$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json) Hash identifier: vSF20KcliysHBZawVLbmtyLLpOAdyaGQBN6QJBx+dX8= Subject key identifier: F0:AF:6A:BC:37:A2:55:72:EB:DF:EF:70:7A:7A:7A:C9:82:83:C1:0B Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Certificate serial: 5FAAC6EB3A93AE62B49429CC22519316022119A4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 08:19:42 +0000 Manifest this update: Fri 17 Apr 2026 08:14:42 +0000 Manifest next update: Sat 18 Apr 2026 08:48:42 +0000 Files and hashes: 1: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=) 2: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=) 3: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=) 4: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=) 5: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=) 6: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=) 7: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=) 8: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=) 9: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: EUXJ4eze3UCi1YR1Ed7dZSczSdjAL+59MM/xwsR1OE8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:aa:c6:eb:3a:93:ae:62:b4:94:29:cc:22:51:93:16:02:21:19:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Validity Not Before: Apr 17 08:14:42 2026 GMT Not After : Apr 18 08:48:42 2026 GMT Subject: CN=F0AF6ABC37A25572EBDFEF707A7A7AC98283C10B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:9d:9e:ca:66:10:fc:f4:12:7e:cf:7d:ea: 54:93:5b:9c:34:98:40:61:c1:c8:52:58:e5:49:b3: 55:c6:03:b3:1b:3a:e2:4a:38:43:3c:b8:0d:e7:61: 95:18:25:3e:47:bb:2e:c6:11:fe:78:ad:d4:1c:f2: 9a:c1:75:bc:5a:67:79:01:94:25:88:c5:69:31:67: 40:68:bd:4d:35:ea:b3:6d:5d:a9:76:08:24:d8:35: 21:dd:40:10:11:11:a5:87:ab:2b:47:47:ad:51:fc: 36:02:ad:00:6e:87:7b:67:eb:c1:33:0f:d0:85:49: ce:4a:f3:56:47:a2:11:bd:f9:55:a3:b4:ab:39:e1: 78:1e:21:4b:03:03:d2:7c:b7:71:13:b5:8b:65:17: 31:bb:a8:68:44:f9:90:1b:14:2e:ab:1c:70:bb:52: e0:c7:f1:b6:9c:e7:ca:72:33:b7:e7:87:b6:86:12: 6d:c8:75:05:33:55:a5:f4:21:98:6a:f9:28:e6:4b: 18:c5:e1:64:67:28:2f:66:de:cb:04:b2:ee:31:a3: 90:dd:86:c4:3d:8e:bb:57:bb:a4:25:49:4c:f3:03: eb:b9:b2:1a:96:65:a5:69:98:02:bb:fc:61:f0:ad: eb:cf:0e:4f:b8:54:7d:79:13:9d:5e:35:b6:c4:67: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AF:6A:BC:37:A2:55:72:EB:DF:EF:70:7A:7A:7A:C9:82:83:C1:0B X509v3 Authority Key Identifier: keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:56:83:80:38:ab:02:f3:56:96:04:ab:07:0d:c4:c7:fd:58: 68:fc:27:39:7b:71:14:97:59:d1:e2:d9:be:23:83:78:c1:23: cd:6a:cc:fc:98:ab:bf:1a:d2:68:c2:a4:b7:06:9d:33:c2:56: 02:14:ae:61:52:b6:90:63:72:f2:54:bb:39:88:03:75:c0:0c: 7d:4d:fc:70:58:42:67:55:0d:c6:02:07:d7:99:b3:2a:d6:ae: f5:19:11:3a:12:5c:25:27:9e:08:86:3e:32:29:d8:29:90:c8: 11:0c:16:bc:43:7a:e9:e7:9b:49:da:aa:ab:b4:96:30:02:0d: f3:c0:72:dc:a1:70:10:42:95:4e:c8:f6:15:2d:cd:a2:65:a3: 2d:42:70:75:3b:a5:10:c0:5e:32:9c:16:e1:53:76:e9:a4:9c: d7:30:18:05:52:1a:85:95:98:14:1e:c0:71:52:e6:b0:88:c2: bb:14:7b:f5:8f:71:a0:ac:a9:60:b9:58:26:3c:a6:2d:4b:82: 74:c6:50:43:1b:b7:0b:49:b2:7a:a9:35:20:dc:9f:0e:2e:e1: 37:9c:37:4e:5d:c9:f3:b8:df:18:42:da:a9:c7:98:22:d0:08: d4:1f:9c:16:a6:2a:e8:e8:be:59:33:3a:d2:e9:66:50:ee:02: 39:45:25:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX6rG6zqTrmK0lCnMIlGTFgIhGaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0 NjczREFDMDAeFw0yNjA0MTcwODE0NDJaFw0yNjA0MTgwODQ4NDJaMDMxMTAvBgNV BAMTKEYwQUY2QUJDMzdBMjU1NzJFQkRGRUY3MDdBN0E3QUM5ODI4M0MxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaJ2eymYQ/PQSfs996lSTW5w0 mEBhwchSWOVJs1XGA7MbOuJKOEM8uA3nYZUYJT5Huy7GEf54rdQc8prBdbxaZ3kB lCWIxWkxZ0BovU016rNtXal2CCTYNSHdQBAREaWHqytHR61R/DYCrQBuh3tn68Ez D9CFSc5K81ZHohG9+VWjtKs54XgeIUsDA9J8t3ETtYtlFzG7qGhE+ZAbFC6rHHC7 UuDH8bac58pyM7fnh7aGEm3IdQUzVaX0IZhq+SjmSxjF4WRnKC9m3ssEsu4xo5Dd hsQ9jrtXu6QlSUzzA+u5shqWZaVpmAK7/GHwrevPDk+4VH15E51eNbbEZ1OpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8K9qvDeiVXLr3+9wenp6yYKDwQswHwYDVR0j BBgwFoAUCtNMBeiNEsMO1/4d0qvqVkZz2sAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8wLzBBRDM0QzA1RTg4RDEyQzMwRUQ3RkUxREQyQUJF QTU2NDY3M0RBQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0NjczREFDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMC8wQUQzNEMwNUU4OEQx MkMzMEVEN0ZFMUREMkFCRUE1NjQ2NzNEQUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVaDgDirAvNW lgSrBw3Ex/1YaPwnOXtxFJdZ0eLZviODeMEjzWrM/JirvxrSaMKktwadM8JWAhSu YVK2kGNy8lS7OYgDdcAMfU38cFhCZ1UNxgIH15mzKtau9RkROhJcJSeeCIY+MinY KZDIEQwWvEN66eebSdqqq7SWMAIN88By3KFwEEKVTsj2FS3NomWjLUJwdTulEMBe MpwW4VN26aSc1zAYBVIahZWYFB7AcVLmsIjCuxR79Y9xoKypYLlYJjymLUuCdMZQ Qxu3C0myeqk1INyfDi7hN5w3Tl3J87jfGELaqceYItAI1B+cFqYq6Oi+WTM60ulm UO4COUUlLw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:23 2026 by rpki-client