$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft File: C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft (raw, json) Hash identifier: jncujpZJVJt5w3CZW07fvaueYRkHc5hxHmWZsASxXGg= Subject key identifier: 9A:DC:5C:C7:F7:38:AD:34:8C:0B:16:EF:A5:3E:C4:DA:72:D0:3F:7F Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Certificate serial: 1FF4DD80A4B68C67DFAA8AD3F454AF896A35FE29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft Manifest number: 26 Signing time: Sat 23 May 2026 00:02:32 +0000 Manifest this update: Fri 22 May 2026 23:57:32 +0000 Manifest next update: Sun 24 May 2026 02:35:32 +0000 Files and hashes: 1: 3131392e38302e34382e302f32312d3231203d3e2030.roa (hash: OGiAs6ybQW5wp7sSm+Um1t8e/jZwZaNAF3aCVlrneVo=) 2: 3131392e38302e36342e302f31382d3138203d3e2030.roa (hash: fSBLf7FDlepVCE3k6F2XDY92g0WMbrgw0ZXZlfHqZ5I=) 3: 3131392e38302e3230382e302f32302d3230203d3e2030.roa (hash: 9siWurZqFFFUnpiYmaZ3s2REcqpUg0SQ7bo8u2LJyY0=) 4: 323430303a353538303a3a2f33322d3332203d3e2030.roa (hash: WDe3fPz0Ru7oQ8lptrq7BUV2TKBOPhsKhVJ9oIcxGTU=) 5: 3131392e38302e3232342e302f32302d3230203d3e2030.roa (hash: PV1qgqVhthMEfnfNIpt+/J7bpkFg342ViVnJ9rGKeiA=) 6: 3131392e38302e3230342e302f32322d3232203d3e2030.roa (hash: v0iOjcbPBQGFDUB3R+arP845clM+A9rO5+kFa/KpAEk=) 7: 3131392e38302e382e302f32322d3232203d3e2034383038.roa (hash: uyAV2B0UgAaqhJ8Tx6GUKDrM2HT/GW8HLdhSG7e1nbM=) 8: 3131392e38302e35362e302f32312d3231203d3e2030.roa (hash: MyiN97QPbms8mDkoWGdQpLxRbrTTHpXtHioUGlVYaBw=) 9: 3131392e38302e3132382e302f31392d3139203d3e2030.roa (hash: Ct0o7TSSCq4PzJ93SEgUx5TYDYHAXXbcTgI0iDVnxPI=) 10: C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl (hash: Z4V0J3PB5+seiArS7Dc04iMV/osN9jv5k/LhCZ9lpfE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 02:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f4:dd:80:a4:b6:8c:67:df:aa:8a:d3:f4:54:af:89:6a:35:fe:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Validity Not Before: May 22 23:57:32 2026 GMT Not After : May 24 02:35:32 2026 GMT Subject: CN=9ADC5CC7F738AD348C0B16EFA53EC4DA72D03F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:36:df:2c:0c:ee:3b:77:c5:93:8b:a4:b7: d3:14:20:e0:a4:6f:92:70:b9:43:1d:71:6e:f1:41: 3d:51:97:a2:91:5f:fc:9b:b5:80:2f:d8:6a:44:f7: 3f:40:9e:19:a6:5f:4e:3c:06:27:f6:b7:91:c0:52: 70:b2:5f:97:5b:1e:2c:f5:a2:ce:4d:60:21:89:62: 19:bb:16:1f:5a:87:3b:83:51:6f:15:40:6c:ad:cb: be:b3:a2:5d:a4:42:89:7a:8f:bf:41:7e:c6:6f:c7: a0:8d:b6:5b:33:20:86:7b:c1:d8:79:d7:a0:04:7f: 08:50:23:12:b9:81:25:e2:aa:6c:5a:54:87:f9:3a: 34:28:58:10:c3:8f:d5:84:9c:99:b2:8b:e3:0b:74: b1:a9:ec:5c:08:0e:c2:1b:9f:df:84:81:b6:c9:58: 42:59:21:f9:26:7b:48:9f:92:66:33:bf:aa:76:e2: 9d:44:bf:11:83:1e:fc:f2:ad:a1:40:86:30:90:3f: b8:d7:23:6b:00:b7:f1:10:8f:aa:33:ef:46:35:4e: e9:39:a3:95:58:4e:4f:11:b0:c8:53:82:01:d1:5a: e2:e1:6e:07:51:85:1a:9f:2d:ab:d6:88:57:f2:4c: 11:af:35:bb:82:3e:18:76:17:51:43:ba:52:91:c8: 1a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DC:5C:C7:F7:38:AD:34:8C:0B:16:EF:A5:3E:C4:DA:72:D0:3F:7F X509v3 Authority Key Identifier: keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:07:03:99:4d:4d:f5:70:10:c9:1b:78:18:ab:6d:af:32:33: ae:ab:05:b4:a6:73:05:fc:94:c2:f9:47:ff:fb:c7:1e:69:97: 8b:bc:e7:94:92:5b:64:59:7c:79:66:53:d9:1f:15:f5:fa:8b: b1:d2:8a:5d:a7:a3:36:d9:13:9d:d9:09:cd:ee:03:ce:1e:01: 60:91:bd:b9:fc:e9:ec:9f:ac:28:b1:ce:c7:61:60:8e:cf:a3: 8d:a6:a1:5c:6b:29:3d:f3:cf:22:d3:4d:41:36:71:d1:bf:c0: ef:0b:0e:9e:02:e0:66:01:d5:c6:ea:6e:5d:83:21:01:a5:9e: 2a:96:c2:35:55:6f:74:47:db:1b:5f:0a:4a:3c:ab:3c:cb:b1: 56:90:a8:bb:3a:4b:b9:43:d2:e0:a6:dc:f4:13:bb:fd:21:d4: 96:52:44:5a:4a:e1:4b:69:dd:f7:38:1d:7c:78:5a:f1:d6:5e: 20:f8:45:84:e0:1b:d3:72:73:52:be:7e:d7:e7:73:86:35:12: 02:13:b4:6a:f9:3c:c6:c9:e4:ff:51:a3:19:31:0d:37:3f:4f: e1:c9:b1:f1:e2:43:e9:5e:37:46:5b:7c:ce:61:07:e0:a6:6b: 2a:e5:1f:fa:b8:73:8b:02:03:40:ef:5d:cd:d7:ec:6a:81:9f: ac:94:b5:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH/TdgKS2jGffqorT9FSviWo1/ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC NTFBN0M0OTAeFw0yNjA1MjIyMzU3MzJaFw0yNjA1MjQwMjM1MzJaMDMxMTAvBgNV BAMTKDlBREM1Q0M3RjczOEFEMzQ4QzBCMTZFRkE1M0VDNERBNzJEMDNGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjdzbfLAzuO3fFk4ukt9MUIOCk b5JwuUMdcW7xQT1Rl6KRX/ybtYAv2GpE9z9AnhmmX048Bif2t5HAUnCyX5dbHiz1 os5NYCGJYhm7Fh9ahzuDUW8VQGyty76zol2kQol6j79BfsZvx6CNtlszIIZ7wdh5 16AEfwhQIxK5gSXiqmxaVIf5OjQoWBDDj9WEnJmyi+MLdLGp7FwIDsIbn9+EgbbJ WEJZIfkme0ifkmYzv6p24p1EvxGDHvzyraFAhjCQP7jXI2sAt/EQj6oz70Y1Tuk5 o5VYTk8RsMhTggHRWuLhbgdRhRqfLavWiFfyTBGvNbuCPhh2F1FDulKRyBp/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmtxcx/c4rTSMCxbvpT7E2nLQP38wHwYDVR0j BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMTQwNzM5Njg5MDIxNjMvMC9DODk5OTY3Qjk1RTMy RTM3Q0NFQUExMUNGMTQ2RkI1N0I1MUE3QzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAcDmU1N9XAQ yRt4GKttrzIzrqsFtKZzBfyUwvlH//vHHmmXi7znlJJbZFl8eWZT2R8V9fqLsdKK XaejNtkTndkJze4Dzh4BYJG9ufzp7J+sKLHOx2Fgjs+jjaahXGspPfPPItNNQTZx 0b/A7wsOngLgZgHVxupuXYMhAaWeKpbCNVVvdEfbG18KSjyrPMuxVpCouzpLuUPS 4Kbc9BO7/SHUllJEWkrhS2nd9zgdfHha8dZeIPhFhOAb03JzUr5+1+dzhjUSAhO0 avk8xsnk/1GjGTENNz9P4cmx8eJD6V43Rlt8zmEH4KZrKuUf+rhziwIDQO9dzdfs aoGfrJS19w== -----END CERTIFICATE-----Generated at Sat May 23 03:46:59 2026 by rpki-client