$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: 8ZeU3OQGbpFVJYSvMTXVjYcC10yzVuRWBfTYSoA/kgs= Subject key identifier: E4:E6:B7:56:2B:0A:DB:F2:88:06:1E:2E:A2:65:E9:9B:55:02:D4:FE Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 753B6ED91EA0E3BA836307E151A3605C0E2C81C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 83 Signing time: Sat 18 Apr 2026 13:34:55 +0000 Manifest this update: Sat 18 Apr 2026 13:29:55 +0000 Manifest next update: Sun 19 Apr 2026 16:10:55 +0000 Files and hashes: 1: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: JUbAUnWKZ9kNsjliM4G4fWMcgVTfWgr3KKjvRmR/AZU=) 2: 3135382e3134302e3235322e302f32322d3234203d3e20313331323734.roa (hash: DRk1iE9DVcrJ6axiNlUwsP1U7sQtnFQkLMY1NQ1OBGU=) 3: 3135382e3134302e3235322e302f32322d3234203d3e203535393936.roa (hash: ULObT7tTc9jva9EphYgKiJVcA/we8vdXzu8555O8v2k=) 4: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: gSJCLKyb9LLIjcjQ7RVxdKp1qcZZehGn9jgs05yrhkM=) 5: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: g4wybQGjv2udmgy4odp8Jc4FIMGJ7fH2vY6ud3fMWTE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3b:6e:d9:1e:a0:e3:ba:83:63:07:e1:51:a3:60:5c:0e:2c:81:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Apr 18 13:29:55 2026 GMT Not After : Apr 19 16:10:55 2026 GMT Subject: CN=E4E6B7562B0ADBF288061E2EA265E99B5502D4FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:b9:f8:2a:b9:ce:37:af:11:f1:35:8b:3f: 8c:1a:df:43:93:35:05:43:86:40:3f:84:ff:e0:04: 79:38:e7:84:48:40:a7:c4:1a:72:a0:c0:af:a8:95: 48:f7:f0:b1:76:ee:5c:f5:55:6f:2e:ed:7e:9b:5f: 9e:c0:c5:d1:9a:3a:34:ea:ce:ea:c0:1a:0f:50:bb: 15:a7:17:9e:56:a5:22:36:3f:e0:0f:c7:0f:8b:55: 1e:f1:da:0b:b0:b0:fa:70:51:e2:11:6e:e8:34:ea: a8:34:82:c6:51:a2:21:66:0b:c9:3a:7c:fe:ec:3a: 6f:ec:10:03:92:e5:6e:f0:c4:f9:ce:2a:48:db:06: ff:f9:b1:55:12:0e:f5:b0:d4:26:d0:bc:40:37:6c: 79:d0:00:96:3b:f4:49:86:ed:89:42:44:cb:5c:91: 38:9f:a4:1f:92:6b:ce:09:f0:75:1a:b0:76:b1:5f: 9f:cc:0c:9a:7c:0e:08:2e:04:b9:85:73:3f:1e:97: 96:c1:3b:8b:a4:18:c7:e4:fc:66:f0:e7:67:73:3b: da:31:61:4a:74:dd:9b:f4:b1:7c:25:f5:f4:08:fe: 11:d1:d9:bf:95:97:9c:1c:eb:37:6e:02:65:74:10: 6b:0e:9e:d6:2c:21:77:b6:10:3e:19:ca:5c:03:4c: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E6:B7:56:2B:0A:DB:F2:88:06:1E:2E:A2:65:E9:9B:55:02:D4:FE X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:5a:98:51:f0:2e:6c:10:57:9f:f2:ce:11:f3:a3:f1:b5:b8: c5:7c:85:87:97:2e:47:1e:d2:2a:4e:3f:14:af:16:f8:d8:4d: b0:54:32:4a:64:ff:ab:f8:87:76:2c:7a:9b:69:f3:f3:01:4a: 68:c6:91:68:6b:c0:32:3b:fd:64:93:6c:28:14:46:21:16:9e: d3:a2:e9:68:2c:68:f1:55:f9:86:0d:65:a0:2b:15:d1:34:4f: ad:f2:29:c1:32:f8:b0:fe:00:c1:d2:bf:e4:2a:b7:d5:d1:8f: f9:03:3d:13:bb:73:10:7c:bd:af:ef:79:b9:ec:d4:52:fe:6a: e0:51:92:03:0d:c6:c5:1e:5c:e6:02:0d:2e:f5:e4:a4:d3:f2: 97:40:56:a4:32:93:90:6a:e4:5a:92:92:44:43:8c:01:1c:a2: 02:70:a0:fa:47:42:92:52:fa:6b:2e:84:6a:00:85:dc:55:b5: aa:c9:1e:fe:93:db:37:57:ef:a5:4d:96:71:e1:84:6d:af:a3: 8d:da:c0:87:80:8f:b8:ad:f9:1d:27:75:cb:95:63:89:a0:31: 77:c3:23:20:77:fb:54:70:5c:b7:48:60:cf:98:3f:95:be:ff: de:13:8c:3f:94:c6:5a:ff:ab:13:ce:97:62:8c:48:4d:ce:81: 8a:40:30:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdTtu2R6g47qDYwfhUaNgXA4sgcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA0MTgxMzI5NTVaFw0yNjA0MTkxNjEwNTVaMDMxMTAvBgNV BAMTKEU0RTZCNzU2MkIwQURCRjI4ODA2MUUyRUEyNjVFOTlCNTUwMkQ0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXjrn4KrnON68R8TWLP4wa30OT NQVDhkA/hP/gBHk454RIQKfEGnKgwK+olUj38LF27lz1VW8u7X6bX57AxdGaOjTq zurAGg9QuxWnF55WpSI2P+APxw+LVR7x2guwsPpwUeIRbug06qg0gsZRoiFmC8k6 fP7sOm/sEAOS5W7wxPnOKkjbBv/5sVUSDvWw1CbQvEA3bHnQAJY79EmG7YlCRMtc kTifpB+Sa84J8HUasHaxX5/MDJp8DgguBLmFcz8el5bBO4ukGMfk/Gbw52dzO9ox YUp03Zv0sXwl9fQI/hHR2b+Vl5wc6zduAmV0EGsOntYsIXe2ED4ZylwDTBybAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5Oa3VisK2/KIBh4uomXpm1UC1P4wHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlqYUfAubBBX n/LOEfOj8bW4xXyFh5cuRx7SKk4/FK8W+NhNsFQySmT/q/iHdix6m2nz8wFKaMaR aGvAMjv9ZJNsKBRGIRae06LpaCxo8VX5hg1loCsV0TRPrfIpwTL4sP4AwdK/5Cq3 1dGP+QM9E7tzEHy9r+95uezUUv5q4FGSAw3GxR5c5gINLvXkpNPyl0BWpDKTkGrk WpKSREOMARyiAnCg+kdCklL6ay6EagCF3FW1qske/pPbN1fvpU2WceGEba+jjdrA h4CPuK35HSd1y5VjiaAxd8MjIHf7VHBct0hgz5g/lb7/3hOMP5TGWv+rE86XYoxI Tc6BikAwuQ== -----END CERTIFICATE-----Generated at Sun Apr 19 01:14:45 2026 by rpki-client