$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft File: B1F9550677201454EB206CCFD059783FCDDB44F0.mft (raw, json) Hash identifier: 38W7e9qagCcMZmnoOVcwYgef8INVifr0T1ad0ui3vS0= Subject key identifier: CD:AF:AF:00:A0:94:16:3D:E3:EA:21:5A:5A:A7:02:E8:59:7A:EE:FC Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Certificate serial: 59315C8871ED2C0179849DD9335CDAAC5B5F59D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft Manifest number: 85 Signing time: Tue 21 Apr 2026 09:06:41 +0000 Manifest this update: Tue 21 Apr 2026 09:01:41 +0000 Manifest next update: Wed 22 Apr 2026 10:08:41 +0000 Files and hashes: 1: 3130332e31392e3233322e302f32322d3232203d3e203632343638.roa (hash: FIyKRHnh6ANBsNFHBDZY9OW6prlllmKtfsx4VFw8aRA=) 2: 3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa (hash: vvsbD3Qmkj+urJIzHpJtcmG8mKUbyHobxkx5+Svk+iM=) 3: 3130332e36302e3136342e302f32322d3332203d3e2034383337.roa (hash: dZGyd9JNPLiYHO0TnfSl7bhsG5Ez1osZjPWrZetk+u8=) 4: 3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa (hash: 36wbu1SRDiLaujfYKA/iSyCAeDESkUTmIlUT9M35B30=) 5: 3130332e36302e3136342e302f32322d3232203d3e203632343638.roa (hash: auyuE2h/GPKANCvbz6Bw8Yi8e4eCZJDu9XTdgBKbank=) 6: 34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa (hash: r3XpPj1FYm8r25RMxCEfXoeyc9BUGQNJDYDBp+PrjQI=) 7: B1F9550677201454EB206CCFD059783FCDDB44F0.crl (hash: NbKAh+0uAIUmYaNcuo+5G8bam8APvHy29bzm04L35QM=) 8: 34332e3235342e3139322e302f32322d3332203d3e203632343638.roa (hash: bobpjRftY4EVuVK7RVubsSzMLbBd0b7awOTlrxaV/28=) 9: 34352e3234382e382e302f32322d3232203d3e203632343638.roa (hash: PRQJYfAdJbDuylQLPpP0OmrWCtfzAtohw68L22CpuFQ=) 10: 34352e3234382e382e302f32322d3232203d3e20313333303333.roa (hash: qsctuPBSfA+Dx7b6pLOln9nnloiMUANcbyygIqgY4OQ=) 11: 3130332e36302e3136342e302f32322d3332203d3e203536303436.roa (hash: JGee1jbT/oJkUuUxiQKutxXa0Yh+wmoesb3hIUiU5SE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:31:5c:88:71:ed:2c:01:79:84:9d:d9:33:5c:da:ac:5b:5f:59:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Validity Not Before: Apr 21 09:01:41 2026 GMT Not After : Apr 22 10:08:41 2026 GMT Subject: CN=CDAFAF00A094163DE3EA215A5AA702E8597AEEFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:ef:3e:37:ee:be:53:30:a9:23:ab:e1:5a: 2a:c2:e9:08:ca:6c:d1:be:09:97:c0:13:98:97:a3: 1c:8e:5f:f2:44:48:3a:d8:60:04:1b:20:d3:c4:22: 74:4b:9e:f9:72:f4:c3:4a:4b:87:9a:52:84:7a:11: 32:c1:ee:86:d4:35:eb:7e:d7:fd:79:fe:46:37:45: b9:a4:c7:20:c2:99:0b:3b:01:1d:ff:47:16:b2:52: 61:0e:64:dd:72:d4:5a:0f:81:4e:ef:a0:10:24:87: 4e:d5:2f:78:70:35:38:76:73:7a:33:cd:6f:2c:17: 40:f9:c3:3e:4a:e9:20:22:3e:d3:68:65:18:d4:5e: b0:37:03:ec:5f:eb:65:91:59:03:23:0c:1e:1b:53: 7f:e1:d3:99:8a:bb:e1:6a:b4:35:75:a0:f9:d3:05: c5:27:74:f2:8c:ad:4f:f2:c4:f7:ce:1f:56:fb:6a: 3b:7f:4c:0c:87:75:59:ab:cc:c7:d5:bc:c2:a9:62: fb:2f:a6:7f:39:1a:a7:61:00:21:fa:7d:3a:db:d5: 75:0d:27:c4:a9:0b:a4:3c:48:ad:44:42:9e:f6:0f: 4d:57:ff:3e:c8:67:3b:4a:63:47:c9:b5:05:c0:28: f1:d8:dd:a3:82:b2:a7:4d:a1:0f:e5:1b:cd:bf:8f: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AF:AF:00:A0:94:16:3D:E3:EA:21:5A:5A:A7:02:E8:59:7A:EE:FC X509v3 Authority Key Identifier: keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:23:be:67:b5:37:f2:c3:36:c9:11:8f:6d:54:90:8a:6b:54: cb:56:fd:eb:d6:0a:88:b8:b9:c4:93:5d:aa:5a:d1:8b:3a:98: 1d:1c:06:3e:da:df:ff:98:64:33:39:3a:5f:4d:a1:f5:6d:aa: 6d:cb:82:08:3d:64:4e:8c:b3:89:2e:d6:a3:5a:25:f9:26:bc: 14:68:0f:bc:9d:ce:bd:5a:5d:92:30:82:68:61:63:9a:54:c3: 1d:6c:31:34:37:b4:7d:45:c2:cb:61:15:19:35:52:51:ed:f9: 4b:0d:2c:30:4d:5d:65:5d:3f:88:40:ff:9d:b3:b3:28:49:43: 60:c1:29:4d:fa:3a:e1:4f:4f:93:4a:d3:a5:a9:cd:c6:a8:15: 76:d6:c3:c0:4b:51:24:54:c6:22:fd:f1:38:5f:ac:29:53:be: 46:ac:3e:fd:09:d9:2b:a6:b0:1d:67:d2:bf:e1:e6:21:1a:90: 12:8c:29:65:78:e3:50:1b:8e:8c:8d:82:bc:3e:b8:61:76:09: 09:8c:d5:a0:32:ee:2b:e1:cb:b9:e7:0d:eb:41:ef:e5:40:91: e5:bb:18:89:cd:75:3d:a7:2a:81:fd:c4:7d:c7:32:40:cb:41: 35:69:4b:1c:65:15:e3:47:e4:72:6f:94:b5:25:3a:4e:0e:4f: 02:f5:16:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWTFciHHtLAF5hJ3ZM1zarFtfWdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD RERCNDRGMDAeFw0yNjA0MjEwOTAxNDFaFw0yNjA0MjIxMDA4NDFaMDMxMTAvBgNV BAMTKENEQUZBRjAwQTA5NDE2M0RFM0VBMjE1QTVBQTcwMkU4NTk3QUVFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1O8+N+6+UzCpI6vhWirC6QjK bNG+CZfAE5iXoxyOX/JESDrYYAQbINPEInRLnvly9MNKS4eaUoR6ETLB7obUNet+ 1/15/kY3RbmkxyDCmQs7AR3/RxayUmEOZN1y1FoPgU7voBAkh07VL3hwNTh2c3oz zW8sF0D5wz5K6SAiPtNoZRjUXrA3A+xf62WRWQMjDB4bU3/h05mKu+FqtDV1oPnT BcUndPKMrU/yxPfOH1b7ajt/TAyHdVmrzMfVvMKpYvsvpn85GqdhACH6fTrb1XUN J8SpC6Q8SK1EQp72D01X/z7IZztKY0fJtQXAKPHY3aOCsqdNoQ/lG82/jz87AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUza+vAKCUFj3j6iFaWqcC6Fl67vwwHwYDVR0j BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3 ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC9CMUY5NTUwNjc3MjAx NDU0RUIyMDZDQ0ZEMDU5NzgzRkNEREI0NEYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiO+Z7U38sM2 yRGPbVSQimtUy1b969YKiLi5xJNdqlrRizqYHRwGPtrf/5hkMzk6X02h9W2qbcuC CD1kToyziS7Wo1ol+Sa8FGgPvJ3OvVpdkjCCaGFjmlTDHWwxNDe0fUXCy2EVGTVS Ue35Sw0sME1dZV0/iED/nbOzKElDYMEpTfo64U9Pk0rTpanNxqgVdtbDwEtRJFTG Iv3xOF+sKVO+Rqw+/QnZK6awHWfSv+HmIRqQEowpZXjjUBuOjI2CvD64YXYJCYzV oDLuK+HLuecN60Hv5UCR5bsYic11Pacqgf3EfccyQMtBNWlLHGUV40fkcm+UtSU6 Tg5PAvUWfg== -----END CERTIFICATE-----Generated at Tue Apr 21 19:03:55 2026 by rpki-client