$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json) Hash identifier: vmo6VacGG8aihdT8YyJ8pMoFG8zDEhC3oAvfNKIVcME= Subject key identifier: 4D:A5:54:B2:90:58:43:DD:77:1C:89:6B:7B:BC:A1:E5:37:CD:17:00 Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 7558A91A1A3D51E62EA06AFC256507E1BA353B96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft Manifest number: 30 Signing time: Fri 29 May 2026 02:07:26 +0000 Manifest this update: Fri 29 May 2026 02:02:26 +0000 Manifest next update: Sat 30 May 2026 04:55:26 +0000 Files and hashes: 1: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=) 2: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=) 3: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: bFnaXiP/rdoEHwmOV/zQLLRZHfUfeS0Vl6LvODAOLYY=) 4: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=) 5: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=) 6: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 04:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:58:a9:1a:1a:3d:51:e6:2e:a0:6a:fc:25:65:07:e1:ba:35:3b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: May 29 02:02:26 2026 GMT Not After : May 30 04:55:26 2026 GMT Subject: CN=4DA554B2905843DD771C896B7BBCA1E537CD1700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:db:2a:3d:b5:bd:10:56:00:f0:3b:69:1c:d4: cc:60:15:cc:44:99:7f:69:31:14:7e:8f:07:dc:c8: 34:14:03:e6:29:46:c6:9b:6a:e1:77:ba:5a:3e:47: 8c:44:21:f9:e9:79:dc:d9:fe:f0:28:1c:c5:8a:38: af:d3:f1:ea:a0:e5:be:1c:64:a9:45:cf:ec:c5:36: fb:68:cc:fd:f3:39:b7:da:79:d0:4e:b6:8b:56:68: 3c:c2:e1:e8:1f:d4:0b:13:59:5e:62:21:48:b6:2f: 82:4b:67:27:d4:f3:e1:84:46:f9:f6:44:11:b1:5a: 4e:71:59:d6:60:a7:92:cd:8a:96:ee:5b:6e:45:7b: 81:c9:4e:c9:c5:cc:a6:b1:3e:13:3c:19:a0:e2:5c: b0:6f:6e:9f:40:38:f9:85:05:12:4a:cb:98:26:4f: 11:bc:45:db:f6:d0:e8:76:25:12:2a:b0:76:b3:39: 06:c1:4f:53:b6:47:d3:5b:ba:f9:cd:8a:af:73:df: 19:52:77:4f:ec:fa:60:30:27:55:c0:4b:65:5b:52: b5:c2:00:2c:29:a8:16:5f:31:aa:61:74:c7:40:4c: de:c2:24:f2:24:8c:bd:a8:45:43:0e:f2:f4:47:01: f7:b3:16:20:c0:4d:2f:bb:a3:87:64:6c:b0:05:ca: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A5:54:B2:90:58:43:DD:77:1C:89:6B:7B:BC:A1:E5:37:CD:17:00 X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a9:2f:94:ae:7f:4f:5f:c9:d2:0a:21:b4:b4:fe:e6:c8:45: c6:25:7e:1a:5a:4c:ed:32:ab:59:2e:a5:59:79:03:ab:c1:b9: f2:1b:35:11:47:9b:f2:55:8a:16:75:17:f0:ba:77:76:0b:2f: c2:28:e4:47:e1:69:86:a4:2d:80:12:c7:f7:80:34:85:a0:33: 51:0c:02:ef:d4:01:8c:eb:af:67:eb:e6:0c:8f:b1:72:b1:42: 63:30:d2:f0:16:e3:c9:e6:ec:cf:9a:9e:80:a9:89:41:84:c0: de:84:fe:cf:be:59:f7:ec:48:c1:b0:3c:1e:e4:69:d6:fe:ac: cd:32:53:a5:2e:18:ae:cf:39:84:3c:ed:24:50:99:19:87:36: e9:1d:40:9f:d9:c1:5a:18:87:26:da:29:93:c2:06:64:b3:6f: 70:f3:de:dc:7e:de:cc:5d:ed:0c:b5:40:67:4b:34:99:ef:0c: 51:14:a8:98:0f:5d:d1:a1:cb:9a:65:61:c6:00:a9:59:3b:f6: da:63:46:e3:4b:68:da:3f:c8:96:bb:e1:ab:03:3e:ca:e5:ae: 14:15:24:f0:b0:6e:c6:7c:ff:f1:a9:c7:24:22:b7:b4:ad:97: 92:38:60:4b:8d:7a:16:43:0e:9b:ae:f8:34:a1:68:9d:e7:9b: 6e:d6:79:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdVipGho9UeYuoGr8JWUH4bo1O5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjA1MjkwMjAyMjZaFw0yNjA1MzAwNDU1MjZaMDMxMTAvBgNV BAMTKDREQTU1NEIyOTA1ODQzREQ3NzFDODk2QjdCQkNBMUU1MzdDRDE3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2yo9tb0QVgDwO2kc1MxgFcxE mX9pMRR+jwfcyDQUA+YpRsabauF3ulo+R4xEIfnpedzZ/vAoHMWKOK/T8eqg5b4c ZKlFz+zFNvtozP3zObfaedBOtotWaDzC4egf1AsTWV5iIUi2L4JLZyfU8+GERvn2 RBGxWk5xWdZgp5LNipbuW25Fe4HJTsnFzKaxPhM8GaDiXLBvbp9AOPmFBRJKy5gm TxG8Rdv20Oh2JRIqsHazOQbBT1O2R9NbuvnNiq9z3xlSd0/s+mAwJ1XAS2VbUrXC ACwpqBZfMaphdMdATN7CJPIkjL2oRUMO8vRHAfezFiDATS+7o4dkbLAFyukdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTaVUspBYQ913HIlre7yh5TfNFwAwHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwNTkxNjg3MzI3MDg4NjUvMC9EOEU5NzQ1QjUwNUND RDdEMjIxMDVDQjg5RDU1NzRFNTk5QjQ1RTEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6kvlK5/T1/J 0gohtLT+5shFxiV+GlpM7TKrWS6lWXkDq8G58hs1EUeb8lWKFnUX8Lp3dgsvwijk R+FphqQtgBLH94A0haAzUQwC79QBjOuvZ+vmDI+xcrFCYzDS8Bbjyebsz5qegKmJ QYTA3oT+z75Z9+xIwbA8HuRp1v6szTJTpS4Yrs85hDztJFCZGYc26R1An9nBWhiH Jtopk8IGZLNvcPPe3H7ezF3tDLVAZ0s0me8MURSomA9d0aHLmmVhxgCpWTv22mNG 40to2j/IlrvhqwM+yuWuFBUk8LBuxnz/8anHJCK3tK2XkjhgS416FkMOm674NKFo neebbtZ5wQ== -----END CERTIFICATE-----Generated at Fri May 29 22:03:34 2026 by rpki-client