$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft File: 8E80FA24E5DFF3073621050FF18487025A2A5198.mft (raw, json) Hash identifier: ufwEuwtp38n1G+Xtq36ScGckbKGlBtrok8ulRIt9NpQ= Subject key identifier: CD:42:DF:40:C3:30:32:EB:4E:26:8C:CE:DF:8D:83:B8:09:8A:0D:EE Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 11FE71D34CBC378BC4483BD77E9532D8216B3567 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 06:54:17 +0000 Manifest this update: Mon 13 Apr 2026 06:49:17 +0000 Manifest next update: Tue 14 Apr 2026 08:13:17 +0000 Files and hashes: 1: 3230322e3138392e31362e302f32322d3332203d3e20313337363930.roa (hash: IfoMH56XJ1hZmG6m81pyfga0KXHap9V3FsJ5JuGS2TU=) 2: 8E80FA24E5DFF3073621050FF18487025A2A5198.crl (hash: jkNYEJV/ey2z+DEsIuHUwGU1wy2rR8xN2wU4CWJtCq4=) 3: 3230322e3138392e34302e302f32322d3332203d3e20313337363930.roa (hash: 7MLtgEQLgz8+JliMrgOq3UgS3iW+w2D5wOJJPHojtII=) 4: 34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa (hash: cA3Izx4ClkaAnSH+4/BkPGWm/Zj6K4Lk6sR06Fy3Cjc=) 5: 3230322e3138392e34342e302f32322d3332203d3e20313337363930.roa (hash: X++pwqsSWbzCsFfKHx63zaTXj3/7WcDlIS7dIyXvltA=) 6: 3230322e3138392e33322e302f32322d3332203d3e20313337363930.roa (hash: 4i4FSEybTioj1V2sTCq+7obB9sLuJf2pf8I6Vq9j4yk=) 7: 3230322e3138392e33362e302f32322d3332203d3e20313337363930.roa (hash: tBDon7qwNeWrPA26OZBGPlmQowAGhGqE/GeAb1bpS10=) 8: 3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa (hash: GLXCMV8i6iC0hMUqv1DgfKc7/30lWg0has6n1lO1ySU=) 9: 3230322e3138392e32382e302f32322d3332203d3e20313337363930.roa (hash: 1NfYMuYmM23VWZnzSw96HJtYj4Lq8yKysAQ8JJZNoXw=) 10: 3230322e3138392e32302e302f32322d3332203d3e20313337363930.roa (hash: pXd/a+PR9keaGQQ50/8k6g0yn6Vvb7fAGIopVVHCeTY=) 11: 3230322e3138392e32342e302f32322d3332203d3e20313337363930.roa (hash: WsDWFA3iyxP5XNWv/VrakU6bn8VOzvjFaYrEaa9kg7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fe:71:d3:4c:bc:37:8b:c4:48:3b:d7:7e:95:32:d8:21:6b:35:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Apr 13 06:49:17 2026 GMT Not After : Apr 14 08:13:17 2026 GMT Subject: CN=CD42DF40C33032EB4E268CCEDF8D83B8098A0DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:eb:c1:7f:b9:66:7a:29:91:e4:f7:e6:93: cb:58:ef:54:15:27:16:85:f1:db:e6:30:e0:2e:16: 53:04:d8:b1:a7:b6:3d:08:1b:cc:48:78:86:db:c3: 7f:6d:ec:07:ab:74:f3:7c:39:8d:e3:46:14:1c:a0: 59:d9:23:f9:f0:9b:d3:9b:73:b4:ad:78:14:d4:8b: ad:1e:37:ff:b4:2f:56:2b:ec:1e:2e:b2:01:c1:c8: 76:6f:41:6e:fb:20:d6:d5:1d:ea:cd:1c:d8:f5:ab: e3:ed:5e:f0:66:cb:0c:53:1a:74:b9:63:2a:01:3c: 09:7d:59:75:b6:5f:70:d7:3b:ea:8f:62:6b:e3:cb: b0:88:33:45:7b:13:e1:80:e9:05:e9:95:69:02:0d: 8d:ee:1b:21:94:51:41:cc:7a:14:bc:d9:23:f9:cf: 9d:6c:ae:9b:ff:d5:61:61:d3:16:ac:d7:7d:4d:b0: 4d:95:a6:85:c3:1a:08:2f:59:dd:6b:df:80:ff:9e: 96:64:c5:94:19:67:3a:28:69:4b:35:6c:b3:76:16: ea:b9:ff:fc:ac:23:8c:94:d2:c2:83:db:44:fc:5f: 3d:98:46:0e:6b:02:26:92:33:81:1b:ef:8b:36:30: 67:84:41:ea:a2:93:d3:20:32:23:cd:b2:9b:d9:4d: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:42:DF:40:C3:30:32:EB:4E:26:8C:CE:DF:8D:83:B8:09:8A:0D:EE X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c7:5a:83:35:4a:9c:45:4b:7d:99:a9:14:b7:5a:82:a2:8c: 2c:36:c2:fe:35:a3:0a:54:df:07:5a:3a:b0:00:c3:f6:5f:cf: 3b:ac:8a:86:f7:23:d8:52:64:0e:f4:ce:5f:c4:b7:e8:20:0f: 0b:54:63:4b:84:af:31:89:d1:d8:e4:35:af:27:9f:99:fd:b0: e0:a0:c4:6c:a1:b6:3a:81:07:35:4c:fc:9c:73:bf:99:83:99: 5b:7f:58:e1:bb:6d:cb:f1:67:5a:e4:a6:33:45:08:08:d8:71: 2d:4d:a3:fb:b3:e9:b0:b1:e8:01:47:04:01:e6:8c:e4:54:db: ac:53:16:4c:7e:5f:39:87:a7:d4:7e:39:aa:23:58:24:aa:53: a5:77:75:25:1e:e4:f9:84:51:91:88:08:00:63:8a:45:c6:42: 1a:cb:a7:f5:29:6c:04:49:43:4a:b9:66:67:37:3f:9c:49:88: 63:36:7a:3e:50:1e:68:fc:f9:aa:83:56:ec:17:50:0b:be:bd: ac:3d:d2:ab:b3:a8:cc:16:ba:20:77:9e:0c:3d:bd:10:e4:91: fa:d3:6c:09:3b:3a:b4:ef:3b:c5:54:8d:e5:ed:14:68:ec:0d: 6f:0e:98:45:45:b4:86:c8:a6:ce:20:ae:7b:80:85:2a:f6:63: 3c:b4:48:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEf5x00y8N4vESDvXfpUy2CFrNWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjA0MTMwNjQ5MTdaFw0yNjA0MTQwODEzMTdaMDMxMTAvBgNV BAMTKENENDJERjQwQzMzMDMyRUI0RTI2OENDRURGOEQ4M0I4MDk4QTBERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92evBf7lmeimR5Pfmk8tY71QV JxaF8dvmMOAuFlME2LGntj0IG8xIeIbbw39t7AerdPN8OY3jRhQcoFnZI/nwm9Ob c7SteBTUi60eN/+0L1Yr7B4usgHByHZvQW77INbVHerNHNj1q+PtXvBmywxTGnS5 YyoBPAl9WXW2X3DXO+qPYmvjy7CIM0V7E+GA6QXplWkCDY3uGyGUUUHMehS82SP5 z51srpv/1WFh0xas131NsE2VpoXDGggvWd1r34D/npZkxZQZZzooaUs1bLN2Fuq5 //ysI4yU0sKD20T8Xz2YRg5rAiaSM4Eb74s2MGeEQeqik9MgMiPNspvZTS6jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzULfQMMwMutOJozO342DuAmKDe4wHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC84RTgwRkEyNEU1REZG MzA3MzYyMTA1MEZGMTg0ODcwMjVBMkE1MTk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScdagzVKnEVL fZmpFLdagqKMLDbC/jWjClTfB1o6sADD9l/PO6yKhvcj2FJkDvTOX8S36CAPC1Rj S4SvMYnR2OQ1ryefmf2w4KDEbKG2OoEHNUz8nHO/mYOZW39Y4btty/FnWuSmM0UI CNhxLU2j+7PpsLHoAUcEAeaM5FTbrFMWTH5fOYen1H45qiNYJKpTpXd1JR7k+YRR kYgIAGOKRcZCGsun9SlsBElDSrlmZzc/nEmIYzZ6PlAeaPz5qoNW7BdQC769rD3S q7OozBa6IHeeDD29EOSR+tNsCTs6tO87xVSN5e0UaOwNbw6YRUW0hsimziCue4CF KvZjPLRISA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:14 2026 by rpki-client