$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json) Hash identifier: a7uzgUdEerZXABNhw3/XJ3fJbNciH2BhoW1luVjjhj8= Subject key identifier: 8D:7E:56:C7:B7:C1:BA:10:74:09:31:7B:D9:08:DF:B2:5B:E6:14:D9 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 1E170B3D14BB2EF844707F82EEF74D0637FE7DAA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 23:54:17 +0000 Manifest this update: Sun 12 Apr 2026 23:49:17 +0000 Manifest next update: Tue 14 Apr 2026 02:53:17 +0000 Files and hashes: 1: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=) 2: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=) 3: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=) 4: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: WWA7jkCMQw5zszNppyNqmpDfRaYg3NfQxrHysy/VXfg=) 5: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=) 6: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=) 7: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:17:0b:3d:14:bb:2e:f8:44:70:7f:82:ee:f7:4d:06:37:fe:7d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Apr 12 23:49:17 2026 GMT Not After : Apr 14 02:53:17 2026 GMT Subject: CN=8D7E56C7B7C1BA107409317BD908DFB25BE614D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:a5:e7:00:6a:2d:22:4f:47:cb:37:28:de: 20:9f:80:51:e1:2b:6e:90:f1:43:7a:e1:f9:62:95: 36:3b:10:a7:8f:2d:75:ce:ee:99:84:90:07:c5:e1: d2:b9:10:82:f8:b9:e0:e0:da:00:55:7b:91:ea:c2: 1f:45:41:9b:79:cf:f9:46:b9:5b:fe:c0:b7:90:d5: 7d:d5:30:fa:07:8f:d6:ea:df:d7:ab:ec:ac:fa:b9: 86:4d:7b:f0:e3:1a:b7:15:a9:e4:3e:11:cd:9e:db: 51:ed:d2:4a:8a:19:9c:e1:61:cb:ca:b3:1f:e6:73: 4c:c2:c7:50:a1:61:85:0c:45:65:46:c1:70:a3:ac: 9a:c2:fe:a6:90:39:cd:a9:32:98:cb:06:5a:5d:54: 75:8e:2d:95:cb:ba:82:05:fe:74:27:6a:8a:81:7c: 7a:17:4c:88:71:b6:cc:bd:45:ba:8b:bb:20:6c:95: 7e:a1:05:2e:23:4a:d4:14:e3:0f:47:23:67:c7:1d: ff:ae:5a:5a:b1:c7:7b:c8:97:df:65:46:e4:79:7a: 5f:a0:93:04:32:bd:a7:76:8b:3c:c8:0a:c7:79:fb: 95:b8:b6:93:32:56:5c:c1:0b:73:f0:80:d1:6b:5d: 50:69:fd:41:08:27:f6:a8:26:bb:ba:03:45:0b:f9: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7E:56:C7:B7:C1:BA:10:74:09:31:7B:D9:08:DF:B2:5B:E6:14:D9 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:31:3d:5c:f9:24:32:46:90:f3:6d:6d:79:67:3c:95:44:cb: 33:90:00:2d:11:db:3a:50:08:17:ac:f8:82:27:3d:6b:38:5c: 6e:2d:15:2c:e2:ac:f3:7e:89:d1:5f:a9:ae:07:5c:d6:d0:36: da:73:be:75:65:8b:cd:eb:30:99:28:d6:10:28:06:e4:37:65: a2:b6:d2:99:9e:a7:38:2b:5c:d7:dd:9c:c0:13:1b:82:87:b8: 67:35:d2:02:64:f7:dd:b5:64:ac:c1:9a:a0:20:6b:8a:85:d5: 28:6a:55:56:67:7c:a6:42:18:42:41:29:aa:54:fd:94:84:90: 1a:de:9e:36:a8:44:88:a0:bc:9f:fc:3b:83:af:7f:50:12:38: 65:f9:37:65:7e:80:e6:cb:0e:f5:db:01:68:77:e6:d3:a3:33: 88:17:3f:f8:58:a1:ae:0a:58:e7:04:8e:0e:57:a9:46:bd:58: 64:16:04:b6:da:35:cf:6c:ed:f1:85:b4:7e:0d:8f:bd:1b:19: af:f3:7a:bb:d0:4f:03:14:1d:35:4b:c5:13:a9:8f:b8:25:67: 00:07:89:27:7b:73:b2:26:6c:6d:cb:9f:e1:73:a2:af:ac:3e: 5f:8a:58:d1:39:c7:59:3b:1c:c7:a0:12:13:08:af:61:01:2c: ee:10:be:1d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHhcLPRS7LvhEcH+C7vdNBjf+faowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjA0MTIyMzQ5MTdaFw0yNjA0MTQwMjUzMTdaMDMxMTAvBgNV BAMTKDhEN0U1NkM3QjdDMUJBMTA3NDA5MzE3QkQ5MDhERkIyNUJFNjE0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcoaXnAGotIk9Hyzco3iCfgFHh K26Q8UN64flilTY7EKePLXXO7pmEkAfF4dK5EIL4ueDg2gBVe5Hqwh9FQZt5z/lG uVv+wLeQ1X3VMPoHj9bq39er7Kz6uYZNe/DjGrcVqeQ+Ec2e21Ht0kqKGZzhYcvK sx/mc0zCx1ChYYUMRWVGwXCjrJrC/qaQOc2pMpjLBlpdVHWOLZXLuoIF/nQnaoqB fHoXTIhxtsy9RbqLuyBslX6hBS4jStQU4w9HI2fHHf+uWlqxx3vIl99lRuR5el+g kwQyvad2izzICsd5+5W4tpMyVlzBC3PwgNFrXVBp/UEIJ/aoJru6A0UL+VulAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjX5Wx7fBuhB0CTF72QjfslvmFNkwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3OTM1MzgvMC84RkI5MTg0NjRGRTgx QzM2QzAxMEJFNUM1QzY5QTdGQTM5MkQzREZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjE9XPkkMkaQ 821teWc8lUTLM5AALRHbOlAIF6z4gic9azhcbi0VLOKs836J0V+prgdc1tA22nO+ dWWLzeswmSjWECgG5DdlorbSmZ6nOCtc192cwBMbgoe4ZzXSAmT33bVkrMGaoCBr ioXVKGpVVmd8pkIYQkEpqlT9lISQGt6eNqhEiKC8n/w7g69/UBI4Zfk3ZX6A5ssO 9dsBaHfm06MziBc/+FihrgpY5wSODlepRr1YZBYEtto1z2zt8YW0fg2PvRsZr/N6 u9BPAxQdNUvFE6mPuCVnAAeJJ3tzsiZsbcuf4XOir6w+X4pY0TnHWTscx6ASEwiv YQEs7hC+HQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:52 2026 by rpki-client