$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: vKxBL9B0DdxaeuNluiVpBLryteHbAz380JL6vSpSJZk= Subject key identifier: 36:B3:63:EF:86:67:A9:24:8A:03:4F:A1:CB:72:3E:9A:D0:16:FD:81 Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 2D7E5786671F598C53599A6E4F9C1F8AA56D78A6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: 13 Signing time: Mon 27 Apr 2026 13:43:47 +0000 Manifest this update: Mon 27 Apr 2026 13:38:47 +0000 Manifest next update: Tue 28 Apr 2026 14:25:47 +0000 Files and hashes: 1: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) 2: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: kKXh+Kaqk05T6bhaxApZ+Fugfxs2yHfBezRL7UjssqM=) 3: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) 4: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7e:57:86:67:1f:59:8c:53:59:9a:6e:4f:9c:1f:8a:a5:6d:78:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Apr 27 13:38:47 2026 GMT Not After : Apr 28 14:25:47 2026 GMT Subject: CN=36B363EF8667A9248A034FA1CB723E9AD016FD81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:cb:93:1a:02:c4:19:c1:f0:a3:ae:f4:c0: fa:ba:ff:ec:64:3e:33:c7:da:24:ec:d1:ed:31:ca: aa:4b:e4:c2:8e:30:8f:17:a5:49:d4:a2:6a:d6:e3: 28:dd:ab:24:f0:ce:7f:7c:bd:cc:99:45:89:dc:b0: 76:ff:e9:3b:62:1f:98:ba:55:d2:47:74:65:af:ee: fb:03:21:6f:c2:da:6b:e7:df:2d:96:27:58:6b:56: c8:b9:b7:09:f2:31:e5:bb:5e:82:4a:75:e0:27:36: 42:bc:af:3f:bc:d5:9c:01:2d:f6:9d:d9:e3:95:e0: be:7f:3d:3e:63:c6:19:1f:aa:0d:c7:2a:ce:4b:6f: c4:b2:8e:6c:53:79:70:ac:b5:5a:ab:a5:cd:a6:56: 0f:c2:cc:c4:02:08:37:62:5f:a0:70:0a:dc:b9:37: 7d:1f:ee:71:18:e1:2f:3a:da:1a:e0:0c:8e:64:18: 1c:47:1e:33:82:a1:3e:8f:8b:8a:3b:94:ce:fb:0d: 2c:7e:69:29:91:a9:8c:d7:c9:d7:24:e2:8c:92:75: 98:4e:08:67:1a:8f:44:33:9a:cd:25:90:e8:8b:49: 2f:f1:26:c7:7e:b5:35:4b:e2:f3:0f:3e:74:9c:a7: 11:39:c0:c0:ab:61:58:e5:c4:88:5a:49:c6:6a:8b: db:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B3:63:EF:86:67:A9:24:8A:03:4F:A1:CB:72:3E:9A:D0:16:FD:81 X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fe:40:21:08:da:9f:f8:16:20:a8:c8:7a:6f:7a:7a:1e:92: 74:75:6c:19:bf:68:ca:93:f6:fb:08:6c:dd:89:45:aa:79:07: b2:c9:43:9f:4f:f7:bf:e6:6b:1f:16:ca:c9:a3:43:6a:b0:87: 01:42:37:9e:3f:47:3f:50:1d:96:d8:59:cf:8c:55:f6:a2:2c: 8e:34:47:a5:5a:15:96:9c:cf:e4:7e:5d:55:e3:16:f2:cc:7a: fa:81:81:b4:6e:e8:31:17:77:6d:2a:63:3b:60:ed:9f:3c:38: d2:45:78:25:a9:97:05:7a:ce:39:5f:30:31:83:09:60:d3:6a: 59:0e:63:2d:68:8c:e9:9d:c0:97:cc:b4:6c:84:f5:1f:a4:41: 88:3c:ac:6b:0c:16:c7:f5:b0:9b:37:e4:f6:29:3e:de:c6:4f: b4:dc:af:07:95:0a:cd:a3:f6:40:ba:e1:87:51:39:93:0c:56: e3:fc:f4:63:2a:8b:ca:5e:da:74:e5:25:b4:a7:8a:9c:4e:50: 65:ca:09:49:67:05:85:4b:ad:1e:5a:7e:82:83:82:63:45:61: 1b:8c:39:08:da:67:57:99:4a:51:b9:58:59:a2:33:3d:71:d3: ec:29:e3:be:a0:de:c0:a5:75:35:eb:7e:04:0e:25:66:18:e9: 40:40:2a:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULX5XhmcfWYxTWZpuT5wfiqVteKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjA0MjcxMzM4NDdaFw0yNjA0MjgxNDI1NDdaMDMxMTAvBgNV BAMTKDM2QjM2M0VGODY2N0E5MjQ4QTAzNEZBMUNCNzIzRTlBRDAxNkZEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NMuTGgLEGcHwo670wPq6/+xk PjPH2iTs0e0xyqpL5MKOMI8XpUnUomrW4yjdqyTwzn98vcyZRYncsHb/6TtiH5i6 VdJHdGWv7vsDIW/C2mvn3y2WJ1hrVsi5twnyMeW7XoJKdeAnNkK8rz+81ZwBLfad 2eOV4L5/PT5jxhkfqg3HKs5Lb8SyjmxTeXCstVqrpc2mVg/CzMQCCDdiX6BwCty5 N30f7nEY4S862hrgDI5kGBxHHjOCoT6Pi4o7lM77DSx+aSmRqYzXydck4oySdZhO CGcaj0Qzms0lkOiLSS/xJsd+tTVL4vMPPnScpxE5wMCrYVjlxIhaScZqi9tTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNrNj74ZnqSSKA0+hy3I+mtAW/YEwHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/5AIQjan/gW IKjIem96eh6SdHVsGb9oypP2+whs3YlFqnkHsslDn0/3v+ZrHxbKyaNDarCHAUI3 nj9HP1AdlthZz4xV9qIsjjRHpVoVlpzP5H5dVeMW8sx6+oGBtG7oMRd3bSpjO2Dt nzw40kV4JamXBXrOOV8wMYMJYNNqWQ5jLWiM6Z3Al8y0bIT1H6RBiDysawwWx/Ww mzfk9ik+3sZPtNyvB5UKzaP2QLrhh1E5kwxW4/z0YyqLyl7adOUltKeKnE5QZcoJ SWcFhUutHlp+goOCY0VhG4w5CNpnV5lKUblYWaIzPXHT7CnjvqDewKV1Net+BA4l ZhjpQEAqOA== -----END CERTIFICATE-----Generated at Mon Apr 27 21:50:20 2026 by rpki-client