$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: wbmD7IH8YN0oghyo7icYCJ8WjOoxwNGbs1O+nXP8E50= Subject key identifier: D9:AD:F5:3B:27:7A:DE:EB:B0:67:CE:BB:E4:66:F9:07:63:E3:96:D9 Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 4E8081D200391EDA2392B99E10B20AD101E7532E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: 2D Signing time: Fri 29 May 2026 04:52:37 +0000 Manifest this update: Fri 29 May 2026 04:47:37 +0000 Manifest next update: Sat 30 May 2026 07:16:37 +0000 Files and hashes: 1: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 2: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: wpr1d8ZnhaZb6V/QnhLCmDeZPvlkdEhnuXwNlNWRX14=) 3: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) 4: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) 5: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:80:81:d2:00:39:1e:da:23:92:b9:9e:10:b2:0a:d1:01:e7:53:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: May 29 04:47:37 2026 GMT Not After : May 30 07:16:37 2026 GMT Subject: CN=D9ADF53B277ADEEBB067CEBBE466F90763E396D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:b5:8a:09:f4:88:57:30:e7:56:72:ff:99: 67:93:b6:b0:7a:16:e2:d1:ca:ac:d5:a3:6f:a1:32: d0:0a:70:5e:29:70:96:b0:26:51:e6:5f:03:4d:3e: 71:ee:11:91:cf:32:29:85:40:5a:14:65:6f:bd:e1: ff:f2:ba:27:de:d5:11:f3:cd:6a:b7:99:5f:29:0a: d5:94:0d:bc:d7:cd:82:53:ef:16:4b:4a:de:29:13: e7:80:2b:18:7c:89:c3:56:95:b0:1e:bb:c0:d3:79: 6f:08:d8:8c:59:32:76:99:55:44:23:16:60:5d:72: 9e:c1:a7:39:c9:37:d8:be:08:1f:32:b5:fc:05:e4: 8f:41:89:a4:43:2b:a7:0a:1a:2e:7e:13:27:e3:97: 48:a6:09:0e:df:78:38:cf:ec:75:00:5a:03:01:70: e0:de:f9:3d:64:f6:61:db:84:2e:0a:5c:a9:28:ee: 20:24:3c:eb:f6:ad:9d:20:02:e8:9e:a1:e0:57:8c: b3:89:6f:a3:d2:ee:78:53:3c:51:86:c0:ae:1f:b8: 8f:f9:d9:1d:67:20:36:5c:0d:81:57:0a:c0:c2:98: 32:e4:d8:90:e1:f0:4d:4d:49:6c:9d:13:92:2e:6e: 4b:5d:3a:d1:88:08:6f:5a:f9:f4:0a:a4:10:28:0c: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:F5:3B:27:7A:DE:EB:B0:67:CE:BB:E4:66:F9:07:63:E3:96:D9 X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c4:b0:b3:d4:1e:69:c4:c5:ce:1f:8c:55:70:9c:b7:d5:94: f3:df:87:07:0d:7d:f6:f1:7d:73:d5:1a:65:ff:04:59:2d:a2: 22:93:8f:7d:74:70:31:49:76:37:0e:86:ef:80:a0:2a:10:54: ff:f8:f9:51:8c:20:00:e0:33:39:36:6c:c1:b2:eb:19:79:38: f5:68:13:f9:ce:35:e1:69:d9:0d:c8:13:0d:12:94:0f:56:2b: 0a:d1:d6:31:3d:5a:e9:7e:23:21:1c:12:b2:b9:5c:cd:f3:61: 98:5e:63:5d:b3:8c:23:de:2e:45:d6:ac:75:df:4a:04:f4:c6: d1:21:da:13:cd:b3:38:d6:bb:a9:0d:14:8a:cd:9d:5b:bb:7f: 32:c0:cb:d7:c0:07:ca:54:97:90:68:0e:7c:d4:a2:af:d8:6e: ce:5e:c5:4a:c2:68:6c:b9:91:57:cc:82:be:65:64:e5:03:d3: 0f:20:81:61:ae:35:1f:ea:3d:0d:c4:df:a2:85:eb:2b:f8:70: 86:41:bf:06:47:38:ca:25:81:28:aa:59:6e:d8:7f:8c:db:49: f0:c0:7c:4c:75:04:ad:9b:78:74:4d:64:c8:66:62:94:da:8e: fc:c1:42:70:f1:98:90:8c:3f:6c:59:eb:47:d9:ef:09:45:1a: a7:96:38:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUToCB0gA5HtojkrmeELIK0QHnUy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjA1MjkwNDQ3MzdaFw0yNjA1MzAwNzE2MzdaMDMxMTAvBgNV BAMTKEQ5QURGNTNCMjc3QURFRUJCMDY3Q0VCQkU0NjZGOTA3NjNFMzk2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bLWKCfSIVzDnVnL/mWeTtrB6 FuLRyqzVo2+hMtAKcF4pcJawJlHmXwNNPnHuEZHPMimFQFoUZW+94f/yuife1RHz zWq3mV8pCtWUDbzXzYJT7xZLSt4pE+eAKxh8icNWlbAeu8DTeW8I2IxZMnaZVUQj FmBdcp7BpznJN9i+CB8ytfwF5I9BiaRDK6cKGi5+Eyfjl0imCQ7feDjP7HUAWgMB cODe+T1k9mHbhC4KXKko7iAkPOv2rZ0gAuieoeBXjLOJb6PS7nhTPFGGwK4fuI/5 2R1nIDZcDYFXCsDCmDLk2JDh8E1NSWydE5IubktdOtGICG9a+fQKpBAoDIo3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2a31Oyd63uuwZ8675Gb5B2PjltkwHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsSws9QeacTF zh+MVXCct9WU89+HBw199vF9c9UaZf8EWS2iIpOPfXRwMUl2Nw6G74CgKhBU//j5 UYwgAOAzOTZswbLrGXk49WgT+c414WnZDcgTDRKUD1YrCtHWMT1a6X4jIRwSsrlc zfNhmF5jXbOMI94uRdasdd9KBPTG0SHaE82zONa7qQ0Uis2dW7t/MsDL18AHylSX kGgOfNSir9huzl7FSsJobLmRV8yCvmVk5QPTDyCBYa41H+o9DcTfooXrK/hwhkG/ Bkc4yiWBKKpZbth/jNtJ8MB8THUErZt4dE1kyGZilNqO/MFCcPGYkIw/bFnrR9nv CUUap5Y4Rg== -----END CERTIFICATE-----Generated at Fri May 29 22:03:32 2026 by rpki-client