$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft File: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft (raw, json) Hash identifier: fuaWuSTkKXGyXEXCtxydxzu4dxuQRTkoVddM68NhtMw= Subject key identifier: C9:52:63:93:FB:FC:E4:3A:57:84:9E:99:2F:5F:9E:22:CF:60:91:53 Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 67DE8CBBA2F7C2910EB6F905EAD68A4A499342DA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft Manifest number: 0C Signing time: Tue 21 Apr 2026 13:15:16 +0000 Manifest this update: Tue 21 Apr 2026 13:10:16 +0000 Manifest next update: Wed 22 Apr 2026 13:33:16 +0000 Files and hashes: 1: 3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (hash: zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=) 2: 3130332e3231352e33362e302f32322d3232203d3e203233363530.roa (hash: Z7qfxupQ6TOi75qeAxQIukqaySG+uH05FoMhY9vC090=) 3: 3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (hash: Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=) 4: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (hash: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E=) 5: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (hash: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo=) 6: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (hash: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=) 7: 3134342e34382e3231332e302f32342d3234203d3e203536303436.roa (hash: 9rruxfBtc3Po2Kcfh6A2jkuFy4C64mi5rqrB9y/j9lg=) 8: 3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (hash: ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=) 9: 3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (hash: qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=) 10: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl (hash: lat0hNegoRHl+T82EaQ19blsunYaie4kj7T7PXjN9SI=) 11: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (hash: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=) 12: 3130332e3231352e33392e302f32342d3234203d3e203536303436.roa (hash: p6FgftTcMGm810mxMbm4vOq8OBqCWSWi01lBsK+/mO0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 13:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:de:8c:bb:a2:f7:c2:91:0e:b6:f9:05:ea:d6:8a:4a:49:93:42:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Apr 21 13:10:16 2026 GMT Not After : Apr 22 13:33:16 2026 GMT Subject: CN=C9526393FBFCE43A57849E992F5F9E22CF609153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:8a:87:55:e5:53:d5:f5:c0:a4:d0:81:c4: 97:51:31:4b:e6:99:c0:f2:5c:02:dd:5a:e8:e8:8b: 15:dc:b2:e3:f1:bd:04:11:1d:c9:95:3c:ca:b7:69: d5:08:6e:6e:e0:56:a8:a7:2f:05:59:a0:b4:0c:a5: 4a:99:45:8b:46:7c:2d:19:90:bf:6c:b4:24:45:bb: 19:2a:47:ed:f4:16:33:2c:b9:b7:fa:7e:57:af:eb: e5:27:ab:47:16:ce:7d:04:e5:6e:da:35:bf:29:2f: 0a:1d:cc:ae:50:92:ff:90:1d:c6:62:9f:9e:9a:8f: f0:1a:4f:eb:96:45:3d:b9:2c:e4:41:b0:3b:5e:57: d0:8c:b8:f1:f3:0e:9e:96:8c:3b:02:54:0e:0d:36: 0c:26:d6:b0:14:3f:29:39:2c:9b:9a:15:6e:78:ce: fb:6a:0b:91:45:ce:fb:9d:81:42:8f:f9:ad:d1:7a: 0e:3d:ac:f7:77:fd:cb:39:a0:a8:b8:ad:75:2b:1c: 38:90:42:f7:d3:96:2b:01:f3:22:43:5f:ab:99:74: df:a5:09:da:33:7e:96:94:10:fd:92:78:fc:18:84: 33:9f:03:34:de:6a:6b:04:e9:fa:3f:b8:be:7b:82: 15:eb:c2:dc:3f:ef:c0:57:b9:07:a9:5e:67:b8:5d: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:52:63:93:FB:FC:E4:3A:57:84:9E:99:2F:5F:9E:22:CF:60:91:53 X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d8:5c:7a:1f:e4:3e:d8:e6:f0:f2:11:7d:8a:f9:80:87:2d: ee:39:9a:ec:60:f9:c9:66:80:e4:9f:3e:fc:c1:aa:2a:13:30: b6:8f:be:fe:40:82:2f:b5:1b:9f:62:45:cc:bd:86:49:2e:a3: 00:3a:a3:4a:1a:fd:74:a8:04:3c:a5:c8:5e:fc:02:6f:33:c5: c7:c3:30:80:8b:ea:e5:0b:67:b7:64:b4:f7:6e:ac:5b:03:2f: 1f:c1:83:db:29:78:6e:79:5a:3c:5c:59:87:b8:72:e5:b3:f2: df:70:17:97:1c:57:c7:bb:74:34:0f:eb:f0:c4:c4:cd:68:0c: 75:c2:99:53:ea:2e:55:cf:5d:19:18:78:65:d8:0c:fa:7c:61: 87:1a:4b:32:e2:f3:8b:d1:a1:eb:02:ae:7e:d9:24:65:22:ee: d6:f8:d4:30:d7:67:8f:c6:31:6e:c5:e0:3e:ed:7b:17:3b:3e: f1:a4:bd:29:f7:d0:33:9e:c8:4b:07:0a:38:60:32:7f:75:bb: 0b:d8:6e:d6:19:00:e0:56:ab:31:72:ec:59:29:81:26:d9:33: 6b:17:8f:95:6f:80:a3:1f:13:ad:c3:98:7e:75:78:f0:82:52: c1:c6:57:d7:49:c4:60:37:dc:cb:3f:2e:77:4c:60:6b:28:c4: f3:e6:46:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ96Mu6L3wpEOtvkF6taKSkmTQtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA0MjExMzEwMTZaFw0yNjA0MjIxMzMzMTZaMDMxMTAvBgNV BAMTKEM5NTI2MzkzRkJGQ0U0M0E1Nzg0OUU5OTJGNUY5RTIyQ0Y2MDkxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5YqHVeVT1fXApNCBxJdRMUvm mcDyXALdWujoixXcsuPxvQQRHcmVPMq3adUIbm7gVqinLwVZoLQMpUqZRYtGfC0Z kL9stCRFuxkqR+30FjMsubf6flev6+Unq0cWzn0E5W7aNb8pLwodzK5Qkv+QHcZi n56aj/AaT+uWRT25LORBsDteV9CMuPHzDp6WjDsCVA4NNgwm1rAUPyk5LJuaFW54 zvtqC5FFzvudgUKP+a3Reg49rPd3/cs5oKi4rXUrHDiQQvfTlisB8yJDX6uZdN+l CdozfpaUEP2SePwYhDOfAzTeamsE6fo/uL57ghXrwtw/78BXuQepXme4XaIhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyVJjk/v85DpXhJ6ZL1+eIs9gkVMwHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTEyMTU1MTczODQ3MDUvMC9EMTM1OEU5NkE1Mjc4 QUMyMThBRkI3MThFMkExQkJFRjU0QjkxNDlELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9hceh/kPtjm 8PIRfYr5gIct7jma7GD5yWaA5J8+/MGqKhMwto++/kCCL7Ubn2JFzL2GSS6jADqj Shr9dKgEPKXIXvwCbzPFx8MwgIvq5Qtnt2S0926sWwMvH8GD2yl4bnlaPFxZh7hy 5bPy33AXlxxXx7t0NA/r8MTEzWgMdcKZU+ouVc9dGRh4ZdgM+nxhhxpLMuLzi9Gh 6wKuftkkZSLu1vjUMNdnj8YxbsXgPu17Fzs+8aS9KffQM57ISwcKOGAyf3W7C9hu 1hkA4FarMXLsWSmBJtkzaxePlW+Aox8TrcOYfnV48IJSwcZX10nEYDfcyz8ud0xg ayjE8+ZGJg== -----END CERTIFICATE-----Generated at Wed Apr 22 02:53:55 2026 by rpki-client