$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json) Hash identifier: Isi22ky8Xa46Yd7VN0G+5/e4CV7We5nJBFpVlJpXKVw= Subject key identifier: 82:B1:D0:58:F8:17:9E:74:08:BD:AB:79:20:20:90:EB:95:08:2B:B1 Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Certificate serial: 0DBC04A014153F69B085923C0906238C23F380F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 17:19:44 +0000 Manifest this update: Fri 17 Apr 2026 17:14:44 +0000 Manifest next update: Sat 18 Apr 2026 17:52:44 +0000 Files and hashes: 1: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: A3GpPL3oDjU3gL/T3RFIiHRNP/+v2BbPUl5rHTdWtXk=) 2: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bc:04:a0:14:15:3f:69:b0:85:92:3c:09:06:23:8c:23:f3:80:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Validity Not Before: Apr 17 17:14:44 2026 GMT Not After : Apr 18 17:52:44 2026 GMT Subject: CN=82B1D058F8179E7408BDAB79202090EB95082BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:c9:67:e8:6c:10:19:97:5c:0f:6f:a4:d7: 52:c7:57:18:ef:e2:d0:84:06:11:bb:62:3a:77:a7: 50:8b:e1:79:5c:a1:a0:e5:c7:56:b0:34:6d:f8:f5: c1:ad:d1:93:6c:8b:d6:cb:d4:8f:ce:08:4a:9c:32: f6:c4:b4:76:32:b1:8a:15:83:41:8f:50:30:00:a2: 13:5b:3a:04:bb:a9:04:cc:e7:89:d8:7b:59:c2:34: c0:7f:25:6e:40:4a:85:b7:a6:5a:91:66:54:e9:d3: 10:a0:22:53:42:81:ef:06:c6:67:6f:71:74:af:2a: 53:a8:0e:ba:4d:fe:da:5e:83:e5:1e:59:45:f1:be: 9e:15:18:ae:68:da:24:4a:8e:be:a9:c5:22:34:0f: 8c:09:e7:7e:4f:83:c3:c3:4f:75:c6:0d:ab:5b:e7: 96:f1:d5:b7:b5:c6:0e:90:14:38:f2:bb:48:28:af: c2:53:a0:02:31:06:33:60:20:36:b2:39:6b:b8:7b: 36:88:d3:3c:55:4e:77:c9:ea:af:be:13:e9:27:34: c8:c7:54:10:50:ac:af:98:38:74:da:40:b2:b6:83: 04:35:a7:10:59:39:1b:10:a2:e3:db:9e:e2:b3:8e: 14:76:97:1a:a9:5e:fe:23:0c:d1:85:ea:95:ec:c7: ec:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B1:D0:58:F8:17:9E:74:08:BD:AB:79:20:20:90:EB:95:08:2B:B1 X509v3 Authority Key Identifier: keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d0:25:ce:44:84:13:cc:61:ca:74:41:68:46:19:e7:44:8b: b1:fc:e9:f6:de:58:c3:7d:ec:b5:eb:b8:f8:39:48:63:57:f7: e4:ac:03:62:7e:da:49:c8:70:50:fd:17:00:6b:45:70:4c:ee: 0c:ad:6f:e3:55:b4:da:bf:f6:aa:92:d8:f6:75:fc:27:f5:3f: e4:e5:83:55:60:76:c7:8c:f1:3c:d5:27:82:10:7e:3e:89:45: 16:9e:1d:4c:32:5f:18:95:01:63:6c:7a:5f:73:d1:48:5c:38: f7:5a:c8:39:f9:c8:4e:db:68:34:8d:dd:b0:11:18:3e:93:ad: 25:39:fe:cd:0f:fe:58:9e:74:ec:e5:fe:d5:47:37:f9:6e:e0: 63:e2:4c:f2:8e:64:da:e7:71:22:50:0f:14:7c:fa:11:88:e3: ef:a0:9b:99:72:44:6c:7c:69:11:46:38:e3:54:7b:2d:42:7c: 88:3d:f7:32:f3:ae:c6:5a:22:8d:96:51:8f:39:ab:87:e2:57: 85:e5:41:5e:24:72:7d:45:bf:6e:ca:59:be:1d:98:ee:ad:91: 84:ef:f5:b4:a2:ad:9e:ca:ac:6c:bc:c7:23:73:fc:80:a4:42: 3a:06:85:18:d7:f3:ef:ec:85:2e:ab:8b:82:c9:7e:e1:88:df: 58:dc:3a:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDbwEoBQVP2mwhZI8CQYjjCPzgPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1 NjE4RjIwRjAeFw0yNjA0MTcxNzE0NDRaFw0yNjA0MTgxNzUyNDRaMDMxMTAvBgNV BAMTKDgyQjFEMDU4RjgxNzlFNzQwOEJEQUI3OTIwMjA5MEVCOTUwODJCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xMln6GwQGZdcD2+k11LHVxjv 4tCEBhG7Yjp3p1CL4XlcoaDlx1awNG349cGt0ZNsi9bL1I/OCEqcMvbEtHYysYoV g0GPUDAAohNbOgS7qQTM54nYe1nCNMB/JW5ASoW3plqRZlTp0xCgIlNCge8Gxmdv cXSvKlOoDrpN/tpeg+UeWUXxvp4VGK5o2iRKjr6pxSI0D4wJ535Pg8PDT3XGDatb 55bx1be1xg6QFDjyu0gor8JToAIxBjNgIDayOWu4ezaI0zxVTnfJ6q++E+knNMjH VBBQrK+YOHTaQLK2gwQ1pxBZORsQouPbnuKzjhR2lxqpXv4jDNGF6pXsx+zzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgrHQWPgXnnQIvat5ICCQ65UIK7EwHwYDVR0j BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtAlzkSEE8xh ynRBaEYZ50SLsfzp9t5Yw33steu4+DlIY1f35KwDYn7aSchwUP0XAGtFcEzuDK1v 41W02r/2qpLY9nX8J/U/5OWDVWB2x4zxPNUnghB+PolFFp4dTDJfGJUBY2x6X3PR SFw491rIOfnITttoNI3dsBEYPpOtJTn+zQ/+WJ507OX+1Uc3+W7gY+JM8o5k2udx IlAPFHz6EYjj76CbmXJEbHxpEUY441R7LUJ8iD33MvOuxloijZZRjzmrh+JXheVB XiRyfUW/bspZvh2Y7q2RhO/1tKKtnsqsbLzHI3P8gKRCOgaFGNfz7+yFLquLgsl+ 4YjfWNw6VQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:50:09 2026 by rpki-client