$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json) Hash identifier: j/nu9s/X+4PqMMsbt9AdV7tmmTUFTVhK3anFtNemPvk= Subject key identifier: F5:64:FA:42:3A:D5:BB:42:93:73:6E:02:CB:D3:3F:98:9A:2C:64:B3 Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 76D6D74FCAF0A840C0313D59F7843CD127398DDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 02:49:38 +0000 Manifest this update: Fri 17 Apr 2026 02:44:38 +0000 Manifest next update: Sat 18 Apr 2026 05:23:38 +0000 Files and hashes: 1: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: KcV8KarKrJtzt2LK5cpuQ5VDIf3xeiAhA2oZAJwUqVs=) 2: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=) 3: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=) 4: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=) 5: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d6:d7:4f:ca:f0:a8:40:c0:31:3d:59:f7:84:3c:d1:27:39:8d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Apr 17 02:44:38 2026 GMT Not After : Apr 18 05:23:38 2026 GMT Subject: CN=F564FA423AD5BB4293736E02CBD33F989A2C64B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:a9:92:69:64:8b:81:76:5f:43:84:a4:1f: 2d:7a:38:73:8a:9f:a5:72:4f:ab:6d:9b:2a:3a:b9: 4c:8d:d5:4f:9b:c3:a0:ca:bd:5e:6c:c4:88:85:79: ec:d2:ad:1e:6b:de:45:69:71:e0:21:54:3d:e2:4c: 74:aa:0e:ac:66:80:12:27:cb:51:db:cd:4a:14:c8: 91:80:84:13:9e:dd:57:d8:3f:02:72:d2:76:85:5e: d8:9d:e8:24:09:99:14:d2:46:55:43:0d:85:1f:74: 63:80:cc:84:98:12:59:ae:f2:db:4e:94:99:57:e7: ef:f6:2e:bc:e9:b0:15:48:c5:f5:6e:05:a3:c7:21: ad:f6:96:22:be:09:6c:c3:38:7e:6b:f8:f9:6a:38: 36:a6:1c:b2:19:d5:aa:e7:e3:47:14:27:f2:a7:3a: ff:34:d4:12:60:2e:d9:28:44:85:50:91:e2:ac:a8: 88:f8:15:1c:ca:e2:2a:cd:7f:82:d4:cc:79:92:4b: 29:1b:40:78:23:ba:6f:bd:97:42:1c:08:ea:4f:c7: 8f:0b:3f:c5:0f:fb:96:ff:b0:65:81:d7:d8:53:42: 9d:c7:46:f8:42:44:87:2a:54:d2:2e:91:e4:7d:b2: 08:5a:c3:23:59:b2:f8:1c:1b:8a:b0:27:01:99:a6: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:64:FA:42:3A:D5:BB:42:93:73:6E:02:CB:D3:3F:98:9A:2C:64:B3 X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:09:e2:f0:3c:8c:63:62:46:e5:54:a2:bd:6b:49:5d:b0:02: 75:12:4c:cc:ad:a9:09:06:c8:9e:b5:51:e7:43:cf:5c:99:6c: c4:9d:fd:ea:f2:37:44:6c:9e:9d:a2:52:5c:73:fe:5c:1f:54: bd:1c:1f:43:3d:2a:b7:8f:83:8b:5a:bc:1d:ed:2f:1d:84:28: 23:11:06:c1:09:59:45:92:21:43:0b:3e:ff:ef:76:9a:35:25: 34:e8:b3:c4:cd:f6:e2:de:1a:35:1d:60:45:4d:85:8e:31:5c: 9b:8f:5e:25:4c:03:a3:1d:71:3c:ef:4d:60:db:b7:5c:14:23: af:57:a2:32:5b:b4:7b:f2:30:ae:9c:bf:33:64:58:ce:f0:51: 5d:1f:cd:da:13:3b:b7:de:79:cf:9c:87:86:29:e8:da:bc:3d: b8:aa:8e:d2:a8:1f:0a:10:04:d2:b7:31:78:79:ba:1a:56:77: 63:c3:dc:9f:95:9b:dc:f7:e8:cf:74:41:b5:df:12:5d:88:e8: 6c:53:30:e9:2a:5c:48:f6:54:2a:5f:d4:03:43:58:25:90:c3: af:bd:0c:ce:19:20:a5:09:90:ff:38:bf:45:49:0f:3e:4b:cf: fe:c1:bb:bf:13:73:de:a6:9a:89:b2:a4:d0:49:4b:65:78:b9: 1e:e0:9a:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdtbXT8rwqEDAMT1Z94Q80Sc5jdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjA0MTcwMjQ0MzhaFw0yNjA0MTgwNTIzMzhaMDMxMTAvBgNV BAMTKEY1NjRGQTQyM0FENUJCNDI5MzczNkUwMkNCRDMzRjk4OUEyQzY0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29qmSaWSLgXZfQ4SkHy16OHOK n6VyT6ttmyo6uUyN1U+bw6DKvV5sxIiFeezSrR5r3kVpceAhVD3iTHSqDqxmgBIn y1HbzUoUyJGAhBOe3VfYPwJy0naFXtid6CQJmRTSRlVDDYUfdGOAzISYElmu8ttO lJlX5+/2LrzpsBVIxfVuBaPHIa32liK+CWzDOH5r+PlqODamHLIZ1arn40cUJ/Kn Ov801BJgLtkoRIVQkeKsqIj4FRzK4irNf4LUzHmSSykbQHgjum+9l0IcCOpPx48L P8UP+5b/sGWB19hTQp3HRvhCRIcqVNIukeR9sghawyNZsvgcG4qwJwGZpkQpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9WT6QjrVu0KTc24Cy9M/mJosZLMwHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC9COEMxNTAzNjkzMjE3 NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAni8DyMY2JG 5VSivWtJXbACdRJMzK2pCQbInrVR50PPXJlsxJ396vI3RGyenaJSXHP+XB9UvRwf Qz0qt4+Di1q8He0vHYQoIxEGwQlZRZIhQws+/+92mjUlNOizxM324t4aNR1gRU2F jjFcm49eJUwDox1xPO9NYNu3XBQjr1eiMlu0e/Iwrpy/M2RYzvBRXR/N2hM7t955 z5yHhino2rw9uKqO0qgfChAE0rcxeHm6GlZ3Y8Pcn5Wb3Pfoz3RBtd8SXYjobFMw 6SpcSPZUKl/UA0NYJZDDr70MzhkgpQmQ/zi/RUkPPkvP/sG7vxNz3qaaibKk0ElL ZXi5HuCaYA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:28:52 2026 by rpki-client