$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: asJW2QuW4qYCAHtmPHjVzJU/fGUBbidZJedBSbgyR5o= Subject key identifier: B8:80:93:43:B3:4A:A2:74:9F:61:12:54:57:DA:E2:12:1D:48:52:D0 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 75FCAF92CA28CFB8A3B469DA15D4E0D000D74C66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: 09 Signing time: Sat 18 Apr 2026 08:34:52 +0000 Manifest this update: Sat 18 Apr 2026 08:29:52 +0000 Manifest next update: Sun 19 Apr 2026 11:12:52 +0000 Files and hashes: 1: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: F655GlENsZapv1gb5EuXyQYio2DaH3qSbXj+KJXj2Po=) 2: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:fc:af:92:ca:28:cf:b8:a3:b4:69:da:15:d4:e0:d0:00:d7:4c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Apr 18 08:29:52 2026 GMT Not After : Apr 19 11:12:52 2026 GMT Subject: CN=B8809343B34AA2749F61125457DAE2121D4852D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:34:39:da:88:1c:12:eb:e3:f1:04:14:39: 86:38:1c:eb:a6:e9:14:52:6e:fa:ce:e8:bd:b5:1e: b8:bf:b7:cb:bf:d6:6e:bc:92:02:bc:e5:67:a6:d2: b4:8d:a9:6f:7e:e0:1d:6a:36:4c:25:0a:b3:4b:09: 64:a4:04:c3:cd:16:39:f2:e0:21:cf:69:b7:a3:74: e2:60:5c:f9:de:e6:e7:84:8a:c9:58:e6:c8:16:bd: 26:6d:a2:00:41:ce:f9:64:8c:22:8f:6d:89:b1:53: 48:b9:38:a3:78:99:8c:24:0f:e2:64:1e:11:59:14: 21:e6:b2:4c:85:9c:41:ed:07:52:a2:e6:3c:04:4f: 56:4d:bb:ac:71:44:73:c6:bb:75:2d:e3:f6:0a:e5: dd:a9:51:c2:b4:bf:94:43:db:78:73:52:c9:d9:ca: 7d:72:8f:6c:99:a1:43:0f:28:d8:aa:99:ae:2d:19: 85:ce:bd:4e:2a:2e:a0:a3:29:f9:53:a9:59:ce:8b: a9:36:f2:2b:50:09:9c:21:f9:c9:59:d8:d5:d5:e6: de:2a:ee:77:57:b9:f5:98:35:c8:65:a2:6f:30:89: 21:cd:ef:88:bd:74:af:e7:5c:08:b5:12:23:80:bf: 19:1c:86:79:2b:ef:3d:f0:05:8a:f7:12:6c:1d:03: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:80:93:43:B3:4A:A2:74:9F:61:12:54:57:DA:E2:12:1D:48:52:D0 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b1:e4:ed:49:b9:47:4d:92:d9:50:02:14:a6:01:fb:d0:42: 0a:38:a5:e6:9d:61:89:6f:95:2c:c2:3c:dc:b0:e5:25:0a:23: aa:96:f8:b9:9c:8e:fb:3f:ff:d3:c5:16:94:ae:fe:7e:f8:d3: 87:3c:6d:fb:df:c9:d7:78:c6:cc:11:ba:9e:08:f4:78:4a:71: 56:d9:7d:e3:94:0b:71:71:ba:f6:8a:31:a6:ad:cf:6b:eb:71: 1d:75:d0:d8:60:3c:80:2f:5d:d9:9c:82:37:6e:17:09:cd:cc: 5f:2a:ef:02:d1:5f:14:f5:21:a2:b9:c4:ab:3d:98:63:6d:f7: ec:67:99:c0:4f:9d:3a:f8:9f:2f:9b:d2:a4:bb:6f:cf:a4:73: 50:3e:71:9f:01:a9:86:ea:46:43:8a:27:c5:ce:ea:a2:af:c7: 06:d0:9f:0e:5d:7d:d9:92:57:32:15:10:16:13:11:fe:50:a7: 0d:08:dc:b0:af:06:77:4f:dc:6b:31:9f:c8:10:bd:04:c8:81: 05:31:98:e2:91:97:8d:ed:7f:b9:45:e4:e8:11:14:e9:3d:a5: f6:c6:f1:ed:6d:c7:a5:de:07:fd:63:ca:da:1a:55:8a:ea:a3: 9f:22:04:87:17:9d:9a:07:c4:d3:cc:2c:28:35:ce:4f:95:6b: fa:fa:ee:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdfyvksooz7ijtGnaFdTg0ADXTGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA0MTgwODI5NTJaFw0yNjA0MTkxMTEyNTJaMDMxMTAvBgNV BAMTKEI4ODA5MzQzQjM0QUEyNzQ5RjYxMTI1NDU3REFFMjEyMUQ0ODUyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1zQ52ogcEuvj8QQUOYY4HOum 6RRSbvrO6L21Hri/t8u/1m68kgK85Wem0rSNqW9+4B1qNkwlCrNLCWSkBMPNFjny 4CHPabejdOJgXPne5ueEislY5sgWvSZtogBBzvlkjCKPbYmxU0i5OKN4mYwkD+Jk HhFZFCHmskyFnEHtB1Ki5jwET1ZNu6xxRHPGu3Ut4/YK5d2pUcK0v5RD23hzUsnZ yn1yj2yZoUMPKNiqma4tGYXOvU4qLqCjKflTqVnOi6k28itQCZwh+clZ2NXV5t4q 7ndXufWYNchlom8wiSHN74i9dK/nXAi1EiOAvxkchnkr7z3wBYr3EmwdAxCrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuICTQ7NKonSfYRJUV9riEh1IUtAwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7Hk7Um5R02S 2VACFKYB+9BCCjil5p1hiW+VLMI83LDlJQojqpb4uZyO+z//08UWlK7+fvjThzxt +9/J13jGzBG6ngj0eEpxVtl945QLcXG69ooxpq3Pa+txHXXQ2GA8gC9d2ZyCN24X Cc3MXyrvAtFfFPUhornEqz2YY2337GeZwE+dOvifL5vSpLtvz6RzUD5xnwGphupG Q4onxc7qoq/HBtCfDl192ZJXMhUQFhMR/lCnDQjcsK8Gd0/cazGfyBC9BMiBBTGY 4pGXje1/uUXk6BEU6T2l9sbx7W3Hpd4H/WPK2hpViuqjnyIEhxedmgfE08wsKDXO T5Vr+vru9Q== -----END CERTIFICATE-----Generated at Sun Apr 19 01:11:12 2026 by rpki-client