$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json) Hash identifier: A5Y/yh56LDz5n9UaA0g5u8QlQSJ6RaQhYP39NjZdtqQ= Subject key identifier: 8C:68:D0:97:BE:33:EE:E6:6D:A8:F1:5E:3D:E9:FE:2D:8A:BC:A9:A8 Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 3F44A8D3F22DFF0060D2F4969BED67C57FAF17F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 16:04:43 +0000 Manifest this update: Fri 17 Apr 2026 15:59:43 +0000 Manifest next update: Sat 18 Apr 2026 19:28:43 +0000 Files and hashes: 1: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: YCiw9wFw4Wcn98pbj2Fveqc7dyyv3pN/cMy9Qjfwr/8=) 2: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=) 3: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=) 4: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:44:a8:d3:f2:2d:ff:00:60:d2:f4:96:9b:ed:67:c5:7f:af:17:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Apr 17 15:59:43 2026 GMT Not After : Apr 18 19:28:43 2026 GMT Subject: CN=8C68D097BE33EEE66DA8F15E3DE9FE2D8ABCA9A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:61:80:25:61:3b:4f:e2:1b:98:6f:b7:84:ce: 8e:d3:0b:7b:f4:3a:05:8d:b7:7b:81:2f:c8:2c:03: df:6d:f7:4d:92:c3:f7:cf:ea:ec:b6:02:a8:35:2a: 54:fb:b1:fd:b5:d6:c1:0c:47:e9:97:e0:be:12:ee: c1:e2:98:e7:52:6c:73:74:f0:6b:5c:dd:e0:74:06: 8e:7c:e1:4b:27:ae:7b:25:8c:f7:49:22:8b:b1:3a: 85:34:ad:8d:db:2d:6e:30:49:9f:eb:f7:31:4c:bb: 50:14:b2:69:73:84:f9:fc:f2:d5:70:45:c2:06:09: ee:e6:e6:41:cb:03:2d:83:8d:ba:dd:50:ad:e9:24: 85:29:64:39:60:0a:c8:52:39:8e:d1:f6:58:ea:c2: ea:d2:93:b3:02:a3:e8:f3:38:12:a2:c6:99:59:e0: bd:79:e6:f7:e4:26:91:d1:64:a4:d7:5a:63:7a:5b: 47:ba:27:64:32:e5:46:3b:2a:cb:a4:df:43:32:43: e2:e3:72:25:77:2a:66:5e:4d:ce:87:d1:f9:c7:bb: 7b:1f:24:31:b4:63:70:0d:5c:16:e2:dc:b5:ec:0c: 61:e6:30:56:10:5c:0e:08:79:7d:55:07:55:ae:07: 64:84:42:ec:c7:37:31:0e:43:d4:46:c5:be:fa:ca: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:D0:97:BE:33:EE:E6:6D:A8:F1:5E:3D:E9:FE:2D:8A:BC:A9:A8 X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:dd:58:d6:f0:97:23:11:cb:04:8a:9b:59:74:b1:25:86:9d: 6b:7c:e5:06:32:01:9f:86:9f:1b:fd:de:b6:77:93:21:af:2f: 52:a5:fd:8b:e3:9e:c0:5c:74:5b:55:52:67:64:32:b1:ee:7e: ba:c6:0a:46:0f:47:a2:20:05:a0:62:19:df:ad:43:c7:5f:b0: 8d:7a:ba:2a:9d:12:29:83:5a:76:fe:2c:33:82:a5:19:d0:e5: fd:52:11:96:6e:0f:1b:e1:c3:5e:75:4d:bb:43:fa:67:ea:68: e3:6d:b5:64:97:27:24:e4:57:65:e5:4b:86:59:da:38:50:02: e9:93:6e:3f:2d:23:ce:e9:a6:92:e8:21:0c:2f:d7:46:8d:9e: 4e:cd:21:b1:2b:71:e9:22:f3:d5:a4:b7:bb:c2:a2:44:ee:2c: 8d:9b:ff:c8:70:f7:a0:09:a8:92:4f:ea:e9:31:b3:9e:8a:bf: 1b:85:73:a1:af:05:24:a8:73:12:33:7f:fc:6f:a4:14:81:20: 72:d4:87:c3:6d:9e:33:2c:13:9a:e1:fc:b8:bc:09:d6:95:20: ab:20:8a:c2:9e:b8:da:34:f7:f3:89:66:8b:24:87:48:89:f3: 92:39:80:7c:47:64:76:7d:05:92:5b:d5:b9:3d:ca:2c:25:32: a2:b7:dc:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP0So0/It/wBg0vSWm+1nxX+vF/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjA0MTcxNTU5NDNaFw0yNjA0MTgxOTI4NDNaMDMxMTAvBgNV BAMTKDhDNjhEMDk3QkUzM0VFRTY2REE4RjE1RTNERTlGRTJEOEFCQ0E5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzYYAlYTtP4huYb7eEzo7TC3v0 OgWNt3uBL8gsA99t902Sw/fP6uy2Aqg1KlT7sf211sEMR+mX4L4S7sHimOdSbHN0 8Gtc3eB0Bo584UsnrnsljPdJIouxOoU0rY3bLW4wSZ/r9zFMu1AUsmlzhPn88tVw RcIGCe7m5kHLAy2DjbrdUK3pJIUpZDlgCshSOY7R9ljqwurSk7MCo+jzOBKixplZ 4L155vfkJpHRZKTXWmN6W0e6J2Qy5UY7Ksuk30MyQ+LjciV3KmZeTc6H0fnHu3sf JDG0Y3ANXBbi3LXsDGHmMFYQXA4IeX1VB1WuB2SEQuzHNzEOQ9RGxb76yoxLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjGjQl74z7uZtqPFePen+LYq8qagwHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC83RjA4QjhEQzZFMjY3 RThCMTU5QzE1RjJGMjBBQjEwQjM0N0M3QTIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV91Y1vCXIxHL BIqbWXSxJYada3zlBjIBn4afG/3etneTIa8vUqX9i+OewFx0W1VSZ2Qyse5+usYK Rg9HoiAFoGIZ361Dx1+wjXq6Kp0SKYNadv4sM4KlGdDl/VIRlm4PG+HDXnVNu0P6 Z+po4221ZJcnJORXZeVLhlnaOFAC6ZNuPy0jzummkughDC/XRo2eTs0hsStx6SLz 1aS3u8KiRO4sjZv/yHD3oAmokk/q6TGznoq/G4Vzoa8FJKhzEjN//G+kFIEgctSH w22eMywTmuH8uLwJ1pUgqyCKwp642jT384lmiySHSInzkjmAfEdkdn0FklvVuT3K LCUyorfc0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:05 2026 by rpki-client