQYl208HmXGZCWakbfVgdHe/Bs HS2wveiOiEV7alTEqBG2tljl8KL4mM1exu10hYj6gosIZYX0a7K9tRsPNH4Rt9rd Tyvoau8NJXylLuEYNPlkLZQhfINVdzWPkmxD2Pwvp30XrboMnYlK4OjOysfFQJPf KkrtxpuyuQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:52 2026 by rpki-client