$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft File: E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json) Hash identifier: UAzN3e4Jw0BniDDVQR8yVF3rYaQHx3czZoGa+Mhlo1g= Subject key identifier: 65:61:DD:2D:00:31:83:01:06:68:08:E7:64:80:86:E9:D9:8B:83:06 Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232 Certificate serial: 10E7A55D170E9FB4B87A8E239E0EB959720CE156 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft Manifest number: 87 Signing time: Fri 17 Apr 2026 19:39:48 +0000 Manifest this update: Fri 17 Apr 2026 19:34:48 +0000 Manifest next update: Sat 18 Apr 2026 21:48:48 +0000 Files and hashes: 1: 3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa (hash: fu7L0rmKYwgHzfVKmHdDaBxA79W3IfTKnrKsSuayS2Y=) 2: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=) 3: 3131362e3139392e3135362e302f32322d3234203d3e20313436383334.roa (hash: Uh2/EDdWK4c6ZYX1tLFLGx4xTpdDGyLVBokH0GwB3j4=) 4: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=) 5: 3230322e3136352e3230382e302f32302d3234203d3e20313436383334.roa (hash: xG3PI0F+sPPi1DnSGZHfDnmRvSYoRWgSB+By3rD4zv0=) 6: 3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa (hash: EeCbVZ8eWIjYjevJQ1udtZuLCSkHUsj9Yj5AaZL7S4U=) 7: 3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa (hash: Toe4XK9/hHjGe7TiXrq9wIpaDbrD72THIrtz/qMMlBE=) 8: 3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa (hash: IdMIH3y+HHsm4+d7ESvMntfPnsJBJ8L31r1CJc4f2Bo=) 9: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: XikTGyXYfzNXskMSDtM9OGuuejdwqsLt0KKtO+m8Kxs=) 10: 3130332e3135362e37382e302f32332d3233203d3e203231383539.roa (hash: guHCeGNcndypZ9RT0It28OXAIuLz9aYDjgK5y7y4NYE=) 11: 3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa (hash: E5iVhVPLWbT/XT4sHNLiVBGtFgA8psi4gNVecPAc8O4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e7:a5:5d:17:0e:9f:b4:b8:7a:8e:23:9e:0e:b9:59:72:0c:e1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232 Validity Not Before: Apr 17 19:34:48 2026 GMT Not After : Apr 18 21:48:48 2026 GMT Subject: CN=6561DD2D00318301066808E7648086E9D98B8306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:5e:22:5c:4f:ec:44:83:96:f6:cb:58:26: 28:83:16:8b:c7:47:da:54:35:a0:34:3c:e6:b3:c5: 2b:50:2e:01:2e:3d:fe:99:c7:f3:2f:ed:75:60:02: 49:fb:bd:c7:ef:2c:35:8f:7d:b1:68:ac:ee:02:20: 33:31:61:15:92:e2:5e:eb:4d:af:97:87:cf:a4:d1: bc:63:7c:d2:8b:66:e3:d5:7d:0f:96:76:c1:ff:94: 30:31:ba:4d:e6:d5:22:11:bf:43:02:a5:fd:22:85: 6b:3f:f0:6d:c3:0c:a6:90:b4:4f:27:45:21:9c:d8: 74:39:99:8c:83:52:2b:a6:78:66:48:42:ba:65:b1: 0a:ca:62:7e:2e:78:d5:37:d3:70:54:b1:00:6c:4e: 2a:4a:04:15:6e:2a:c7:28:70:cb:5d:a3:b6:85:30: 0d:09:2d:f1:25:3a:e8:e1:c2:41:df:21:cc:1b:7f: 9d:a6:87:94:03:c6:2d:84:6d:cd:72:99:59:ad:ce: 23:85:5b:83:95:98:2d:78:24:f5:8d:77:cc:a3:98: 6f:3b:e2:b6:36:5e:b5:81:98:2d:42:42:51:21:10: 55:c2:2f:59:b1:f1:0e:e4:7d:79:5b:92:5f:20:df: b6:70:56:da:ca:57:03:69:31:0b:53:50:b1:02:07: 6a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:61:DD:2D:00:31:83:01:06:68:08:E7:64:80:86:E9:D9:8B:83:06 X509v3 Authority Key Identifier: keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ed:bf:11:1b:cf:ba:32:5d:4c:81:f8:95:76:d8:1f:d4:50: f9:5d:d6:07:ae:39:2d:d8:56:96:39:f3:cb:2e:41:96:aa:d3: 15:e6:37:e9:37:75:a3:c5:24:c4:da:83:40:25:33:f8:f2:dc: 8a:05:a0:2f:9b:66:4c:ae:fa:21:f8:64:1a:3d:cd:50:26:3f: e0:82:21:c7:71:d0:0d:e8:ff:28:61:c5:b6:22:c9:f0:18:4c: 6c:2e:05:1f:71:28:c6:25:f6:2d:ce:50:67:7e:61:1e:39:ef: d5:89:c1:9b:8c:b9:34:44:f7:09:d0:dd:99:b3:2e:c7:4e:c7: 55:65:65:1f:4e:e3:bb:a1:cb:0c:d5:f4:86:ca:59:a8:1c:c6: 8f:26:1e:18:9a:4c:6d:a4:4c:8f:a4:71:20:98:cd:90:8c:f0: 8c:64:3a:1e:3d:ac:30:a8:da:3d:4a:93:d4:3c:a9:5e:96:ae: 4d:4d:88:44:ba:7b:83:89:3b:bb:21:d3:97:f1:d6:80:14:54: c0:29:4e:54:67:e7:73:bb:c1:04:85:04:ef:f2:0b:e8:a6:f2: 34:d6:38:fd:10:99:fa:62:be:29:79:2f:f4:c7:37:f1:ae:bf: 3c:2d:81:6b:07:f6:5e:0b:68:d9:fa:41:62:23:75:81:2b:c0: 79:91:77:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEOelXRcOn7S4eo4jng65WXIM4VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz MDgzMDIzMjAeFw0yNjA0MTcxOTM0NDhaFw0yNjA0MTgyMTQ4NDhaMDMxMTAvBgNV BAMTKDY1NjFERDJEMDAzMTgzMDEwNjY4MDhFNzY0ODA4NkU5RDk4QjgzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArl4iXE/sRIOW9stYJiiDFovH R9pUNaA0POazxStQLgEuPf6Zx/Mv7XVgAkn7vcfvLDWPfbForO4CIDMxYRWS4l7r Ta+Xh8+k0bxjfNKLZuPVfQ+WdsH/lDAxuk3m1SIRv0MCpf0ihWs/8G3DDKaQtE8n RSGc2HQ5mYyDUiumeGZIQrplsQrKYn4ueNU303BUsQBsTipKBBVuKscocMtdo7aF MA0JLfElOujhwkHfIcwbf52mh5QDxi2Ebc1ymVmtziOFW4OVmC14JPWNd8yjmG87 4rY2XrWBmC1CQlEhEFXCL1mx8Q7kfXlbkl8g37ZwVtrKVwNpMQtTULECB2qjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZWHdLQAxgwEGaAjnZICG6dmLgwYwHwYDVR0j BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1 NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC9FMjNDNDgwMENBNDUy QjFBOEU2MjE0OTIzQzAxNTQwRTMwODMwMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+2/ERvPujJd TIH4lXbYH9RQ+V3WB645LdhWljnzyy5BlqrTFeY36Td1o8UkxNqDQCUz+PLcigWg L5tmTK76IfhkGj3NUCY/4IIhx3HQDej/KGHFtiLJ8BhMbC4FH3EoxiX2Lc5QZ35h Hjnv1YnBm4y5NET3CdDdmbMux07HVWVlH07ju6HLDNX0hspZqBzGjyYeGJpMbaRM j6RxIJjNkIzwjGQ6Hj2sMKjaPUqT1DypXpauTU2IRLp7g4k7uyHTl/HWgBRUwClO VGfnc7vBBIUE7/IL6KbyNNY4/RCZ+mK+KXkv9Mc38a6/PC2Bawf2Xgto2fpBYiN1 gSvAeZF3pQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:30:55 2026 by rpki-client