$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft File: C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft (raw, json) Hash identifier: ESlYQXvSkB3GpHLNMW4VeTsvUZ/VwFhpoZduSHmbl10= Subject key identifier: D0:37:45:54:9B:DB:2F:62:57:69:5E:8F:4D:07:68:22:41:99:BA:BF Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Certificate serial: 70C21F689BDC115A22CBBC70D87F2F8AA104C02F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft Manifest number: 21 Signing time: Fri 29 May 2026 07:37:43 +0000 Manifest this update: Fri 29 May 2026 07:32:43 +0000 Manifest next update: Sat 30 May 2026 09:38:43 +0000 Files and hashes: 1: 3130312e3139382e3138372e302f32342d3234203d3e203535393932.roa (hash: gwZSyam7qczfq7xPisJsM8i1pn3x4wAGWjUkQMmUPfk=) 2: 3130312e3139382e3137382e302f32332d3233203d3e203535393932.roa (hash: mggjl9jx41i7oUGab9P2gxy4nza4AgEYuhpfR2Sg9c0=) 3: 3130312e3139382e3137362e302f32322d3232203d3e203535393932.roa (hash: fCjsOZtnw4nGDn9abm6owAHPuFVqkWmA5M7Dcbm5+hM=) 4: 3130332e32382e382e302f32342d3234203d3e203233373234.roa (hash: mAm7NlIEyqQIiOWEw4GBFiFLOoeiXHDGMzMY6xSaGQw=) 5: 3130312e3139382e3138342e302f32342d3234203d3e203535393932.roa (hash: xkLXXhh6dA+NUe5FBoeFBFT0Qfe21ZfH2kricSUswOM=) 6: 3130312e3139382e312e302f32342d3234203d3e203233373234.roa (hash: p7G0oVepOshAGFAxB7LrNRLHf5pTYmCVPk6M7gRAuiE=) 7: 3130312e3139382e3138392e302f32342d3234203d3e203535393932.roa (hash: WkSTH3diUKPM7YeEWlFR4Botaw/ZnICgxutTYj7QYMo=) 8: 3130312e3139382e3137302e302f32332d3233203d3e203535393932.roa (hash: fmXSeYFH7IWYbDtIisi+JYVD1ikJPF7fXdnqpi8Ww2U=) 9: 3130312e3139382e322e302f32342d3234203d3e203233373234.roa (hash: Pk8krIj6tg+H1cUl2ctnFVKWyuWX7SqJvGIYIyd6SM8=) 10: 3130312e3139382e342e302f32342d3234203d3e203233373234.roa (hash: WtDzrZTUEaioRGgvkaDsoPuVJtNVqzMMl88vv34rJMQ=) 11: 3130312e3139382e332e302f32342d3234203d3e203233373234.roa (hash: ZpWUyrhrm00WMdHwUYMCArdQHBDWw8grrK9mX3s+XA8=) 12: 3130312e3139382e3138362e302f32332d3233203d3e203535393932.roa (hash: Uvod8dBdbsXZksgUTaLPKnNSQB2Vac2SLIXlL+Cd+qc=) 13: 3130312e3139382e302e302f32342d3234203d3e203233373234.roa (hash: hp6B12FfJ2NWJSRywUfmksUaSjZWVViWC2lR+GLaE7A=) 14: 3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa (hash: scGhEFxgH/ByJtrtN2ud+ajw7/RRYqrFOrOwg0+UZ/Y=) 15: 3130312e3139382e3230302e302f32322d3232203d3e203535393932.roa (hash: 3jZZIGgHNNPdExy6+4ba6lwGGqONFoWQ+/8Ou/P8x7Q=) 16: 3130312e3139382e3138302e302f32322d3232203d3e203535393932.roa (hash: rkrYae0XoBZeFBWjHIkdRXy907nfouGrDmL2Z7ZxpOc=) 17: 3130312e3139382e3137322e302f32322d3232203d3e203535393932.roa (hash: 5Kb1min/2rIHSsm+B1D1d89sBXIwJ4FnSzTWz8KufBE=) 18: 3130312e3139392e3131322e302f32342d3234203d3e20313431363739.roa (hash: l9Ayt/9LinBk1RfLtF8snEGtJINvlnYMbJhgRRsrHS0=) 19: C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl (hash: zWUGV8pwnfj9fituvceK/dMp3l1yCqeeLe6e3LVRrSY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c2:1f:68:9b:dc:11:5a:22:cb:bc:70:d8:7f:2f:8a:a1:04:c0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Validity Not Before: May 29 07:32:43 2026 GMT Not After : May 30 09:38:43 2026 GMT Subject: CN=D03745549BDB2F6257695E8F4D0768224199BABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:22:66:e8:e2:fc:4e:46:16:36:7c:23:4c:2b: 31:5b:82:dd:e7:b9:74:1b:b7:92:3a:f8:ec:8a:79: 25:4d:37:16:b2:ca:2a:43:ac:54:26:ce:23:5d:7c: ff:d5:c2:b7:66:72:cf:1a:5f:73:ed:68:33:6a:0e: af:bd:a8:2e:38:de:85:96:0f:0e:83:51:4d:bb:41: e2:7f:1a:c0:00:d4:fc:40:dc:9d:76:cb:fc:38:5f: a5:61:dc:46:b3:ee:6c:b6:81:4f:23:bc:13:88:aa: af:5d:c6:0b:89:f7:65:78:a4:b4:40:f7:db:76:f5: 60:06:56:27:c2:30:63:7e:d0:c3:ce:77:68:5f:18: d8:99:5a:2f:a1:92:5b:31:c5:94:aa:20:e6:ce:7c: cb:74:5a:7b:50:c2:4e:0a:cb:55:ba:f8:50:63:1e: c7:64:c8:76:0d:7c:05:bf:85:76:8a:1e:59:aa:4c: a2:a8:fc:b5:10:da:31:56:2e:5d:0d:5f:8a:13:d9: 69:53:25:42:65:05:5f:66:84:34:82:cd:0f:f0:ba: 61:9b:f3:d0:30:0a:5b:f7:24:fd:8d:81:aa:55:ec: 4e:dc:01:06:e5:65:45:aa:ae:f2:39:f1:2c:e6:db: 4d:fe:6d:21:ef:93:55:29:f8:69:4e:b3:c7:25:4d: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:37:45:54:9B:DB:2F:62:57:69:5E:8F:4D:07:68:22:41:99:BA:BF X509v3 Authority Key Identifier: keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:86:79:c3:14:fa:01:fc:39:7f:fe:08:31:87:39:7c:df:d8: 90:65:cb:0b:e0:f9:73:76:8b:86:1d:c6:91:44:bd:8b:0d:f6: f2:b7:3c:b1:47:e7:4d:4f:03:e4:06:84:91:cb:1f:53:20:ec: b5:ca:c2:04:9e:2f:dc:d9:9f:fa:4b:8b:a2:5e:6c:39:f9:97: 32:7d:dd:c0:8f:64:39:96:85:f2:6b:b2:61:0a:75:f8:f9:83: ae:51:f0:b5:7d:de:d7:c1:4e:ac:dd:e0:c1:a0:5e:b8:21:a9: 58:78:45:c2:29:7a:07:1d:04:1c:72:5d:59:39:f5:2e:61:64: c7:3d:1e:54:c9:d1:0b:5f:5e:70:51:1a:8e:df:65:83:1e:34: 09:47:4d:cb:0e:5e:45:05:ac:3e:9e:a8:72:cd:8d:18:78:2d: 84:72:39:73:4e:a1:08:de:93:b9:d3:f3:09:cb:ae:25:be:0d: 32:e2:03:30:fb:d8:2e:00:41:c7:ce:b4:fb:d5:69:93:6a:5e: e2:e6:39:6a:da:34:b8:0a:82:aa:2f:fd:5e:67:02:4d:38:47: e8:0d:9a:df:fb:4b:8d:e0:9d:0b:25:1c:01:99:de:79:76:d0: ae:54:f0:0c:85:41:de:40:4b:0b:d9:19:f9:d4:8b:d2:c6:d5: 48:a5:84:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcMIfaJvcEVoiy7xw2H8viqEEwC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2 OUZERjk4NDAeFw0yNjA1MjkwNzMyNDNaFw0yNjA1MzAwOTM4NDNaMDMxMTAvBgNV BAMTKEQwMzc0NTU0OUJEQjJGNjI1NzY5NUU4RjREMDc2ODIyNDE5OUJBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYImbo4vxORhY2fCNMKzFbgt3n uXQbt5I6+OyKeSVNNxayyipDrFQmziNdfP/Vwrdmcs8aX3PtaDNqDq+9qC443oWW Dw6DUU27QeJ/GsAA1PxA3J12y/w4X6Vh3Eaz7my2gU8jvBOIqq9dxguJ92V4pLRA 99t29WAGVifCMGN+0MPOd2hfGNiZWi+hklsxxZSqIObOfMt0WntQwk4Ky1W6+FBj HsdkyHYNfAW/hXaKHlmqTKKo/LUQ2jFWLl0NX4oT2WlTJUJlBV9mhDSCzQ/wumGb 89AwClv3JP2NgapV7E7cAQblZUWqrvI58Szm203+bSHvk1Up+GlOs8clTTjbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0DdFVJvbL2JXaV6PTQdoIkGZur8wHwYDVR0j BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY3NjcwODQ5MjQxNzQzNTUvMC9DNTI3RUVGMjJFRDRC OTAzNDk0OUM5MUUzRDM5QjI0QTY5RkRGOTg0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIZ5wxT6Afw5 f/4IMYc5fN/YkGXLC+D5c3aLhh3GkUS9iw328rc8sUfnTU8D5AaEkcsfUyDstcrC BJ4v3Nmf+kuLol5sOfmXMn3dwI9kOZaF8muyYQp1+PmDrlHwtX3e18FOrN3gwaBe uCGpWHhFwil6Bx0EHHJdWTn1LmFkxz0eVMnRC19ecFEajt9lgx40CUdNyw5eRQWs Pp6ocs2NGHgthHI5c06hCN6TudPzCcuuJb4NMuIDMPvYLgBBx860+9Vpk2pe4uY5 ato0uAqCqi/9XmcCTThH6A2a3/tLjeCdCyUcAZneeXbQrlTwDIVB3kBLC9kZ+dSL 0sbVSKWEJA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:47 2026 by rpki-client