$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: 4jDvQuRjE0cp62Li0MJW+RpxaQp6yOXmZsIzEhmsr+U= Subject key identifier: 6A:0D:01:8A:D3:8A:62:9F:ED:31:AB:B9:A8:EF:E8:A9:CE:76:67:71 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 169CEAD1774223AB82B1141FF6F3361E3EA08FD2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 12:49:43 +0000 Manifest this update: Fri 17 Apr 2026 12:44:43 +0000 Manifest next update: Sat 18 Apr 2026 13:49:43 +0000 Files and hashes: 1: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: OJzS/9eg/DJNm8O424DvTgoU8ch9MXg5UcJrBAwAUUc=) 2: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) 3: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9c:ea:d1:77:42:23:ab:82:b1:14:1f:f6:f3:36:1e:3e:a0:8f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Apr 17 12:44:43 2026 GMT Not After : Apr 18 13:49:43 2026 GMT Subject: CN=6A0D018AD38A629FED31ABB9A8EFE8A9CE766771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:69:11:31:a4:f2:ea:9c:4b:0d:55:b9:b3: f5:7b:0c:68:37:d5:b4:d2:0b:06:06:86:e8:27:55: 0d:9d:6b:72:04:b1:fb:8d:6d:f9:e4:9c:99:29:1c: 08:1e:76:e5:8f:1c:1b:01:8c:cf:ae:20:96:ec:d7: a2:27:87:1d:00:1b:71:fc:aa:95:a1:87:97:d5:41: e3:17:48:46:60:1d:a3:d4:20:de:af:b3:90:a6:34: 3a:e5:83:eb:48:59:5a:11:22:4a:80:04:28:c7:3e: 0e:67:05:14:3b:29:fc:b6:86:ff:20:59:4f:56:67: db:33:f1:e8:3e:89:2a:30:67:a1:3c:51:dc:29:4a: 92:8b:7e:01:ce:9e:9e:b0:d7:8e:1b:db:68:3e:ef: 1e:58:a0:f6:1e:80:80:7a:55:6e:42:1e:b7:e9:fa: 0a:37:be:a6:1c:fe:07:1f:53:7a:63:85:b8:d9:b5: 31:60:8a:3e:1b:39:b7:fd:e4:e8:95:bd:4b:51:ec: 67:3b:fc:ba:9e:82:3d:27:b4:2d:38:f8:95:dc:cd: 6e:55:9a:cd:b3:ed:fe:f9:42:15:19:07:e9:96:a3: d8:f4:24:31:3d:82:96:b5:c9:c6:e4:48:34:32:74: a1:94:73:ed:c5:23:93:6e:ac:b2:59:f7:58:47:30: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0D:01:8A:D3:8A:62:9F:ED:31:AB:B9:A8:EF:E8:A9:CE:76:67:71 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:60:6d:7b:16:0a:d2:98:92:4a:af:3c:80:98:2b:95:14:45: c9:0d:66:54:95:47:08:89:60:93:f5:e3:34:a3:b0:a2:cb:88: db:22:db:c4:27:42:95:2c:1e:b3:ea:19:a0:64:a1:48:af:81: ec:42:90:bd:5d:ad:ef:5d:49:81:f2:30:48:bd:43:61:11:63: 8c:08:3b:9e:9a:43:7f:dc:80:e7:43:67:56:31:8a:9f:e2:7a: c6:dd:83:07:14:f8:f5:c1:66:8c:a4:e9:59:cd:e4:74:6f:a0: ab:37:b5:8c:d3:6e:be:e2:2c:ba:75:52:97:e7:d0:20:7b:d8: 0c:1b:8c:56:69:ea:e5:5d:4f:90:ee:f4:d5:11:84:4b:0d:d8: 1f:24:2d:e9:f7:98:ad:37:2d:c0:d5:b8:d7:aa:f5:58:8e:39: 79:97:cd:27:d4:4c:11:8d:81:72:7c:f3:0e:ee:40:08:b7:93: db:1c:a6:e1:a6:d8:02:9c:23:bb:29:03:88:b7:7d:ff:25:4c: c4:41:9a:db:31:01:21:dc:fe:0a:17:c8:07:fc:6e:fe:aa:0f: e3:11:89:e3:e5:99:28:e1:1a:12:58:a6:e7:90:6d:97:a5:b1: 07:be:3c:64:a1:d7:14:58:9d:b6:ef:36:8d:40:03:c2:e4:6d: 5f:fd:4c:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFpzq0XdCI6uCsRQf9vM2Hj6gj9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjA0MTcxMjQ0NDNaFw0yNjA0MTgxMzQ5NDNaMDMxMTAvBgNV BAMTKDZBMEQwMThBRDM4QTYyOUZFRDMxQUJCOUE4RUZFOEE5Q0U3NjY3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+2kRMaTy6pxLDVW5s/V7DGg3 1bTSCwYGhugnVQ2da3IEsfuNbfnknJkpHAgeduWPHBsBjM+uIJbs16Inhx0AG3H8 qpWhh5fVQeMXSEZgHaPUIN6vs5CmNDrlg+tIWVoRIkqABCjHPg5nBRQ7Kfy2hv8g WU9WZ9sz8eg+iSowZ6E8UdwpSpKLfgHOnp6w144b22g+7x5YoPYegIB6VW5CHrfp +go3vqYc/gcfU3pjhbjZtTFgij4bObf95OiVvUtR7Gc7/Lqegj0ntC04+JXczW5V ms2z7f75QhUZB+mWo9j0JDE9gpa1ycbkSDQydKGUc+3FI5NurLJZ91hHMBEHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUag0BitOKYp/tMau5qO/oqc52Z3EwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmBtexYK0piS Sq88gJgrlRRFyQ1mVJVHCIlgk/XjNKOwosuI2yLbxCdClSwes+oZoGShSK+B7EKQ vV2t711JgfIwSL1DYRFjjAg7nppDf9yA50NnVjGKn+J6xt2DBxT49cFmjKTpWc3k dG+gqze1jNNuvuIsunVSl+fQIHvYDBuMVmnq5V1PkO701RGESw3YHyQt6feYrTct wNW416r1WI45eZfNJ9RMEY2BcnzzDu5ACLeT2xym4abYApwjuykDiLd9/yVMxEGa 2zEBIdz+ChfIB/xu/qoP4xGJ4+WZKOEaElim55Btl6WxB748ZKHXFFidtu82jUAD wuRtX/1MfA== -----END CERTIFICATE-----Generated at Sat Apr 18 04:39:07 2026 by rpki-client