$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json) Hash identifier: w95S5KKPiHYQmizbaVLpXTx4pPxPrqhHVgM5wY6aUkc= Subject key identifier: 60:7B:32:C2:EC:A0:F0:31:07:42:4F:9F:A6:BC:B5:EC:DB:F6:B4:9E Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Certificate serial: 34893B6129905D3989B452F7E7232439B72EE6B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft Manifest number: 0A Signing time: Sun 26 Apr 2026 23:33:34 +0000 Manifest this update: Sun 26 Apr 2026 23:28:34 +0000 Manifest next update: Tue 28 Apr 2026 00:49:34 +0000 Files and hashes: 1: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=) 2: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: iusCGkzm4DPyVw1Zehx+KLhxQoRntLnSlWZr7JiBeZ0=) 3: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=) 4: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 00:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:89:3b:61:29:90:5d:39:89:b4:52:f7:e7:23:24:39:b7:2e:e6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Validity Not Before: Apr 26 23:28:34 2026 GMT Not After : Apr 28 00:49:34 2026 GMT Subject: CN=607B32C2ECA0F03107424F9FA6BCB5ECDBF6B49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:f6:2c:aa:77:59:fe:9c:07:86:22:18:ed: e4:e3:42:3e:78:ec:55:b2:0d:0a:ad:c8:df:ea:f4: 42:31:84:39:dd:43:ef:42:7e:2e:65:98:f7:41:00: e3:99:12:6f:87:c7:59:cc:fa:f4:47:67:60:5d:85: 85:c5:1a:b9:80:04:56:a3:be:34:da:0a:75:97:38: 80:4f:a5:85:e1:e4:07:b3:b3:a7:88:54:bf:ad:81: 19:00:79:4d:48:4b:dd:bc:11:26:8d:9c:20:df:60: 7d:d7:ce:7b:13:a8:15:7c:1e:85:54:c4:d0:02:1a: 14:fd:86:32:d8:50:af:d2:49:ec:3c:01:1e:1b:b4: b5:2f:9a:b3:e0:94:90:b1:3c:e0:f3:62:90:b7:ed: 65:63:15:fa:ea:7d:2f:a7:6a:29:b2:e0:19:17:23: 64:af:c5:81:0a:82:1f:88:2d:6b:26:07:8e:c0:54: b2:80:ac:c1:f2:95:60:36:37:c8:70:21:d8:42:8f: 65:1d:5e:e9:e9:ca:77:e3:42:99:8f:7e:0f:06:59: c4:c5:40:2e:2f:70:98:dd:7d:62:64:46:24:72:c4: 4a:c7:05:b3:6d:82:74:a6:33:b3:2c:d2:e7:35:cd: 4e:8a:f0:d8:46:e9:e1:90:bd:ad:2f:ad:9a:7b:8c: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7B:32:C2:EC:A0:F0:31:07:42:4F:9F:A6:BC:B5:EC:DB:F6:B4:9E X509v3 Authority Key Identifier: keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3a:05:af:9f:24:8e:d7:5f:91:66:3e:5f:fe:66:2d:65:1f: 15:dc:7a:30:7e:b2:e5:31:c4:b6:b1:60:a7:03:74:39:20:dc: ee:f0:4c:03:32:c0:a4:69:51:7a:de:02:1b:74:db:0c:9c:1d: 5b:88:62:fa:e4:a0:7a:b4:58:d2:7f:29:81:0b:16:f1:4e:8f: 1e:fb:95:39:73:7b:80:13:19:ee:c5:00:62:9c:fd:d7:cc:18: d7:12:64:3b:1c:b9:e0:eb:17:b2:7e:b5:3a:bb:dd:dd:24:89: 38:4d:4c:91:24:07:1f:f9:c4:71:38:69:af:7b:c9:0e:63:42: 0f:53:93:51:57:3d:12:6d:ab:4a:78:98:e6:53:87:b1:22:ee: ab:7e:91:a5:eb:53:68:20:49:d2:23:8f:8c:03:4a:57:e4:76: 53:04:2b:08:42:e6:22:21:be:ee:9a:49:bc:71:38:17:b1:10: 6b:bf:1f:ab:61:9d:f1:65:42:3c:15:2a:11:55:71:e3:c7:bc: fa:1c:69:57:17:a7:bc:33:d3:dc:77:a7:d7:7f:e7:13:7d:03: 55:05:77:03:89:d0:be:db:44:72:ca:4a:04:2f:00:c8:6c:49: cc:35:f7:70:70:04:82:2e:ac:88:64:0a:b2:df:93:54:4e:55: b9:a6:29:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNIk7YSmQXTmJtFL35yMkObcu5rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4 QzY4MTc5NDAeFw0yNjA0MjYyMzI4MzRaFw0yNjA0MjgwMDQ5MzRaMDMxMTAvBgNV BAMTKDYwN0IzMkMyRUNBMEYwMzEwNzQyNEY5RkE2QkNCNUVDREJGNkI0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyf/YsqndZ/pwHhiIY7eTjQj54 7FWyDQqtyN/q9EIxhDndQ+9Cfi5lmPdBAOOZEm+Hx1nM+vRHZ2BdhYXFGrmABFaj vjTaCnWXOIBPpYXh5Aezs6eIVL+tgRkAeU1IS928ESaNnCDfYH3XznsTqBV8HoVU xNACGhT9hjLYUK/SSew8AR4btLUvmrPglJCxPODzYpC37WVjFfrqfS+naimy4BkX I2SvxYEKgh+ILWsmB47AVLKArMHylWA2N8hwIdhCj2UdXunpynfjQpmPfg8GWcTF QC4vcJjdfWJkRiRyxErHBbNtgnSmM7Ms0uc1zU6K8NhG6eGQva0vrZp7jMVPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYHsywuyg8DEHQk+fpry17Nv2tJ4wHwYDVR0j BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0 QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2 QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDoFr58kjtdf kWY+X/5mLWUfFdx6MH6y5THEtrFgpwN0OSDc7vBMAzLApGlRet4CG3TbDJwdW4hi +uSgerRY0n8pgQsW8U6PHvuVOXN7gBMZ7sUAYpz918wY1xJkOxy54OsXsn61Orvd 3SSJOE1MkSQHH/nEcThpr3vJDmNCD1OTUVc9Em2rSniY5lOHsSLuq36RpetTaCBJ 0iOPjANKV+R2UwQrCELmIiG+7ppJvHE4F7EQa78fq2Gd8WVCPBUqEVVx48e8+hxp VxenvDPT3Hen13/nE30DVQV3A4nQvttEcspKBC8AyGxJzDX3cHAEgi6siGQKst+T VE5VuaYpkQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:37:11 2026 by rpki-client