$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: iTzkh95rGiOJDYNCWB/8hytqdiDf8ETxVZ8V6Z25OWI= Subject key identifier: B2:1C:BB:60:96:DF:32:03:6C:7A:47:F5:E0:42:27:F7:65:92:29:6A Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 28C81841704FE9CF46A3F3229B8A47438A1D3146 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: 06 Signing time: Mon 13 Apr 2026 02:59:17 +0000 Manifest this update: Mon 13 Apr 2026 02:54:17 +0000 Manifest next update: Tue 14 Apr 2026 04:30:17 +0000 Files and hashes: 1: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 2: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: XuJxTiNbmp8FEzvn8jmfouDDhnrhrZewsisJEYQt28c=) 3: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c8:18:41:70:4f:e9:cf:46:a3:f3:22:9b:8a:47:43:8a:1d:31:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Apr 13 02:54:17 2026 GMT Not After : Apr 14 04:30:17 2026 GMT Subject: CN=B21CBB6096DF32036C7A47F5E04227F76592296A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d0:f2:66:ae:1b:cd:bd:38:09:c1:f5:45:56: d2:ed:e8:a9:1f:13:2f:b4:55:bb:45:c2:e8:12:da: 0f:16:d2:1e:83:e1:f2:64:32:56:76:6e:b1:f0:5a: 07:45:5e:f8:11:9a:f9:b1:27:ee:47:87:84:c9:68: 4f:2d:d5:ae:7b:d1:16:bf:8e:20:ba:cf:67:f2:86: 35:ac:70:d8:51:99:2a:83:8b:10:6a:7c:88:45:1e: ad:be:00:a1:d1:26:58:f7:e6:88:32:4a:d3:e7:1e: cd:2d:47:ff:58:1f:2c:c4:5d:75:00:d3:82:5a:0a: b3:67:74:41:35:19:ce:1f:8c:d8:92:82:69:6b:41: b1:69:76:a7:00:d1:04:85:b7:ea:a9:d9:8b:5a:30: cf:34:ac:ae:8d:dc:05:b3:0e:d8:7d:ca:81:15:c0: 89:4e:17:40:00:8e:2c:cb:bb:72:91:17:7b:31:44: 4f:c4:39:61:e7:bb:c5:78:66:4c:76:05:3e:b4:58: 41:a2:d3:5f:af:be:d7:30:e2:b3:8a:ea:12:69:94: 2c:25:b9:88:ca:d4:bc:56:d4:53:3e:18:0f:8d:8f: 71:72:37:44:4e:9d:43:cc:c3:cf:44:05:e1:cd:b6: d0:7e:b3:3a:ad:1f:02:c5:6b:92:1b:97:30:a8:52: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1C:BB:60:96:DF:32:03:6C:7A:47:F5:E0:42:27:F7:65:92:29:6A X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ab:c3:50:87:cd:60:0e:af:11:43:f6:56:9a:b0:e5:14:21: b3:94:c7:7b:62:a5:58:23:2a:f5:27:84:68:ec:f4:6e:8e:cb: d4:aa:7f:e2:23:6d:8e:29:b1:a9:82:b9:a5:de:40:98:f7:91: 66:d9:a7:03:f3:df:3d:39:e3:1f:a4:92:89:16:e4:82:ff:54: 8a:49:91:d7:0f:8d:e5:13:19:d4:0a:fa:77:6a:fc:c9:ad:af: 84:9a:8f:ce:29:5b:7c:9d:ab:ee:b4:a5:bb:8d:82:b1:3b:81: 59:68:3c:f5:5e:6f:f5:3d:6f:2e:da:43:83:14:59:de:49:f1: 79:48:76:8b:b8:ad:46:b7:07:f7:2a:db:be:4f:df:58:90:c4: 61:f1:28:79:2e:9e:e5:00:1a:0d:75:71:12:7b:e1:c6:64:2e: 32:b2:ae:0d:eb:96:9f:8b:79:34:4e:e1:aa:c9:9b:45:bc:09: 85:84:97:2f:c2:7e:9f:1f:a7:5c:cb:95:93:31:fe:a1:0a:39: 70:97:91:03:79:7f:0c:2a:4a:d7:3f:35:31:59:a5:3f:df:b3: 9d:d8:41:35:73:9e:aa:7b:10:ce:f3:d5:f4:12:70:57:d3:9b: 82:6e:4f:a7:1a:d5:e4:fc:b4:05:57:01:e8:76:a2:10:85:e9: a5:62:42:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKMgYQXBP6c9Go/Mim4pHQ4odMUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA0MTMwMjU0MTdaFw0yNjA0MTQwNDMwMTdaMDMxMTAvBgNV BAMTKEIyMUNCQjYwOTZERjMyMDM2QzdBNDdGNUUwNDIyN0Y3NjU5MjI5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0PJmrhvNvTgJwfVFVtLt6Kkf Ey+0VbtFwugS2g8W0h6D4fJkMlZ2brHwWgdFXvgRmvmxJ+5Hh4TJaE8t1a570Ra/ jiC6z2fyhjWscNhRmSqDixBqfIhFHq2+AKHRJlj35ogyStPnHs0tR/9YHyzEXXUA 04JaCrNndEE1Gc4fjNiSgmlrQbFpdqcA0QSFt+qp2YtaMM80rK6N3AWzDth9yoEV wIlOF0AAjizLu3KRF3sxRE/EOWHnu8V4Zkx2BT60WEGi01+vvtcw4rOK6hJplCwl uYjK1LxW1FM+GA+Nj3FyN0ROnUPMw89EBeHNttB+szqtHwLFa5IblzCoUgh9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUshy7YJbfMgNsekf14EIn92WSKWowHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqvDUIfNYA6v EUP2Vpqw5RQhs5THe2KlWCMq9SeEaOz0bo7L1Kp/4iNtjimxqYK5pd5AmPeRZtmn A/PfPTnjH6SSiRbkgv9UikmR1w+N5RMZ1Ar6d2r8ya2vhJqPzilbfJ2r7rSlu42C sTuBWWg89V5v9T1vLtpDgxRZ3knxeUh2i7itRrcH9yrbvk/fWJDEYfEoeS6e5QAa DXVxEnvhxmQuMrKuDeuWn4t5NE7hqsmbRbwJhYSXL8J+nx+nXMuVkzH+oQo5cJeR A3l/DCpK1z81MVmlP9+zndhBNXOeqnsQzvPV9BJwV9Obgm5PpxrV5Py0BVcB6Hai EIXppWJCiA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:02:57 2026 by rpki-client