$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft (raw, json) Hash identifier: W5t2fdHDxtC84P6V6ZfmPCb/M+GzPmogXtmGp+Ha+J4= Subject key identifier: 9C:C0:29:E6:BB:79:1A:67:BD:03:A0:FF:FC:3C:B2:14:E2:15:6C:F5 Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Certificate issuer: /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Certificate serial: 1DA80E0D22B6A9E67B90A6F36AD8E3DD9E8BD7E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft Manifest number: 05 Signing time: Fri 29 May 2026 14:27:57 +0000 Manifest this update: Fri 29 May 2026 14:22:57 +0000 Manifest next update: Sat 30 May 2026 16:32:57 +0000 Files and hashes: 1: 3130332e34362e37302e302f32332d3233203d3e203539303337.roa (hash: y2EiXs8LNgJ1/Pp8JireKiM54hW6wgg4FJ3IXV8PFgU=) 2: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl (hash: 6TwqcctfbF81yDFeV1bi+862II1NeJHmChiLTkcjTb0=) 3: 3130332e34362e36392e302f32342d3234203d3e203539303337.roa (hash: bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=) 4: 34332e3232372e3135372e302f32342d3234203d3e203539303337.roa (hash: DK7b69cgtGlRNAnfRkB8+C11iqz8pGB/jvOkal3hpYI=) 5: 34332e3232382e372e302f32342d3234203d3e203539303337.roa (hash: g98JgRs1MoMYGab12bo/H9sDJy1FLWgXtCsfq+Sq30c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a8:0e:0d:22:b6:a9:e6:7b:90:a6:f3:6a:d8:e3:dd:9e:8b:d7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Validity Not Before: May 29 14:22:57 2026 GMT Not After : May 30 16:32:57 2026 GMT Subject: CN=9CC029E6BB791A67BD03A0FFFC3CB214E2156CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:89:c4:cd:80:fa:9d:af:6c:c7:80:bd:2a: 3a:89:99:84:b7:53:20:ff:08:b6:5f:88:f1:04:11: ec:0c:74:b2:2a:c9:6e:8f:e6:cd:90:b9:00:a7:bb: 1c:3b:f3:bf:92:45:4c:4a:b5:f4:fb:9e:06:3f:8c: ed:7b:a4:87:c6:0d:d4:ee:0b:2d:ea:f4:e3:ac:16: 5e:ee:ee:a1:78:64:bb:2c:c7:b2:84:b1:b8:a5:2e: 88:f1:4a:ae:71:4b:1b:41:f9:e6:b8:e9:d3:e3:c7: 3c:4d:30:c9:53:35:9f:e0:16:b9:52:44:99:a9:91: 6e:4d:37:9a:4f:b3:d9:11:15:43:ed:06:53:44:0d: c4:f9:df:2c:5a:d1:ec:1a:97:d7:0b:26:0c:59:a9: 7f:40:01:cc:08:b4:b1:40:5e:fb:56:1e:7f:0e:5e: 1e:72:04:47:d3:20:55:97:86:a5:bb:77:f4:8e:db: d9:4f:ac:e0:b1:52:22:85:a2:b5:9f:08:8b:00:58: 15:64:bf:fc:3d:78:84:8a:57:14:07:bc:da:6f:37: 59:71:f3:dd:5f:46:98:55:32:aa:ad:9e:59:8c:1f: 40:a4:95:97:18:5f:03:d9:56:05:0b:f6:b3:50:bd: e9:96:1a:82:90:2f:85:db:cd:fd:93:49:f4:7d:16: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C0:29:E6:BB:79:1A:67:BD:03:A0:FF:FC:3C:B2:14:E2:15:6C:F5 X509v3 Authority Key Identifier: keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:26:c7:15:75:d7:6a:6a:b2:8e:af:74:78:63:b5:a6:48:5a: 71:ce:ec:2a:30:53:a1:4c:3f:39:a5:17:cf:bd:37:bb:2a:df: 94:93:2b:5d:27:a9:e6:22:01:2f:25:9c:d3:8f:26:c2:67:5f: e7:2d:7e:e2:b5:ae:fe:6a:a8:77:ec:73:7d:ec:2c:36:35:2d: 3a:51:b7:9b:ea:a7:c1:41:4c:cc:e3:3f:57:da:69:6b:a3:11: 42:37:c2:91:5e:4d:be:15:3a:26:5e:c1:32:41:2d:77:99:5c: f4:27:03:95:ed:29:f7:7e:af:6b:e9:1b:e0:4d:30:ed:67:f7: 27:7d:fc:d9:6b:b7:98:40:3b:b1:2c:0c:6c:fb:4f:31:2b:5b: 92:6a:46:39:d0:94:d1:76:88:74:81:5d:30:61:87:ec:1a:e1: 8b:92:25:5c:18:7b:0b:66:8c:f8:2f:4d:1f:a1:79:be:17:ab: 22:f2:32:ab:39:3e:73:c5:18:43:77:e6:5d:21:df:9a:89:95: fa:ed:e6:84:d6:fb:5b:25:20:06:c0:c8:c5:1b:a6:a3:ef:42: 7e:70:0f:b3:f7:cd:80:c4:55:e8:60:fe:11:88:e6:32:c9:a4: 22:6b:19:48:9d:0e:1f:ef:0b:07:19:e1:09:94:07:51:6a:11: ca:10:8d:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHagODSK2qeZ7kKbzatjj3Z6L1+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFG QzZGNzcwRDAeFw0yNjA1MjkxNDIyNTdaFw0yNjA1MzAxNjMyNTdaMDMxMTAvBgNV BAMTKDlDQzAyOUU2QkI3OTFBNjdCRDAzQTBGRkZDM0NCMjE0RTIxNTZDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYcInEzYD6na9sx4C9KjqJmYS3 UyD/CLZfiPEEEewMdLIqyW6P5s2QuQCnuxw787+SRUxKtfT7ngY/jO17pIfGDdTu Cy3q9OOsFl7u7qF4ZLssx7KEsbilLojxSq5xSxtB+ea46dPjxzxNMMlTNZ/gFrlS RJmpkW5NN5pPs9kRFUPtBlNEDcT53yxa0ewal9cLJgxZqX9AAcwItLFAXvtWHn8O Xh5yBEfTIFWXhqW7d/SO29lPrOCxUiKForWfCIsAWBVkv/w9eISKVxQHvNpvN1lx 891fRphVMqqtnlmMH0CklZcYXwPZVgUL9rNQvemWGoKQL4Xbzf2TSfR9Fj2ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnMAp5rt5Gme9A6D//DyyFOIVbPUwHwYDVR0j BBgwFoAUuMzYtXH+yMXqEl1bNcIswfxvdw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTkxODMyMzM5NTc4ODgxNy8wL0I4Q0NEOEI1NzFGRUM4QzVFQTEyNUQ1QjM1QzIy Q0MxRkM2Rjc3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE5MTgzMjMzOTU3ODg4MTcvMC9COENDRDhCNTcxRkVD OEM1RUExMjVENUIzNUMyMkNDMUZDNkY3NzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeybHFXXXamqy jq90eGO1pkhacc7sKjBToUw/OaUXz703uyrflJMrXSep5iIBLyWc048mwmdf5y1+ 4rWu/mqod+xzfewsNjUtOlG3m+qnwUFMzOM/V9ppa6MRQjfCkV5NvhU6Jl7BMkEt d5lc9CcDle0p936va+kb4E0w7Wf3J3382Wu3mEA7sSwMbPtPMStbkmpGOdCU0XaI dIFdMGGH7Brhi5IlXBh7C2aM+C9NH6F5vherIvIyqzk+c8UYQ3fmXSHfmomV+u3m hNb7WyUgBsDIxRumo+9CfnAPs/fNgMRV6GD+EYjmMsmkImsZSJ0OH+8LBxnhCZQH UWoRyhCN1A== -----END CERTIFICATE-----Generated at Fri May 29 22:02:58 2026 by rpki-client