$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft File: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json) Hash identifier: NUOJG7lyJioFohUUqUtuznRYAkZW+4u+26+xqqaWKjg= Subject key identifier: 37:C3:7C:63:CB:C9:CC:50:53:5A:B2:FD:3D:E7:F3:01:89:8C:B6:AA Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Certificate serial: 19DAE5A0D4FDCC3645FA0B8ED9042B154EDCCA2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft Manifest number: 28 Signing time: Tue 21 Apr 2026 21:25:23 +0000 Manifest this update: Tue 21 Apr 2026 21:20:23 +0000 Manifest next update: Wed 22 Apr 2026 21:45:23 +0000 Files and hashes: 1: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=) 2: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=) 3: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=) 4: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=) 5: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=) 6: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=) 7: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=) 8: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=) 9: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=) 10: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=) 11: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=) 12: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=) 13: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=) 14: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=) 15: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=) 16: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=) 17: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=) 18: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=) 19: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=) 20: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=) 21: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=) 22: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=) 23: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: ssTIo6nwE6FzjpHmwxIn71S2ZQtZkUI15aiZQOjEW6A=) 24: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=) 25: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:da:e5:a0:d4:fd:cc:36:45:fa:0b:8e:d9:04:2b:15:4e:dc:ca:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Validity Not Before: Apr 21 21:20:23 2026 GMT Not After : Apr 22 21:45:23 2026 GMT Subject: CN=37C37C63CBC9CC50535AB2FD3DE7F301898CB6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:2e:72:1d:59:bc:83:93:93:f8:ab:bd:d5: 31:1d:70:3b:7d:a0:bf:73:44:32:0a:dc:2b:6f:da: ac:da:b2:82:30:7d:20:75:ad:7c:7e:17:cb:aa:6b: c6:2b:df:14:04:e5:cc:26:b9:d4:ed:72:ce:a6:be: 34:17:a2:bc:2d:8e:14:a2:35:19:e8:68:67:95:84: 8b:82:dd:84:72:0e:3e:aa:1a:1e:6c:a3:57:69:e8: dc:5b:2a:48:5e:56:7e:eb:b1:37:e7:19:c8:de:a1: 97:76:09:7a:d2:3c:89:2a:a7:73:6d:12:82:88:31: b0:47:f2:9b:3d:6b:9e:64:e2:23:2a:b8:13:71:7d: 14:0d:93:27:b5:d0:4d:01:54:71:c1:69:60:56:28: f2:de:21:d3:80:e5:43:e9:de:1b:50:9b:33:6b:7a: 1a:71:85:d1:26:08:f4:7e:df:7d:a8:b3:06:73:55: 08:87:45:54:c3:5a:de:1f:4a:70:d6:bb:20:78:76: d5:f4:0e:5d:2a:f8:c2:6f:39:04:73:61:de:e8:c8: be:b8:da:6c:80:c9:ce:3d:0a:d1:c4:67:a0:59:1d: ef:4d:17:ab:1b:14:db:d5:71:5c:df:d7:42:99:53: 81:54:62:d6:05:01:05:47:ab:6c:78:ae:77:00:6c: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C3:7C:63:CB:C9:CC:50:53:5A:B2:FD:3D:E7:F3:01:89:8C:B6:AA X509v3 Authority Key Identifier: keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:45:69:1a:7f:66:2d:da:ea:0f:19:4b:d2:66:89:7d:bf:23: 28:a0:5f:0e:00:d6:5b:f4:c0:4d:2a:7c:5c:70:f0:8c:50:01: 92:46:9c:dc:2e:ca:5e:3c:3f:3d:6e:80:ad:0c:59:cc:5e:2f: 1b:e0:57:09:96:e9:73:91:9e:94:ec:6c:7e:8f:85:f4:53:7c: c6:01:d7:ee:90:08:8d:af:53:fc:04:01:ca:4e:53:00:14:76: bb:06:02:3d:e8:f3:2a:8b:5d:1e:1c:59:1a:9a:b8:86:ad:d8: 5a:b6:0b:20:49:66:16:18:7e:79:f2:a6:23:06:ca:15:1c:7f: 2a:14:26:89:92:b5:d7:14:fd:35:e8:88:9e:0f:1c:e0:1e:1d: d6:7a:09:83:99:3c:bd:9c:ac:b8:7f:42:df:6e:e2:1f:58:a6: f2:9b:8d:88:05:6b:e2:0e:01:07:bb:fc:9c:d7:29:2b:bc:d6: 59:83:f3:5a:f5:9e:ed:4b:1c:d1:86:27:70:49:12:a2:39:b1: c3:e1:5d:a4:e7:94:25:b3:23:54:3e:1f:8b:7e:51:20:99:02: 9c:15:6f:1f:79:e4:43:8f:af:ff:24:ab:1a:66:d9:dc:ce:3f: e6:7e:c8:ae:96:78:85:79:c2:ad:aa:8d:11:a5:48:e8:09:54: 08:cf:04:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGdrloNT9zDZF+guO2QQrFU7cyi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy MjZFRjhBODAeFw0yNjA0MjEyMTIwMjNaFw0yNjA0MjIyMTQ1MjNaMDMxMTAvBgNV BAMTKDM3QzM3QzYzQ0JDOUNDNTA1MzVBQjJGRDNERTdGMzAxODk4Q0I2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsS5yHVm8g5OT+Ku91TEdcDt9 oL9zRDIK3Ctv2qzasoIwfSB1rXx+F8uqa8Yr3xQE5cwmudTtcs6mvjQXorwtjhSi NRnoaGeVhIuC3YRyDj6qGh5so1dp6NxbKkheVn7rsTfnGcjeoZd2CXrSPIkqp3Nt EoKIMbBH8ps9a55k4iMquBNxfRQNkye10E0BVHHBaWBWKPLeIdOA5UPp3htQmzNr ehpxhdEmCPR+332oswZzVQiHRVTDWt4fSnDWuyB4dtX0Dl0q+MJvOQRzYd7oyL64 2myAyc49CtHEZ6BZHe9NF6sbFNvVcVzf10KZU4FUYtYFAQVHq2x4rncAbCatAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN8N8Y8vJzFBTWrL9PefzAYmMtqowHwYDVR0j BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0 NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY1ODY3NjQwMTQ4NDU5NTUvMC9GOEI0RkMyOUZFRjIw QURGQUZCMjRBNkRBRjVGNDQxNTIyNkVGOEE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0VpGn9mLdrq DxlL0maJfb8jKKBfDgDWW/TATSp8XHDwjFABkkac3C7KXjw/PW6ArQxZzF4vG+BX CZbpc5GelOxsfo+F9FN8xgHX7pAIja9T/AQByk5TABR2uwYCPejzKotdHhxZGpq4 hq3YWrYLIElmFhh+efKmIwbKFRx/KhQmiZK11xT9NeiIng8c4B4d1noJg5k8vZys uH9C327iH1im8puNiAVr4g4BB7v8nNcpK7zWWYPzWvWe7Usc0YYncEkSojmxw+Fd pOeUJbMjVD4fi35RIJkCnBVvH3nkQ4+v/ySrGmbZ3M4/5n7IrpZ4hXnCraqNEaVI 6AlUCM8EjA== -----END CERTIFICATE-----Generated at Wed Apr 22 01:38:57 2026 by rpki-client