$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft (raw, json) Hash identifier: BBYXPi2kLu7Ck1jWO2XaZTZJa8Ql2Y8Y0yp/ov5ghW8= Subject key identifier: 01:B0:9C:78:00:5F:14:45:FA:EF:D5:D1:13:31:15:30:F6:40:D2:B1 Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 48310FB5DB8482871EF1BFDA6A2C3B77330D7E4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft Manifest number: 0B Signing time: Mon 27 Apr 2026 04:08:40 +0000 Manifest this update: Mon 27 Apr 2026 04:03:40 +0000 Manifest next update: Tue 28 Apr 2026 04:37:40 +0000 Files and hashes: 1: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (hash: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI=) 2: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl (hash: +LsD0ggIps7f6kvilduglsZlAVWC+hBmgMCsbqicCSI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:31:0f:b5:db:84:82:87:1e:f1:bf:da:6a:2c:3b:77:33:0d:7e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Apr 27 04:03:40 2026 GMT Not After : Apr 28 04:37:40 2026 GMT Subject: CN=01B09C78005F1445FAEFD5D113311530F640D2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:33:c3:75:68:2d:df:3c:6f:97:58:66:f0: 03:62:5c:81:86:56:4f:b4:15:fd:50:21:d1:ba:cb: b7:5f:8d:71:a8:df:df:2c:32:f1:ba:c0:89:48:47: b5:a7:45:5a:6b:08:0e:cb:81:93:b9:17:a7:0b:7a: 4c:91:b2:0c:58:22:e3:65:3f:6f:0e:67:45:82:ab: 44:1c:93:5a:fa:ac:1d:ad:a6:0e:a1:a1:5f:90:74: eb:ff:59:0d:a2:4f:d8:1b:72:2a:51:b1:e9:6b:f2: 9e:48:11:0a:08:6d:39:7d:2d:ad:bf:42:53:2d:04: 0a:4c:95:b4:a7:54:c0:db:fa:79:98:2b:9c:05:ed: f7:2c:35:b1:16:41:e6:ae:ac:c5:74:7f:02:f4:31: c0:a9:29:4f:75:36:6f:0b:52:c9:29:a1:d5:7e:8f: 1a:85:d2:6b:fa:b9:5b:56:19:e8:c2:71:2f:c9:01: c2:73:31:39:f6:83:53:b0:88:25:e6:88:38:56:84: 40:9e:25:3d:49:ab:83:71:4c:73:17:d2:cf:3f:0f: ca:15:c7:c3:bd:5d:27:f4:c9:5d:37:69:34:19:ab: f7:a2:64:fa:af:e6:fe:b9:de:6a:90:12:b5:25:27: 5a:da:43:4c:43:52:42:1c:70:de:48:ab:f7:c0:bb: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B0:9C:78:00:5F:14:45:FA:EF:D5:D1:13:31:15:30:F6:40:D2:B1 X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ad:b0:36:be:7e:88:40:ba:01:fa:28:a1:8f:a9:6f:9a:37: a3:ef:cd:5b:fc:ce:0d:1a:c8:75:59:51:2e:0e:72:ed:e0:78: 97:2b:52:cb:aa:4b:4a:3e:d7:bc:2b:90:85:b6:5c:4f:9d:58: 9b:c7:bd:32:a1:58:b7:3a:d3:7f:96:51:9d:22:62:fb:4a:87: 0d:f6:6e:ec:29:2c:fd:b0:ef:bc:52:2b:5b:23:30:e2:44:29: 65:c8:4d:27:09:06:89:0b:b6:87:45:4e:f4:da:48:2c:22:48: cd:35:59:da:fd:d7:47:93:ef:08:fe:6c:3c:99:5b:66:46:ba: 3d:13:91:da:09:c1:3b:d8:dc:35:7f:fe:ae:b8:e2:c4:4b:9b: 01:1f:c6:7f:0a:88:dc:33:b2:ca:80:64:ae:d3:f1:e7:5b:e4: 3b:bd:f5:9b:32:9f:90:57:17:b7:62:76:5d:ba:fd:83:5f:ee: a9:ad:72:21:35:f3:61:66:af:33:00:f9:27:74:42:70:7b:59: b2:81:2b:13:92:fe:e1:55:1f:75:68:c5:e5:f6:1e:82:cd:a4: 7f:28:ec:fb:90:fe:b5:b0:76:c1:3c:66:56:b1:f1:a4:8f:73: 0c:19:41:91:b3:50:84:a8:93:b7:ce:ff:7d:9e:c0:91:a5:4b: af:cc:df:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSDEPtduEgoce8b/aaiw7dzMNfkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA0MjcwNDAzNDBaFw0yNjA0MjgwNDM3NDBaMDMxMTAvBgNV BAMTKDAxQjA5Qzc4MDA1RjE0NDVGQUVGRDVEMTEzMzExNTMwRjY0MEQyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iDPDdWgt3zxvl1hm8ANiXIGG Vk+0Ff1QIdG6y7dfjXGo398sMvG6wIlIR7WnRVprCA7LgZO5F6cLekyRsgxYIuNl P28OZ0WCq0Qck1r6rB2tpg6hoV+QdOv/WQ2iT9gbcipRselr8p5IEQoIbTl9La2/ QlMtBApMlbSnVMDb+nmYK5wF7fcsNbEWQeaurMV0fwL0McCpKU91Nm8LUskpodV+ jxqF0mv6uVtWGejCcS/JAcJzMTn2g1OwiCXmiDhWhECeJT1Jq4NxTHMX0s8/D8oV x8O9XSf0yV03aTQZq/eiZPqv5v653mqQErUlJ1raQ0xDUkIccN5Iq/fAu+AxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAbCceABfFEX679XREzEVMPZA0rEwHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0ODkxNTk5MDQ5MTk1NTMvMC84RDVFMkEyNTkxRjI5 Mjg5NjY5QzQyNDQ5NkJGNDRCOEEzRjdFQkQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVa2wNr5+iEC6 AfoooY+pb5o3o+/NW/zODRrIdVlRLg5y7eB4lytSy6pLSj7XvCuQhbZcT51Ym8e9 MqFYtzrTf5ZRnSJi+0qHDfZu7Cks/bDvvFIrWyMw4kQpZchNJwkGiQu2h0VO9NpI LCJIzTVZ2v3XR5PvCP5sPJlbZka6PROR2gnBO9jcNX/+rrjixEubAR/GfwqI3DOy yoBkrtPx51vkO731mzKfkFcXt2J2Xbr9g1/uqa1yITXzYWavMwD5J3RCcHtZsoEr E5L+4VUfdWjF5fYegs2kfyjs+5D+tbB2wTxmVrHxpI9zDBlBkbNQhKiTt87/fZ7A kaVLr8zfPg== -----END CERTIFICATE-----Generated at Mon Apr 27 21:54:12 2026 by rpki-client