$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft File: E44A11245B84A6269EEC23D7321F11971335E4E9.mft (raw, json) Hash identifier: s6K03Ftjt9t6inoJtHpklmML3E9eoIEGYcvo0cSateI= Subject key identifier: 23:C5:2F:0A:5D:49:4C:CD:A5:B5:02:54:87:25:8D:2E:A0:0A:0C:18 Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9 Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9 Certificate serial: 75EDB623599D24473ACCC422DF2A942C66BB1586 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft Manifest number: 7E Signing time: Fri 17 Apr 2026 17:14:43 +0000 Manifest this update: Fri 17 Apr 2026 17:09:43 +0000 Manifest next update: Sat 18 Apr 2026 20:24:43 +0000 Files and hashes: 1: 3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa (hash: hDNA76cCl/eu2zHDP9TTL+Rzz0/Vz/lb2djtF66e8NU=) 2: 3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa (hash: oBqTQzjxDdJDVYMDcw1iUViK03RD7kegj3JWKkhMuac=) 3: 3130332e35322e3130302e302f32322d3234203d3e20313531323631.roa (hash: 8EZ17jclbT2IGhbRMuQy8lRBE2m3sMORWqhkBY0yu6k=) 4: 3130332e35322e3130302e302f32322d3234203d3e203338323833.roa (hash: n3GRVhOmk8CKyJPGNg53Kpj23hTf59riyMVti4k63sI=) 5: 3130332e35322e39362e302f32322d3234203d3e203338323833.roa (hash: gaxkQ5+IhPJezGJE8IOjb6gBOO5PCrNKGIw5bUjVo/g=) 6: 3136302e3230322e3135322e302f32322d3234203d3e20313531323631.roa (hash: jyjGerCaneTopZC135TuSNKfK6fQeXBpHkxk6yrfyHQ=) 7: 3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa (hash: o7e9tePUewuNAGbDQ+wOAdukTYLT3SuX6PiLhVnm+LY=) 8: 34352e3131322e3233322e302f32322d3234203d3e203338323833.roa (hash: haoQyJ5P4rqM2coEsFaVZye1CMpH0XoElAMWHpbOmt0=) 9: 3130332e35322e39362e302f32322d3234203d3e20313531323631.roa (hash: 6Sr5zxN+sqcui1sDSqZT13Qef7p8um1A3VJ01QXlVGY=) 10: 34332e3233302e3132342e302f32322d3234203d3e203338323833.roa (hash: exu0j5nE4RYRldjv5VcTMGWEsaQj0QGRi/oWM+KQ8Uo=) 11: 34352e3131332e31362e302f32332d3234203d3e20313531323631.roa (hash: hC/84JY2KNiAMCH0NriUAl+JqNNd3fAUHMdQjmbmZuY=) 12: 34352e3131332e31362e302f32332d3234203d3e203338323833.roa (hash: zwj7W05cCZNZ/HH9xeavs/nU+8w60xoJ2JucetghUBo=) 13: 34352e3131322e3232382e302f32322d3234203d3e203338323833.roa (hash: TdeHqqMxmmRZjPH4YSKwP+PHpGq+PLI8Kv3/Yf99Br0=) 14: 34332e3233302e3132342e302f32322d3234203d3e20313531323631.roa (hash: hxybO9sNgYYtjIsPosTkG78/DSWBAUObvfNkEZvzt/w=) 15: 3136302e3230322e3135322e302f32322d3234203d3e203338323833.roa (hash: Gbuj8Eq1P/Psmxo7tlSPoAev33mn7isI/eo/NG6gDDo=) 16: 34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa (hash: WKGkuHDtxrYCttJ/8b9xX36FM8cV879DixF6GqYA7Jo=) 17: 34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa (hash: 0PNm1wYORANto7MzptePtdXw0ZdJCb3dg7bB6r8PNeA=) 18: E44A11245B84A6269EEC23D7321F11971335E4E9.crl (hash: wcZxTiEpWovZTJQ7JkHaPz0qmaWh5kQQG1QQ0Q1Zkbw=) 19: 3136302e3230322e3134382e302f32322d3234203d3e203338323833.roa (hash: q5dLJAV8UCn7ytYuMI3M8elwkMP3NRfkDM1Pqk/0Jk8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ed:b6:23:59:9d:24:47:3a:cc:c4:22:df:2a:94:2c:66:bb:15:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9 Validity Not Before: Apr 17 17:09:43 2026 GMT Not After : Apr 18 20:24:43 2026 GMT Subject: CN=23C52F0A5D494CCDA5B5025487258D2EA00A0C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:97:0e:d3:8e:88:21:26:90:a0:46:e3:62: d6:38:2c:4f:b4:58:3b:b2:a7:20:2b:c2:9d:5b:13: aa:40:5f:3b:8a:96:c4:72:75:47:b3:d3:51:d4:25: 75:56:c1:8f:98:3d:7d:83:b3:5c:54:a6:21:40:95: 6e:c0:dc:ee:b9:c8:c3:c4:6f:ec:be:ed:7d:c0:d2: fa:49:b2:8a:3d:dc:64:00:b1:a3:3d:8b:89:e6:2c: 0e:ec:63:75:56:ca:51:8d:82:c2:a1:ba:d8:f5:0a: 27:2f:56:25:91:0c:9c:ec:b7:cb:e8:6c:e8:db:5f: d0:20:58:dc:19:01:b7:8a:b3:3d:17:98:61:ad:4f: 16:88:07:e8:bd:1c:89:c4:bd:1f:95:9c:93:ad:dc: c4:c9:c2:e0:d9:55:8d:cb:bc:b5:e7:fd:f0:69:5c: 31:4d:42:a5:30:6d:1d:5a:31:a4:f2:1c:b0:99:87: e3:a1:44:13:3f:5f:3e:13:ef:74:26:f8:fa:60:f8: 02:05:c8:e7:10:e2:ca:05:21:16:5d:e8:48:48:55: 64:10:9b:5e:72:25:1e:71:a5:a6:d1:63:27:12:cf: d7:b5:6d:6f:97:9a:1c:22:c3:1e:a1:1b:d8:ef:c4: a9:13:a7:9a:03:7d:71:97:29:72:15:99:65:ea:d7: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C5:2F:0A:5D:49:4C:CD:A5:B5:02:54:87:25:8D:2E:A0:0A:0C:18 X509v3 Authority Key Identifier: keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:86:ce:ef:c1:54:6b:01:6b:0a:11:35:62:76:35:7b:25:07: 2d:27:a4:10:5c:39:bd:76:be:e3:34:1c:40:f8:96:bd:7b:08: 5c:b7:33:a7:da:a3:26:be:5d:98:04:49:3c:9c:9b:f1:1e:45: f2:a2:2c:bc:98:d7:d3:cf:e4:51:60:18:e8:2c:40:2b:74:4d: c6:d0:dd:25:a5:bf:71:82:81:e1:18:f3:e7:47:78:e4:33:7b: f3:14:92:52:f1:0d:9d:5b:2a:66:44:f3:3c:90:21:c0:25:48: 81:09:0f:05:4e:bd:77:5e:18:f4:c4:74:50:ec:7b:6d:be:b9: d7:66:88:6a:26:40:3c:ab:ef:20:bc:50:38:14:18:bc:02:1b: 55:b0:7f:8e:2a:f0:f3:e1:f6:f6:ee:c4:a3:28:99:6d:44:4a: cc:a1:1b:cd:35:8a:16:f1:3e:33:1a:fa:9b:1c:0f:9f:a1:3c: 09:13:9a:52:2a:bf:02:99:75:5b:94:2a:f8:a2:b8:f2:8f:86: 7a:27:1b:38:56:78:0f:c5:8b:34:82:53:e5:3f:23:a3:f7:71: fe:04:94:7f:70:0f:ae:93:d4:9b:48:1f:af:80:d4:52:1e:a4: dc:0a:a1:f0:c1:79:7b:57:f2:c0:c1:2c:45:8e:5a:58:a3:cc: 3e:40:29:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUde22I1mdJEc6zMQi3yqULGa7FYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcx MzM1RTRFOTAeFw0yNjA0MTcxNzA5NDNaFw0yNjA0MTgyMDI0NDNaMDMxMTAvBgNV BAMTKDIzQzUyRjBBNUQ0OTRDQ0RBNUI1MDI1NDg3MjU4RDJFQTAwQTBDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyt5cO046IISaQoEbjYtY4LE+0 WDuypyArwp1bE6pAXzuKlsRydUez01HUJXVWwY+YPX2Ds1xUpiFAlW7A3O65yMPE b+y+7X3A0vpJsoo93GQAsaM9i4nmLA7sY3VWylGNgsKhutj1CicvViWRDJzst8vo bOjbX9AgWNwZAbeKsz0XmGGtTxaIB+i9HInEvR+VnJOt3MTJwuDZVY3LvLXn/fBp XDFNQqUwbR1aMaTyHLCZh+OhRBM/Xz4T73Qm+Ppg+AIFyOcQ4soFIRZd6EhIVWQQ m15yJR5xpabRYycSz9e1bW+Xmhwiwx6hG9jvxKkTp5oDfXGXKXIVmWXq11KHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI8UvCl1JTM2ltQJUhyWNLqAKDBgwHwYDVR0j BBgwFoAU5EoRJFuEpiae7CPXMh8RlxM15OkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8wL0U0NEExMTI0NUI4NEE2MjY5RUVDMjNENzMyMUYx MTk3MTMzNUU0RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcxMzM1RTRFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMC9FNDRBMTEyNDVCODRB NjI2OUVFQzIzRDczMjFGMTE5NzEzMzVFNEU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIbO78FUawFr ChE1YnY1eyUHLSekEFw5vXa+4zQcQPiWvXsIXLczp9qjJr5dmARJPJyb8R5F8qIs vJjX08/kUWAY6CxAK3RNxtDdJaW/cYKB4Rjz50d45DN78xSSUvENnVsqZkTzPJAh wCVIgQkPBU69d14Y9MR0UOx7bb6512aIaiZAPKvvILxQOBQYvAIbVbB/jirw8+H2 9u7EoyiZbURKzKEbzTWKFvE+Mxr6mxwPn6E8CROaUiq/Apl1W5Qq+KK48o+Geicb OFZ4D8WLNIJT5T8jo/dx/gSUf3APrpPUm0gfr4DUUh6k3Aqh8MF5e1fywMEsRY5a WKPMPkApJg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:40:19 2026 by rpki-client