$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: nWGLrb+JALFYC9ogpva+gLzutna2X9RdKS32apv82ao= Subject key identifier: 2B:4C:C2:B6:28:C6:4C:0A:45:C1:A4:93:9C:48:37:52:D1:12:DB:70 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 48EB5CBA9084BB716348A065F45361D2D1D3DF22 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 78 Signing time: Sat 18 Apr 2026 05:34:52 +0000 Manifest this update: Sat 18 Apr 2026 05:29:52 +0000 Manifest next update: Sun 19 Apr 2026 07:48:52 +0000 Files and hashes: 1: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: g5QwEkKr8RFSAGd8Lr+A5+k3Kph/GrmzfvpDX2LWA+I=) 2: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) 3: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:eb:5c:ba:90:84:bb:71:63:48:a0:65:f4:53:61:d2:d1:d3:df:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Apr 18 05:29:52 2026 GMT Not After : Apr 19 07:48:52 2026 GMT Subject: CN=2B4CC2B628C64C0A45C1A4939C483752D112DB70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:1e:7b:0a:47:8c:fb:f2:54:97:18:6e:1f: 7e:fb:00:fd:d4:b7:6a:e5:c5:0d:38:37:a5:f1:ad: c7:c1:98:1b:f4:b1:76:39:8b:ac:1b:99:df:da:2a: 80:63:33:66:73:57:9a:27:e5:c4:d1:32:ed:20:9e: 99:78:60:15:e9:48:90:d5:95:4e:69:dd:9b:d8:9b: 49:6f:57:00:8e:fe:f3:50:2f:69:dd:a2:0b:b1:13: ee:d8:48:13:6c:d9:d4:d6:55:3b:8c:23:30:f1:00: 8d:cf:b1:9e:b5:fa:87:72:e2:2e:dd:f9:02:3e:f8: c0:d0:7e:6b:ac:ae:e6:07:50:c0:41:10:f8:ce:89: bc:2f:84:2b:2d:c0:3e:82:da:03:a6:44:0b:e8:11: 91:b4:85:61:e5:f0:cb:02:49:3b:e9:d1:81:67:f5: 06:71:77:22:cc:4c:1c:67:5b:fd:b9:74:93:9a:d4: 99:af:61:20:35:d2:5d:81:10:44:5b:0c:94:f5:52: af:f7:0d:cd:ef:cb:7e:24:55:f8:24:f0:cc:36:55: 3b:7e:79:2c:9b:f1:3c:a0:13:b1:20:60:65:59:ab: cf:3a:eb:a6:36:ab:76:27:18:0e:77:65:03:cc:20: d1:f4:ca:74:0e:a3:be:0b:12:aa:aa:f9:ab:cc:83: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4C:C2:B6:28:C6:4C:0A:45:C1:A4:93:9C:48:37:52:D1:12:DB:70 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:78:de:3a:67:7a:32:4f:9f:77:6f:e7:9c:53:37:c4:e6:86: 08:dc:4a:53:fe:31:8d:cd:4b:6b:06:33:cd:c8:94:16:f6:c7: 18:a1:a6:91:b8:cb:a7:6b:a6:a8:bc:4d:f5:a8:69:0d:87:9c: df:01:81:f4:c4:84:27:d8:90:f3:47:74:31:a0:e6:a3:30:40: 43:2b:dd:3e:3f:1f:58:8d:b0:1a:f2:3c:ae:e4:88:45:54:64: eb:33:c2:be:eb:5c:10:3d:e3:be:fe:f5:fb:9a:6a:b2:8b:a8: 7b:d0:6b:5a:03:34:b3:21:b6:ec:8a:b2:73:7e:28:0e:a6:a9: 8e:7e:7b:67:14:ec:22:65:7d:6f:8d:0c:c4:96:f1:00:97:22: 88:00:f1:a3:5f:e7:24:c2:63:40:68:7d:7a:be:5b:8e:23:4f: 29:31:2d:0b:2d:cf:f2:fb:97:c9:2e:97:a6:1e:8a:c3:97:a7: 9e:5f:51:46:fc:e7:74:5e:60:98:b2:99:34:55:24:57:b0:46: a1:0c:ef:16:37:1f:dd:e7:39:10:25:8d:10:b1:ac:0d:d9:e8: 4d:56:f5:64:79:e8:29:f0:94:94:b4:a9:bf:c1:25:fb:74:ce: 9a:13:45:b1:69:d5:60:06:28:0d:4c:cb:91:d0:52:b4:84:c4: a8:5f:9b:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSOtcupCEu3FjSKBl9FNh0tHT3yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjA0MTgwNTI5NTJaFw0yNjA0MTkwNzQ4NTJaMDMxMTAvBgNV BAMTKDJCNENDMkI2MjhDNjRDMEE0NUMxQTQ5MzlDNDgzNzUyRDExMkRCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaB57CkeM+/JUlxhuH377AP3U t2rlxQ04N6XxrcfBmBv0sXY5i6wbmd/aKoBjM2ZzV5on5cTRMu0gnpl4YBXpSJDV lU5p3ZvYm0lvVwCO/vNQL2ndoguxE+7YSBNs2dTWVTuMIzDxAI3PsZ61+ody4i7d +QI++MDQfmusruYHUMBBEPjOibwvhCstwD6C2gOmRAvoEZG0hWHl8MsCSTvp0YFn 9QZxdyLMTBxnW/25dJOa1JmvYSA10l2BEERbDJT1Uq/3Dc3vy34kVfgk8Mw2VTt+ eSyb8TygE7EgYGVZq88666Y2q3YnGA53ZQPMINH0ynQOo74LEqqq+avMg5PRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK0zCtijGTApFwaSTnEg3UtES23AwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnjeOmd6Mk+f d2/nnFM3xOaGCNxKU/4xjc1LawYzzciUFvbHGKGmkbjLp2umqLxN9ahpDYec3wGB 9MSEJ9iQ80d0MaDmozBAQyvdPj8fWI2wGvI8ruSIRVRk6zPCvutcED3jvv71+5pq souoe9BrWgM0syG27Iqyc34oDqapjn57ZxTsImV9b40MxJbxAJciiADxo1/nJMJj QGh9er5bjiNPKTEtCy3P8vuXyS6Xph6Kw5ennl9RRvzndF5gmLKZNFUkV7BGoQzv Fjcf3ec5ECWNELGsDdnoTVb1ZHnoKfCUlLSpv8El+3TOmhNFsWnVYAYoDUzLkdBS tITEqF+bzA== -----END CERTIFICATE-----Generated at Sun Apr 19 01:45:47 2026 by rpki-client