$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: IJLlLAhcnc+bEcz7Br1IPK6tGdwT4DLwQTwjNGfj9Bo= Subject key identifier: 48:BF:B5:4E:D4:D4:65:1B:90:19:2A:AD:1E:07:ED:CF:CD:D7:0C:27 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 798B9F12454F6AD04527A678321D0E18EB5FDE05 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 18:44:47 +0000 Manifest this update: Fri 17 Apr 2026 18:39:47 +0000 Manifest next update: Sat 18 Apr 2026 21:54:47 +0000 Files and hashes: 1: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) 2: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: c7jHr0CblbtQdHpBXk1NRo19n9VvALjunlO3Q2WXZgo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8b:9f:12:45:4f:6a:d0:45:27:a6:78:32:1d:0e:18:eb:5f:de:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Apr 17 18:39:47 2026 GMT Not After : Apr 18 21:54:47 2026 GMT Subject: CN=48BFB54ED4D4651B90192AAD1E07EDCFCDD70C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:b7:0f:5d:2b:ea:04:14:65:10:f8:ed:39: cc:16:8a:f0:54:86:a0:1c:e7:50:1e:b8:0a:b5:88: 4f:40:d4:f3:4c:66:69:71:39:1b:7a:50:ef:4e:bf: d0:6c:c7:a6:f9:ef:82:f6:40:60:28:ae:fb:77:63: d6:d1:d7:77:bd:09:f5:8c:e4:14:4b:64:95:26:db: 30:a3:57:c3:fd:d9:f1:fb:ef:59:e2:09:52:66:21: c2:5b:3b:f2:ce:ae:8b:56:7b:0a:28:dc:b4:1e:3d: 7e:22:16:d2:9b:0c:77:ca:ef:7f:41:e4:e8:a8:11: ff:8f:41:c4:15:54:29:21:b1:e3:e9:89:3e:95:24: 1e:f7:1c:6f:b4:50:6e:bb:25:eb:9f:a6:2c:83:76: 20:46:33:c2:66:88:e6:e9:00:4a:5b:3e:88:09:3b: c3:e8:73:51:61:66:14:7f:15:de:6d:ea:2d:0f:b4: 4c:6d:9d:96:65:ca:27:09:d2:8f:9a:fd:55:b2:4f: 08:27:66:c4:a0:d3:90:cb:54:98:b8:53:c1:68:e5: 4d:bc:ba:12:9a:4a:a5:d4:80:e6:c9:75:23:3d:d5: 29:f1:e4:4f:3c:42:b7:0a:7d:63:90:f2:23:ee:e4: 43:1b:78:69:e7:9a:23:65:c9:0f:88:bb:96:64:10: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BF:B5:4E:D4:D4:65:1B:90:19:2A:AD:1E:07:ED:CF:CD:D7:0C:27 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e6:4c:99:9c:9f:37:ba:8e:8c:c2:fb:7a:85:03:19:74:4e: bf:c4:5a:1d:04:74:5a:23:32:a0:bc:72:49:fd:bc:8d:0c:03: 5e:3c:38:6d:51:76:42:b5:b5:ee:53:14:11:41:e0:c7:28:09: 1f:06:fa:04:d3:ef:48:2a:3b:18:f3:98:cd:39:2a:31:2c:b1: 16:9a:ae:e9:86:96:83:ab:56:f8:56:8b:cb:f0:01:c2:e2:91: da:16:95:09:a5:3d:f8:8c:90:9c:1e:b3:31:44:30:f4:d8:27: de:59:8c:65:01:da:c4:5d:e2:88:53:e4:e9:69:48:15:88:24: 54:2d:6d:df:11:67:14:cc:15:a9:26:c5:00:f8:68:7f:95:5a: 0d:c7:e3:2b:a4:fa:c2:88:79:b5:a8:fd:32:5a:5b:46:16:78: 3c:22:b8:e1:39:59:af:f1:78:20:34:eb:d6:6f:b2:ea:e8:5d: 55:64:f4:b2:b5:a1:3b:49:38:46:c4:88:5f:ea:e6:c3:bb:c0: ac:55:b4:d5:42:d4:f3:c7:b7:ec:c7:6b:32:8c:5a:9a:0b:1e: 9e:57:47:1e:ae:17:42:8a:1c:2b:53:64:00:50:57:11:49:5e: 03:de:12:3c:c6:74:03:9b:6b:e8:ee:06:6e:1c:0f:0d:00:24: 99:6d:0f:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeYufEkVPatBFJ6Z4Mh0OGOtf3gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA0MTcxODM5NDdaFw0yNjA0MTgyMTU0NDdaMDMxMTAvBgNV BAMTKDQ4QkZCNTRFRDRENDY1MUI5MDE5MkFBRDFFMDdFRENGQ0RENzBDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyS7cPXSvqBBRlEPjtOcwWivBU hqAc51AeuAq1iE9A1PNMZmlxORt6UO9Ov9Bsx6b574L2QGAorvt3Y9bR13e9CfWM 5BRLZJUm2zCjV8P92fH771niCVJmIcJbO/LOrotWewoo3LQePX4iFtKbDHfK739B 5OioEf+PQcQVVCkhsePpiT6VJB73HG+0UG67JeufpiyDdiBGM8JmiObpAEpbPogJ O8Poc1FhZhR/Fd5t6i0PtExtnZZlyicJ0o+a/VWyTwgnZsSg05DLVJi4U8Fo5U28 uhKaSqXUgObJdSM91Snx5E88QrcKfWOQ8iPu5EMbeGnnmiNlyQ+Iu5ZkEP/dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSL+1TtTUZRuQGSqtHgftz83XDCcwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuZMmZyfN7qO jML7eoUDGXROv8RaHQR0WiMyoLxySf28jQwDXjw4bVF2QrW17lMUEUHgxygJHwb6 BNPvSCo7GPOYzTkqMSyxFpqu6YaWg6tW+FaLy/ABwuKR2haVCaU9+IyQnB6zMUQw 9Ngn3lmMZQHaxF3iiFPk6WlIFYgkVC1t3xFnFMwVqSbFAPhof5VaDcfjK6T6woh5 taj9MlpbRhZ4PCK44TlZr/F4IDTr1m+y6uhdVWT0srWhO0k4RsSIX+rmw7vArFW0 1ULU88e37MdrMoxamgsenldHHq4XQoocK1NkAFBXEUleA94SPMZ0A5tr6O4GbhwP DQAkmW0PiA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:35 2026 by rpki-client