$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft File: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json) Hash identifier: 0DVexDu0P8oCrMGfXiPW1OnW0O3B4qqMztNAMkmy+5g= Subject key identifier: 3F:B5:FA:DB:65:43:E8:50:67:36:D9:A2:A5:A9:15:45:B3:E9:18:44 Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 7F6D0B50C1DC7AADCBA49C8394CBB7DFD38B4DFE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft Manifest number: 84 Signing time: Mon 27 Apr 2026 09:23:46 +0000 Manifest this update: Mon 27 Apr 2026 09:18:46 +0000 Manifest next update: Tue 28 Apr 2026 10:54:46 +0000 Files and hashes: 1: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=) 2: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=) 3: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=) 4: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=) 5: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=) 6: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=) 7: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: aPdZroU4Hv0IG9l2cUX6JGhUku77gkpvOoT5041uj84=) 8: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=) 9: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=) 10: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=) 11: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=) 12: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6d:0b:50:c1:dc:7a:ad:cb:a4:9c:83:94:cb:b7:df:d3:8b:4d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Apr 27 09:18:46 2026 GMT Not After : Apr 28 10:54:46 2026 GMT Subject: CN=3FB5FADB6543E8506736D9A2A5A91545B3E91844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:ec:08:df:81:85:bb:88:17:43:68:4b:5e: 1f:38:d8:d2:45:bb:bc:23:40:e2:ff:2d:3b:8d:68: 14:90:c5:c4:9c:af:b0:82:16:aa:3e:a2:d9:ac:ac: a9:35:4e:a7:41:d0:88:93:d8:ac:cb:5f:51:b5:2b: 3f:1b:c6:e3:63:55:a8:7d:d2:b8:e3:8e:d9:01:43: 3f:a1:ef:3f:d8:c6:bb:93:af:bf:0e:eb:e8:c3:2e: cb:a5:88:74:2d:28:ae:ca:97:cf:1a:11:55:43:77: 5b:ef:ca:34:e8:8b:f4:29:e0:26:e5:8f:09:94:8f: a7:47:da:36:47:15:03:b5:4d:d5:0e:82:56:2a:ef: 05:a6:c4:a9:2d:5c:bf:9c:b6:75:97:76:01:b4:a7: 92:b0:12:44:1f:2d:f0:14:0d:14:0b:a8:01:2c:5d: 7d:df:de:c5:40:9c:0f:0d:d2:4f:f5:e2:86:0c:4f: b0:be:80:e5:06:20:2e:cc:b6:e2:33:c1:1d:43:90: f6:b1:13:28:f7:5e:0e:99:bc:cb:8e:45:a5:78:2f: 99:f2:af:ce:2c:c2:52:c6:4a:c0:f6:a6:ea:fa:02: c4:ea:c1:94:85:75:95:8e:c5:f4:59:a9:99:71:0a: f7:9e:59:58:f8:80:57:96:f7:95:22:49:a2:90:37: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B5:FA:DB:65:43:E8:50:67:36:D9:A2:A5:A9:15:45:B3:E9:18:44 X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:48:4a:5f:14:35:55:e8:f3:00:9f:21:84:1a:c0:25:50:21: e7:4f:02:3e:1b:25:dc:86:99:e3:8c:d0:f9:7d:29:d9:19:03: d7:a8:ba:0f:75:7a:7f:0b:42:e0:4b:62:fe:0a:2f:a8:1a:0b: e7:4f:04:a5:62:56:3f:10:0a:bb:38:69:36:60:49:23:db:99: 22:72:83:d8:c9:98:97:5d:99:46:e6:84:16:d6:13:99:82:e5: f9:f7:83:c1:56:95:35:30:6c:ca:bf:d8:68:3b:d4:ac:a3:eb: f9:4a:3d:72:7c:bd:67:ea:91:de:dd:c5:29:4a:ed:51:81:53: c9:b8:fd:16:c7:32:cc:9d:78:87:75:6b:0c:a7:25:3e:ae:f7: dc:22:30:64:fc:b2:3a:96:06:36:91:bd:77:c6:95:b8:fa:fc: cd:5a:01:aa:14:bf:0d:73:ac:3e:74:1c:03:63:01:d1:40:26: 20:1d:76:ba:fb:25:39:d5:ca:10:3d:da:ba:19:79:58:3b:45: 2b:b1:82:5e:2a:1f:de:cd:e0:e1:2a:5a:67:cc:5e:01:08:33: 62:d0:13:28:1f:50:94:68:3a:ba:e4:ac:a1:f4:a5:ab:7e:cc: e0:0f:5b:ea:db:10:eb:6b:d0:5a:dc:b7:92:ec:28:c8:f9:93: a5:e5:b9:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf20LUMHceq3LpJyDlMu339OLTf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjA0MjcwOTE4NDZaFw0yNjA0MjgxMDU0NDZaMDMxMTAvBgNV BAMTKDNGQjVGQURCNjU0M0U4NTA2NzM2RDlBMkE1QTkxNTQ1QjNFOTE4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0OwI34GFu4gXQ2hLXh842NJF u7wjQOL/LTuNaBSQxcScr7CCFqo+otmsrKk1TqdB0IiT2KzLX1G1Kz8bxuNjVah9 0rjjjtkBQz+h7z/YxruTr78O6+jDLsuliHQtKK7Kl88aEVVDd1vvyjToi/Qp4Cbl jwmUj6dH2jZHFQO1TdUOglYq7wWmxKktXL+ctnWXdgG0p5KwEkQfLfAUDRQLqAEs XX3f3sVAnA8N0k/14oYMT7C+gOUGIC7MtuIzwR1DkPaxEyj3Xg6ZvMuORaV4L5ny r84swlLGSsD2pur6AsTqwZSFdZWOxfRZqZlxCveeWVj4gFeW95UiSaKQN7BxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP7X622VD6FBnNtmipakVRbPpGEQwHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC84QjdDMkQxQzAxRUVD RjMzOTFGMDE3Nzc5MTVDNjFFNDczQkY1RkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0hKXxQ1Vejz AJ8hhBrAJVAh508CPhsl3IaZ44zQ+X0p2RkD16i6D3V6fwtC4Eti/govqBoL508E pWJWPxAKuzhpNmBJI9uZInKD2MmYl12ZRuaEFtYTmYLl+feDwVaVNTBsyr/YaDvU rKPr+Uo9cny9Z+qR3t3FKUrtUYFTybj9FscyzJ14h3VrDKclPq733CIwZPyyOpYG NpG9d8aVuPr8zVoBqhS/DXOsPnQcA2MB0UAmIB12uvslOdXKED3auhl5WDtFK7GC Xiof3s3g4SpaZ8xeAQgzYtATKB9QlGg6uuSsofSlq37M4A9b6tsQ62vQWty3kuwo yPmTpeW5Xw== -----END CERTIFICATE-----Generated at Mon Apr 27 12:39:44 2026 by rpki-client