$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft File: 9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft (raw, json) Hash identifier: PMMGS+FYS6CbOtn7GO1pjG0eDSxmVNGqv4hnRUNAn6c= Subject key identifier: 25:75:BA:7C:F4:81:57:45:94:DA:82:7D:7D:E9:D3:0F:1E:96:B8:7A Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 59B8CC36B428DBA16B9404A7A8BB65C77FB08BE2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft Manifest number: 04 Signing time: Mon 27 Apr 2026 03:05:03 +0000 Manifest this update: Mon 27 Apr 2026 03:00:03 +0000 Manifest next update: Tue 28 Apr 2026 06:29:03 +0000 Files and hashes: 1: 3231382e39362e3234342e302f32342d3234203d3e203130323132.roa (hash: Nd/l5Ot82li0qNAAXGDXo1p5hxh0AwuOnrevLjCIpMI=) 2: 3231382e39362e3234312e302f32342d3234203d3e203130323132.roa (hash: hXUOxx1KcgwPYsSY4RhopykzrMle+hdBfEvHZTrTpHE=) 3: 3231382e39362e3235352e302f32342d3234203d3e203130323132.roa (hash: 6n1od6h05pYH27sFQ0pkGE08G0ZRrqDOd0oIm0Scm1g=) 4: 3231382e39372e32312e302f32342d3234203d3e203130323132.roa (hash: ck6U4SQeput2tEPh4x1oXniltWdwZmjkXerp6Zn5ehU=) 5: 3231382e39362e302e302f32342d3234203d3e203130323132.roa (hash: g0svLctfozyxQPdUeaXjLlmEWLAkHXyK5yXXtPoOMSw=) 6: 3231382e39362e3132372e302f32342d3234203d3e203137363231.roa (hash: ekasOZZvB0IapShtuuoA3q2UxAP9uJYR8sukUefszYo=) 7: 9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl (hash: cetO1bXpna8itlP+Bepc7VBukkQyPN4QZKOkEBwGUbA=) 8: 3231382e39372e31342e302f32342d3234203d3e203130323132.roa (hash: hXVVwBG1u3t4glQy0IUdMWoeg4XIfu+VLJC8+jhWQCI=) 9: 3231382e39362e3132362e302f32342d3234203d3e2034383132.roa (hash: j/PpWy91yP4dTFzseEW3YNsdBUgqNcTd+7gO8E5mhmU=) 10: 3231302e352e32372e302f32342d3234203d3e203130323132.roa (hash: vA1YG4qXv/mWiEldmLRUr0XkBJw1THgmJPvLxGss06w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b8:cc:36:b4:28:db:a1:6b:94:04:a7:a8:bb:65:c7:7f:b0:8b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 27 03:00:03 2026 GMT Not After : Apr 28 06:29:03 2026 GMT Subject: CN=2575BA7CF481574594DA827D7DE9D30F1E96B87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ac:b8:ba:a6:53:df:07:a2:e5:7e:45:7a:86: b7:6c:90:23:bd:00:31:43:ef:dd:79:11:02:24:61: ac:f8:f3:95:37:68:5a:af:7a:96:a4:c7:2c:29:a6: 46:79:fa:1d:73:1c:93:ea:76:12:4e:dd:ad:13:b2: b3:f2:11:83:94:bb:8f:05:89:57:af:d7:10:b8:e0: 14:0b:eb:67:99:1c:ab:d1:6f:f9:10:cb:7b:3a:36: a2:28:7a:94:88:74:71:41:5e:ef:01:97:b5:98:63: 2e:71:9a:cf:df:6a:6c:03:e8:54:20:f0:5f:5f:be: 7d:4d:13:95:e9:f1:47:30:2e:8d:05:bc:07:2a:9b: 5f:63:2b:6e:8d:88:72:40:b7:8d:4b:37:9f:6f:c3: bd:47:21:30:8b:51:90:5a:b8:e9:b1:86:9b:9a:64: de:ac:8f:8a:c1:2a:f9:89:d0:36:b4:90:d4:2e:12: e7:29:c5:a7:6d:45:ac:d0:8c:d6:e1:f8:6b:55:da: d9:f3:6b:99:f3:af:16:bc:a6:d2:de:bc:2f:83:d7: 2b:a5:11:28:e2:9d:d6:47:90:36:59:a6:66:29:55: 76:e0:14:bd:b0:0c:22:51:76:13:33:cd:94:78:b2: 8c:bf:c4:d2:25:5d:d6:37:6c:ea:81:eb:79:c2:4f: 0c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:75:BA:7C:F4:81:57:45:94:DA:82:7D:7D:E9:D3:0F:1E:96:B8:7A X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:7a:ac:70:ed:36:da:6a:d3:98:76:b0:93:1f:87:8c:87:aa: 6b:f2:13:02:9d:e1:bc:3c:f3:b4:c0:ba:94:42:7d:9a:d9:45: 7f:83:fc:79:91:52:7e:cb:bd:fe:54:4a:20:dc:11:08:a5:9c: 47:13:39:9c:58:6e:8b:30:7d:14:bc:36:d7:e6:37:94:b7:1a: 46:eb:ba:c9:89:53:33:66:dc:76:47:81:1a:83:fb:df:65:2a: 48:8f:f6:0d:5d:19:02:2c:b4:33:32:76:4d:4a:3d:a8:d7:11: aa:4d:23:95:9a:60:ec:2b:2e:b5:91:4f:b7:dc:8e:e8:ac:04: 7f:81:85:e6:fd:d4:5e:1c:87:75:da:f1:d3:45:a4:a7:08:fc: aa:ab:53:e5:65:28:dd:0f:f0:88:fc:d1:8d:20:75:bd:7b:ed: cd:07:dd:4a:fa:a3:7c:4a:50:ea:e4:39:bf:c6:af:70:29:df: 84:30:87:04:15:f6:4c:62:5a:c5:e8:7f:5f:e1:d8:56:5e:77: 48:2e:e2:b3:d0:ff:96:6a:84:ed:3e:af:f0:5b:82:e0:3a:f4: 9d:28:04:0b:e5:4b:24:61:69:ab:f9:8d:e6:ed:f6:64:70:2d: af:91:13:e3:8c:1d:be:d1:c3:cc:73:7d:e1:3d:e0:4c:21:72: 5e:25:04:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWbjMNrQo26FrlASnqLtlx3+wi+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjcwMzAwMDNaFw0yNjA0MjgwNjI5MDNaMDMxMTAvBgNV BAMTKDI1NzVCQTdDRjQ4MTU3NDU5NERBODI3RDdERTlEMzBGMUU5NkI4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOrLi6plPfB6LlfkV6hrdskCO9 ADFD7915EQIkYaz485U3aFqvepakxywppkZ5+h1zHJPqdhJO3a0TsrPyEYOUu48F iVev1xC44BQL62eZHKvRb/kQy3s6NqIoepSIdHFBXu8Bl7WYYy5xms/famwD6FQg 8F9fvn1NE5Xp8UcwLo0FvAcqm19jK26NiHJAt41LN59vw71HITCLUZBauOmxhpua ZN6sj4rBKvmJ0Da0kNQuEucpxadtRazQjNbh+GtV2tnza5nzrxa8ptLevC+D1yul ESjindZHkDZZpmYpVXbgFL2wDCJRdhMzzZR4soy/xNIlXdY3bOqB63nCTwyjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJXW6fPSBV0WU2oJ9fenTDx6WuHowHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5Njg3NTg1MDkzMDU4NTgvMC85MzEzNjY1MDIwQkRG OTVERkE0QUFDMEUxRTRBOUE4RTE2RjNBN0VGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxHqscO022mrT mHawkx+HjIeqa/ITAp3hvDzztMC6lEJ9mtlFf4P8eZFSfsu9/lRKINwRCKWcRxM5 nFhuizB9FLw21+Y3lLcaRuu6yYlTM2bcdkeBGoP732UqSI/2DV0ZAiy0MzJ2TUo9 qNcRqk0jlZpg7CsutZFPt9yO6KwEf4GF5v3UXhyHddrx00Wkpwj8qqtT5WUo3Q/w iPzRjSB1vXvtzQfdSvqjfEpQ6uQ5v8avcCnfhDCHBBX2TGJaxeh/X+HYVl53SC7i s9D/lmqE7T6v8FuC4Dr0nSgEC+VLJGFpq/mN5u32ZHAtr5ET44wdvtHDzHN94T3g TCFyXiUEhA== -----END CERTIFICATE-----Generated at Mon Apr 27 09:44:41 2026 by rpki-client