$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: W3omv0x8yuigC1s+VXZbhjiSSmqo6iDd2eYWTDCIO68= Subject key identifier: 8E:54:20:F8:DC:D5:30:45:03:44:33:F1:8C:CF:8B:1E:B0:D5:2F:F2 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 3C622EEAA4E72074F0A395EB406A24FBEDBF2C13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 10:49:43 +0000 Manifest this update: Fri 17 Apr 2026 10:44:43 +0000 Manifest next update: Sat 18 Apr 2026 13:30:43 +0000 Files and hashes: 1: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: iPxCXEUMw3IYSPsjcbL2Kuzy3H1FQXMUsuE77K8dCuU=) 2: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) 3: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:62:2e:ea:a4:e7:20:74:f0:a3:95:eb:40:6a:24:fb:ed:bf:2c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Apr 17 10:44:43 2026 GMT Not After : Apr 18 13:30:43 2026 GMT Subject: CN=8E5420F8DCD53045034433F18CCF8B1EB0D52FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:7f:48:ee:4a:7b:d8:3d:f2:d5:8d:7e:b5: 38:d9:cf:3a:95:60:ea:c1:13:6c:bb:2b:b4:ba:85: 9a:fb:22:b5:59:54:4f:98:25:3b:3b:25:46:3c:10: 25:51:38:00:1d:0e:ac:3f:47:72:bb:6b:93:3f:03: b0:4c:27:86:8f:47:06:44:90:77:be:1d:64:c1:29: 43:23:25:ae:d2:cf:d7:6e:99:7a:2b:17:d8:5c:5b: 65:2c:77:d2:8b:13:77:f5:de:97:8e:43:a3:fd:c8: 13:13:33:aa:a8:6b:8f:cf:4d:25:fb:1a:95:05:dc: e7:af:f7:30:c3:0c:71:ac:fb:b0:78:3c:2f:20:78: d2:0e:7d:ca:22:37:55:f9:5d:23:8b:44:16:19:64: 0c:62:1a:88:dd:95:03:46:ef:39:52:bc:a0:b9:6d: 3a:db:0e:c6:7a:7c:31:18:7c:3a:82:84:93:51:bb: 59:05:4c:ab:e2:d2:8f:e0:b4:86:eb:0d:89:53:c8: a5:75:c4:81:a3:88:f4:dc:b1:20:51:19:ae:82:41: 08:d9:26:e7:28:d8:00:10:33:28:e9:ea:ba:b4:85: 98:b2:ef:90:eb:b0:bf:7f:bf:7b:b4:9b:da:3d:ca: 7d:ff:ec:3a:9f:eb:27:09:85:a3:16:06:73:6f:cc: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:54:20:F8:DC:D5:30:45:03:44:33:F1:8C:CF:8B:1E:B0:D5:2F:F2 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d6:c3:b7:42:5f:6c:cf:30:01:9d:5c:2b:97:ef:65:f4:75: 5b:1e:aa:0c:b1:e6:40:66:9f:69:44:9e:a4:3b:35:92:c2:9a: 81:91:e9:b7:f5:e5:b6:71:eb:cf:70:f9:21:29:44:cc:b8:ad: fc:9e:85:49:05:31:3a:ca:be:03:6a:f5:35:1c:cb:02:27:fd: 1d:c1:12:87:9d:bd:dd:6c:f4:53:41:a4:7c:25:a4:61:fe:7b: 54:b5:93:34:a0:7a:ec:f8:4c:bd:8e:62:ce:65:79:5b:52:38: e2:fe:f6:cf:49:5e:27:1a:cb:97:b0:01:96:d4:6c:de:bc:cc: 80:85:90:3c:b3:3c:35:10:f7:0c:1e:2d:32:b3:87:d9:06:30: 10:ce:4f:63:6f:54:6f:f3:2a:9b:8c:b1:87:a5:ee:ee:12:35: c9:8f:f1:51:32:d3:2e:7d:a5:e1:34:81:5e:2f:cb:55:25:c4: 21:f8:70:ea:67:cb:1c:ec:79:2b:25:63:1e:cd:22:fe:3b:bd: ff:49:b0:b6:5a:16:97:c3:17:2e:d0:30:b0:b8:0e:c9:56:9d: 2e:c6:f9:4d:43:f7:a2:27:de:f9:78:c0:c5:6a:ab:99:d9:fd: 86:0f:8f:af:3e:bc:1d:cd:86:46:81:e3:05:8e:c8:e9:78:80: 76:20:38:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPGIu6qTnIHTwo5XrQGok++2/LBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjA0MTcxMDQ0NDNaFw0yNjA0MTgxMzMwNDNaMDMxMTAvBgNV BAMTKDhFNTQyMEY4RENENTMwNDUwMzQ0MzNGMThDQ0Y4QjFFQjBENTJGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0n9I7kp72D3y1Y1+tTjZzzqV YOrBE2y7K7S6hZr7IrVZVE+YJTs7JUY8ECVROAAdDqw/R3K7a5M/A7BMJ4aPRwZE kHe+HWTBKUMjJa7Sz9dumXorF9hcW2Usd9KLE3f13peOQ6P9yBMTM6qoa4/PTSX7 GpUF3Oev9zDDDHGs+7B4PC8geNIOfcoiN1X5XSOLRBYZZAxiGojdlQNG7zlSvKC5 bTrbDsZ6fDEYfDqChJNRu1kFTKvi0o/gtIbrDYlTyKV1xIGjiPTcsSBRGa6CQQjZ Juco2AAQMyjp6rq0hZiy75DrsL9/v3u0m9o9yn3/7Dqf6ycJhaMWBnNvzOPTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjlQg+NzVMEUDRDPxjM+LHrDVL/IwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9bDt0JfbM8w AZ1cK5fvZfR1Wx6qDLHmQGafaUSepDs1ksKagZHpt/XltnHrz3D5ISlEzLit/J6F SQUxOsq+A2r1NRzLAif9HcESh5293Wz0U0GkfCWkYf57VLWTNKB67PhMvY5izmV5 W1I44v72z0leJxrLl7ABltRs3rzMgIWQPLM8NRD3DB4tMrOH2QYwEM5PY29Ub/Mq m4yxh6Xu7hI1yY/xUTLTLn2l4TSBXi/LVSXEIfhw6mfLHOx5KyVjHs0i/ju9/0mw tloWl8MXLtAwsLgOyVadLsb5TUP3oife+XjAxWqrmdn9hg+Prz68Hc2GRoHjBY7I 6XiAdiA4Mg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:57:48 2026 by rpki-client