$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: Nko2xMbFE2MvsoPXLJToLNjsHp3oDio8RopDABcaycE= Subject key identifier: AE:1D:20:0C:8D:24:4B:F2:B1:39:BE:6B:2A:C3:E9:4C:C6:E1:D3:90 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 0F0E29C079BD9A66133FEF0BD5FB7740D772E93D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: 79 Signing time: Fri 17 Apr 2026 11:49:43 +0000 Manifest this update: Fri 17 Apr 2026 11:44:43 +0000 Manifest next update: Sat 18 Apr 2026 12:33:43 +0000 Files and hashes: 1: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=) 2: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=) 3: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: L2essLumkTCqu45pwT+cj69pgrm8up8d3VwoF6XAZk8=) 4: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0e:29:c0:79:bd:9a:66:13:3f:ef:0b:d5:fb:77:40:d7:72:e9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Apr 17 11:44:43 2026 GMT Not After : Apr 18 12:33:43 2026 GMT Subject: CN=AE1D200C8D244BF2B139BE6B2AC3E94CC6E1D390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:70:a6:c7:15:c0:b4:3c:25:e6:92:b9:2a:e6: da:6b:94:90:00:4c:65:bb:fc:65:0f:fc:b7:53:50: 83:90:e2:6d:2f:16:b2:00:5f:5e:d1:d1:99:06:9c: bc:60:ad:3f:98:b3:bb:71:36:40:87:12:ab:2d:de: 16:cc:84:a5:e4:ce:99:44:26:f1:14:27:85:86:7b: 96:8e:fb:f7:bb:e2:24:c4:bf:c8:3d:19:b9:d9:d5: e0:a8:e5:b2:f8:67:44:04:5d:1e:54:0a:fa:90:02: fb:6d:90:db:ba:dd:90:2f:0d:9f:2a:ac:03:c7:8b: cb:d2:55:90:a0:a9:b6:1f:02:a2:4f:b5:28:bc:d7: aa:74:13:7d:dd:e4:b7:11:9b:68:f2:b2:18:81:40: 18:a7:a4:26:ef:58:11:50:8c:cc:4a:67:fb:ae:58: 15:49:1d:e6:5e:8e:23:af:81:4c:6e:8e:fa:8f:f6: 2e:a6:97:d1:94:fe:7a:7e:3c:7b:c4:dc:c8:6c:fb: e0:17:65:29:ac:69:8e:42:6d:7a:0c:ca:0c:97:a3: 0d:68:bb:6b:e3:59:5b:ad:c4:5d:52:9a:43:5a:44: 06:f0:c3:55:6c:d1:76:93:94:44:c4:63:b8:d5:00: bd:a5:1f:0a:de:8a:24:54:64:0d:c9:3d:92:6e:d0: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1D:20:0C:8D:24:4B:F2:B1:39:BE:6B:2A:C3:E9:4C:C6:E1:D3:90 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c8:64:d2:d1:7a:0f:0a:a3:4c:5c:5f:4d:8b:88:cc:35:a2: c8:9b:a6:3a:6c:40:a2:ea:fa:25:de:da:bb:c3:19:29:5e:84: 79:a5:0c:18:39:15:62:66:e5:bf:92:7c:ac:7e:b5:7e:66:71: d3:69:1e:09:d5:e1:e3:8e:b9:2c:10:f4:47:31:fa:8d:99:57: 23:c2:97:87:7d:dc:6f:45:f0:b4:59:4c:7c:ef:7b:36:55:b9: 15:51:5a:7b:26:c5:7e:90:02:16:04:ef:55:f8:97:f5:28:73: 96:63:f6:d5:c5:e1:d2:f3:08:e9:a3:3c:bd:81:7d:49:55:86: ab:4f:6c:1f:e4:b1:54:ba:1a:b2:2e:4a:12:29:5b:b2:27:55: e8:67:f5:88:c5:09:ff:91:97:30:1f:e9:54:21:57:f3:91:8e: f4:d8:2d:5a:cf:9b:af:54:96:5f:68:ad:a1:10:f4:d9:89:9e: 73:fa:cd:0d:c5:b9:0a:3b:56:7e:23:1a:3f:4d:3b:d1:e2:77: 9f:e7:99:6b:57:a0:c4:7c:68:c8:75:3c:80:f1:b5:78:67:62: 2e:9b:ba:72:8b:79:a3:1a:58:10:8b:5c:76:dd:9e:f0:1f:28: df:59:7e:2b:62:c8:0a:c0:a5:2d:6b:09:28:cd:89:7c:c2:4f: 85:0b:2e:1d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDw4pwHm9mmYTP+8L1ft3QNdy6T0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjA0MTcxMTQ0NDNaFw0yNjA0MTgxMjMzNDNaMDMxMTAvBgNV BAMTKEFFMUQyMDBDOEQyNDRCRjJCMTM5QkU2QjJBQzNFOTRDQzZFMUQzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrcKbHFcC0PCXmkrkq5tprlJAA TGW7/GUP/LdTUIOQ4m0vFrIAX17R0ZkGnLxgrT+Ys7txNkCHEqst3hbMhKXkzplE JvEUJ4WGe5aO+/e74iTEv8g9GbnZ1eCo5bL4Z0QEXR5UCvqQAvttkNu63ZAvDZ8q rAPHi8vSVZCgqbYfAqJPtSi816p0E33d5LcRm2jyshiBQBinpCbvWBFQjMxKZ/uu WBVJHeZejiOvgUxujvqP9i6ml9GU/np+PHvE3Mhs++AXZSmsaY5CbXoMygyXow1o u2vjWVutxF1SmkNaRAbww1Vs0XaTlETEY7jVAL2lHwreiiRUZA3JPZJu0MnJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrh0gDI0kS/KxOb5rKsPpTMbh05AwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMhk0tF6Dwqj TFxfTYuIzDWiyJumOmxAour6Jd7au8MZKV6EeaUMGDkVYmblv5J8rH61fmZx02ke CdXh4465LBD0RzH6jZlXI8KXh33cb0XwtFlMfO97NlW5FVFaeybFfpACFgTvVfiX 9ShzlmP21cXh0vMI6aM8vYF9SVWGq09sH+SxVLoasi5KEilbsidV6Gf1iMUJ/5GX MB/pVCFX85GO9NgtWs+br1SWX2itoRD02Ymec/rNDcW5CjtWfiMaP0070eJ3n+eZ a1egxHxoyHU8gPG1eGdiLpu6cot5oxpYEItcdt2e8B8o31l+K2LICsClLWsJKM2J fMJPhQsuHQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:37:08 2026 by rpki-client