$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft File: 37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json) Hash identifier: 3B3NFIjPuf5BOjdfWXI1SWzAkO1Rs70B/drHNtY83Ik= Subject key identifier: D0:95:84:44:25:E2:0F:FA:C6:31:DF:87:89:68:D5:0D:E9:19:10:6F Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27 Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827 Certificate serial: 0420F5C76645F50B1B03998F46CAC8BECDE090E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft Manifest number: 86 Signing time: Wed 29 Apr 2026 16:59:31 +0000 Manifest this update: Wed 29 Apr 2026 16:54:31 +0000 Manifest next update: Thu 30 Apr 2026 17:58:31 +0000 Files and hashes: 1: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=) 2: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=) 3: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=) 4: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=) 5: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=) 6: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=) 7: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=) 8: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=) 9: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=) 10: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=) 11: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=) 12: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: 4lEj9Kfdt42AsS3R0Ck89/QfYXh62NT9l95TzBSb/QM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 17:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:20:f5:c7:66:45:f5:0b:1b:03:99:8f:46:ca:c8:be:cd:e0:90:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827 Validity Not Before: Apr 29 16:54:31 2026 GMT Not After : Apr 30 17:58:31 2026 GMT Subject: CN=D095844425E20FFAC631DF878968D50DE919106F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:2e:b7:8e:87:94:ab:ae:7b:c6:1f:91:bd: e9:13:e5:0c:5c:a9:27:ee:84:0a:e6:dd:1d:93:90: e7:7e:a0:93:45:e1:12:83:7b:d8:92:4b:66:30:a7: ea:10:38:b5:db:bc:60:36:dc:59:0b:44:52:58:2c: ce:6d:bd:50:d5:17:10:ac:58:7e:cc:a4:c8:c9:98: a6:ac:17:f9:1b:ee:9e:02:2f:05:5d:43:36:f4:1c: 9b:62:4c:f8:18:0f:f8:19:33:97:e6:e8:08:c3:38: 1f:4d:13:bd:d4:7a:fb:9e:7c:e9:83:41:0d:7b:47: ad:85:f8:86:21:2c:7c:7a:12:62:2e:31:09:80:9d: 9c:5c:6b:05:64:fc:c3:3b:71:44:71:80:43:56:e1: da:7b:f9:9d:2e:d4:6d:e5:38:d0:59:f4:63:fd:89: 94:3e:52:4b:b7:3b:bc:2f:2a:35:96:3e:6d:d6:5e: d7:b6:69:d1:36:5a:17:16:29:08:09:03:80:92:40: 40:1d:c7:a4:d9:95:d1:52:c1:9b:2b:66:ed:e3:98: 4f:ec:8e:7f:be:d9:a2:85:e5:d4:3f:6e:90:76:84: 4c:f7:21:f8:3b:68:a5:c7:41:c9:f1:33:37:87:96: 3e:15:36:a1:dc:87:1b:ab:94:64:b6:16:1f:08:bb: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:95:84:44:25:E2:0F:FA:C6:31:DF:87:89:68:D5:0D:E9:19:10:6F X509v3 Authority Key Identifier: keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:08:76:95:6c:da:6a:04:cf:32:85:03:07:6a:e9:29:78:64: f9:3e:df:dc:d0:9e:91:10:2a:60:3a:51:52:75:3c:35:9a:00: 12:f7:f3:af:c9:cf:3e:14:94:5a:78:d4:67:8a:e9:7e:49:b4: 88:67:f1:22:a9:fe:f1:7f:43:e7:3e:47:d5:7b:38:94:ca:78: d4:36:df:2d:e0:e3:18:fa:24:59:5d:a8:fd:15:99:ef:b5:2f: 87:36:19:21:a6:eb:f3:2e:99:1d:78:5e:d5:93:6e:06:4e:5b: 54:3f:eb:86:35:de:74:16:05:6d:9f:35:f7:02:08:56:b4:27: ab:5e:f2:ca:96:95:1d:81:40:58:04:31:47:03:74:e7:1f:a2: 5e:37:0b:1e:5c:2d:7e:15:a9:5c:b4:73:dd:a2:97:a6:19:3e: 39:03:94:8c:08:f3:9a:91:da:4d:8d:4e:73:77:bf:fc:8e:c2: 6b:b7:0b:86:fe:82:03:d7:3b:56:f4:00:f9:46:66:3b:40:6b: 5e:78:5b:65:9f:5a:c0:0e:d3:0b:5a:dc:3d:e6:62:c4:0b:1c: e3:61:5c:98:a1:ff:45:ab:2b:29:b9:d4:82:a5:37:98:48:da: f3:32:6c:ba:9d:28:e3:11:54:a0:5e:4e:35:a4:83:f6:c2:67: 70:e8:37:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBCD1x2ZF9QsbA5mPRsrIvs3gkOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0 RjhFMzgyNzAeFw0yNjA0MjkxNjU0MzFaFw0yNjA0MzAxNzU4MzFaMDMxMTAvBgNV BAMTKEQwOTU4NDQ0MjVFMjBGRkFDNjMxREY4Nzg5NjhENTBERTkxOTEwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDi63joeUq657xh+RvekT5Qxc qSfuhArm3R2TkOd+oJNF4RKDe9iSS2Ywp+oQOLXbvGA23FkLRFJYLM5tvVDVFxCs WH7MpMjJmKasF/kb7p4CLwVdQzb0HJtiTPgYD/gZM5fm6AjDOB9NE73UevuefOmD QQ17R62F+IYhLHx6EmIuMQmAnZxcawVk/MM7cURxgENW4dp7+Z0u1G3lONBZ9GP9 iZQ+Uku3O7wvKjWWPm3WXte2adE2WhcWKQgJA4CSQEAdx6TZldFSwZsrZu3jmE/s jn++2aKF5dQ/bpB2hEz3Ifg7aKXHQcnxMzeHlj4VNqHchxurlGS2Fh8Iu5XRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0JWERCXiD/rGMd+HiWjVDekZEG8wHwYDVR0j BBgwFoAUN+ZdPWC0XBQpZ4QVE9jlbU+OOCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8wLzM3RTY1RDNENjBCNDVDMTQyOTY3ODQxNTEzRDhF NTZENEY4RTM4MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0RjhFMzgyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMC8zN0U2NUQzRDYwQjQ1 QzE0Mjk2Nzg0MTUxM0Q4RTU2RDRGOEUzODI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAh2lWzaagTP MoUDB2rpKXhk+T7f3NCekRAqYDpRUnU8NZoAEvfzr8nPPhSUWnjUZ4rpfkm0iGfx Iqn+8X9D5z5H1Xs4lMp41DbfLeDjGPokWV2o/RWZ77UvhzYZIabr8y6ZHXhe1ZNu Bk5bVD/rhjXedBYFbZ819wIIVrQnq17yypaVHYFAWAQxRwN05x+iXjcLHlwtfhWp XLRz3aKXphk+OQOUjAjzmpHaTY1Oc3e//I7Ca7cLhv6CA9c7VvQA+UZmO0BrXnhb ZZ9awA7TC1rcPeZixAsc42FcmKH/RasrKbnUgqU3mEja8zJsup0o4xFUoF5ONaSD 9sJncOg3bA== -----END CERTIFICATE-----Generated at Thu Apr 30 02:52:32 2026 by rpki-client