$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft File: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft (raw, json) Hash identifier: eUuuvqNvXQGmcPZh3I6txv/O0NKBsLG7cD6QNP/tEyQ= Subject key identifier: F2:0A:D6:49:FC:BA:37:4E:D4:00:19:22:25:B5:A5:1D:F6:94:C2:84 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 2D4A3CBBB6E68D5088B3A1255C1640D1448786AC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 03:39:39 +0000 Manifest this update: Fri 17 Apr 2026 03:34:39 +0000 Manifest next update: Sat 18 Apr 2026 06:01:39 +0000 Files and hashes: 1: 3130332e322e3135372e302f32342d3234203d3e20313436373632.roa (hash: 0lnVRbIs/e81a/ombdJYKhr/uI3gJ/7kYg5290LJFdI=) 2: 3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa (hash: euPUAsBr1t7QdXoj1ahahda0S3VUgs4yGGVvDrZpqVI=) 3: 3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa (hash: jV0UQMUSzuX46lyxU9Q1TIad3C+g694F7rPF2x053cs=) 4: 3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa (hash: DfoNTHHHPPQvz5ij9Tse9a3EdCP3ruj/rqOSevyve2I=) 5: 3131342e3131312e3137392e302f32342d3234203d3e20313436373632.roa (hash: C5mjk+1CG6r0bzt4b18un9KgRI/Xnp9P0cDH3RA0Hy4=) 6: 3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa (hash: UN7Qnirh/2XzM0qJ+K46LJtDxxzQ/o9T5wdOdPQYwgw=) 7: 3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa (hash: Yd2hPJhMjdqd3tfkS6BhuAHKfqEvDiNjI/wreHyMlDM=) 8: 3130332e322e3135392e302f32342d3234203d3e20313436373632.roa (hash: 9g0xW7AmpZhtlTL3yKRzbCzVa8h7KeJrq49B9jPei30=) 9: 3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa (hash: C7VfQ5RZhf5OnAeKfKA9NgZGlrBddmIBCn4gvV8/SvE=) 10: 323430303a356636303a3a2f33322d3332203d3e20313436373632.roa (hash: 2zf8ptIuNWz/ytNogvE5KsEgpil1bYy9wjHUWvs6PfU=) 11: 3130332e322e3135382e302f32342d3234203d3e20313436373632.roa (hash: KmAN9co8g8woRBt62qGsshlijcSmsXQ7J65gVIPP3WY=) 12: 3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa (hash: PPgkSPwD1+U5stprn1D0dN8dTyE3ZUS4cSC5pqU8EBA=) 13: 3131342e3131312e3137362e302f32302d3230203d3e20313436373632.roa (hash: eoYlD0RAPkGnyRtlK8iXT60W+N/fDNkGjE7hNOcXIoA=) 14: 3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa (hash: 7MkVhAQ/ZLkwVh+NMEQgiOXhv9KYJmUNU5ot6ZWOSOU=) 15: 323430303a356636303a3a2f33322d3332203d3e20313436373631.roa (hash: DyboZUW+ZsHiG0TQ2QlXg9N1Udo8DukmD2LIGfkwL6w=) 16: 3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa (hash: d3dxWmoPXxo1nO5RHMRT4MjQS31UKEZUCxDP0qx+gPI=) 17: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl (hash: iznCHoao0fbj8ZB9Crv5Eg/RtqbxN3lZchxjs9GHruM=) 18: 3131342e3131312e3138332e302f32342d3234203d3e20313436373632.roa (hash: EI1qa8y78SWxMil8dnhbXcjeLjq6LDygLF5SIMrC0BA=) 19: 3131342e3131312e3138362e302f32342d3234203d3e20313436373632.roa (hash: 14KdTLxuOOqp83g/G/Ys/4m/YS+CsQCpCaT1Ppveym0=) 20: 3130332e3138332e32362e302f32332d3233203d3e20313436373631.roa (hash: n2yJFDGxv025XpKqavpDIa1XF9Rdfe1uA9zzY9nQ+sg=) 21: 3131342e3131312e3139312e302f32342d3234203d3e2034383132.roa (hash: 0Tz94FSnf8noh/jg+K+xGNe+oMRaQWPqA1KdljfT0sI=) 22: 3130332e322e3135362e302f32342d3234203d3e20313436373632.roa (hash: ZT6T2FjjqBr9ft4J2Y3eyVRDUROWQVDrmyy7K6YoBoI=) 23: 3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa (hash: VC+9ee95pNmMQJysCZRaAUqZrztwr1iHfxKQUtLwzeU=) 24: 3131342e3131312e3137382e302f32342d3234203d3e20313436373632.roa (hash: KonUV/ojd1MNml5rROTSxf3fIHa2czkDZZNwNKw8A44=) 25: 3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa (hash: G3+LeensaDFmePqko03P1I/U70ppCM1tFWwCVpmhfxk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4a:3c:bb:b6:e6:8d:50:88:b3:a1:25:5c:16:40:d1:44:87:86:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Apr 17 03:34:39 2026 GMT Not After : Apr 18 06:01:39 2026 GMT Subject: CN=F20AD649FCBA374ED400192225B5A51DF694C284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:a8:83:ba:32:97:c7:d0:62:fd:6c:ff:d9: 93:b7:ad:34:f9:ea:95:f6:af:37:58:b9:29:5c:72: e8:79:c7:34:ac:ad:18:b4:d9:e7:87:58:65:85:9b: cf:48:05:6e:49:3c:56:33:85:3b:30:e1:c9:1a:a9: 6d:0d:7a:be:f8:ba:52:35:e8:93:1d:05:8d:6c:06: 1e:b1:71:5e:7f:70:8c:b3:2c:10:98:0f:e8:f8:5f: 25:7b:35:99:34:15:e2:fe:44:60:0b:d6:ab:c3:63: 77:18:bd:4c:c3:f9:9d:6b:d5:67:07:ca:9a:27:5a: e6:b9:a5:61:ea:11:37:7a:00:65:48:90:ed:84:2d: 57:d9:25:3a:87:b2:2d:0f:c0:80:b6:a8:df:0f:76: 7a:95:5d:19:19:cd:49:a9:97:14:bb:47:e7:d5:ea: e1:9a:c7:01:fb:04:e9:ab:d4:0c:ea:e3:53:1b:82: ae:d4:39:a7:b8:13:32:bc:7e:74:d1:92:18:53:e0: 85:14:83:e9:2b:c3:55:27:25:cd:0a:98:45:3d:5d: 0e:95:fd:cf:07:7d:da:e4:87:5d:04:e3:62:72:b9: 93:1b:1c:27:25:1c:03:d9:ee:25:66:d0:0c:92:81: 12:45:4a:e1:94:16:0d:cc:b0:71:1d:39:73:0a:3c: 7f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0A:D6:49:FC:BA:37:4E:D4:00:19:22:25:B5:A5:1D:F6:94:C2:84 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:88:cb:65:a2:26:e7:a6:4e:f4:fb:82:23:7b:ed:df:a8:9c: 4b:56:09:35:33:f5:9b:42:c7:9c:92:a6:c0:5c:26:5d:44:b2: 6c:e2:a0:94:82:cc:39:3d:6c:55:c6:2e:f4:1c:30:a0:07:c0: 27:6f:f0:95:ca:7c:5f:73:3d:b8:87:5b:a5:79:54:0e:7e:c6: 17:4c:86:48:33:f0:c4:d6:c7:ce:1e:f9:70:0e:9b:5c:78:6c: 21:69:cc:9e:27:b8:c7:33:d3:ce:32:bd:c0:c3:20:a1:73:7c: 76:48:73:6b:4f:9e:0b:5f:b8:98:fb:70:5e:9c:15:a3:92:55: de:a3:4d:06:c7:db:1e:8d:17:c5:98:ea:22:bd:5d:b0:38:5b: ec:03:16:38:02:1f:01:3d:e2:b5:52:7c:74:f1:91:85:01:e5: 02:5b:8b:1b:08:71:af:23:33:e5:45:2c:22:d5:22:6a:02:c4: d3:2f:a6:8f:e2:26:1d:69:bc:98:6a:7c:16:17:97:f1:30:ff: 9b:52:1d:8b:1a:20:9c:20:b6:c2:1c:35:57:7e:2c:7e:fb:65: 42:6d:03:95:99:1d:36:52:a9:90:a2:0e:d0:01:14:05:25:3c: 84:02:32:46:16:f1:42:9a:ad:d0:7a:3a:70:4d:7a:69:52:46: c2:8a:64:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULUo8u7bmjVCIs6ElXBZA0USHhqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjA0MTcwMzM0MzlaFw0yNjA0MTgwNjAxMzlaMDMxMTAvBgNV BAMTKEYyMEFENjQ5RkNCQTM3NEVENDAwMTkyMjI1QjVBNTFERjY5NEMyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZKiDujKXx9Bi/Wz/2ZO3rTT5 6pX2rzdYuSlccuh5xzSsrRi02eeHWGWFm89IBW5JPFYzhTsw4ckaqW0Ner74ulI1 6JMdBY1sBh6xcV5/cIyzLBCYD+j4XyV7NZk0FeL+RGAL1qvDY3cYvUzD+Z1r1WcH yponWua5pWHqETd6AGVIkO2ELVfZJTqHsi0PwIC2qN8PdnqVXRkZzUmplxS7R+fV 6uGaxwH7BOmr1Azq41Mbgq7UOae4EzK8fnTRkhhT4IUUg+krw1UnJc0KmEU9XQ6V /c8Hfdrkh10E42JyuZMbHCclHAPZ7iVm0AySgRJFSuGUFg3MsHEdOXMKPH8zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8grWSfy6N07UABkiJbWlHfaUwoQwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczMjQwMzUvMC9EMzVGOTBEOEE3M0ZG QzE2MEEzMTBBOTZCQzAwQkVBQjdEQTI5MTFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYjLZaIm56ZO 9PuCI3vt36icS1YJNTP1m0LHnJKmwFwmXUSybOKglILMOT1sVcYu9BwwoAfAJ2/w lcp8X3M9uIdbpXlUDn7GF0yGSDPwxNbHzh75cA6bXHhsIWnMnie4xzPTzjK9wMMg oXN8dkhza0+eC1+4mPtwXpwVo5JV3qNNBsfbHo0XxZjqIr1dsDhb7AMWOAIfAT3i tVJ8dPGRhQHlAluLGwhxryMz5UUsItUiagLE0y+mj+ImHWm8mGp8FheX8TD/m1Id ixognCC2whw1V34sfvtlQm0DlZkdNlKpkKIO0AEUBSU8hAIyRhbxQpqt0Ho6cE16 aVJGwopkFg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:29 2026 by rpki-client