$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft File: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft (raw, json) Hash identifier: MJB6BqhPu55OwwuyEGpRhOOWistAtQHQMSxd1fX5+M4= Subject key identifier: EA:FB:1B:19:02:57:CF:5C:84:3E:0C:65:B7:BA:37:FD:D7:F8:8A:E8 Authority key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Certificate issuer: /CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Certificate serial: 15EC59BFDD3E2CE4396C20C14053B8CF7F61D449 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft Manifest number: 70 Signing time: Sun 12 Apr 2026 21:49:17 +0000 Manifest this update: Sun 12 Apr 2026 21:44:17 +0000 Manifest next update: Mon 13 Apr 2026 22:25:17 +0000 Files and hashes: 1: 34352e3131352e31382e302f32332d3234203d3e20313531323330.roa (hash: KFwVFV9XIdASmiH55Vrp/a+LAUtb9TpqJV9SvrwxSRc=) 2: 323430323a323065303a3a2f33322d3438203d3e20313531323330.roa (hash: QWUb0DzubEfKqwW//PTcn/ZJK/ak3Shs1IT7p6JBGPc=) 3: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl (hash: 3O40Erl0soPtMu+Mm1OvZsy/UBEesxxOibJZcd3HcVE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 22:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ec:59:bf:dd:3e:2c:e4:39:6c:20:c1:40:53:b8:cf:7f:61:d4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Validity Not Before: Apr 12 21:44:17 2026 GMT Not After : Apr 13 22:25:17 2026 GMT Subject: CN=EAFB1B190257CF5C843E0C65B7BA37FDD7F88AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:07:c4:58:73:6a:55:24:f2:3c:46:03:0b:f5: 9a:c0:a9:19:3d:2c:6b:27:c3:16:54:e5:00:74:c8: ef:50:67:2a:e5:b6:54:e9:c9:0e:b7:ec:6f:7a:f7: 69:3e:4a:d0:50:51:97:89:9f:34:7b:05:78:28:f0: ec:5c:47:2d:71:b0:e3:a9:8c:e1:d1:79:7c:65:fb: 1e:42:78:ab:41:4c:37:1c:38:87:29:62:bd:5c:f0: 85:96:c9:e2:58:83:fd:c1:4f:92:f8:3e:21:1f:80: d9:cd:3e:32:eb:e2:d3:2d:c1:13:ec:05:ee:c5:55: de:2f:f4:94:fd:a8:ec:b2:96:23:9b:2a:b5:25:1a: 9a:e8:8a:bb:7d:6b:b5:99:a4:e3:80:fe:f5:97:54: d1:53:e5:9a:62:e1:5c:62:52:a1:75:2b:35:86:3a: 2e:fb:8e:a9:d0:61:a8:5d:81:84:55:10:d9:43:c3: 4f:b8:ba:24:61:2f:5d:38:f2:cf:e0:99:65:f8:03: d6:ca:6d:e4:47:1c:b3:28:f0:75:4c:ba:b9:21:3f: 45:95:18:0d:7a:c1:08:3e:08:60:0c:ae:39:06:66: 72:77:4f:5e:58:82:43:ac:b2:2b:4a:b5:dd:8d:cb: 63:5e:91:8c:f3:76:30:10:45:36:59:23:12:b9:1e: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:1B:19:02:57:CF:5C:84:3E:0C:65:B7:BA:37:FD:D7:F8:8A:E8 X509v3 Authority Key Identifier: keyid:8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0a:fd:02:a6:11:4f:64:34:df:a6:bc:97:71:bf:13:26:35: 86:44:6f:c4:14:74:ad:45:f7:f7:fd:47:13:db:30:22:e2:46: 7d:61:f1:c3:c4:90:68:7c:7a:35:56:47:d2:6d:2e:85:84:72: 32:ac:4a:9a:58:90:fd:14:4c:4b:40:d4:d0:20:45:77:53:4d: f8:53:3c:69:ea:28:c9:2d:22:17:76:11:b7:7c:75:db:cf:95: 09:6f:40:a4:63:85:ca:4a:3a:51:df:31:f2:65:89:a0:ae:18: 9e:b2:1c:40:71:50:3d:cb:b5:86:49:df:6b:65:08:8c:1f:08: a9:05:83:b2:0e:76:4c:c4:0e:48:3e:98:e6:19:b9:8f:dd:61: 1f:88:9a:18:e2:0b:59:27:12:1a:51:67:d4:90:3a:d4:ae:77: c5:e2:f3:20:c2:f6:c2:7b:f2:79:14:ad:53:7e:64:4b:f4:12: 48:59:e1:02:a7:2e:0b:fb:a8:3b:23:b9:a5:74:70:b0:bd:16: b3:ef:65:80:0d:29:5a:10:84:19:1e:69:49:e5:e7:5e:d1:81: 68:83:1e:0c:a3:0f:fc:ce:ca:cd:b7:25:45:cf:36:5a:69:79: 1f:89:bd:50:5e:c8:d7:bf:b7:97:95:19:6d:39:52:75:85:82: 41:b3:85:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFexZv90+LOQ5bCDBQFO4z39h1EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0 NDVEQzNBMTAeFw0yNjA0MTIyMTQ0MTdaFw0yNjA0MTMyMjI1MTdaMDMxMTAvBgNV BAMTKEVBRkIxQjE5MDI1N0NGNUM4NDNFMEM2NUI3QkEzN0ZERDdGODhBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhB8RYc2pVJPI8RgML9ZrAqRk9 LGsnwxZU5QB0yO9QZyrltlTpyQ637G9692k+StBQUZeJnzR7BXgo8OxcRy1xsOOp jOHReXxl+x5CeKtBTDccOIcpYr1c8IWWyeJYg/3BT5L4PiEfgNnNPjLr4tMtwRPs Be7FVd4v9JT9qOyyliObKrUlGproirt9a7WZpOOA/vWXVNFT5Zpi4VxiUqF1KzWG Oi77jqnQYahdgYRVENlDw0+4uiRhL1048s/gmWX4A9bKbeRHHLMo8HVMurkhP0WV GA16wQg+CGAMrjkGZnJ3T15YgkOssitKtd2Ny2NekYzzdjAQRTZZIxK5HjaHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6vsbGQJXz1yEPgxlt7o3/df4iugwHwYDVR0j BBgwFoAUjUBr7EUssHTWMKvb1idbxURdw6EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzcxNzI1MS8wLzhENDA2QkVDNDUyQ0IwNzRENjMwQUJEQkQ2Mjc1 QkM1NDQ1REMzQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc3MTcyNTEvMC84RDQwNkJFQzQ1MkNC MDc0RDYzMEFCREJENjI3NUJDNTQ0NURDM0ExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQr9AqYRT2Q0 36a8l3G/EyY1hkRvxBR0rUX39/1HE9swIuJGfWHxw8SQaHx6NVZH0m0uhYRyMqxK mliQ/RRMS0DU0CBFd1NN+FM8aeooyS0iF3YRt3x128+VCW9ApGOFyko6Ud8x8mWJ oK4YnrIcQHFQPcu1hknfa2UIjB8IqQWDsg52TMQOSD6Y5hm5j91hH4iaGOILWScS GlFn1JA61K53xeLzIML2wnvyeRStU35kS/QSSFnhAqcuC/uoOyO5pXRwsL0Ws+9l gA0pWhCEGR5pSeXnXtGBaIMeDKMP/M7KzbclRc82Wml5H4m9UF7I17+3l5UZbTlS dYWCQbOFfg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:40 2026 by rpki-client