$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: KYaCSZ0i/lGwANbo70C0VstL6v9miJ+M4U2e5oVwDUI= Subject key identifier: E3:1D:E0:5C:60:16:56:5B:86:0B:CF:0A:63:E5:92:01:0F:19:21:85 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 665F1A2FAE9D95B70E5AD772147930F7952C0A5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 77 Signing time: Sat 18 Apr 2026 07:24:52 +0000 Manifest this update: Sat 18 Apr 2026 07:19:52 +0000 Manifest next update: Sun 19 Apr 2026 08:19:52 +0000 Files and hashes: 1: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: ER1KwYlTeI9kI18INS3GnLH4rHk76WQkxBW5OaULAKo=) 2: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5f:1a:2f:ae:9d:95:b7:0e:5a:d7:72:14:79:30:f7:95:2c:0a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Apr 18 07:19:52 2026 GMT Not After : Apr 19 08:19:52 2026 GMT Subject: CN=E31DE05C6016565B860BCF0A63E592010F192185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:b1:69:a4:f4:ac:43:01:99:7c:db:0f:e9: c7:60:9e:9f:ed:a3:27:25:53:89:57:50:5b:13:ca: df:ce:06:19:1e:f8:ec:56:46:bc:0d:c2:33:8d:b2: a1:dc:3f:57:27:66:ce:21:b2:16:20:62:0b:8a:74: d8:ba:06:68:37:61:5f:f9:92:c6:ab:9a:10:a5:75: 93:4c:93:29:39:1d:42:18:e2:f9:f8:a7:4e:fd:8a: e0:9e:a4:fc:99:49:2c:ad:b3:e6:df:38:0d:39:69: cd:96:2f:2c:ee:4b:db:3c:ba:74:34:93:3f:11:3a: a3:0e:2f:7e:12:6e:f1:1c:90:4a:68:3a:7a:13:2a: 44:94:e9:5d:e0:ac:74:bc:d3:13:d7:bc:85:c7:28: 2f:a7:32:83:8d:84:d8:e4:a1:8d:60:8a:eb:f1:64: 04:a8:20:61:a1:20:5b:4a:94:a1:43:ca:ef:0c:e0: 8e:d9:b3:a1:31:00:4b:80:35:03:cd:97:79:75:65: 76:1e:81:fe:1b:6a:0f:8b:09:2e:05:ff:85:dd:46: 50:91:f6:a5:91:8a:93:2e:1d:cf:c9:53:2a:83:1e: 81:03:e1:8a:c7:b7:35:23:08:68:49:8b:bd:1b:d0: 92:26:f1:0b:94:1d:c6:84:32:37:54:22:eb:3b:56: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1D:E0:5C:60:16:56:5B:86:0B:CF:0A:63:E5:92:01:0F:19:21:85 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:49:48:4a:32:04:e9:74:26:15:70:8e:71:47:45:73:40:da: c4:66:57:c6:d2:e7:1c:ba:3a:7f:5d:8d:84:ad:88:02:77:98: b8:e0:89:87:b6:f8:27:c2:ba:96:5b:51:bf:79:89:08:d3:37: e0:8b:d6:40:13:4e:dc:84:6e:65:a6:ce:0b:31:cb:c6:e7:b3: 5b:e7:60:c1:dd:96:66:b8:e1:bf:73:f5:5f:6c:59:be:55:d9: 3f:c1:0c:1c:fe:e6:61:ca:c0:bb:66:b0:99:79:8b:2e:7a:71: c4:87:1f:16:47:22:92:a5:2a:c5:a7:6c:de:4c:6e:ee:be:a0: de:bf:3e:98:d4:eb:7d:f9:7a:02:22:d6:d6:d1:6d:0d:36:77: bc:af:e6:d2:d9:4b:e5:76:7c:b3:0d:7b:3c:6a:e8:f6:0b:60: 1a:16:df:be:2e:6f:fb:08:66:94:de:3d:28:bc:5d:1f:82:41: 7d:62:78:07:ff:71:2f:f5:5d:7b:e7:77:1d:c9:d0:ab:81:a1: c5:ad:e3:70:6f:23:cd:6f:75:e0:a9:9c:d1:8a:cf:ce:e1:22: a8:65:8e:8f:dd:b6:e9:2a:4c:1c:10:a1:64:e0:2a:28:8e:0f: dd:e9:6d:4f:86:66:c7:01:aa:ba:28:e8:48:55:f8:49:10:ca: 3d:8e:49:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZl8aL66dlbcOWtdyFHkw95UsCl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA0MTgwNzE5NTJaFw0yNjA0MTkwODE5NTJaMDMxMTAvBgNV BAMTKEUzMURFMDVDNjAxNjU2NUI4NjBCQ0YwQTYzRTU5MjAxMEYxOTIxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1LFppPSsQwGZfNsP6cdgnp/t oyclU4lXUFsTyt/OBhke+OxWRrwNwjONsqHcP1cnZs4hshYgYguKdNi6Bmg3YV/5 ksarmhCldZNMkyk5HUIY4vn4p079iuCepPyZSSyts+bfOA05ac2WLyzuS9s8unQ0 kz8ROqMOL34SbvEckEpoOnoTKkSU6V3grHS80xPXvIXHKC+nMoONhNjkoY1giuvx ZASoIGGhIFtKlKFDyu8M4I7Zs6ExAEuANQPNl3l1ZXYegf4bag+LCS4F/4XdRlCR 9qWRipMuHc/JUyqDHoED4YrHtzUjCGhJi70b0JIm8QuUHcaEMjdUIus7VslDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4x3gXGAWVluGC88KY+WSAQ8ZIYUwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxklISjIE6XQm FXCOcUdFc0DaxGZXxtLnHLo6f12NhK2IAneYuOCJh7b4J8K6lltRv3mJCNM34IvW QBNO3IRuZabOCzHLxuezW+dgwd2WZrjhv3P1X2xZvlXZP8EMHP7mYcrAu2awmXmL LnpxxIcfFkcikqUqxads3kxu7r6g3r8+mNTrffl6AiLW1tFtDTZ3vK/m0tlL5XZ8 sw17PGro9gtgGhbfvi5v+whmlN49KLxdH4JBfWJ4B/9xL/Vde+d3HcnQq4Ghxa3j cG8jzW914Kmc0YrPzuEiqGWOj9226SpMHBChZOAqKI4P3eltT4ZmxwGquijoSFX4 SRDKPY5JtA== -----END CERTIFICATE-----Generated at Sun Apr 19 01:17:48 2026 by rpki-client