$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft File: E9EED0187DAE9147812C7B516912D58FD976B964.mft (raw, json) Hash identifier: VSs7C7IdOe5dBnDNJZAmII0kryEs0WjlANP4wPSShq4= Subject key identifier: A8:14:4B:9C:65:B1:08:73:F2:3B:BF:01:E4:D0:B3:4E:DA:4F:1B:F2 Authority key identifier: E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64 Certificate issuer: /CN=E9EED0187DAE9147812C7B516912D58FD976B964 Certificate serial: 5D289E06E8AD0A07781AEF2FC3428DBA37DC9381 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 20:54:48 +0000 Manifest this update: Fri 17 Apr 2026 20:49:48 +0000 Manifest next update: Sat 18 Apr 2026 22:31:48 +0000 Files and hashes: 1: 3135372e31352e37342e302f32332d3236203d3e20313436373837.roa (hash: 2XzrUWYx7D4ETPvy+LhQ2cT4hHATIRgjJWZ0TgYr+PY=) 2: E9EED0187DAE9147812C7B516912D58FD976B964.crl (hash: roI/MBpL0MZxz6qXzyumK1EipoQZcOZB+DKTfhj4C3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:28:9e:06:e8:ad:0a:07:78:1a:ef:2f:c3:42:8d:ba:37:dc:93:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9EED0187DAE9147812C7B516912D58FD976B964 Validity Not Before: Apr 17 20:49:48 2026 GMT Not After : Apr 18 22:31:48 2026 GMT Subject: CN=A8144B9C65B10873F23BBF01E4D0B34EDA4F1BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:b7:53:08:01:ff:4c:9d:f6:e6:5a:05:5d: ca:8e:5a:8e:a5:99:fd:ee:c9:93:fa:c1:17:f8:83: 0b:56:b4:f2:d1:4b:55:a7:2b:b7:23:cf:c4:7f:50: 2d:8f:57:8c:a8:02:4d:98:45:04:ea:8c:21:b4:be: fe:b2:87:79:01:88:27:5c:db:9c:1a:8b:09:7f:30: ff:94:4a:f5:59:9c:83:de:76:0a:85:7b:1b:92:92: cd:36:ca:c5:02:0a:c2:2d:a1:d4:bd:7d:5b:a2:34: 19:f6:1c:1f:77:17:7d:54:97:e3:91:f5:72:b3:8a: 92:3d:24:43:be:97:37:ab:7a:fc:57:52:ec:da:3a: 04:de:4f:cc:4f:b4:da:c5:99:25:5f:cc:2a:9e:4e: 58:2d:96:fe:54:4b:99:ad:33:6a:ff:05:73:72:95: 82:a1:7c:a8:db:0f:42:b8:4d:1f:65:81:a4:58:8a: 81:b4:eb:05:36:b0:30:0b:dc:6e:a0:74:86:0b:c6: 90:ea:6c:c5:8a:9c:e7:52:d8:ab:87:db:ed:ca:59: c2:40:af:84:e8:02:ad:53:04:f6:86:66:53:61:5c: ac:9c:25:58:98:0c:a9:c3:8f:70:e3:0c:95:4c:54: 56:42:5c:dc:3b:5d:e8:8a:b3:2f:6f:cb:32:3e:4e: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:4B:9C:65:B1:08:73:F2:3B:BF:01:E4:D0:B3:4E:DA:4F:1B:F2 X509v3 Authority Key Identifier: keyid:E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:bb:e8:83:75:2c:d7:66:5a:81:4a:5d:6c:cf:1f:86:04:ab: fa:bb:b5:99:62:37:0d:af:b0:89:87:67:84:ae:da:0a:28:41: ca:4d:e6:c0:61:6c:22:a5:ec:be:70:8f:d8:90:34:1d:61:de: e9:c9:c2:57:db:34:9a:ed:6a:e2:86:8c:6d:1c:6b:73:a1:8e: d5:07:27:8b:0b:ad:10:d4:6c:f0:4f:2d:7d:8e:f1:69:8a:a4: ca:4b:27:69:dc:4a:3a:f5:5b:55:fc:81:21:ac:72:09:93:c8: d2:6a:63:11:ab:5c:41:06:df:c0:a7:16:4f:d9:67:82:56:b5: 95:7a:c8:43:a9:40:56:34:67:be:b2:4f:98:ef:05:d9:82:5e: d0:20:c0:39:00:81:a7:18:a7:03:b1:0e:cc:20:a7:18:96:f6: 6c:1c:cf:e5:bb:0e:21:d1:9a:fb:2b:7a:2c:84:ee:f6:ea:47: ea:f4:af:c3:d3:00:c0:1e:4e:f6:60:b7:b8:98:7b:ce:51:8a: fa:e2:c7:a6:80:75:f1:98:60:5e:86:24:0c:ff:b4:25:40:b1: c6:a0:50:cb:83:30:4e:6b:66:cc:16:5c:33:01:bf:4a:7e:2f: 91:a2:a6:9c:0f:4a:92:8c:4e:a7:c6:39:c7:5c:9b:bb:63:f5: 47:27:0f:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXSieBuitCgd4Gu8vw0KNujfck4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRUQwMTg3REFFOTE0NzgxMkM3QjUxNjkxMkQ1OEZE OTc2Qjk2NDAeFw0yNjA0MTcyMDQ5NDhaFw0yNjA0MTgyMjMxNDhaMDMxMTAvBgNV BAMTKEE4MTQ0QjlDNjVCMTA4NzNGMjNCQkYwMUU0RDBCMzRFREE0RjFCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+G7dTCAH/TJ325loFXcqOWo6l mf3uyZP6wRf4gwtWtPLRS1WnK7cjz8R/UC2PV4yoAk2YRQTqjCG0vv6yh3kBiCdc 25waiwl/MP+USvVZnIPedgqFexuSks02ysUCCsItodS9fVuiNBn2HB93F31Ul+OR 9XKzipI9JEO+lzerevxXUuzaOgTeT8xPtNrFmSVfzCqeTlgtlv5US5mtM2r/BXNy lYKhfKjbD0K4TR9lgaRYioG06wU2sDAL3G6gdIYLxpDqbMWKnOdS2KuH2+3KWcJA r4ToAq1TBPaGZlNhXKycJViYDKnDj3DjDJVMVFZCXNw7XeiKsy9vyzI+TgGnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqBRLnGWxCHPyO78B5NCzTtpPG/IwHwYDVR0j BBgwFoAU6e7QGH2ukUeBLHtRaRLVj9l2uWQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8xL0U5RUVEMDE4N0RBRTkxNDc4MTJDN0I1MTY5MTJE NThGRDk3NkI5NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTlFRUQwMTg3REFFOTE0NzgxMkM3QjUxNjkxMkQ1OEZEOTc2Qjk2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMS9FOUVFRDAxODdEQUU5 MTQ3ODEyQzdCNTE2OTEyRDU4RkQ5NzZCOTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLvog3Us12Za gUpdbM8fhgSr+ru1mWI3Da+wiYdnhK7aCihByk3mwGFsIqXsvnCP2JA0HWHe6cnC V9s0mu1q4oaMbRxrc6GO1QcniwutENRs8E8tfY7xaYqkyksnadxKOvVbVfyBIaxy CZPI0mpjEatcQQbfwKcWT9lngla1lXrIQ6lAVjRnvrJPmO8F2YJe0CDAOQCBpxin A7EOzCCnGJb2bBzP5bsOIdGa+yt6LITu9upH6vSvw9MAwB5O9mC3uJh7zlGK+uLH poB18ZhgXoYkDP+0JUCxxqBQy4MwTmtmzBZcMwG/Sn4vkaKmnA9KkoxOp8Y5x1yb u2P1RycPEw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:20 2026 by rpki-client