$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft File: 158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json) Hash identifier: KNqDrDmITS9U83m9L5S+SFnt4EufMWLpXhWt6CsUk2g= Subject key identifier: 1D:A3:7A:00:D6:DC:5F:EC:C1:9C:29:FA:54:06:B1:46:E5:82:C3:F5 Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Certificate serial: 50CE6AAC60B3071BE9FD3BE20432BFEB5DD9CF2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft Manifest number: 09 Signing time: Mon 27 Apr 2026 13:48:47 +0000 Manifest this update: Mon 27 Apr 2026 13:43:47 +0000 Manifest next update: Tue 28 Apr 2026 15:45:47 +0000 Files and hashes: 1: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=) 2: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: uMncaVxrpyeT2c15BEawSMy73MOHnF6t5rYQACe/XeM=) 3: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=) 4: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=) 5: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=) 6: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=) 7: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=) 8: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=) 9: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=) 10: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=) 11: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=) 12: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=) 13: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=) 14: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ce:6a:ac:60:b3:07:1b:e9:fd:3b:e2:04:32:bf:eb:5d:d9:cf:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Validity Not Before: Apr 27 13:43:47 2026 GMT Not After : Apr 28 15:45:47 2026 GMT Subject: CN=1DA37A00D6DC5FECC19C29FA5406B146E582C3F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:b6:17:b5:5b:56:ac:5d:e8:67:13:0d:8b: d6:ab:a4:fe:7f:f3:b9:8c:2c:e2:e4:e8:c2:27:91: 9a:97:bb:e9:53:b1:9b:f6:2c:fe:96:1e:13:e7:ba: 79:5b:c5:ba:50:6c:45:83:26:71:25:f2:70:bf:b5: 45:f5:a5:1e:69:5b:ef:91:e5:2e:55:fb:eb:e3:1e: 1f:30:79:de:fc:0e:e3:33:3e:05:2a:c8:87:16:1d: 55:3d:d0:51:0d:87:ee:f9:ce:a3:c5:61:5d:b6:ae: 3f:ca:02:24:c9:e7:83:ed:e0:95:c2:f8:d5:c5:ea: 31:84:da:6d:2b:97:0a:2c:c6:3c:bb:68:ed:5a:ca: 99:6d:94:ad:3d:f2:ad:df:f4:02:2c:e5:b5:79:7d: 8a:1e:cb:11:c6:03:e3:7c:7a:1b:85:a8:e1:5b:78: 38:bd:cd:92:93:ef:96:25:9a:d7:5e:f7:21:9e:12: 1b:5c:6f:21:7f:22:72:0a:4e:50:a0:3a:4c:c3:c4: d5:05:e5:45:f9:ea:00:28:b2:07:1b:3c:59:ce:e8: 60:2d:11:24:6d:f4:d6:b5:9e:84:18:7d:5c:45:77: a6:57:a2:fe:5e:5b:b6:e8:b1:de:e2:c7:66:b8:86: ca:ae:e7:06:70:f1:29:cd:a2:38:01:e4:8b:40:56: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:7A:00:D6:DC:5F:EC:C1:9C:29:FA:54:06:B1:46:E5:82:C3:F5 X509v3 Authority Key Identifier: keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4e:12:e0:d8:40:4f:d2:6f:cd:56:1c:b9:fa:74:72:12:a9: a1:cc:83:e8:08:85:af:05:ba:1a:24:10:04:76:3b:b1:ed:eb: b9:29:66:33:54:ab:03:8f:b1:dd:b3:c3:c8:e4:f9:71:dd:64: 80:41:fe:32:ec:bf:f9:bc:97:22:23:80:37:9e:0e:70:bd:d5: a0:6b:b9:66:58:2b:00:e6:c0:7d:70:59:05:f9:ef:bb:c0:fc: 48:f1:f0:12:f0:5a:bd:8a:c0:08:b3:60:04:e8:ce:6e:7b:49: 01:cc:93:0f:70:da:e1:5c:aa:78:2a:c5:7a:01:97:f7:b5:04: 26:fc:82:d8:82:d4:db:90:14:f8:e2:93:a9:6f:f3:ab:f8:5f: 20:97:68:6c:f4:b3:eb:5c:73:c0:83:d2:ce:50:fc:1f:64:01: 9c:55:1e:1b:ef:e1:0c:04:ba:67:d0:32:e5:46:39:2d:b3:1f: a6:45:e3:aa:9f:4d:38:7e:7a:21:55:2b:c4:f2:e1:43:c1:f6: a8:25:6f:f5:01:b4:6a:e9:11:fa:9f:7f:d0:1f:b2:f9:bd:22: ee:3b:c9:aa:e1:b9:01:57:44:59:3f:81:d5:7a:e0:65:11:87: 6e:1f:96:d8:ac:ef:1b:14:f6:fb:99:db:d0:d9:e5:ce:cf:1e: d8:fa:cf:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUM5qrGCzBxvp/TviBDK/613ZzyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5 OTA4RTYwRjAeFw0yNjA0MjcxMzQzNDdaFw0yNjA0MjgxNTQ1NDdaMDMxMTAvBgNV BAMTKDFEQTM3QTAwRDZEQzVGRUNDMTlDMjlGQTU0MDZCMTQ2RTU4MkMzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOgrYXtVtWrF3oZxMNi9arpP5/ 87mMLOLk6MInkZqXu+lTsZv2LP6WHhPnunlbxbpQbEWDJnEl8nC/tUX1pR5pW++R 5S5V++vjHh8wed78DuMzPgUqyIcWHVU90FENh+75zqPFYV22rj/KAiTJ54Pt4JXC +NXF6jGE2m0rlwosxjy7aO1aypltlK098q3f9AIs5bV5fYoeyxHGA+N8ehuFqOFb eDi9zZKT75Ylmtde9yGeEhtcbyF/InIKTlCgOkzDxNUF5UX56gAosgcbPFnO6GAt ESRt9Na1noQYfVxFd6ZXov5eW7bosd7ix2a4hsqu5wZw8SnNojgB5ItAVisJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHaN6ANbcX+zBnCn6VAaxRuWCw/UwHwYDVR0j BBgwFoAUFYuV9V1UiwcrQsLCggrOfZkI5g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTIxNjM2NjQxMTQ0ODMyMS8wLzE1OEI5NUY1NUQ1NDhCMDcyQjQyQzJDMjgyMEFD RTdEOTkwOEU2MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5OTA4RTYwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkyMTYzNjY0MTE0NDgzMjEvMC8xNThCOTVGNTVENTQ4 QjA3MkI0MkMyQzI4MjBBQ0U3RDk5MDhFNjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW04S4NhAT9Jv zVYcufp0chKpocyD6AiFrwW6GiQQBHY7se3ruSlmM1SrA4+x3bPDyOT5cd1kgEH+ Muy/+byXIiOAN54OcL3VoGu5ZlgrAObAfXBZBfnvu8D8SPHwEvBavYrACLNgBOjO bntJAcyTD3Da4VyqeCrFegGX97UEJvyC2ILU25AU+OKTqW/zq/hfIJdobPSz61xz wIPSzlD8H2QBnFUeG+/hDAS6Z9Ay5UY5LbMfpkXjqp9NOH56IVUrxPLhQ8H2qCVv 9QG0aukR+p9/0B+y+b0i7jvJquG5AVdEWT+B1XrgZRGHbh+W2KzvGxT2+5nb0Nnl zs8e2PrPlw== -----END CERTIFICATE-----Generated at Mon Apr 27 18:19:31 2026 by rpki-client