$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json) Hash identifier: C5wulWa5DXXnCkqnNldd+9x0A9v6SCb6G67NTcRk1ZQ= Subject key identifier: 72:0F:47:DB:27:0B:6F:47:93:BA:00:2C:AA:14:7A:86:98:2A:A8:E8 Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 64F87602721C4229CD36CC5C9DADBF534E317414 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft Manifest number: 14 Signing time: Fri 22 May 2026 19:37:30 +0000 Manifest this update: Fri 22 May 2026 19:32:30 +0000 Manifest next update: Sat 23 May 2026 23:17:30 +0000 Files and hashes: 1: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=) 2: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: tEC7ssF8CYtc0iBzrZfwZK1U4zv0+FjIOHCZgv7a0bI=) 3: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 23:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f8:76:02:72:1c:42:29:cd:36:cc:5c:9d:ad:bf:53:4e:31:74:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: May 22 19:32:30 2026 GMT Not After : May 23 23:17:30 2026 GMT Subject: CN=720F47DB270B6F4793BA002CAA147A86982AA8E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:00:f9:48:09:ab:65:54:c8:81:ed:8b:eb: d3:a7:c5:f9:46:2f:ef:4d:af:af:09:a1:93:2f:81: 9d:8d:57:ce:50:9e:32:20:4b:61:2e:dc:fb:08:fc: 1c:ff:6a:7e:46:7e:9e:46:54:c2:03:2c:6d:bb:14: 85:5e:b2:76:1e:e6:68:d5:a2:f0:5e:8c:04:b5:82: 9e:60:b9:b0:a1:a4:3a:3e:22:ca:8a:01:02:73:bb: ed:d8:6c:d7:7a:88:a0:32:db:a3:0f:27:c3:af:f3: ae:7c:b3:62:31:27:eb:9c:98:31:78:5d:4f:1b:f1: aa:a7:f2:aa:d0:fa:36:0d:25:2a:1d:2f:fa:7f:74: 4f:e8:58:39:be:64:c0:a0:bb:fe:ff:95:e3:1f:d0: f3:94:9a:8e:5a:9f:1a:9e:1e:97:94:46:43:55:95: 50:2d:60:f1:59:83:3f:25:a3:e5:5e:75:45:30:66: c5:e4:00:27:f0:c4:e6:5d:48:23:d1:01:37:15:2f: ff:f2:c7:2f:0d:1f:82:c5:4c:fd:4b:76:47:0a:10: 2e:3e:f8:f9:57:1b:4d:26:97:c1:19:db:13:ba:60: 9e:8b:77:d0:04:81:68:31:db:cc:de:a3:b0:5f:ca: e9:6b:a9:a0:3d:96:c2:ca:8a:80:de:b4:75:28:0b: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:47:DB:27:0B:6F:47:93:BA:00:2C:AA:14:7A:86:98:2A:A8:E8 X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4b:ae:52:0d:a6:11:61:f3:b8:54:5c:a9:78:e3:88:63:ab: d7:80:80:4f:76:33:6c:02:7b:b6:26:ad:82:5c:09:85:c0:04: 7d:8f:01:b8:3d:d0:c8:0a:66:e5:8c:00:0b:76:21:a8:65:4c: 3a:93:59:e2:5a:19:45:12:dc:9e:61:c2:a6:86:e1:3f:3a:d5: 90:7e:3d:c2:ec:9d:ed:11:a2:89:05:07:56:1c:73:6d:50:d8: b8:ea:35:df:0c:af:10:be:e2:1c:33:be:f9:06:67:01:07:03: f1:bb:8a:1a:c4:1c:b0:ae:68:52:05:c7:c7:85:54:1f:79:a0: 8b:73:3c:55:aa:b0:bb:99:5d:62:17:51:f5:5e:6d:5e:05:80: 2a:78:3c:f0:90:3d:84:96:f0:4b:ee:37:ce:f4:8c:d4:b7:0c: 36:60:6c:4b:05:4d:0d:62:22:fa:80:bd:e4:57:fb:fa:fa:fc: ea:ba:3b:f0:e3:43:ad:3b:20:83:cf:1d:09:a7:be:bc:4a:1a: d4:2a:67:44:78:8f:96:97:cc:19:28:d5:3a:b9:fd:82:4d:eb: a3:48:c2:e5:f5:ad:14:08:21:a6:65:55:84:f0:e8:72:10:a1: 2d:e8:1a:38:45:b1:20:59:9e:56:a3:7f:63:03:fe:ed:5b:56: 8e:4c:40:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZPh2AnIcQinNNsxcna2/U04xdBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjA1MjIxOTMyMzBaFw0yNjA1MjMyMzE3MzBaMDMxMTAvBgNV BAMTKDcyMEY0N0RCMjcwQjZGNDc5M0JBMDAyQ0FBMTQ3QTg2OTgyQUE4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3gD5SAmrZVTIge2L69OnxflG L+9Nr68JoZMvgZ2NV85QnjIgS2Eu3PsI/Bz/an5Gfp5GVMIDLG27FIVesnYe5mjV ovBejAS1gp5gubChpDo+IsqKAQJzu+3YbNd6iKAy26MPJ8Ov8658s2IxJ+ucmDF4 XU8b8aqn8qrQ+jYNJSodL/p/dE/oWDm+ZMCgu/7/leMf0POUmo5anxqeHpeURkNV lVAtYPFZgz8lo+VedUUwZsXkACfwxOZdSCPRATcVL//yxy8NH4LFTP1LdkcKEC4+ +PlXG00ml8EZ2xO6YJ6Ld9AEgWgx28zeo7BfyulrqaA9lsLKioDetHUoCx+/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcg9H2ycLb0eTugAsqhR6hpgqqOgwHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzODY0ODA4Nzc5NjEyMzEvMC80NDA1ODk0RERBMzFE NDE4MURCMzlGNUM0MTNFQUQyMEI0RUFERTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEuuUg2mEWHz uFRcqXjjiGOr14CAT3YzbAJ7tiatglwJhcAEfY8BuD3QyApm5YwAC3YhqGVMOpNZ 4loZRRLcnmHCpobhPzrVkH49wuyd7RGiiQUHVhxzbVDYuOo13wyvEL7iHDO++QZn AQcD8buKGsQcsK5oUgXHx4VUH3mgi3M8Vaqwu5ldYhdR9V5tXgWAKng88JA9hJbw S+43zvSM1LcMNmBsSwVNDWIi+oC95Ff7+vr86ro78ONDrTsgg88dCae+vEoa1Cpn RHiPlpfMGSjVOrn9gk3ro0jC5fWtFAghpmVVhPDochChLegaOEWxIFmeVqN/YwP+ 7VtWjkxA+Q== -----END CERTIFICATE-----Generated at Sat May 23 03:43:59 2026 by rpki-client