$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json) Hash identifier: MXNxeBnRH4Yrx6vrRleUZd0VKhDw/8To9tYLRxdo+yU= Subject key identifier: F5:7E:3E:E4:F0:3A:E1:3D:F8:34:3F:D2:BF:C0:1E:5C:1C:6A:D6:B0 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 2476CD0F1F01C99D493687278537A132155F291C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 08:04:42 +0000 Manifest this update: Fri 17 Apr 2026 07:59:42 +0000 Manifest next update: Sat 18 Apr 2026 10:17:42 +0000 Files and hashes: 1: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=) 2: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=) 3: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=) 4: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=) 5: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=) 6: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: 105fdtClZqzXfZEMyTRQqX17sDCOmmXWa8c/CI6YBhA=) 7: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:76:cd:0f:1f:01:c9:9d:49:36:87:27:85:37:a1:32:15:5f:29:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Apr 17 07:59:42 2026 GMT Not After : Apr 18 10:17:42 2026 GMT Subject: CN=F57E3EE4F03AE13DF8343FD2BFC01E5C1C6AD6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:f8:d3:33:9b:d4:95:4e:57:89:71:25:16: a3:48:b3:e1:a3:c6:ec:2c:b4:75:2e:c0:65:e1:a5: d6:94:06:a1:d2:61:94:be:d9:e2:bc:3b:e1:9b:64: d6:c3:35:8a:6f:0f:19:19:fa:66:09:29:97:7e:bc: d4:15:f3:e4:8b:06:76:87:af:55:de:9a:9f:72:25: 50:ff:7d:13:8e:50:98:44:66:4c:7b:a2:8b:7a:dc: bb:11:01:bc:57:5a:41:4b:05:5f:52:56:af:ee:c9: 3d:51:53:eb:3f:bc:bd:bd:b3:b7:35:fc:2a:98:3e: 69:72:4a:45:93:d6:e0:43:7c:e9:47:20:13:3f:1d: 09:a3:72:81:db:47:75:4f:c1:9a:33:99:7b:40:a9: 16:0b:bc:c2:e2:06:4d:29:12:05:00:ef:09:7e:22: b3:b1:89:a9:45:cf:9f:0d:5f:8a:ac:d3:66:19:71: b3:8b:26:53:1e:5f:de:51:12:f8:d7:59:e8:29:bc: c1:b2:54:04:c1:cd:f8:cc:7e:e2:1a:f9:08:55:22: 2b:b3:38:0b:0f:0d:41:77:c2:7b:6a:8c:fe:91:3e: a8:54:15:7a:16:a2:63:e1:01:f0:96:0c:c0:f0:a3: 2e:e8:60:2e:14:52:04:8e:3f:96:77:ee:11:36:f8: a9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7E:3E:E4:F0:3A:E1:3D:F8:34:3F:D2:BF:C0:1E:5C:1C:6A:D6:B0 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d6:df:c4:4d:c4:cc:a2:22:df:f4:b5:ce:6a:a5:5c:d8:f2: 92:70:aa:f1:13:0b:33:86:3a:ec:a1:31:88:90:a9:7f:03:e0: ea:16:31:8d:27:3e:50:79:ff:fc:e1:31:26:ee:9b:5c:2f:4f: 31:72:84:81:08:7c:e8:10:c5:ce:bc:27:fb:71:4e:03:89:73: ea:f8:2a:c3:a8:49:1b:2e:d3:cb:22:19:bd:32:63:bc:0b:05: 8c:29:13:62:5c:83:b3:ec:b2:1e:9c:90:e5:ab:ed:a8:a0:c2: c1:8b:0a:8d:dc:89:b1:2c:44:92:8e:a1:84:19:d5:2a:74:33: 49:92:6e:c5:cf:45:0d:59:40:b9:43:e1:dd:a8:57:82:65:dd: 85:83:75:6f:10:0a:1c:da:e4:22:4d:07:25:ef:da:65:e3:3c: e4:10:e1:76:2f:e1:0d:dd:5a:0e:d2:d8:56:c8:1b:fb:55:be: 5b:95:64:43:e1:ce:35:17:07:15:8a:7c:eb:8f:62:0b:fc:09: 95:de:f9:41:87:65:cb:ae:ed:28:41:4c:fd:3b:f4:29:2e:05: af:47:e0:e9:1b:8c:df:81:23:58:2a:26:66:12:c4:9e:a7:7b: 4b:3d:40:c4:a6:0d:ad:01:f7:e3:ff:30:f8:ba:c0:e3:08:84: b4:62:ad:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJHbNDx8ByZ1JNocnhTehMhVfKRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjA0MTcwNzU5NDJaFw0yNjA0MTgxMDE3NDJaMDMxMTAvBgNV BAMTKEY1N0UzRUU0RjAzQUUxM0RGODM0M0ZEMkJGQzAxRTVDMUM2QUQ2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBPjTM5vUlU5XiXElFqNIs+Gj xuwstHUuwGXhpdaUBqHSYZS+2eK8O+GbZNbDNYpvDxkZ+mYJKZd+vNQV8+SLBnaH r1Xemp9yJVD/fROOUJhEZkx7oot63LsRAbxXWkFLBV9SVq/uyT1RU+s/vL29s7c1 /CqYPmlySkWT1uBDfOlHIBM/HQmjcoHbR3VPwZozmXtAqRYLvMLiBk0pEgUA7wl+ IrOxialFz58NX4qs02YZcbOLJlMeX95REvjXWegpvMGyVATBzfjMfuIa+QhVIiuz OAsPDUF3wntqjP6RPqhUFXoWomPhAfCWDMDwoy7oYC4UUgSOP5Z37hE2+KkZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9X4+5PA64T34ND/Sv8AeXBxq1rAwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3OTM1MzgvMC84RkI5MTg0NjRGRTgx QzM2QzAxMEJFNUM1QzY5QTdGQTM5MkQzREZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftbfxE3EzKIi 3/S1zmqlXNjyknCq8RMLM4Y67KExiJCpfwPg6hYxjSc+UHn//OExJu6bXC9PMXKE gQh86BDFzrwn+3FOA4lz6vgqw6hJGy7TyyIZvTJjvAsFjCkTYlyDs+yyHpyQ5avt qKDCwYsKjdyJsSxEko6hhBnVKnQzSZJuxc9FDVlAuUPh3ahXgmXdhYN1bxAKHNrk Ik0HJe/aZeM85BDhdi/hDd1aDtLYVsgb+1W+W5VkQ+HONRcHFYp8649iC/wJld75 QYdly67tKEFM/Tv0KS4Fr0fg6RuM34EjWComZhLEnqd7Sz1AxKYNrQH34/8w+LrA 4wiEtGKtMQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:15:48 2026 by rpki-client