$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: Ax3oqHssmOA5RuOTI/9+P2LP+Ql0ipMpV16ZJXC+F+o= Subject key identifier: 12:BF:FB:FA:07:C1:99:13:0D:F1:6D:51:9C:C8:FB:09:91:77:FF:29 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 5CE4873EC44F7850F48F56DE9B195E6C2DA1F216 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: 78 Signing time: Fri 17 Apr 2026 13:59:43 +0000 Manifest this update: Fri 17 Apr 2026 13:54:43 +0000 Manifest next update: Sat 18 Apr 2026 16:55:43 +0000 Files and hashes: 1: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: bOLlZqNCql3fsUZIZ3MR1ecnM6Ei5Y7zxFDrgpcM5wM=) 2: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 3: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=) 4: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) 5: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e4:87:3e:c4:4f:78:50:f4:8f:56:de:9b:19:5e:6c:2d:a1:f2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Apr 17 13:54:43 2026 GMT Not After : Apr 18 16:55:43 2026 GMT Subject: CN=12BFFBFA07C199130DF16D519CC8FB099177FF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:3e:af:23:b1:67:c6:13:f9:60:28:ae:90: 0e:a2:ba:08:f9:0d:9b:68:2f:c3:58:d1:93:23:68: 4a:c4:fa:02:c4:4b:48:41:a4:ab:50:ec:e0:00:58: 0d:f1:0d:a2:6d:3d:0e:d1:b8:9a:ad:e3:a6:e7:d8: 98:df:2c:10:84:55:8f:0d:fe:2b:f7:33:f9:2a:7c: 8d:58:d7:fa:10:1b:05:85:4b:a5:49:40:b7:4a:d8: bc:ea:b7:4c:e4:af:db:39:16:7e:07:6d:a4:67:d7: 61:64:4c:fa:1b:f6:bd:16:e7:02:b0:52:f3:19:55: 49:9c:48:00:8e:60:c3:58:08:71:e5:24:ea:29:2b: 38:61:69:2f:d5:d3:59:9a:69:46:a9:5b:eb:53:c0: f1:25:9a:ff:70:58:65:22:01:1d:c3:27:87:13:a6: 11:ed:32:48:bb:d9:d1:c6:c0:28:b7:f6:4e:7d:f8: 49:5e:01:61:9f:0d:16:a7:5f:9d:c1:0c:81:fe:ba: d6:70:6a:7f:cb:f1:54:c3:81:27:9c:e9:b7:a4:78: b3:ca:7b:8c:8d:03:57:28:9d:95:90:f1:21:ea:77: b0:e5:cb:e6:27:ce:76:90:89:0c:1c:bf:26:77:ef: 8e:25:2e:f8:41:70:a8:81:b8:4b:68:17:40:2f:77: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BF:FB:FA:07:C1:99:13:0D:F1:6D:51:9C:C8:FB:09:91:77:FF:29 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:bf:bb:67:cb:61:f8:01:c8:87:4b:d0:71:f1:32:8a:47:98: 36:da:ab:7e:02:fd:49:9e:5b:53:94:50:38:05:f5:e5:b7:d4: c7:9b:0a:d9:d8:d1:f0:c8:d9:69:b8:b5:58:f4:b3:4b:cd:77: 4c:3d:0e:96:06:eb:21:3d:26:e1:21:89:22:d4:ec:d6:07:3a: 3b:4e:fa:5d:2c:35:82:64:c3:5f:cc:b0:7d:16:a5:10:53:e6: cc:9c:0c:ad:d5:41:34:35:52:46:29:f8:7a:0a:1e:b5:37:fb: 29:b5:18:4b:6a:f3:71:27:5d:9f:4a:12:c1:75:12:95:15:eb: fd:41:c9:14:73:c4:4e:4f:74:01:8a:11:7f:38:68:14:62:40: f1:8b:43:c3:72:b7:68:bd:ea:f8:be:6b:f4:46:cf:21:a4:18: ce:14:05:c2:0a:b5:1b:49:61:54:53:11:1c:08:60:ad:2e:82: 85:ec:0f:08:0f:ac:1d:66:1f:eb:dc:06:8d:c3:84:c3:1a:d5: fc:fa:68:d8:8c:20:d1:28:db:a9:58:11:17:a7:cc:ec:57:84: 34:2f:30:d8:d0:17:c8:17:ea:e5:67:44:4e:11:24:90:68:f3: c3:00:9c:a8:d7:44:08:19:16:0e:f9:00:e4:0d:a3:f3:80:9b: 84:19:d8:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXOSHPsRPeFD0j1bemxlebC2h8hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA0MTcxMzU0NDNaFw0yNjA0MTgxNjU1NDNaMDMxMTAvBgNV BAMTKDEyQkZGQkZBMDdDMTk5MTMwREYxNkQ1MTlDQzhGQjA5OTE3N0ZGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0D6vI7FnxhP5YCiukA6iugj5 DZtoL8NY0ZMjaErE+gLES0hBpKtQ7OAAWA3xDaJtPQ7RuJqt46bn2JjfLBCEVY8N /iv3M/kqfI1Y1/oQGwWFS6VJQLdK2Lzqt0zkr9s5Fn4HbaRn12FkTPob9r0W5wKw UvMZVUmcSACOYMNYCHHlJOopKzhhaS/V01maaUapW+tTwPElmv9wWGUiAR3DJ4cT phHtMki72dHGwCi39k59+EleAWGfDRanX53BDIH+utZwan/L8VTDgSec6bekeLPK e4yNA1conZWQ8SHqd7Dly+YnznaQiQwcvyZ3744lLvhBcKiBuEtoF0Avd3k1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEr/7+gfBmRMN8W1RnMj7CZF3/ykwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUb+7Z8th+AHI h0vQcfEyikeYNtqrfgL9SZ5bU5RQOAX15bfUx5sK2djR8MjZabi1WPSzS813TD0O lgbrIT0m4SGJItTs1gc6O076XSw1gmTDX8ywfRalEFPmzJwMrdVBNDVSRin4egoe tTf7KbUYS2rzcSddn0oSwXUSlRXr/UHJFHPETk90AYoRfzhoFGJA8YtDw3K3aL3q +L5r9EbPIaQYzhQFwgq1G0lhVFMRHAhgrS6ChewPCA+sHWYf69wGjcOEwxrV/Ppo 2Iwg0SjbqVgRF6fM7FeENC8w2NAXyBfq5WdEThEkkGjzwwCcqNdECBkWDvkA5A2j 84CbhBnYUg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:10:39 2026 by rpki-client