$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: ZjqG+TyHDoTaOuxxhROxpMRO9cO4aDnI619Y0yuTpl4= Subject key identifier: AF:58:2C:51:AA:24:15:BB:75:56:7A:A0:D1:5B:38:BB:73:79:77:65 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 50BB62B6932058903469CDA5224F031116A14A6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 17:39:45 +0000 Manifest this update: Fri 17 Apr 2026 17:34:45 +0000 Manifest next update: Sat 18 Apr 2026 20:30:45 +0000 Files and hashes: 1: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 2: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 3: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) 4: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 5: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: WhywjfQr3xrOGqZv1ODClWI1czIDbc4fgxQ4Fom1LJ0=) 6: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 7: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 8: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bb:62:b6:93:20:58:90:34:69:cd:a5:22:4f:03:11:16:a1:4a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Apr 17 17:34:45 2026 GMT Not After : Apr 18 20:30:45 2026 GMT Subject: CN=AF582C51AA2415BB75567AA0D15B38BB73797765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:af:1c:31:89:c9:af:27:bd:4b:70:97:99: 5d:fd:79:ee:b2:23:79:e3:09:f1:6b:c9:fe:8b:c8: e0:65:d2:c0:d4:1a:23:1e:77:c2:c5:c3:a7:36:8e: 9a:8f:7c:1a:9f:69:dc:28:e0:3c:cf:62:33:e5:1f: d5:19:48:19:09:39:69:98:c7:92:e4:8e:1c:2f:10: 43:a8:93:29:5e:d2:6e:db:4e:91:3b:e1:a6:2e:15: e0:6b:47:b9:cd:17:17:c4:37:1f:94:91:0e:36:42: c2:4a:2b:6a:3c:9e:55:fb:42:6c:1c:6a:9e:47:ff: 99:47:5e:87:7e:26:c8:51:d1:13:31:74:07:92:d1: 02:46:e1:fe:e5:c0:33:ce:63:78:e8:ae:04:af:c5: 83:d1:d4:bc:31:ec:e3:1f:c5:ec:af:be:39:2e:0e: 87:0c:20:b9:0c:c7:4e:b4:47:8e:62:74:4f:ec:a3: 15:77:b7:33:89:55:a0:08:dd:16:8a:ca:9d:32:e6: 43:ea:ec:64:7f:a1:e2:19:da:ac:69:51:6e:50:fe: b5:18:86:bc:67:fb:e0:42:34:ee:03:4f:22:fb:85: 3e:c0:cc:d4:37:8f:b9:fb:46:f5:1d:a0:07:aa:5a: 9c:ab:97:b4:e6:bf:3b:e9:5b:88:3f:66:ca:db:28: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:58:2C:51:AA:24:15:BB:75:56:7A:A0:D1:5B:38:BB:73:79:77:65 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:5c:aa:7e:4a:a6:61:75:88:76:6b:4a:09:c8:c9:e2:e9:3d: e9:34:90:a6:17:26:7b:69:64:30:84:1d:f1:29:02:a7:c6:93: 6c:84:95:60:6a:05:4a:1d:2f:32:6e:62:38:58:bb:90:29:dd: e7:0f:bc:42:b7:42:eb:24:b4:7a:fd:9a:a6:71:92:82:ff:0f: c3:4a:e6:98:10:d0:78:e2:e0:ef:03:00:d1:9b:68:9e:53:89: 11:6d:5a:09:9a:b4:c0:d4:85:b5:ea:ef:6c:3a:04:03:49:b5: 6f:75:fd:4f:6e:3a:a0:26:3a:40:94:67:e8:07:cf:74:9e:88: dd:22:25:7e:c0:07:d2:06:dc:49:39:56:24:5d:43:a3:59:cd: 29:f0:9b:cc:2e:16:ab:25:bf:33:b0:eb:9f:62:30:f0:05:1f: 8a:33:e0:df:d0:22:1d:4c:d8:61:ab:e5:67:6a:19:8e:50:4e: e9:e6:72:2b:13:bf:ab:d9:3b:ca:b4:50:57:f7:f1:81:38:c0: bb:9d:fa:14:c5:a7:99:f4:cf:24:97:35:08:0e:f8:a0:87:86: ad:d3:3b:82:bf:4e:34:55:e0:fa:57:44:46:01:57:67:d2:08: 3f:88:2f:50:4b:dd:dc:a2:34:4d:45:23:38:98:bb:1d:26:85: cd:94:3e:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUULtitpMgWJA0ac2lIk8DERahSmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjA0MTcxNzM0NDVaFw0yNjA0MTgyMDMwNDVaMDMxMTAvBgNV BAMTKEFGNTgyQzUxQUEyNDE1QkI3NTU2N0FBMEQxNUIzOEJCNzM3OTc3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMa8cMYnJrye9S3CXmV39ee6y I3njCfFryf6LyOBl0sDUGiMed8LFw6c2jpqPfBqfadwo4DzPYjPlH9UZSBkJOWmY x5LkjhwvEEOokyle0m7bTpE74aYuFeBrR7nNFxfENx+UkQ42QsJKK2o8nlX7Qmwc ap5H/5lHXod+JshR0RMxdAeS0QJG4f7lwDPOY3jorgSvxYPR1Lwx7OMfxeyvvjku DocMILkMx060R45idE/soxV3tzOJVaAI3RaKyp0y5kPq7GR/oeIZ2qxpUW5Q/rUY hrxn++BCNO4DTyL7hT7AzNQ3j7n7RvUdoAeqWpyrl7TmvzvpW4g/ZsrbKOV7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr1gsUaokFbt1Vnqg0Vs4u3N5d2UwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAylyqfkqmYXWI dmtKCcjJ4uk96TSQphcme2lkMIQd8SkCp8aTbISVYGoFSh0vMm5iOFi7kCnd5w+8 QrdC6yS0ev2apnGSgv8Pw0rmmBDQeOLg7wMA0ZtonlOJEW1aCZq0wNSFtervbDoE A0m1b3X9T246oCY6QJRn6AfPdJ6I3SIlfsAH0gbcSTlWJF1Do1nNKfCbzC4WqyW/ M7Drn2Iw8AUfijPg39AiHUzYYavlZ2oZjlBO6eZyKxO/q9k7yrRQV/fxgTjAu536 FMWnmfTPJJc1CA74oIeGrdM7gr9ONFXg+ldERgFXZ9IIP4gvUEvd3KI0TUUjOJi7 HSaFzZQ+mQ== -----END CERTIFICATE-----Generated at Sat Apr 18 06:12:31 2026 by rpki-client