$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: gDlQl5QSVpIU/u51oZvbG5Xdsu0mzeBMbh3cnxSxSb4= Subject key identifier: A7:C1:26:AA:F4:D6:8A:B5:C4:0F:44:AB:4E:55:B8:2A:03:D4:BE:FC Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 1B9C097B95F69E27560C8CBD64C8A8B4813E377E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 81 Signing time: Fri 17 Apr 2026 02:18:46 +0000 Manifest this update: Fri 17 Apr 2026 02:13:46 +0000 Manifest next update: Sat 18 Apr 2026 04:54:46 +0000 Files and hashes: 1: 3135382e3134302e3235322e302f32322d3234203d3e203535393936.roa (hash: ULObT7tTc9jva9EphYgKiJVcA/we8vdXzu8555O8v2k=) 2: 3135382e3134302e3235322e302f32322d3234203d3e20313331323734.roa (hash: DRk1iE9DVcrJ6axiNlUwsP1U7sQtnFQkLMY1NQ1OBGU=) 3: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: JaLXHhdSAER3rr3PaIPn4C3lmUNZTlHPCqKYvMIc2KY=) 4: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: gSJCLKyb9LLIjcjQ7RVxdKp1qcZZehGn9jgs05yrhkM=) 5: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: g4wybQGjv2udmgy4odp8Jc4FIMGJ7fH2vY6ud3fMWTE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9c:09:7b:95:f6:9e:27:56:0c:8c:bd:64:c8:a8:b4:81:3e:37:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Apr 17 02:13:46 2026 GMT Not After : Apr 18 04:54:46 2026 GMT Subject: CN=A7C126AAF4D68AB5C40F44AB4E55B82A03D4BEFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:f1:6d:5d:ae:cd:67:f5:9c:26:75:b5:e6: a8:48:c2:64:42:96:dd:49:0b:af:2e:5f:e4:cd:dd: 86:10:0c:33:83:97:32:46:ad:71:4b:da:f5:29:40: 05:e8:6a:b0:93:5d:74:42:f7:ad:a0:e9:a8:7b:26: d2:00:d4:32:5a:d9:e8:df:26:2c:f1:a1:06:62:35: f9:7e:54:0f:fc:c5:a8:82:38:64:9b:07:35:e4:8c: 74:80:7b:6c:46:e7:9a:ed:5a:b3:b4:fd:45:5b:1f: 3c:52:a7:97:f1:9b:b6:3d:1f:ce:a1:59:a4:44:06: 68:59:9d:3e:bc:00:6a:04:af:97:50:e5:03:39:af: 4c:dc:c2:75:9a:57:00:ac:0d:51:4b:d7:2e:6f:4f: 22:cf:e0:64:24:6e:ce:d8:0e:9c:3d:ae:a5:85:c3: f9:e6:66:14:fd:3f:58:e7:99:9b:00:a4:e4:e1:88: 9e:25:d8:de:71:a6:dd:80:67:1a:f0:43:20:4d:47: be:33:30:2a:ad:b4:73:18:02:fe:34:1d:e0:ad:61: c7:0f:5f:f3:af:0e:c1:c0:93:d6:95:bc:22:81:d7: f7:d6:43:c8:ba:5c:70:56:52:9c:6a:2f:78:7d:17: e1:ab:3a:69:b6:7f:c1:47:16:22:16:01:8f:31:77: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C1:26:AA:F4:D6:8A:B5:C4:0F:44:AB:4E:55:B8:2A:03:D4:BE:FC X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c1:f3:68:1b:aa:13:2c:49:09:4d:f9:1f:fa:aa:1f:3f:c0: 6b:4c:4f:2e:86:61:3f:50:5a:94:4a:70:fd:76:55:44:58:31: cd:51:f9:a2:9c:79:d4:6a:6c:eb:c5:2d:39:73:c2:c5:da:b9: 90:48:ce:70:97:20:40:04:42:74:74:66:ec:0a:33:21:ca:30: be:96:91:4e:29:f9:7b:74:5a:a9:b0:27:e5:ac:c7:fb:78:ef: 26:fa:41:42:9e:c1:28:8d:2e:32:11:e3:23:c0:c0:18:8b:48: 85:84:be:a1:4b:e6:0e:43:9b:5c:a8:51:fb:e2:b9:42:2b:93: 93:01:27:56:5f:5a:f4:26:20:11:da:13:08:fd:12:15:04:54: ab:62:cb:82:89:5b:a3:5b:1b:1b:6c:bb:20:30:c0:f0:e9:97: 97:95:ba:1a:88:9f:f8:08:33:0a:f1:92:b7:49:fa:ec:1b:b4: ea:57:e2:67:d9:9d:9f:84:bf:b5:62:25:a5:9b:15:58:34:eb: d5:79:2d:8a:aa:ee:e2:5f:b8:db:e2:4c:5b:7e:68:42:7c:31: 51:a5:41:bd:38:73:d4:83:44:5f:62:b4:50:60:76:7d:5f:7c: f6:cf:4f:02:66:03:a1:a8:57:b0:43:79:57:85:02:23:d1:fc: 08:3f:6c:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG5wJe5X2nidWDIy9ZMiotIE+N34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA0MTcwMjEzNDZaFw0yNjA0MTgwNDU0NDZaMDMxMTAvBgNV BAMTKEE3QzEyNkFBRjRENjhBQjVDNDBGNDRBQjRFNTVCODJBMDNENEJFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyvFtXa7NZ/WcJnW15qhIwmRC lt1JC68uX+TN3YYQDDODlzJGrXFL2vUpQAXoarCTXXRC962g6ah7JtIA1DJa2ejf JizxoQZiNfl+VA/8xaiCOGSbBzXkjHSAe2xG55rtWrO0/UVbHzxSp5fxm7Y9H86h WaREBmhZnT68AGoEr5dQ5QM5r0zcwnWaVwCsDVFL1y5vTyLP4GQkbs7YDpw9rqWF w/nmZhT9P1jnmZsApOThiJ4l2N5xpt2AZxrwQyBNR74zMCqttHMYAv40HeCtYccP X/OvDsHAk9aVvCKB1/fWQ8i6XHBWUpxqL3h9F+GrOmm2f8FHFiIWAY8xd3W9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp8EmqvTWirXED0SrTlW4KgPUvvwwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8HzaBuqEyxJ CU35H/qqHz/Aa0xPLoZhP1BalEpw/XZVRFgxzVH5opx51Gps68UtOXPCxdq5kEjO cJcgQARCdHRm7AozIcowvpaRTin5e3RaqbAn5azH+3jvJvpBQp7BKI0uMhHjI8DA GItIhYS+oUvmDkObXKhR++K5QiuTkwEnVl9a9CYgEdoTCP0SFQRUq2LLgolbo1sb G2y7IDDA8OmXl5W6Goif+AgzCvGSt0n67Bu06lfiZ9mdn4S/tWIlpZsVWDTr1Xkt iqru4l+42+JMW35oQnwxUaVBvThz1INEX2K0UGB2fV989s9PAmYDoahXsEN5V4UC I9H8CD9sog== -----END CERTIFICATE-----Generated at Fri Apr 17 19:25:25 2026 by rpki-client