$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft File: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft (raw, json) Hash identifier: KI0ZzQKp5M0rK76Pns7D2g/3C2dMwS9yGQiZEuYX+ck= Subject key identifier: E4:84:DC:86:07:2C:3D:FA:83:87:8D:28:AF:46:25:1E:48:C0:25:8E Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 64A95909B68D1353710386EE4472EC298EAF8688 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft Manifest number: 85 Signing time: Mon 13 Apr 2026 08:47:51 +0000 Manifest this update: Mon 13 Apr 2026 08:42:51 +0000 Manifest next update: Tue 14 Apr 2026 09:53:51 +0000 Files and hashes: 1: 34352e3131362e33342e302f32342d3234203d3e203538343636.roa (hash: Y6mQZSgH/FimPg/WTmpLa0NFsYy+VLMdkKJBk3Gt430=) 2: 34352e3131362e3134312e302f32342d3234203d3e203538343636.roa (hash: nMk2GWR6myV/w53248tA4bXj+Pd2kJp7jwJ4W1hn+QU=) 3: 34352e3131362e33322e302f32342d3234203d3e203536303430.roa (hash: AQ7YaYVdLxTd9EsxIEUpB1+UMOAakasWUEEDh2Wd16A=) 4: 34352e3131362e3134312e302f32342d3234203d3e203536303430.roa (hash: L/7s2Osm6u7F5Z5g7aI/Kk9+KBEU/Pvwv6J3oMrzoDY=) 5: 3130332e35362e37382e302f32342d3234203d3e203536303430.roa (hash: 0iVARIi/xaFEn8mjMQ+LAQ219v5jwEi5LY11w8fzALw=) 6: 34332e3235352e3233312e302f32342d3234203d3e203536303430.roa (hash: vw9zy+WcgNlkn5G3/Oo6AIVb6pxlr5huvxCsqaD5zlA=) 7: 34352e3131362e33342e302f32342d3234203d3e203536303430.roa (hash: AH59k0QTlW1Ifhw1dyNl8R7ZP53lYjb8V6wr+a5vTwE=) 8: 3130332e35362e37362e302f32342d3234203d3e203536303430.roa (hash: S0ibJK/LXYJ212kDehN8NGHUDYlk99qx8kr5YHeEyDo=) 9: 3130332e35362e37392e302f32342d3234203d3e203536303430.roa (hash: Nr4MzKLDLUkXQhAnRCy78zyl92lMVVApHlc9+QDFYSg=) 10: 34352e3131362e3134302e302f32342d3234203d3e203536303430.roa (hash: g8tfq1aiysMAHy6RuyCaLs4fsG4BReI5+zor251/Y7I=) 11: 3130332e3233392e3230372e302f32342d3234203d3e203536303430.roa (hash: k+JmPmLCO+cNUkc68z+tjIOWgzukvF2ifx8lJ7MqVeY=) 12: 3130332e35362e37372e302f32342d3234203d3e203538343636.roa (hash: chBgBk+jhYLzhqNLC9Wumx3OD/gmhPMrOo1fCvHxlng=) 13: 34332e3235352e3232382e302f32322d3232203d3e203539303433.roa (hash: 47ZX+odkDMI6UANpyurQ443lYb4OU8O8VarkF8Yb7sg=) 14: 34352e3131362e3134302e302f32322d3232203d3e203539303433.roa (hash: OGa9chNdGvVi1ng761qxRIwE4bUGvJq+32/2abf029A=) 15: 3130332e3233392e3230362e302f32342d3234203d3e203536303430.roa (hash: GnSKQHUL57tHHpVOo+4xXu03xXH9/d1q75irCvzVxwQ=) 16: 34352e3131362e3134302e302f32322d3232203d3e203536303430.roa (hash: LsQIfsUKOQjsnX05xlup9BkZVlHz+kCT806/GW4sdX0=) 17: 34352e3131362e33352e302f32342d3234203d3e203538343636.roa (hash: qxdUkd5rdUjl2maTgpkv+yjhay0+7ctRGe4ff8DLO+g=) 18: 3130332e3233392e3230342e302f32322d3232203d3e203539303433.roa (hash: HaDm+C6cHjWk8eChSKycH8FybrBRCsOynVImQBNjDsE=) 19: 34352e3131362e33352e302f32342d3234203d3e203536303430.roa (hash: Z6HP1gNf5vHaIhAztVSLR7En0SY6RclqEHxA5xvfiM4=) 20: 34332e3235352e3232382e302f32342d3234203d3e203536303430.roa (hash: Fs/eVoDJxkSsdZZd/m+oGJow8E6PdhJkbqz+BcdMJ5I=) 21: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl (hash: ze6Mzmdhk8erdjo/PZ024jIyewCIJ3/miBqlVS7Fr8o=) 22: 3130332e35362e37392e302f32342d3234203d3e203538343636.roa (hash: a2ZvPYlJ+VfFAhB3jALdNHCAr8okKe4s5j9azyTOzyk=) 23: 34352e3131362e3134302e302f32342d3234203d3e203538343636.roa (hash: oJAn1OO7T7QY3gR/aW3IuFcTz6O+pTx4SliLxtC1jEY=) 24: 3130332e3233392e3230352e302f32342d3234203d3e203536303430.roa (hash: DSk6M3XnpfaCZ5YFH7NeYScsfw0GVrf2EJmbCXl7LfI=) 25: 34352e3131362e3134332e302f32342d3234203d3e203536303430.roa (hash: 6e4lggZCBnIZSNoVsTuI/rCVl9xr5T9SABl5+ekw/48=) 26: 3130332e35362e37372e302f32342d3234203d3e203536303430.roa (hash: yUW/lRrcc2CuYYkzLpRBuDJQQrAjQqqAYgYaC1SgDto=) 27: 34352e3131362e33332e302f32342d3234203d3e203538343636.roa (hash: aB6HYu91QLkogF7NEuI1Mr5U979LZu4ToUHN6214DcM=) 28: 3130332e35362e37362e302f32342d3234203d3e203538343636.roa (hash: R1hxKKYTfXhQuFkFGluK3tACxevJigS0e+7JkvDFOfY=) 29: 3130332e3233392e3230342e302f32342d3234203d3e203536303430.roa (hash: krb9+VZzw/7gmWLlOqLP3M6mOQzxwqADKKgYkWB48T0=) 30: 34352e3131362e33322e302f32342d3234203d3e203538343636.roa (hash: c7x7ZUNyyGgVZKjjyIFBNoelMopbDzY2eXsw6n7n3wY=) 31: 34352e3131362e3134322e302f32342d3234203d3e203538343636.roa (hash: +2HE3F+8WpQQc5JprS4NEmn9/NhFGXgXOhHvozrmObA=) 32: 34332e3235352e3232392e302f32342d3234203d3e203536303430.roa (hash: 9QPKuy7P1hpRkZxq5ZTesuNKBVXNSrFMJahVjaVLb5Q=) 33: 34352e3131362e33332e302f32342d3234203d3e203536303430.roa (hash: 2yzQQ3RfFhDKquFcv8UXbeKG27V0WF41cfHeNhLc4wY=) 34: 34352e3131362e3134322e302f32342d3234203d3e203536303430.roa (hash: QGr+zWvjHYnvlfuyUD70L+P+SEKlqqKcZjvIvcIqHxc=) 35: 3130332e35362e37382e302f32342d3234203d3e203538343636.roa (hash: MwkQ3+t6Ku9ZgQ2hzhnEetkeZCae+zCq8iuzHsTztoc=) 36: 34352e3131362e3134332e302f32342d3234203d3e203538343636.roa (hash: o2f8/5Kqql5i/J9YLJewLTpDhd3Qph7vvMr967evfko=) 37: 3130332e35362e3138342e302f32322d3232203d3e203536303430.roa (hash: l1wavDmga4Oh7J86j1GjlYuKKSefHbOrVDv4qJaQZe4=) 38: 3130332e35362e37362e302f32322d3232203d3e203536303430.roa (hash: mIOP15gRcOtsuKf+tYmRuvxc1mYkQYV33jCx6VgjW4k=) 39: 34332e3235352e3233302e302f32342d3234203d3e203536303430.roa (hash: piDS41+M6bXi2T8VAJtQQ1vZdFakKCc8DOoH2xJV4j8=) 40: 34352e3131362e33322e302f32322d3232203d3e203536303430.roa (hash: r+Vu8KXPLwZi4i7livp3MfUV2IrrNQGMyiWDliwb/cE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a9:59:09:b6:8d:13:53:71:03:86:ee:44:72:ec:29:8e:af:86:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 08:42:51 2026 GMT Not After : Apr 14 09:53:51 2026 GMT Subject: CN=E484DC86072C3DFA83878D28AF46251E48C0258E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:09:b0:e2:25:a0:c8:b6:00:f9:af:97:ce: d3:b0:ba:32:26:34:a5:52:21:fa:2b:98:01:bf:e3: c4:4f:bd:7c:ba:0d:4a:80:50:c5:2c:08:cc:06:26: 05:55:f0:37:41:07:a2:ea:4a:43:cc:60:c7:60:ac: 22:a1:5c:a0:4a:0a:c4:34:42:a4:e1:87:75:8f:85: 2f:8b:e9:79:76:ae:87:12:60:f4:02:72:33:c3:89: aa:c6:4e:d9:4b:4b:b3:37:2c:86:91:4f:0c:2a:67: 21:72:e9:78:17:dd:1c:ad:33:be:72:1a:a9:03:6e: 93:86:df:9c:cb:92:c1:f6:00:a7:c0:b5:eb:33:07: 70:97:a3:e8:ec:d3:f4:9d:19:c3:04:e4:2d:b7:47: cd:2a:cf:55:f2:5b:60:de:70:44:06:01:03:a5:19: 12:7f:a5:4b:6a:7a:41:6d:8e:30:28:ef:e0:80:8a: 6f:3d:ab:74:50:db:29:ad:3c:86:93:b4:a8:fd:cc: 7a:a9:1c:0d:2f:aa:96:d7:12:46:74:fe:b1:91:70: 9b:38:7c:26:cb:84:44:a1:c5:05:db:7e:8c:ba:e9: 89:5d:33:a2:cb:d7:e3:64:92:f8:a1:02:86:37:2e: 3a:84:c3:6a:42:da:f5:0c:1c:9b:b0:81:5f:61:e1: 98:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:84:DC:86:07:2C:3D:FA:83:87:8D:28:AF:46:25:1E:48:C0:25:8E X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9c:5b:f5:a1:b1:76:f3:66:52:d8:d6:48:70:67:98:0b:02: 94:a6:3c:73:23:df:8f:3b:5a:ff:4f:e9:35:53:6d:27:49:1a: 55:3e:1f:7e:8c:7f:81:b9:f9:e3:bf:5c:b6:b1:d6:8f:74:3b: 98:01:17:1a:16:3b:b8:8a:00:c3:0c:db:ff:37:be:ec:b7:33: 19:9c:c9:23:23:44:88:31:6e:dd:92:91:4e:8e:7b:53:e4:69: f1:31:bd:13:3b:69:72:dc:c7:7e:96:f2:20:0b:64:fc:84:a4: b2:4a:a1:63:a0:02:0d:ec:76:5e:71:90:84:b2:63:86:0f:5f: 92:ff:80:94:e1:db:70:ba:9e:f8:ec:d6:f5:3a:68:cb:ad:58: 99:d1:ca:0f:e6:dd:69:bd:1b:b7:44:a2:35:95:a0:d6:fe:ad: 1a:aa:b7:ae:a2:02:98:bd:24:52:dc:93:79:8a:a5:b5:8a:ae: 4e:06:0a:0f:22:50:1e:65:9f:fb:2a:90:4b:86:01:4c:96:81: ac:3c:cd:48:82:0a:7d:ba:26:ce:d4:db:3f:a8:18:c7:80:6d: 98:13:e8:22:b5:e6:a8:e4:a3:62:e0:b1:57:d9:93:1f:e2:53: b1:4d:d3:c6:ee:fc:5f:0a:ba:49:74:98:02:4e:0e:cc:af:e5: e9:b4:6b:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZKlZCbaNE1NxA4buRHLsKY6vhogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwODQyNTFaFw0yNjA0MTQwOTUzNTFaMDMxMTAvBgNV BAMTKEU0ODREQzg2MDcyQzNERkE4Mzg3OEQyOEFGNDYyNTFFNDhDMDI1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLwmw4iWgyLYA+a+XztOwujIm NKVSIformAG/48RPvXy6DUqAUMUsCMwGJgVV8DdBB6LqSkPMYMdgrCKhXKBKCsQ0 QqThh3WPhS+L6Xl2rocSYPQCcjPDiarGTtlLS7M3LIaRTwwqZyFy6XgX3RytM75y GqkDbpOG35zLksH2AKfAteszB3CXo+js0/SdGcME5C23R80qz1XyW2DecEQGAQOl GRJ/pUtqekFtjjAo7+CAim89q3RQ2ymtPIaTtKj9zHqpHA0vqpbXEkZ0/rGRcJs4 fCbLhEShxQXbfoy66YldM6LL1+NkkvihAoY3LjqEw2pC2vUMHJuwgV9h4ZhjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5ITchgcsPfqDh40or0YlHkjAJY4wHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8yRDBCQzE2NTVEMTdB M0FCMDlDOTFFNDNBMzJERThEOEFCMjEzNTFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5xb9aGxdvNm UtjWSHBnmAsClKY8cyPfjzta/0/pNVNtJ0kaVT4ffox/gbn5479ctrHWj3Q7mAEX GhY7uIoAwwzb/ze+7LczGZzJIyNEiDFu3ZKRTo57U+Rp8TG9EztpctzHfpbyIAtk /ISkskqhY6ACDex2XnGQhLJjhg9fkv+AlOHbcLqe+OzW9Tpoy61YmdHKD+bdab0b t0SiNZWg1v6tGqq3rqICmL0kUtyTeYqltYquTgYKDyJQHmWf+yqQS4YBTJaBrDzN SIIKfbomztTbP6gYx4BtmBPoIrXmqOSjYuCxV9mTH+JTsU3Txu78Xwq6SXSYAk4O zK/l6bRr7g== -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:33 2026 by rpki-client