$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: JTSebkQtB1c2cZpZpV+z9D99oe7msE8kmUU3bLjqXU4= Subject key identifier: 15:4F:39:85:84:2E:14:65:5C:82:EC:D7:19:49:13:14:52:C3:94:B4 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 79A33447317D1B91FC697ADE4B126C605C194490 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: 16 Signing time: Mon 27 Apr 2026 18:33:50 +0000 Manifest this update: Mon 27 Apr 2026 18:28:50 +0000 Manifest next update: Tue 28 Apr 2026 19:22:50 +0000 Files and hashes: 1: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 2: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 3: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: zyR0AGuF4OEkpRCUYn0jDhFKOZa6Ew6PYedgf6Xz6oc=) 4: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) 5: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 6: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a3:34:47:31:7d:1b:91:fc:69:7a:de:4b:12:6c:60:5c:19:44:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Apr 27 18:28:50 2026 GMT Not After : Apr 28 19:22:50 2026 GMT Subject: CN=154F3985842E14655C82ECD71949131452C394B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:df:16:59:d4:89:c0:c4:a6:66:b9:34:e8: 71:dc:d1:a4:2b:b3:d1:2c:53:ac:64:14:14:7b:21: 00:52:da:7c:98:c6:ad:09:ab:97:5f:04:e4:84:4b: 7e:f3:72:16:9c:f9:6b:f7:76:a0:67:72:f0:29:cf: f9:79:5b:af:3b:76:ea:59:ed:17:0f:e1:a9:37:f5: 6a:f7:60:ea:75:04:80:fd:4c:46:54:af:39:b1:af: 7e:d1:03:24:90:d4:04:2b:0d:c1:e1:fd:27:ee:ac: 8e:14:9c:c9:c5:8d:c8:19:50:cc:0c:ec:40:0b:61: 6f:57:45:2e:eb:08:80:2b:c7:dc:5f:d0:ca:ff:1b: 80:bb:c5:09:01:98:eb:96:89:85:85:67:1d:00:87: ff:b5:6b:c6:38:1a:c7:64:2c:17:e4:fc:54:e7:e6: ae:fc:46:59:37:6e:df:f8:1e:ac:5f:24:3c:85:da: 65:dc:3c:82:3b:45:de:6d:b2:6a:ac:b8:46:20:46: 38:36:01:43:82:a9:a3:06:0f:a1:91:3c:00:b0:1b: 0c:dc:35:03:29:68:b3:cf:35:27:5a:74:64:b5:47: 79:cd:0d:40:6a:67:c7:3b:cc:1b:35:f8:45:10:a9: cc:3a:0d:c0:c1:80:7d:5c:6a:f5:64:e4:b7:16:d8: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4F:39:85:84:2E:14:65:5C:82:EC:D7:19:49:13:14:52:C3:94:B4 X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:83:2f:5c:88:7b:05:b0:20:ec:a3:50:e9:f5:e9:f6:59:b2: 71:24:73:eb:d9:6e:62:70:98:be:da:c4:00:07:6c:66:39:f0: 3e:f7:88:f4:c5:b1:f4:2f:b5:2d:c5:5e:17:2a:1c:9b:ef:5e: a7:2b:cc:7b:ba:a1:d5:6e:b2:53:da:fe:7d:df:c5:47:99:19: 89:bd:0a:64:41:db:61:fa:87:bf:d1:48:16:bf:ae:55:3c:83: b2:81:0b:a0:d0:51:d8:bb:f6:7e:92:e1:37:4d:df:13:63:38: 27:7b:e8:3d:93:c2:ef:3d:00:3c:26:91:52:23:33:a3:d3:d6: c7:e7:fc:aa:75:b6:a6:e6:d6:5c:d8:1e:33:95:59:ff:63:34: ca:5c:ca:30:fb:25:22:41:2e:86:35:af:7d:bb:b7:10:24:f1: e3:dc:c0:e1:8f:5a:92:05:be:55:77:4d:67:b9:3e:9d:21:ba: 55:a3:cd:a3:ec:79:0b:b7:ea:08:7f:80:8d:97:b2:af:8e:7e: 19:f1:ae:1f:fe:99:da:5e:b9:1a:cd:b0:c4:3d:d8:9d:40:5d: 2c:d6:e1:ac:43:31:2e:64:2d:e6:a5:cd:d3:af:a7:f3:a6:05: cc:61:d9:b1:e1:35:9a:09:3f:2a:0b:a7:8a:24:87:02:5b:9c: 0c:30:ef:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeaM0RzF9G5H8aXreSxJsYFwZRJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA0MjcxODI4NTBaFw0yNjA0MjgxOTIyNTBaMDMxMTAvBgNV BAMTKDE1NEYzOTg1ODQyRTE0NjU1QzgyRUNENzE5NDkxMzE0NTJDMzk0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfd8WWdSJwMSmZrk06HHc0aQr s9EsU6xkFBR7IQBS2nyYxq0Jq5dfBOSES37zchac+Wv3dqBncvApz/l5W687dupZ 7RcP4ak39Wr3YOp1BID9TEZUrzmxr37RAySQ1AQrDcHh/SfurI4UnMnFjcgZUMwM 7EALYW9XRS7rCIArx9xf0Mr/G4C7xQkBmOuWiYWFZx0Ah/+1a8Y4GsdkLBfk/FTn 5q78Rlk3bt/4HqxfJDyF2mXcPII7Rd5tsmqsuEYgRjg2AUOCqaMGD6GRPACwGwzc NQMpaLPPNSdadGS1R3nNDUBqZ8c7zBs1+EUQqcw6DcDBgH1cavVk5LcW2IXVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFU85hYQuFGVcguzXGUkTFFLDlLQwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4MvXIh7BbAg 7KNQ6fXp9lmycSRz69luYnCYvtrEAAdsZjnwPveI9MWx9C+1LcVeFyocm+9epyvM e7qh1W6yU9r+fd/FR5kZib0KZEHbYfqHv9FIFr+uVTyDsoELoNBR2Lv2fpLhN03f E2M4J3voPZPC7z0APCaRUiMzo9PWx+f8qnW2pubWXNgeM5VZ/2M0ylzKMPslIkEu hjWvfbu3ECTx49zA4Y9akgW+VXdNZ7k+nSG6VaPNo+x5C7fqCH+AjZeyr45+GfGu H/6Z2l65Gs2wxD3YnUBdLNbhrEMxLmQt5qXN06+n86YFzGHZseE1mgk/KguniiSH AlucDDDvvw== -----END CERTIFICATE-----Generated at Mon Apr 27 21:50:31 2026 by rpki-client