$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: ed4pz4h/P29DLo8VZ5wjg0izzT3+PDgGVxr1FdOsS6U= Subject key identifier: DA:CD:86:47:D1:24:FC:46:28:32:11:D5:EF:B2:DC:77:75:D4:5A:BF Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 6F4CC119BA09DA9F9462536BD3467A9440BD917B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: 0A Signing time: Tue 21 Apr 2026 10:35:14 +0000 Manifest this update: Tue 21 Apr 2026 10:30:14 +0000 Manifest next update: Wed 22 Apr 2026 12:54:14 +0000 Files and hashes: 1: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) 2: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 3: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) 4: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: IGyE6E0AWGqkRjJSpjEqTemNqIFwMWjINx+DWaW594A=) 5: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 12:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4c:c1:19:ba:09:da:9f:94:62:53:6b:d3:46:7a:94:40:bd:91:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Apr 21 10:30:14 2026 GMT Not After : Apr 22 12:54:14 2026 GMT Subject: CN=DACD8647D124FC46283211D5EFB2DC7775D45ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:4b:91:d7:67:07:bb:88:31:7a:bd:75:80: 3a:9f:fc:19:e3:a6:46:98:cb:15:b2:ba:3d:c3:1c: 69:93:66:e2:16:5b:92:11:2d:46:2f:75:82:90:75: d3:b2:2f:e9:74:27:33:ca:08:45:65:9f:6a:2d:e3: c8:09:f5:fc:18:25:c0:dc:87:f6:d5:87:e7:24:20: 72:8c:f5:b9:bc:59:d5:01:1a:00:44:28:57:3b:ba: 50:fc:eb:7e:34:33:29:7a:46:1b:fb:3f:43:9b:81: 52:e1:bc:85:c8:e5:54:d0:a0:b7:c1:57:b5:55:cd: 14:69:8e:c3:0e:d9:2c:dc:fb:b4:a7:a2:1f:24:5c: 5b:1f:b8:49:97:c8:11:76:df:19:e0:d1:a4:50:06: f0:46:52:50:c0:5c:9f:a5:62:16:9f:e1:4f:75:73: 0f:bf:7e:25:4e:4e:a3:40:4e:eb:7b:6b:95:de:82: c5:e0:a0:1c:6b:f1:fc:08:d0:78:64:67:07:89:12: 59:f7:ac:c1:b3:9a:7d:6a:19:c0:a3:a5:b9:ea:ef: ab:5c:a3:65:1f:a4:08:a0:1e:8d:9e:89:01:63:53: 71:11:d7:a1:47:41:f0:9b:36:8b:6e:87:0d:7a:b9: b7:d0:ec:21:0b:88:c8:8a:97:79:88:aa:8a:48:b5: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CD:86:47:D1:24:FC:46:28:32:11:D5:EF:B2:DC:77:75:D4:5A:BF X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ae:55:1a:1c:72:7d:cc:66:26:fa:c4:c8:be:a7:bf:46:5f: 16:47:6e:4b:79:c1:76:15:94:4a:e1:24:12:ad:da:bf:cc:ec: 75:b8:2c:c5:f7:6d:5f:23:b9:f7:47:26:38:e5:5e:e7:33:0e: 3d:b6:6f:a6:63:4b:7f:4c:89:03:91:66:49:84:06:70:51:2c: 1b:97:09:0d:6d:70:1a:b6:e7:21:91:38:0d:d9:3b:23:67:c5: 78:e0:1c:9a:ca:33:83:21:d2:e1:d7:35:87:7c:4d:35:bf:48: d1:8d:fb:ef:57:4c:41:30:ba:f1:3f:4c:cc:40:43:f8:91:70: 88:f4:94:6d:cd:3c:07:75:70:64:93:88:77:50:0e:30:be:a0: e2:2d:64:91:89:d9:97:c7:cb:a3:30:b6:b7:f4:79:20:69:d5: a8:97:32:29:75:5c:32:de:17:1d:b6:be:fc:cd:eb:3a:a7:6b: 2b:93:a0:00:0f:32:a3:3b:5b:a2:ca:97:c5:d4:dc:d2:d0:70: d3:aa:26:2e:e2:63:2e:f2:13:20:b6:ac:ea:ee:39:80:44:d6: 5c:1a:65:c6:76:bc:ed:f3:1f:79:53:f1:17:f6:7a:15:b3:e7: 4a:a2:02:53:6e:0e:95:24:18:a6:17:f9:55:d7:ae:76:b8:48: c8:1f:2a:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb0zBGboJ2p+UYlNr00Z6lEC9kXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA0MjExMDMwMTRaFw0yNjA0MjIxMjU0MTRaMDMxMTAvBgNV BAMTKERBQ0Q4NjQ3RDEyNEZDNDYyODMyMTFENUVGQjJEQzc3NzVENDVBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClskuR12cHu4gxer11gDqf/Bnj pkaYyxWyuj3DHGmTZuIWW5IRLUYvdYKQddOyL+l0JzPKCEVln2ot48gJ9fwYJcDc h/bVh+ckIHKM9bm8WdUBGgBEKFc7ulD86340Myl6Rhv7P0ObgVLhvIXI5VTQoLfB V7VVzRRpjsMO2Szc+7Snoh8kXFsfuEmXyBF23xng0aRQBvBGUlDAXJ+lYhaf4U91 cw+/fiVOTqNATut7a5XegsXgoBxr8fwI0HhkZweJEln3rMGzmn1qGcCjpbnq76tc o2UfpAigHo2eiQFjU3ER16FHQfCbNotuhw16ubfQ7CELiMiKl3mIqopItbUJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2s2GR9Ek/EYoMhHV77Lcd3XUWr8wHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM65VGhxyfcxm JvrEyL6nv0ZfFkduS3nBdhWUSuEkEq3av8zsdbgsxfdtXyO590cmOOVe5zMOPbZv pmNLf0yJA5FmSYQGcFEsG5cJDW1wGrbnIZE4Ddk7I2fFeOAcmsozgyHS4dc1h3xN Nb9I0Y3771dMQTC68T9MzEBD+JFwiPSUbc08B3VwZJOId1AOML6g4i1kkYnZl8fL ozC2t/R5IGnVqJcyKXVcMt4XHba+/M3rOqdrK5OgAA8yoztbosqXxdTc0tBw06om LuJjLvITILas6u45gETWXBplxna87fMfeVPxF/Z6FbPnSqICU24OlSQYphf5Vdeu drhIyB8qJQ== -----END CERTIFICATE-----Generated at Wed Apr 22 02:53:53 2026 by rpki-client