$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft (raw, json) Hash identifier: Adr08MIJwEv0XZIMSwdmT6oaSiRxZsAOETIi7YVEd1c= Subject key identifier: B1:8B:D0:8F:65:55:B5:27:1D:52:B6:49:C1:A0:DA:D3:68:B9:C5:49 Authority key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Certificate issuer: /CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Certificate serial: 75D24456E19F3EB1D02250E5C7A1228A1CB66E36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 05:29:40 +0000 Manifest this update: Fri 17 Apr 2026 05:24:40 +0000 Manifest next update: Sat 18 Apr 2026 08:50:40 +0000 Files and hashes: 1: 3136312e3234382e38342e302f32332d3234203d3e20323032373336.roa (hash: PNOmssIbHxITzlHe7RfPxz+xaJMGLHFeoLuHtEcKzhk=) 2: 3136312e3234382e38342e302f32332d3234203d3e20313937353337.roa (hash: s1FXph5zH5cjrNWCOsz0f6kZpe72KM5uAjTF3GadQzk=) 3: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl (hash: O/eHxQCyy4pUp9NZtLEn6BH3vGr/OJ2cPIp0ZvjRTro=) 4: 3136312e3234382e38342e302f32332d3234203d3e20323134343332.roa (hash: mlTgfa8G8bpPl2rXhrQPOT+Ph5gV0rocuvelVPbWKdk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d2:44:56:e1:9f:3e:b1:d0:22:50:e5:c7:a1:22:8a:1c:b6:6e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Validity Not Before: Apr 17 05:24:40 2026 GMT Not After : Apr 18 08:50:40 2026 GMT Subject: CN=B18BD08F6555B5271D52B649C1A0DAD368B9C549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:ca:79:a2:2b:fb:99:80:28:82:a9:1f:c7: 3a:eb:c1:b9:0c:2e:60:1c:67:ef:cc:d6:84:c2:79: 20:62:c7:b7:92:ba:78:86:5d:a3:c2:fb:dc:37:90: 47:9a:4e:f0:f2:e7:28:1e:3f:d4:b4:07:7d:4c:e0: a0:c1:41:fb:8c:d2:96:32:31:91:27:55:58:08:27: 59:19:de:e1:57:5f:45:b7:61:0f:87:39:11:1c:9b: a5:9c:2c:ff:bf:92:5c:9f:ab:04:93:29:a5:6f:c1: 35:fa:83:23:de:6d:c5:61:be:f6:54:48:76:bf:85: 3f:39:ab:02:93:d4:ae:11:5b:0f:91:49:80:64:9a: 7a:08:31:70:e0:cb:9c:8a:43:ae:73:57:97:fb:9d: d4:f1:48:d9:14:ab:56:c5:95:23:3b:8b:50:94:54: d9:be:d1:66:90:00:41:0d:4f:d1:81:40:90:f6:24: c6:db:1e:41:17:f9:c6:c9:4d:ce:36:58:05:0c:c2: 70:d8:e6:3f:5a:6b:7a:e0:94:96:54:39:80:c3:14: 48:c8:b2:04:fe:d1:68:7c:6e:70:20:b4:56:2f:88: 89:7c:79:f3:d1:99:40:4c:0b:17:1d:25:59:c3:3b: e4:fb:38:8a:19:dd:e2:ea:64:ae:2e:de:ee:17:f9: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8B:D0:8F:65:55:B5:27:1D:52:B6:49:C1:A0:DA:D3:68:B9:C5:49 X509v3 Authority Key Identifier: keyid:8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:dd:3d:03:ad:6e:d4:94:9d:64:91:fe:47:ea:25:13:d4:0a: d9:5d:23:75:f8:20:7b:19:e6:10:be:07:95:c8:0e:e3:57:6f: 39:86:ae:04:fa:b0:7d:c4:e0:98:95:10:8f:76:1b:4d:84:f2: 01:97:f4:f3:5c:51:e7:b0:ec:a6:32:2a:7d:98:94:4f:16:f6: d1:ca:cc:1b:1b:4c:85:b8:1c:a5:85:43:91:be:54:68:8b:8d: b8:e8:87:87:5b:88:1b:b1:79:fc:c2:9a:22:bf:36:c8:c4:ac: 8d:6d:a0:da:d6:d3:ec:ef:e4:aa:58:03:9c:72:9a:66:50:f6: 6e:7d:33:13:e5:49:05:e8:1d:da:cf:56:c5:9f:02:1b:39:d8: 12:39:b0:7e:ef:87:35:2c:e0:7c:0d:9f:16:9d:f0:c2:1a:e6: 93:90:cc:e7:a8:7e:f0:48:34:54:3a:4b:6a:55:3f:0a:9c:c2: 59:c2:12:5e:a6:46:99:9c:22:e2:e2:bd:0d:35:2d:35:f3:5c: 5f:65:6f:f4:ae:34:0d:39:77:16:14:09:99:e9:a7:55:8f:5b: 25:d7:da:94:c4:7c:70:b8:40:98:61:25:4e:a1:b0:19:03:a0: 98:c5:7d:34:63:e7:b2:3d:7b:c3:dc:7a:dd:53:ef:46:bb:64: 9e:d3:85:90 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUddJEVuGfPrHQIlDlx6Eiihy2bjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0 RkJEQkRDODAeFw0yNjA0MTcwNTI0NDBaFw0yNjA0MTgwODUwNDBaMDMxMTAvBgNV BAMTKEIxOEJEMDhGNjU1NUI1MjcxRDUyQjY0OUMxQTBEQUQzNjhCOUM1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCcp5oiv7mYAogqkfxzrrwbkM LmAcZ+/M1oTCeSBix7eSuniGXaPC+9w3kEeaTvDy5ygeP9S0B31M4KDBQfuM0pYy MZEnVVgIJ1kZ3uFXX0W3YQ+HOREcm6WcLP+/klyfqwSTKaVvwTX6gyPebcVhvvZU SHa/hT85qwKT1K4RWw+RSYBkmnoIMXDgy5yKQ65zV5f7ndTxSNkUq1bFlSM7i1CU VNm+0WaQAEENT9GBQJD2JMbbHkEX+cbJTc42WAUMwnDY5j9aa3rglJZUOYDDFEjI sgT+0Wh8bnAgtFYviIl8efPRmUBMCxcdJVnDO+T7OIoZ3eLqZK4u3u4X+QMtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsYvQj2VVtScdUrZJwaDa02i5xUkwHwYDVR0j BBgwFoAUi9g1suIV1obyT7Maiuzu5E+9vcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8xLzhCRDgzNUIyRTIxNUQ2ODZGMjRGQjMxQThBRUNF RUU0NEZCREJEQzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMS84QkQ4MzVCMkUyMTVE Njg2RjI0RkIzMUE4QUVDRUVFNDRGQkRCREM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALt09A61u1JSd ZJH+R+olE9QK2V0jdfggexnmEL4HlcgO41dvOYauBPqwfcTgmJUQj3YbTYTyAZf0 81xR57DspjIqfZiUTxb20crMGxtMhbgcpYVDkb5UaIuNuOiHh1uIG7F5/MKaIr82 yMSsjW2g2tbT7O/kqlgDnHKaZlD2bn0zE+VJBegd2s9WxZ8CGznYEjmwfu+HNSzg fA2fFp3wwhrmk5DM56h+8Eg0VDpLalU/CpzCWcISXqZGmZwi4uK9DTUtNfNcX2Vv 9K40DTl3FhQJmemnVY9bJdfalMR8cLhAmGElTqGwGQOgmMV9NGPnsj17w9x63VPv RrtkntOFkA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:34:34 2026 by rpki-client