$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft File: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft (raw, json) Hash identifier: f8CTp6Su8HX6eOoz3HDdLPiDHiIcUOQw8inhf4aEJTo= Subject key identifier: 5C:14:2F:38:7E:18:E5:8C:C5:AA:E4:61:CC:B9:15:57:95:65:BE:A3 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 7ADA047A19A5BC98283F5AD9FF88E53E6C8571BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft Manifest number: 8A Signing time: Fri 17 Apr 2026 02:49:38 +0000 Manifest this update: Fri 17 Apr 2026 02:44:38 +0000 Manifest next update: Sat 18 Apr 2026 03:20:38 +0000 Files and hashes: 1: 3130332e35362e37362e302f32342d3234203d3e203536303430.roa (hash: S0ibJK/LXYJ212kDehN8NGHUDYlk99qx8kr5YHeEyDo=) 2: 3130332e35362e37382e302f32342d3234203d3e203538343636.roa (hash: MwkQ3+t6Ku9ZgQ2hzhnEetkeZCae+zCq8iuzHsTztoc=) 3: 34352e3131362e3134332e302f32342d3234203d3e203536303430.roa (hash: 6e4lggZCBnIZSNoVsTuI/rCVl9xr5T9SABl5+ekw/48=) 4: 34332e3235352e3232382e302f32322d3232203d3e203539303433.roa (hash: 47ZX+odkDMI6UANpyurQ443lYb4OU8O8VarkF8Yb7sg=) 5: 3130332e35362e37362e302f32342d3234203d3e203538343636.roa (hash: R1hxKKYTfXhQuFkFGluK3tACxevJigS0e+7JkvDFOfY=) 6: 34352e3131362e33342e302f32342d3234203d3e203536303430.roa (hash: AH59k0QTlW1Ifhw1dyNl8R7ZP53lYjb8V6wr+a5vTwE=) 7: 3130332e35362e37392e302f32342d3234203d3e203538343636.roa (hash: a2ZvPYlJ+VfFAhB3jALdNHCAr8okKe4s5j9azyTOzyk=) 8: 34352e3131362e3134332e302f32342d3234203d3e203538343636.roa (hash: o2f8/5Kqql5i/J9YLJewLTpDhd3Qph7vvMr967evfko=) 9: 34352e3131362e3134302e302f32322d3232203d3e203536303430.roa (hash: LsQIfsUKOQjsnX05xlup9BkZVlHz+kCT806/GW4sdX0=) 10: 34352e3131362e3134302e302f32342d3234203d3e203538343636.roa (hash: oJAn1OO7T7QY3gR/aW3IuFcTz6O+pTx4SliLxtC1jEY=) 11: 34352e3131362e33332e302f32342d3234203d3e203536303430.roa (hash: 2yzQQ3RfFhDKquFcv8UXbeKG27V0WF41cfHeNhLc4wY=) 12: 3130332e35362e37382e302f32342d3234203d3e203536303430.roa (hash: 0iVARIi/xaFEn8mjMQ+LAQ219v5jwEi5LY11w8fzALw=) 13: 34352e3131362e3134322e302f32342d3234203d3e203538343636.roa (hash: +2HE3F+8WpQQc5JprS4NEmn9/NhFGXgXOhHvozrmObA=) 14: 34352e3131362e33352e302f32342d3234203d3e203536303430.roa (hash: Z6HP1gNf5vHaIhAztVSLR7En0SY6RclqEHxA5xvfiM4=) 15: 3130332e35362e37362e302f32322d3232203d3e203536303430.roa (hash: mIOP15gRcOtsuKf+tYmRuvxc1mYkQYV33jCx6VgjW4k=) 16: 34352e3131362e3134312e302f32342d3234203d3e203536303430.roa (hash: L/7s2Osm6u7F5Z5g7aI/Kk9+KBEU/Pvwv6J3oMrzoDY=) 17: 3130332e3233392e3230342e302f32342d3234203d3e203536303430.roa (hash: krb9+VZzw/7gmWLlOqLP3M6mOQzxwqADKKgYkWB48T0=) 18: 3130332e35362e37392e302f32342d3234203d3e203536303430.roa (hash: Nr4MzKLDLUkXQhAnRCy78zyl92lMVVApHlc9+QDFYSg=) 19: 34332e3235352e3233312e302f32342d3234203d3e203536303430.roa (hash: vw9zy+WcgNlkn5G3/Oo6AIVb6pxlr5huvxCsqaD5zlA=) 20: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl (hash: AQTiNIhTs4nC/gJGTBMOBgX3MgtpnUPSVidPJlGpW6c=) 21: 34352e3131362e33322e302f32342d3234203d3e203536303430.roa (hash: AQ7YaYVdLxTd9EsxIEUpB1+UMOAakasWUEEDh2Wd16A=) 22: 34352e3131362e3134302e302f32322d3232203d3e203539303433.roa (hash: OGa9chNdGvVi1ng761qxRIwE4bUGvJq+32/2abf029A=) 23: 34352e3131362e33332e302f32342d3234203d3e203538343636.roa (hash: aB6HYu91QLkogF7NEuI1Mr5U979LZu4ToUHN6214DcM=) 24: 34352e3131362e3134312e302f32342d3234203d3e203538343636.roa (hash: nMk2GWR6myV/w53248tA4bXj+Pd2kJp7jwJ4W1hn+QU=) 25: 34352e3131362e3134322e302f32342d3234203d3e203536303430.roa (hash: QGr+zWvjHYnvlfuyUD70L+P+SEKlqqKcZjvIvcIqHxc=) 26: 3130332e3233392e3230362e302f32342d3234203d3e203536303430.roa (hash: GnSKQHUL57tHHpVOo+4xXu03xXH9/d1q75irCvzVxwQ=) 27: 3130332e35362e37372e302f32342d3234203d3e203538343636.roa (hash: chBgBk+jhYLzhqNLC9Wumx3OD/gmhPMrOo1fCvHxlng=) 28: 34352e3131362e33352e302f32342d3234203d3e203538343636.roa (hash: qxdUkd5rdUjl2maTgpkv+yjhay0+7ctRGe4ff8DLO+g=) 29: 34332e3235352e3232382e302f32342d3234203d3e203536303430.roa (hash: Fs/eVoDJxkSsdZZd/m+oGJow8E6PdhJkbqz+BcdMJ5I=) 30: 3130332e35362e37372e302f32342d3234203d3e203536303430.roa (hash: yUW/lRrcc2CuYYkzLpRBuDJQQrAjQqqAYgYaC1SgDto=) 31: 3130332e3233392e3230352e302f32342d3234203d3e203536303430.roa (hash: DSk6M3XnpfaCZ5YFH7NeYScsfw0GVrf2EJmbCXl7LfI=) 32: 34332e3235352e3233302e302f32342d3234203d3e203536303430.roa (hash: piDS41+M6bXi2T8VAJtQQ1vZdFakKCc8DOoH2xJV4j8=) 33: 3130332e3233392e3230372e302f32342d3234203d3e203536303430.roa (hash: k+JmPmLCO+cNUkc68z+tjIOWgzukvF2ifx8lJ7MqVeY=) 34: 34332e3235352e3232392e302f32342d3234203d3e203536303430.roa (hash: 9QPKuy7P1hpRkZxq5ZTesuNKBVXNSrFMJahVjaVLb5Q=) 35: 3130332e35362e3138342e302f32322d3232203d3e203536303430.roa (hash: l1wavDmga4Oh7J86j1GjlYuKKSefHbOrVDv4qJaQZe4=) 36: 34352e3131362e33342e302f32342d3234203d3e203538343636.roa (hash: Y6mQZSgH/FimPg/WTmpLa0NFsYy+VLMdkKJBk3Gt430=) 37: 34352e3131362e33322e302f32342d3234203d3e203538343636.roa (hash: c7x7ZUNyyGgVZKjjyIFBNoelMopbDzY2eXsw6n7n3wY=) 38: 3130332e3233392e3230342e302f32322d3232203d3e203539303433.roa (hash: HaDm+C6cHjWk8eChSKycH8FybrBRCsOynVImQBNjDsE=) 39: 34352e3131362e3134302e302f32342d3234203d3e203536303430.roa (hash: g8tfq1aiysMAHy6RuyCaLs4fsG4BReI5+zor251/Y7I=) 40: 34352e3131362e33322e302f32322d3232203d3e203536303430.roa (hash: r+Vu8KXPLwZi4i7livp3MfUV2IrrNQGMyiWDliwb/cE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:da:04:7a:19:a5:bc:98:28:3f:5a:d9:ff:88:e5:3e:6c:85:71:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 17 02:44:38 2026 GMT Not After : Apr 18 03:20:38 2026 GMT Subject: CN=5C142F387E18E58CC5AAE461CCB915579565BEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3b:ef:30:b7:de:d5:29:86:d5:7f:ec:3b:ef: 7a:ad:67:f6:aa:ed:99:8d:3c:18:86:65:ab:bc:19: 88:1b:81:72:e9:d4:f1:24:82:6e:d5:3f:78:8c:b3: e3:fb:64:b0:3a:de:70:93:38:af:05:00:29:17:49: 97:38:29:9a:dc:d1:ab:26:5c:1c:f0:32:1c:d7:3a: be:07:8b:bd:2e:52:50:52:be:16:5e:b8:2d:a8:f6: 0f:d0:2c:0d:e2:f5:27:02:26:7c:19:4e:7c:76:95: 43:46:2f:a7:f8:2c:f0:20:d6:9b:c5:68:06:77:c7: 6f:13:a2:9c:aa:cd:06:2a:05:3d:7f:3c:c5:50:b8: 3c:11:96:99:03:dd:6f:1d:e5:7d:6a:1b:32:bf:c1: 54:72:b0:33:96:57:bc:dc:15:47:01:b1:a4:77:59: e0:d7:2c:cf:be:77:00:7e:fb:fa:b0:48:7e:81:02: 92:8a:bb:8b:3b:00:a7:3d:88:09:58:a1:a5:b0:79: cc:40:75:53:79:63:9b:65:ef:bb:9d:e7:d2:08:58: 11:6c:32:e2:77:d4:66:91:8f:16:d1:6a:97:12:cb: 44:cc:ce:31:a3:87:fb:20:30:57:79:c6:af:d5:18: b7:17:06:c5:22:5b:29:ca:e5:fd:2b:e7:63:3e:51: d1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:14:2F:38:7E:18:E5:8C:C5:AA:E4:61:CC:B9:15:57:95:65:BE:A3 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8a:71:b8:0f:9b:22:b7:42:32:40:b9:0a:2c:a7:31:86:ac: fb:5e:10:a3:7d:2f:d4:43:ec:57:2c:1f:59:1c:4f:0e:a8:3c: 58:54:1c:c8:94:93:1b:29:8a:19:e1:cd:80:dc:de:71:50:98: d9:8f:3c:35:b5:4f:2b:fe:88:d4:fc:07:1a:49:28:48:c2:b3: 06:7c:ea:49:71:07:ba:2e:b2:a7:e4:98:2c:b3:1d:7f:ce:4c: b3:10:a9:28:bf:81:0f:96:f3:27:e6:a1:b0:31:cd:70:5a:8b: 02:2c:8a:c9:ee:e5:91:7c:b7:a2:b5:16:f2:6e:76:a7:a0:1b: ed:83:bd:42:56:28:b7:9e:27:73:0b:c9:5b:fe:a3:04:53:a7: 91:49:88:03:c4:9e:f9:e6:09:66:6d:16:65:03:8b:05:b0:22: 9a:6d:42:4f:1c:a8:43:bb:34:89:8c:cc:5d:e5:0b:e9:6a:eb: ed:1c:c0:cd:f8:c5:d0:36:5d:41:ef:fe:a9:78:56:bb:2c:d1: 40:ca:57:9e:fa:a2:9f:49:ac:60:6e:9e:8b:44:95:12:2f:e7: b3:16:fd:e5:48:e1:c3:dc:21:f1:55:41:df:60:d6:ee:d6:6c: e2:a7:16:84:9d:bb:3a:57:42:b2:5c:93:5b:c4:4a:97:10:6d: 96:92:19:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUetoEehmlvJgoP1rZ/4jlPmyFcb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTcwMjQ0MzhaFw0yNjA0MTgwMzIwMzhaMDMxMTAvBgNV BAMTKDVDMTQyRjM4N0UxOEU1OENDNUFBRTQ2MUNDQjkxNTU3OTU2NUJFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnO+8wt97VKYbVf+w773qtZ/aq 7ZmNPBiGZau8GYgbgXLp1PEkgm7VP3iMs+P7ZLA63nCTOK8FACkXSZc4KZrc0asm XBzwMhzXOr4Hi70uUlBSvhZeuC2o9g/QLA3i9ScCJnwZTnx2lUNGL6f4LPAg1pvF aAZ3x28TopyqzQYqBT1/PMVQuDwRlpkD3W8d5X1qGzK/wVRysDOWV7zcFUcBsaR3 WeDXLM++dwB++/qwSH6BApKKu4s7AKc9iAlYoaWwecxAdVN5Y5tl77ud59IIWBFs MuJ31GaRjxbRapcSy0TMzjGjh/sgMFd5xq/VGLcXBsUiWynK5f0r52M+UdEPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXBQvOH4Y5YzFquRhzLkVV5VlvqMwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8yRDBCQzE2NTVEMTdB M0FCMDlDOTFFNDNBMzJERThEOEFCMjEzNTFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYpxuA+bIrdC MkC5CiynMYas+14Qo30v1EPsVywfWRxPDqg8WFQcyJSTGymKGeHNgNzecVCY2Y88 NbVPK/6I1PwHGkkoSMKzBnzqSXEHui6yp+SYLLMdf85MsxCpKL+BD5bzJ+ahsDHN cFqLAiyKye7lkXy3orUW8m52p6Ab7YO9QlYot54ncwvJW/6jBFOnkUmIA8Se+eYJ Zm0WZQOLBbAimm1CTxyoQ7s0iYzMXeUL6Wrr7RzAzfjF0DZdQe/+qXhWuyzRQMpX nvqin0msYG6ei0SVEi/nsxb95Ujhw9wh8VVB32DW7tZs4qcWhJ27OldCslyTW8RK lxBtlpIZbg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:42:37 2026 by rpki-client