$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: FUZZFWYjUYxzhh+aCA+dsHkrMESKF6HXBHvVS2Gbb/0= Subject key identifier: 65:7B:48:8B:28:0B:F3:7D:46:B2:A5:20:29:48:E2:93:B5:DF:9A:17 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 30E4A82DC69B13236F6ED2C46FB2E28D81671E24 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 08:54:42 +0000 Manifest this update: Fri 17 Apr 2026 08:49:42 +0000 Manifest next update: Sat 18 Apr 2026 11:59:42 +0000 Files and hashes: 1: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) 2: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 3: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 4: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: 3+KhfEDzqwO9NxUAo/bOLISBCHB4IxS+ozjzYuZQeUA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e4:a8:2d:c6:9b:13:23:6f:6e:d2:c4:6f:b2:e2:8d:81:67:1e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Apr 17 08:49:42 2026 GMT Not After : Apr 18 11:59:42 2026 GMT Subject: CN=657B488B280BF37D46B2A5202948E293B5DF9A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:e4:49:bc:9d:cf:13:27:c7:07:e2:a4:f8: 41:b1:82:77:37:32:40:30:f1:ca:5a:79:6f:63:bb: 50:88:31:f3:5b:73:7f:a4:ac:1c:29:10:84:9d:5e: 09:2d:10:13:55:ce:da:7a:63:a4:d7:d0:9c:46:b5: 53:26:e7:82:63:96:be:60:7c:ed:7b:0a:d7:ba:e3: 85:af:08:c9:83:51:93:c2:61:79:92:22:e8:f3:aa: 86:38:af:ab:1a:d8:06:db:61:ed:7d:a4:6e:f7:c0: 71:f6:8d:dd:78:c0:29:9c:ec:34:17:8d:2b:43:03: 96:51:25:f5:e4:9d:c8:89:02:a3:b0:4b:4f:7a:6c: ab:7a:d6:f0:ba:9c:9a:5e:fc:08:8a:2f:db:cf:30: a9:b5:58:82:de:b1:74:ec:6c:ce:f3:46:ba:70:f2: b6:14:5b:16:f3:b1:e7:52:96:6b:b1:c8:a9:b1:33: 6a:41:56:38:91:88:2c:f2:9e:db:21:e3:09:43:ed: 90:e9:ff:ab:d8:fb:2d:d4:ca:b9:81:2b:2d:a7:a0: 98:fd:d9:d6:58:f6:ad:6b:a7:6d:92:b1:e4:37:45: ab:9f:ab:46:16:80:f5:cf:6a:21:80:9f:4b:67:83: 91:5d:7b:94:11:74:4d:bf:90:2b:d6:60:54:97:7e: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7B:48:8B:28:0B:F3:7D:46:B2:A5:20:29:48:E2:93:B5:DF:9A:17 X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:12:33:67:ed:35:d7:68:70:bc:fe:de:0e:59:fc:cc:e5:d4: 6b:a9:1a:22:2f:e7:d6:bf:d3:93:d8:d4:97:d2:fc:aa:99:e0: a0:35:0d:67:53:9e:e0:f1:e2:0d:11:09:c3:68:7c:d8:5a:50: 65:16:0e:30:89:79:28:c4:74:dc:c4:36:9a:6a:00:f1:6f:ea: 31:95:a1:e1:2b:42:4f:44:b3:31:fb:ae:74:a2:c7:1d:8a:fa: 55:a0:8e:c0:dc:0a:19:ab:02:6c:93:56:2b:61:b9:34:bc:c6: f2:a1:14:60:b2:f2:9c:57:ae:62:00:42:05:b1:35:ea:a8:0c: 9c:2c:77:03:4a:55:11:49:06:5e:45:53:9e:ce:c1:37:ae:49: 5b:cf:74:08:8e:1e:4b:6a:71:ba:77:e5:ae:38:51:bd:82:a8: e3:56:30:4e:ac:20:05:3a:0b:ca:94:8a:2e:d2:b8:23:c1:0d: e5:5b:8a:b4:ad:73:fa:ad:e7:fc:b8:5b:3b:03:3a:10:69:58: 7a:28:e0:14:1c:4d:3e:f1:03:65:10:3c:21:6c:82:29:ec:3a: 21:c9:ed:95:f2:3a:b5:1e:da:a8:13:d8:1f:60:3c:df:fb:a8: c2:5a:02:21:76:5e:57:7f:52:7f:5d:c8:ad:e3:9a:42:0f:53: 41:0e:61:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMOSoLcabEyNvbtLEb7LijYFnHiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjA0MTcwODQ5NDJaFw0yNjA0MTgxMTU5NDJaMDMxMTAvBgNV BAMTKDY1N0I0ODhCMjgwQkYzN0Q0NkIyQTUyMDI5NDhFMjkzQjVERjlBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2guRJvJ3PEyfHB+Kk+EGxgnc3 MkAw8cpaeW9ju1CIMfNbc3+krBwpEISdXgktEBNVztp6Y6TX0JxGtVMm54Jjlr5g fO17Cte644WvCMmDUZPCYXmSIujzqoY4r6sa2AbbYe19pG73wHH2jd14wCmc7DQX jStDA5ZRJfXknciJAqOwS096bKt61vC6nJpe/AiKL9vPMKm1WILesXTsbM7zRrpw 8rYUWxbzsedSlmuxyKmxM2pBVjiRiCzyntsh4wlD7ZDp/6vY+y3UyrmBKy2noJj9 2dZY9q1rp22SseQ3Raufq0YWgPXPaiGAn0tng5Fde5QRdE2/kCvWYFSXfrlpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZXtIiygL831GsqUgKUjik7XfmhcwHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBIzZ+0112hw vP7eDln8zOXUa6kaIi/n1r/Tk9jUl9L8qpngoDUNZ1Oe4PHiDREJw2h82FpQZRYO MIl5KMR03MQ2mmoA8W/qMZWh4StCT0SzMfuudKLHHYr6VaCOwNwKGasCbJNWK2G5 NLzG8qEUYLLynFeuYgBCBbE16qgMnCx3A0pVEUkGXkVTns7BN65JW890CI4eS2px unflrjhRvYKo41YwTqwgBToLypSKLtK4I8EN5VuKtK1z+q3n/LhbOwM6EGlYeijg FBxNPvEDZRA8IWyCKew6IcntlfI6tR7aqBPYH2A83/uowloCIXZeV39Sf13IreOa Qg9TQQ5hKw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:48:30 2026 by rpki-client