$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft File: 7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft (raw, json) Hash identifier: Hb1etKiObF439BctaJLzkz2YupbBz0IYPka7orAfJfE= Subject key identifier: D0:3C:44:6F:09:37:EF:EC:D9:0D:EC:74:F2:A5:08:70:47:3C:0B:30 Authority key identifier: 7D:76:05:9D:BE:0A:9C:07:7B:DF:FB:87:3A:EF:8E:C8:B6:8C:23:AF Certificate issuer: /CN=7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF Certificate serial: 5831B4EFA0F17D09C5789F5BA3ACCC6A0CF4F531 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft Manifest number: 19 Signing time: Fri 29 May 2026 14:42:58 +0000 Manifest this update: Fri 29 May 2026 14:37:58 +0000 Manifest next update: Sat 30 May 2026 16:46:58 +0000 Files and hashes: 1: 323430303a373365303a3a2f33332d3333203d3e20313436383136.roa (hash: Uu05feJs1kWzCBhqECtGwkD39rOIoNraYpyXK3xfyc0=) 2: 7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl (hash: lXnuLCxF6JOnSFlslBzMewSOUwbv3WMV0TOuz11eQ1s=) 3: 323430303a373365303a383030303a3a2f33332d3333203d3e20313436383136.roa (hash: ZWxdCtb8Xvi/p2unJ2mHQCYiEmf8lT8LOVcl0OEHQYU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:31:b4:ef:a0:f1:7d:09:c5:78:9f:5b:a3:ac:cc:6a:0c:f4:f5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF Validity Not Before: May 29 14:37:58 2026 GMT Not After : May 30 16:46:58 2026 GMT Subject: CN=D03C446F0937EFECD90DEC74F2A50870473C0B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:0b:ca:31:f9:f5:95:c2:ce:8f:9d:a0:fc: 4e:6c:3b:f2:ae:cd:14:f4:ed:22:0c:9e:ef:d7:bf: 94:d9:a0:26:c2:b4:d5:a5:89:8f:f7:9e:11:97:16: bc:b6:0d:50:aa:ef:6c:93:54:bf:52:01:80:79:8d: fa:3a:ef:99:ac:36:59:05:d6:65:3c:2f:6a:cc:c2: 03:7e:65:1d:99:0a:19:f5:59:9d:a4:f8:44:39:c2: b0:c3:9c:cb:1e:ef:21:3a:a1:7f:65:48:67:c2:75: 46:21:c1:40:a0:a6:61:73:6e:68:e3:56:77:13:a3: 91:48:35:cc:ca:58:72:90:80:aa:d3:d5:c2:42:3d: c3:22:46:18:f4:73:83:46:9f:f9:57:86:e7:ba:be: 65:0e:8a:dc:15:16:91:ac:1d:9d:fb:07:20:6a:05: fc:a4:6c:34:17:47:43:5f:d8:9c:f8:d9:89:be:f6: b9:ac:67:da:5f:b9:b3:d8:89:ba:3c:92:fb:fb:42: ac:19:7e:37:a0:c0:ba:2d:84:0d:51:c2:ba:ed:6d: 95:b3:af:07:37:e5:98:90:8e:4e:cc:b0:fa:6f:42: 0d:d0:27:55:c8:34:f6:6f:46:97:72:44:fe:82:52: 70:d7:23:7c:ae:07:08:50:90:be:0f:72:70:8f:61: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3C:44:6F:09:37:EF:EC:D9:0D:EC:74:F2:A5:08:70:47:3C:0B:30 X509v3 Authority Key Identifier: keyid:7D:76:05:9D:BE:0A:9C:07:7B:DF:FB:87:3A:EF:8E:C8:B6:8C:23:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:d0:26:42:4a:cf:36:f3:ae:14:7e:93:38:a5:78:07:b8:ac: 6a:f6:5b:cc:d9:28:01:c1:89:d4:b0:1c:98:df:bb:e5:e6:0a: bb:17:46:3c:ff:78:4c:02:ce:92:b0:70:fd:88:e6:cb:2f:1a: cd:25:83:d9:6a:12:01:9d:12:74:1b:b4:3e:3d:89:b1:2d:db: 22:81:e1:3d:22:0e:e2:24:ef:3f:06:01:89:81:42:30:c9:0d: e8:5b:1c:46:5b:c5:c6:f8:72:87:a5:ef:c5:cc:c4:0c:58:1e: 6e:38:50:f6:6a:9c:78:6d:d1:ea:4d:56:47:76:35:9c:82:c9: 7a:e7:7c:df:f6:04:29:7e:72:6a:ab:71:9f:e4:b2:ef:b7:b5: 51:54:ad:d0:80:0a:13:12:79:2b:bc:53:e7:32:03:45:18:62: 09:fb:48:82:57:93:56:83:f4:c0:aa:e7:b2:bb:28:27:73:61: f6:c0:54:72:e4:88:39:ba:1c:70:53:64:74:1d:37:76:4d:ce: 2c:b5:3c:c7:0f:2a:f1:90:07:6d:30:18:c5:6b:1e:29:17:b1: bd:91:8d:b0:aa:7f:13:de:10:c9:1a:08:87:cc:09:85:7e:fb: 69:2b:99:73:47:57:42:73:47:2a:cc:c6:62:e6:72:91:2d:90: a6:d7:dd:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWDG076DxfQnFeJ9bo6zMagz09TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NjA1OURCRTBBOUMwNzdCREZGQjg3M0FFRjhFQzhC NjhDMjNBRjAeFw0yNjA1MjkxNDM3NThaFw0yNjA1MzAxNjQ2NThaMDMxMTAvBgNV BAMTKEQwM0M0NDZGMDkzN0VGRUNEOTBERUM3NEYyQTUwODcwNDczQzBCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AvKMfn1lcLOj52g/E5sO/Ku zRT07SIMnu/Xv5TZoCbCtNWliY/3nhGXFry2DVCq72yTVL9SAYB5jfo675msNlkF 1mU8L2rMwgN+ZR2ZChn1WZ2k+EQ5wrDDnMse7yE6oX9lSGfCdUYhwUCgpmFzbmjj VncTo5FINczKWHKQgKrT1cJCPcMiRhj0c4NGn/lXhue6vmUOitwVFpGsHZ37ByBq BfykbDQXR0Nf2Jz42Ym+9rmsZ9pfubPYibo8kvv7QqwZfjegwLothA1RwrrtbZWz rwc35ZiQjk7MsPpvQg3QJ1XINPZvRpdyRP6CUnDXI3yuBwhQkL4PcnCPYRkBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0DxEbwk37+zZDex08qUIcEc8CzAwHwYDVR0j BBgwFoAUfXYFnb4KnAd73/uHOu+OyLaMI68wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUwNTc4Mzg5OTU4NjU3Ny8wLzdENzYwNTlEQkUwQTlDMDc3QkRGRkI4NzNBRUY4 RUM4QjY4QzIzQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q3NjA1OURCRTBBOUMwNzdCREZGQjg3M0FFRjhFQzhCNjhDMjNBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MDU3ODM4OTk1ODY1NzcvMC83RDc2MDU5REJFMEE5 QzA3N0JERkZCODczQUVGOEVDOEI2OEMyM0FGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdAmQkrPNvOu FH6TOKV4B7isavZbzNkoAcGJ1LAcmN+75eYKuxdGPP94TALOkrBw/Yjmyy8azSWD 2WoSAZ0SdBu0Pj2JsS3bIoHhPSIO4iTvPwYBiYFCMMkN6FscRlvFxvhyh6XvxczE DFgebjhQ9mqceG3R6k1WR3Y1nILJeud83/YEKX5yaqtxn+Sy77e1UVSt0IAKExJ5 K7xT5zIDRRhiCftIgleTVoP0wKrnsrsoJ3Nh9sBUcuSIOboccFNkdB03dk3OLLU8 xw8q8ZAHbTAYxWseKRexvZGNsKp/E94QyRoIh8wJhX77aSuZc0dXQnNHKszGYuZy kS2Qptfd8Q== -----END CERTIFICATE-----Generated at Fri May 29 22:02:56 2026 by rpki-client