$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft File: E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json) Hash identifier: 7p4n+kAUbkGgJJGVrXsWK+w6jPfJtZzZlstvG3AJh7M= Subject key identifier: FE:40:DF:36:7F:52:2F:D2:28:A6:63:5C:5F:6D:58:A7:C2:49:A8:86 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 4C80A9F92044934A891535095D934F7E2186A9F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft Manifest number: A4 Signing time: Fri 24 Apr 2026 14:18:02 +0000 Manifest this update: Fri 24 Apr 2026 14:13:02 +0000 Manifest next update: Sat 25 Apr 2026 16:12:02 +0000 Files and hashes: 1: 3132342e34322e3133322e302f32322d3234203d3e203139373933.roa (hash: u/BvBvpFRNJY5oWHM9iEpUFqP9KWRanUvBrgv6pmKLI=) 2: 3131392e35392e3133322e302f32322d3234203d3e20323133373035.roa (hash: tmZcf1Wo2bCOf5RQWYhRyMOFU8sz/C0CdGOBYHvzEsM=) 3: 3132332e39382e372e302f32342d3234203d3e20323133373035.roa (hash: AVvQsF1Azt06DYdc1fimBDX6us0DhOPBdbihSLPE6j0=) 4: 3132342e34322e3135362e302f32322d3234203d3e20333939343638.roa (hash: Q9WNiY3D5Ig84zc4CmQwpw/C664C4T4CNwTtBXqPCmc=) 5: 3132342e34322e3132382e302f32322d3234203d3e20333939313338.roa (hash: Vezsjm2nsCleqU7ggWKnP3nKtWgjbAfTLLyfTneK3So=) 6: 3132342e34322e3134342e302f32322d3234203d3e20333939343638.roa (hash: SdlRWipoKWLjfI9FQSk/SCRyL8mhnpksMysC4H0OkRg=) 7: 3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa (hash: bQiErAXOjI0VPmUr3ttraVD7Ty086lxsuve+vR9dswU=) 8: 3132342e34322e3139322e302f32322d3234203d3e20333939343631.roa (hash: iwX9ztxmxpl7oEu5C4GsFlI0bJLdcrZqhfMYP9mPckU=) 9: 3131392e35392e3132382e302f32322d3234203d3e20323133373035.roa (hash: 8HVNCgxhmzFDQxvRedCB7iz7hzWPNiltDsUavD9nBJM=) 10: 3131392e35392e3235322e302f32322d3234203d3e203632333837.roa (hash: 6erJBvMpCVcq1Po4iDG3SD4Zw/2rxYqy1EMsEVwFLYo=) 11: 3231312e3134392e33322e302f32322d3234203d3e20323133373035.roa (hash: rQL1U/iYtRR0jUuvibdCcjhCtcFRu9RCmLi04/zoxkI=) 12: 3132342e34322e3136342e302f32322d3234203d3e203139373933.roa (hash: u8LX/gi8Fqc//eyc72h9RhdaiFWIpfkCmcAvoMuLhcQ=) 13: 3132332e39382e342e302f32342d3234203d3e20323133373035.roa (hash: 9NDodR/eZTmIwc0Q+h0OdWUtoA6QOSFBjWkZi6kLzwY=) 14: 3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa (hash: HK63vjI4RIq2yRn8A/BOQDGw1u7iMQT/KaIoq8LJGsE=) 15: 3132332e39382e33362e302f32322d3234203d3e203632333837.roa (hash: uXZqTUVIUMoZhVrKs97j3QYujpa12PmoKmyZwJAGwY0=) 16: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: l2JAGvWCl4yMNC2Oiytp+3L94DOCRK3pb5R76CKz7U4=) 17: 3132332e39382e302e302f32342d3234203d3e20323133373035.roa (hash: j4Nl2qZcmxpS+QZPyBmkfdFNLoEdM52HQnw7ZjZ66ec=) 18: 3132332e39382e312e302f32342d3234203d3e20323133373035.roa (hash: ufTYmKUzHMiPdkI4HPYbdvpxwEcw/U43h4fBkeH4aUo=) 19: 3132332e39382e362e302f32342d3234203d3e20323133373035.roa (hash: dPxpdzbq8j2sDVgHipOTeqZmCUwNKlAKmnGvCUfMqN4=) 20: 3132332e39382e322e302f32342d3234203d3e20323133373035.roa (hash: 27sURhjV3aoEwMdKgj3TcfHgvJdsBnwkmRpY0eSRaM4=) 21: 3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa (hash: PG/cKj2CJRqHqFj5j9fwA7HF7N0xI5U4CthDFeO4psc=) 22: 3132342e34322e3230342e302f32322d3234203d3e20333939343631.roa (hash: JOIW/PfiJqS28vhAijrZiaYI6OCqaeF6Ie5N1e4OFWs=) 23: 3132332e39382e332e302f32342d3234203d3e20323133373035.roa (hash: Z+IQE0DbrgadtfuvLj9MCT4i/poMiMMW41d1XGjUfDY=) 24: 3132332e39382e352e302f32342d3234203d3e20323133373035.roa (hash: j2HoCWPCAChe1hsAjx4WMzRY0dIDD6M27em3smh/CYc=) 25: 3132342e34322e3232302e302f32322d3234203d3e20333939343631.roa (hash: 1v21NFMwf2CmsK//N2/8dG4J9unP3oQn6NWG6UMifVw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 12:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:80:a9:f9:20:44:93:4a:89:15:35:09:5d:93:4f:7e:21:86:a9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Apr 24 14:13:02 2026 GMT Not After : Apr 25 16:12:02 2026 GMT Subject: CN=FE40DF367F522FD228A6635C5F6D58A7C249A886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:23:0e:4b:6e:6c:78:26:37:34:d9:ca:97: ad:46:6f:af:de:11:9d:ea:ad:75:43:e7:b2:c6:75: a1:8b:8c:37:01:c8:48:10:8a:c7:ef:c4:60:10:97: f3:46:4a:84:86:90:57:c3:27:25:20:ed:af:4e:f2: c8:8a:48:87:cf:4f:9e:b5:25:59:9a:19:39:59:3c: d1:1c:d2:9c:7b:12:54:63:42:3c:0b:f6:13:34:20: 0f:23:8a:7d:2d:98:58:f7:99:dd:4c:31:21:07:c9: 7f:72:30:cd:ec:ae:72:44:db:3c:06:c0:a7:5a:ba: 4f:ad:cb:2d:bc:cf:6a:65:79:f7:43:25:4f:8d:29: 26:6c:c7:5a:71:76:93:85:02:30:db:dc:69:df:cc: dc:ca:70:3a:ab:57:91:15:68:7a:fd:e1:6b:f7:75: 52:9a:05:44:4c:f8:93:c7:c4:ec:17:06:1c:59:c7: e4:d0:d0:a3:b8:ef:f1:d8:6c:83:46:b2:f5:8e:c3: 56:86:48:1f:04:45:60:b0:a5:7e:96:44:7b:36:b3: 24:9b:90:f8:8c:3c:8b:12:17:dd:6a:4a:19:33:70: 35:0e:4f:6b:65:13:b1:69:05:4c:c2:aa:4a:e0:1a: c1:cb:34:4d:93:16:cd:c8:99:2d:29:92:3e:28:bf: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:40:DF:36:7F:52:2F:D2:28:A6:63:5C:5F:6D:58:A7:C2:49:A8:86 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c1:60:aa:ab:c5:4d:63:66:17:c5:e2:7d:07:47:f4:34:c5: b2:b7:c8:20:ab:03:8a:94:f0:a5:f3:d4:98:3d:d6:1d:db:59: 10:29:32:fa:c2:5d:94:af:bf:06:e9:73:84:3c:d1:55:29:04: a0:b9:19:dc:f9:e1:46:0e:e5:40:ea:c1:36:d8:89:80:1b:6c: b3:0a:6d:88:29:64:cc:08:16:de:5e:4a:46:35:69:04:23:5d: eb:cd:0b:0e:5c:e7:92:40:80:2d:14:33:3d:6d:a6:b9:8e:6a: 42:5b:1a:f0:6b:60:7d:a8:9d:b3:c4:02:cd:19:48:f5:6e:3b: c7:64:95:8d:a6:51:32:0f:5e:fa:ba:29:62:71:70:c0:f5:e2: be:20:58:2d:09:7b:b2:7d:9f:11:68:24:3b:fb:0d:95:d7:1b: 3a:b0:e9:68:2b:3f:ac:8c:8c:a1:d1:98:ae:f6:20:63:b4:e6: 6c:62:ad:28:63:a1:e8:c4:29:c2:87:8e:81:7d:bd:de:d2:1e: 57:e4:0f:99:ff:e4:43:ce:0c:c0:c1:29:63:f7:a6:c5:ee:b6: c4:08:7b:0d:fb:5c:d1:3e:5b:fc:53:6f:42:fa:36:a7:68:4c: 8a:70:17:61:93:8f:4f:e0:d4:74:1a:d5:27:cf:77:be:e9:24: f7:22:e7:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTICp+SBEk0qJFTUJXZNPfiGGqfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA0MjQxNDEzMDJaFw0yNjA0MjUxNjEyMDJaMDMxMTAvBgNV BAMTKEZFNDBERjM2N0Y1MjJGRDIyOEE2NjM1QzVGNkQ1OEE3QzI0OUE4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOeyMOS25seCY3NNnKl61Gb6/e EZ3qrXVD57LGdaGLjDcByEgQisfvxGAQl/NGSoSGkFfDJyUg7a9O8siKSIfPT561 JVmaGTlZPNEc0px7ElRjQjwL9hM0IA8jin0tmFj3md1MMSEHyX9yMM3srnJE2zwG wKdauk+tyy28z2plefdDJU+NKSZsx1pxdpOFAjDb3GnfzNzKcDqrV5EVaHr94Wv3 dVKaBURM+JPHxOwXBhxZx+TQ0KO47/HYbINGsvWOw1aGSB8ERWCwpX6WRHs2sySb kPiMPIsSF91qShkzcDUOT2tlE7FpBUzCqkrgGsHLNE2TFs3ImS0pkj4ovw4BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/kDfNn9SL9IopmNcX21Yp8JJqIYwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC9FODkzNDM0QTMyMDU4 REFGRTk3NThGREE3QjM2NjU5NDQ0QzlFRjhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8FgqqvFTWNm F8XifQdH9DTFsrfIIKsDipTwpfPUmD3WHdtZECky+sJdlK+/BulzhDzRVSkEoLkZ 3PnhRg7lQOrBNtiJgBtsswptiClkzAgW3l5KRjVpBCNd680LDlznkkCALRQzPW2m uY5qQlsa8Gtgfaids8QCzRlI9W47x2SVjaZRMg9e+ropYnFwwPXiviBYLQl7sn2f EWgkO/sNldcbOrDpaCs/rIyModGYrvYgY7TmbGKtKGOh6MQpwoeOgX293tIeV+QP mf/kQ84MwMEpY/emxe62xAh7Dftc0T5b/FNvQvo2p2hMinAXYZOPT+DUdBrVJ893 vukk9yLnlQ== -----END CERTIFICATE-----Generated at Fri Apr 24 17:06:15 2026 by rpki-client