$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: 0VpsOkjc4NpcnQ/cD3n8UiIqEMr9ELwpbVz3ntVEYRI= Subject key identifier: 99:72:A1:08:50:DD:54:A3:95:CA:EA:B4:A6:55:42:1A:EF:5F:FC:F8 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 22369BEE00CD5858924DD562308D9B21C87C1A73 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 20:04:17 +0000 Manifest this update: Sun 12 Apr 2026 19:59:17 +0000 Manifest next update: Mon 13 Apr 2026 20:12:17 +0000 Files and hashes: 1: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 2: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 3: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: COkjDWnhf1OzMlqVsvUI+JaaKZp4FmkxJHR8JaIkHNo=) 4: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 20:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:36:9b:ee:00:cd:58:58:92:4d:d5:62:30:8d:9b:21:c8:7c:1a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Apr 12 19:59:17 2026 GMT Not After : Apr 13 20:12:17 2026 GMT Subject: CN=9972A10850DD54A395CAEAB4A655421AEF5FFCF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:3c:f4:4c:e2:a1:e4:f7:77:74:4d:df:22: 14:f2:2b:1f:16:b0:05:70:3f:85:fa:d0:9e:47:ee: f9:86:ac:22:5d:63:8a:85:64:67:6a:63:e0:25:9f: 62:71:0a:bd:37:40:11:65:25:09:e2:d4:92:70:fa: 90:51:7e:3a:a8:f6:9d:55:ad:dc:09:61:af:92:62: 8a:74:dd:06:50:f2:10:0a:90:52:58:6a:48:b5:0a: be:45:48:5f:ae:cc:d9:6a:5d:02:22:3d:cc:59:cc: 87:c6:a1:03:c3:89:62:ec:b5:12:39:32:bb:df:a5: 83:47:66:96:1b:88:01:62:8f:af:1b:45:0d:ab:da: 20:bd:81:78:59:0d:bf:96:38:32:d3:6b:01:47:a5: 8a:0e:63:a0:a5:49:c0:b3:d0:78:d3:bf:7a:34:de: b2:60:bf:56:de:03:dd:6e:c1:97:11:b9:6c:37:51: f4:02:a7:e9:e9:4e:36:97:76:d0:14:b7:a4:89:a6: 02:98:7c:de:00:27:2b:ec:9a:e6:24:8a:f2:13:60: 89:93:43:6f:3e:19:5c:f8:67:04:69:be:b7:39:b1: f5:78:0d:82:25:a4:28:11:90:78:49:7a:20:c3:3e: c9:e2:6a:68:f8:09:b2:b7:c1:0c:5d:83:bf:14:4d: 78:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:A1:08:50:DD:54:A3:95:CA:EA:B4:A6:55:42:1A:EF:5F:FC:F8 X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:95:f5:73:fa:3b:d3:ba:0b:cd:26:62:57:79:10:9e:ba:24: 32:8a:03:02:8b:ec:6f:63:bd:5f:d4:29:f2:eb:82:86:a1:cc: db:a8:55:2e:bb:81:b7:c1:ad:ec:69:0b:0d:d6:3f:76:da:fc: 0d:f7:c2:8b:75:a5:ba:4b:05:bb:48:bc:d0:d5:a6:82:72:39: e2:dd:9a:9e:1f:87:51:65:a7:61:fe:fc:ab:3e:c6:74:d4:3c: 59:6f:e4:c2:0d:e7:ec:7d:d6:3c:c3:fd:61:c9:19:24:32:95: 0b:70:fa:f1:6a:a9:74:29:3d:b7:dd:82:f7:fb:0f:a8:d3:4a: f1:40:2a:7f:88:16:1c:c2:5d:0d:95:71:e5:81:60:4b:1e:9b: e0:07:00:e3:cc:9c:a4:21:70:1e:4c:d5:ce:1f:7e:4c:bc:14: 4c:24:3b:c2:07:05:ad:01:15:e6:fe:c9:c0:6b:c4:84:37:05: e7:27:54:f4:2e:0c:65:9d:e5:75:6f:d4:6e:60:f9:e7:35:cf: cb:2c:2e:08:1d:b6:47:a8:0d:50:37:9a:4b:13:6f:fc:15:01: ff:80:64:b7:d0:15:df:bc:d7:b9:a1:d7:2e:ce:64:41:e4:5f: 2a:b1:a3:1a:11:94:63:49:18:ed:81:17:b5:3a:c6:16:31:62: 31:c2:a1:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIjab7gDNWFiSTdViMI2bIch8GnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjA0MTIxOTU5MTdaFw0yNjA0MTMyMDEyMTdaMDMxMTAvBgNV BAMTKDk5NzJBMTA4NTBERDU0QTM5NUNBRUFCNEE2NTU0MjFBRUY1RkZDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi1Dz0TOKh5Pd3dE3fIhTyKx8W sAVwP4X60J5H7vmGrCJdY4qFZGdqY+Aln2JxCr03QBFlJQni1JJw+pBRfjqo9p1V rdwJYa+SYop03QZQ8hAKkFJYaki1Cr5FSF+uzNlqXQIiPcxZzIfGoQPDiWLstRI5 MrvfpYNHZpYbiAFij68bRQ2r2iC9gXhZDb+WODLTawFHpYoOY6ClScCz0HjTv3o0 3rJgv1beA91uwZcRuWw3UfQCp+npTjaXdtAUt6SJpgKYfN4AJyvsmuYkivITYImT Q28+GVz4ZwRpvrc5sfV4DYIlpCgRkHhJeiDDPsniamj4CbK3wQxdg78UTXh3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmXKhCFDdVKOVyuq0plVCGu9f/PgwHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5X1c/o707oL zSZiV3kQnrokMooDAovsb2O9X9Qp8uuChqHM26hVLruBt8Gt7GkLDdY/dtr8DffC i3WluksFu0i80NWmgnI54t2anh+HUWWnYf78qz7GdNQ8WW/kwg3n7H3WPMP9YckZ JDKVC3D68WqpdCk9t92C9/sPqNNK8UAqf4gWHMJdDZVx5YFgSx6b4AcA48ycpCFw HkzVzh9+TLwUTCQ7wgcFrQEV5v7JwGvEhDcF5ydU9C4MZZ3ldW/UbmD55zXPyywu CB22R6gNUDeaSxNv/BUB/4Bkt9AV37zXuaHXLs5kQeRfKrGjGhGUY0kY7YEXtTrG FjFiMcKh5w== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:20 2026 by rpki-client