$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft (raw, json) Hash identifier: Y+hrr7+iIQXMmzRM549tx/+D9MJmSktYGXI8saPWrao= Subject key identifier: FB:52:75:3F:14:22:6D:87:2D:C9:C2:95:41:66:6C:E5:AC:00:4A:24 Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Certificate serial: 070007CE58250904B267306D6BF1B6943934F81C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft Manifest number: 53 Signing time: Fri 29 May 2026 18:08:04 +0000 Manifest this update: Fri 29 May 2026 18:03:04 +0000 Manifest next update: Sat 30 May 2026 19:56:04 +0000 Files and hashes: 1: AS59019.roa (hash: btzlAW4GYWUN2ma+FzW8EzxPd49tI0rJMZmEY5/oX/8=) 2: AS58542.roa (hash: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw=) 3: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl (hash: BQwc5y0vRe454qz/1sKiwwF2kFxt6bgxXGvyoa1JEhA=) 4: AS17621.roa (hash: zqF/e4Ga8PYrOc0X3iakiBwylpQsSQJawT12rZTF/6w=) 5: AS4811.roa (hash: I06tg0jWKnueyfETLHRJ/lJdRJ1PkCdBU+YK4bl/rio=) 6: AS133119.roa (hash: ps021oXDgvJp1gp7DKvql3eOYp4ThgrB+wE9FLk00M8=) 7: AS23724.roa (hash: 94+lhcnOPv/NagJzLLgJuxzucoDhXRnaox75QFBxdnQ=) 8: AS136958.roa (hash: 9evXBbv7x1TGnMGjCSgUJriu28GZk/4mc69qLBT6/pU=) 9: AS58466.roa (hash: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:00:07:ce:58:25:09:04:b2:67:30:6d:6b:f1:b6:94:39:34:f8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Validity Not Before: May 29 18:03:04 2026 GMT Not After : May 30 19:56:04 2026 GMT Subject: CN=FB52753F14226D872DC9C29541666CE5AC004A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:94:85:05:cc:80:26:fa:ca:ab:59:77:da: d2:e1:a3:a3:2d:d2:30:df:89:ef:7f:89:a3:75:6e: ec:02:3f:78:a9:5e:6a:93:27:68:84:57:a0:8c:3c: a4:79:9b:99:01:9a:bc:8e:63:fe:38:52:28:b1:06: c0:b7:9b:aa:87:e6:89:13:e2:38:06:39:96:a9:d0: 36:94:7e:57:da:b4:37:3e:b3:30:43:56:63:b3:2a: 28:39:e3:33:c5:3d:85:95:12:d9:d9:d9:ed:81:f6: ff:29:df:bc:e9:9c:83:f0:1d:3f:7f:60:1d:8e:e3: 7a:0d:9e:44:7a:13:3a:69:6b:82:9c:22:06:f7:47: a3:91:6a:30:a2:39:78:01:29:79:4e:03:9a:bb:3c: 29:71:d9:24:85:12:d6:c8:07:f4:e1:e0:ed:3b:3a: f7:6b:ac:9b:24:57:a1:ea:83:ed:31:bc:74:bd:ea: c3:fe:21:33:cf:1f:65:58:01:6e:1b:6c:53:96:fa: c7:df:02:a1:06:9b:a0:cb:97:d0:79:2b:7e:05:f8: 57:2e:7e:d9:16:37:1e:8b:50:25:42:ba:ca:06:f4: 76:98:e5:d0:d9:84:8a:e7:2d:00:a8:40:31:09:d4: 7b:ee:c3:84:32:d7:d3:15:1b:4e:bb:2a:cb:c2:9b: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:52:75:3F:14:22:6D:87:2D:C9:C2:95:41:66:6C:E5:AC:00:4A:24 X509v3 Authority Key Identifier: keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ac:a8:fc:a8:4d:a4:e2:fd:90:43:df:06:81:53:d7:43:8d: 06:8b:ed:10:4f:6c:a4:78:7e:eb:9d:df:b8:0a:44:dc:84:c9: ed:fc:e4:87:2d:cb:a8:6f:c6:b1:36:2b:26:13:77:2c:63:29: 96:dc:6d:b1:d2:c0:6d:5d:13:dc:e9:4d:0a:e4:e7:c8:a0:75: bf:02:29:d1:55:7c:c5:bb:93:b1:87:48:c6:f1:8b:02:02:60: 69:44:66:02:1a:90:2a:72:93:ca:35:40:79:9b:8e:e1:15:92: ae:c7:d0:fb:9c:f4:f5:c2:8d:a6:79:9e:a5:97:5a:24:06:9f: e6:a0:90:66:34:b7:8a:e5:43:15:95:48:af:9f:2e:c4:b2:c6: 62:74:2e:0e:75:d6:45:24:c8:dc:84:d8:4c:9d:38:ee:b1:89: ac:6f:7a:2a:52:6f:5e:fb:45:e1:89:7d:11:42:1c:e6:87:d2: 32:cf:cc:c9:91:66:51:a2:ac:5c:9d:86:af:bc:a0:43:55:ab: 13:d0:89:0e:a0:26:65:bd:92:54:84:6d:65:5f:cf:99:7d:8b: 56:42:db:50:73:db:67:82:3f:70:d8:30:27:53:f5:f4:94:ed: a6:bd:d0:dd:4f:05:99:f6:a0:f7:66:77:e1:94:f7:f8:3e:8b: d3:ed:62:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBwAHzlglCQSyZzBta/G2lDk0+BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIz QkMwRDg4NjAeFw0yNjA1MjkxODAzMDRaFw0yNjA1MzAxOTU2MDRaMDMxMTAvBgNV BAMTKEZCNTI3NTNGMTQyMjZEODcyREM5QzI5NTQxNjY2Q0U1QUMwMDRBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaCZSFBcyAJvrKq1l32tLho6Mt 0jDfie9/iaN1buwCP3ipXmqTJ2iEV6CMPKR5m5kBmryOY/44UiixBsC3m6qH5okT 4jgGOZap0DaUflfatDc+szBDVmOzKig54zPFPYWVEtnZ2e2B9v8p37zpnIPwHT9/ YB2O43oNnkR6Ezppa4KcIgb3R6ORajCiOXgBKXlOA5q7PClx2SSFEtbIB/Th4O07 OvdrrJskV6Hqg+0xvHS96sP+ITPPH2VYAW4bbFOW+sffAqEGm6DLl9B5K34F+Fcu ftkWNx6LUCVCusoG9HaY5dDZhIrnLQCoQDEJ1Hvuw4Qy19MVG067KsvCm0YTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+1J1PxQibYctycKVQWZs5awASiQwHwYDVR0j BBgwFoAUqe9r3oSosRXIByGygMlHCzvA2IYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NDMyNDIyOTMxNjYxNy8wL0E5RUY2QkRFODRBOEIxMTVDODA3MjFCMjgwQzk0 NzBCM0JDMEQ4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDQzMjQyMjkzMTY2MTcvMC9BOUVGNkJERTg0QThC MTE1QzgwNzIxQjI4MEM5NDcwQjNCQzBEODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKyo/KhNpOL9 kEPfBoFT10ONBovtEE9spHh+653fuApE3ITJ7fzkhy3LqG/GsTYrJhN3LGMpltxt sdLAbV0T3OlNCuTnyKB1vwIp0VV8xbuTsYdIxvGLAgJgaURmAhqQKnKTyjVAeZuO 4RWSrsfQ+5z09cKNpnmepZdaJAaf5qCQZjS3iuVDFZVIr58uxLLGYnQuDnXWRSTI 3ITYTJ047rGJrG96KlJvXvtF4Yl9EUIc5ofSMs/MyZFmUaKsXJ2Gr7ygQ1WrE9CJ DqAmZb2SVIRtZV/PmX2LVkLbUHPbZ4I/cNgwJ1P19JTtpr3Q3U8Fmfag92Z34ZT3 +D6L0+1iXw== -----END CERTIFICATE-----Generated at Fri May 29 22:03:30 2026 by rpki-client