$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: dRYIxKy8M0DrT5xbyyHgwyCukH/Z9hwOQ2XwNd258/Q= Subject key identifier: A1:A0:B9:1E:C6:73:92:CB:C1:AF:16:5E:98:4A:17:D2:93:21:36:D7 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 366987121177B745CE59F6C2865616808035BFAA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: 80 Signing time: Mon 13 Apr 2026 00:19:17 +0000 Manifest this update: Mon 13 Apr 2026 00:14:17 +0000 Manifest next update: Tue 14 Apr 2026 02:06:17 +0000 Files and hashes: 1: 3130332e3139372e3138302e302f32322d3234203d3e20313534333231.roa (hash: /sYnbyNE8n5tD7rL8BZspwNAMdcCPAdNW+N/JljypYg=) 2: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: 81kX2IU6l5Kwvybi4BZKo0o7+9Lzz+rFeJDiH22vmks=) 3: 3130332e3133392e39322e302f32332d3234203d3e20313534333231.roa (hash: MYZCf4PNOWzqElmrRXg430VY4rTe8Gvz2xJ1eEg6fPM=) 4: 3130332e3231382e39322e302f32322d3234203d3e20313534333231.roa (hash: 433AW0+hhEE8q7JCu17vzxwpDNdnp1FKFB4cC73VXRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:69:87:12:11:77:b7:45:ce:59:f6:c2:86:56:16:80:80:35:bf:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Apr 13 00:14:17 2026 GMT Not After : Apr 14 02:06:17 2026 GMT Subject: CN=A1A0B91EC67392CBC1AF165E984A17D2932136D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:b0:b9:f3:d9:a9:7d:0c:74:cc:e6:0c:fc: 7a:7e:c3:5f:84:7a:6a:09:d7:ce:1f:72:6b:11:1e: 58:7e:ef:d6:9d:8f:02:18:3f:6d:84:1e:d5:ab:28: 10:9e:84:2f:56:5d:10:af:45:74:c4:48:fa:72:f5: c1:ab:81:e1:35:5a:ca:ea:35:3a:db:24:d3:b3:38: cb:2f:71:49:26:6d:dc:d2:84:9c:50:e9:27:6d:e3: c6:27:69:c8:1f:f1:69:73:4f:59:c8:ae:da:c7:f8: ae:10:41:e5:3f:1c:2b:5d:9f:53:e3:bf:df:cd:14: 34:ee:fd:6f:06:47:21:b6:eb:fa:28:2a:f8:cc:3a: d9:66:8b:2c:b0:37:6b:e2:66:be:b9:0d:87:1b:24: a8:24:33:d6:3c:13:ba:17:0d:bf:5f:62:ad:ab:87: 46:81:35:a7:84:18:c8:1f:88:24:0e:8c:bb:bf:da: 81:21:83:bf:36:1a:a6:02:d7:d1:1d:48:ed:8d:93: e0:b5:00:1c:8b:88:f9:18:a2:4d:76:2b:98:13:aa: 32:a2:e9:f9:18:73:a6:d5:08:9a:0e:4a:bc:90:4d: 4f:60:df:d3:e7:ea:c5:a6:68:6e:60:52:85:c7:83: bc:1e:d6:29:1f:a1:89:5b:0c:5b:a5:58:a4:de:70: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A0:B9:1E:C6:73:92:CB:C1:AF:16:5E:98:4A:17:D2:93:21:36:D7 X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:01:3b:64:1c:90:ed:bb:89:fd:4c:e7:a0:f1:49:a0:73:7f: 47:a9:39:73:4e:4f:fc:92:33:a9:c8:b5:16:0f:b7:cb:54:d2: a4:12:19:ab:81:45:ed:0e:0b:80:59:ec:94:2c:ad:10:74:ff: af:e0:9d:19:48:0e:8b:63:3a:72:ad:30:11:4f:05:41:6c:dc: bf:b6:82:d1:e1:70:28:24:63:11:87:0a:ad:7e:a6:c2:6e:a9: 2d:b8:d4:9a:fa:4a:da:d9:e1:ff:45:d0:23:d1:6b:8d:30:9d: ec:77:20:f9:be:3c:fa:1c:9b:e9:e3:6d:ee:b6:c2:fe:eb:1d: 0d:e6:53:6c:b7:63:a5:8e:6a:dc:f0:c9:f4:bb:69:fc:1c:85: ac:59:d1:1a:0b:a7:52:90:ed:94:89:da:9c:b4:87:ee:85:cd: b5:73:19:11:c1:28:42:1e:6b:9d:64:0d:d0:a7:25:b9:ea:5f: db:25:cc:8d:7a:5b:ff:7d:f2:f1:c6:63:83:5f:6c:11:2f:3d: c5:ec:13:8a:0b:85:29:d9:bf:73:47:31:b1:1f:97:39:a9:1e: 68:02:1c:5f:44:4a:f1:6d:c6:ce:11:67:ac:66:21:a7:a8:98: 33:c6:a9:a4:81:d9:35:74:53:c8:83:fe:77:fa:70:b8:18:d1: 0c:3f:db:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNmmHEhF3t0XOWfbChlYWgIA1v6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjA0MTMwMDE0MTdaFw0yNjA0MTQwMjA2MTdaMDMxMTAvBgNV BAMTKEExQTBCOTFFQzY3MzkyQ0JDMUFGMTY1RTk4NEExN0QyOTMyMTM2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3LC589mpfQx0zOYM/Hp+w1+E emoJ184fcmsRHlh+79adjwIYP22EHtWrKBCehC9WXRCvRXTESPpy9cGrgeE1Wsrq NTrbJNOzOMsvcUkmbdzShJxQ6Sdt48Ynacgf8WlzT1nIrtrH+K4QQeU/HCtdn1Pj v9/NFDTu/W8GRyG26/ooKvjMOtlmiyywN2viZr65DYcbJKgkM9Y8E7oXDb9fYq2r h0aBNaeEGMgfiCQOjLu/2oEhg782GqYC19EdSO2Nk+C1AByLiPkYok12K5gTqjKi 6fkYc6bVCJoOSryQTU9g39Pn6sWmaG5gUoXHg7we1ikfoYlbDFulWKTecEFxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoaC5HsZzksvBrxZemEoX0pMhNtcwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQE7ZByQ7buJ /UznoPFJoHN/R6k5c05P/JIzqci1Fg+3y1TSpBIZq4FF7Q4LgFnslCytEHT/r+Cd GUgOi2M6cq0wEU8FQWzcv7aC0eFwKCRjEYcKrX6mwm6pLbjUmvpK2tnh/0XQI9Fr jTCd7Hcg+b48+hyb6eNt7rbC/usdDeZTbLdjpY5q3PDJ9Ltp/ByFrFnRGgunUpDt lInanLSH7oXNtXMZEcEoQh5rnWQN0Kcluepf2yXMjXpb/33y8cZjg19sES89xewT iguFKdm/c0cxsR+XOakeaAIcX0RK8W3GzhFnrGYhp6iYM8appIHZNXRTyIP+d/pw uBjRDD/bZw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:49 2026 by rpki-client