$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: s73J2PFXNY46ei4VvK94Q6/l7Xbhyy4uFBax5hLUqTA= Subject key identifier: BE:99:70:0C:E3:6C:A1:03:E4:30:DD:D8:C3:89:81:FD:7F:9A:70:6F Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 33BB58C3FCD22DED990FA744786F0589AE750427 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 14:44:43 +0000 Manifest this update: Fri 17 Apr 2026 14:39:43 +0000 Manifest next update: Sat 18 Apr 2026 15:20:43 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: kKnGh0MnJDOt2KpX2ddJDnJRM9DOLiPtzaTXZcfyFHc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bb:58:c3:fc:d2:2d:ed:99:0f:a7:44:78:6f:05:89:ae:75:04:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Apr 17 14:39:43 2026 GMT Not After : Apr 18 15:20:43 2026 GMT Subject: CN=BE99700CE36CA103E430DDD8C38981FD7F9A706F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:77:19:e5:92:c1:c3:ae:30:83:5b:11:d1:93: 2c:5c:b4:6f:b7:8e:74:ba:11:96:54:81:5f:bb:ae: 20:59:e6:f8:9d:5e:72:31:0f:17:63:ba:d5:71:68: 29:65:36:a1:6a:9c:5a:35:15:dc:bd:35:e9:aa:de: e5:40:ac:a1:4c:ad:3e:32:2b:62:74:60:d9:e3:44: 05:3e:2a:3e:83:57:70:bb:28:29:80:ce:fe:a3:37: 62:2f:90:18:da:e6:0e:06:a2:60:37:f0:2d:8a:e9: 17:c7:66:32:95:05:dc:8b:00:ee:23:38:30:fd:44: 71:f5:d8:e0:d4:6c:fb:86:c9:4a:c4:fe:69:4f:2a: 90:d1:05:11:d4:83:1c:7b:32:e4:88:ae:dc:1d:23: f3:9a:1a:ea:47:df:26:3c:12:c7:23:0d:43:da:72: 03:83:38:76:d3:fc:c9:cb:81:09:b8:a3:30:47:32: 75:1d:7f:cf:7e:1d:d1:5e:34:3b:f2:bd:35:29:e2: 71:2e:4c:8f:8c:23:d3:75:ee:a7:83:ec:6a:1b:18: 5c:65:68:6a:0a:93:cb:ff:03:ee:f9:a0:64:24:19: cf:cc:ce:b9:da:7c:08:d9:fc:7e:c7:fd:11:88:1a: 4d:34:fa:31:ec:f8:7a:6c:6f:83:9b:08:3f:2b:56: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:99:70:0C:E3:6C:A1:03:E4:30:DD:D8:C3:89:81:FD:7F:9A:70:6F X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:91:24:b4:53:ae:8f:d3:79:67:52:17:ea:c6:2e:94:d9:11: da:79:b2:ad:4b:64:1b:9f:58:1e:e7:8a:75:7c:79:19:47:b9: 5b:94:bb:d4:0b:ed:48:3b:85:3f:a8:59:a8:05:9e:c9:40:06: 7a:87:db:a8:a3:a0:dc:ce:ca:92:77:66:77:02:51:7e:52:37: 95:e8:a3:a5:d0:06:34:9e:ef:8e:96:7b:1d:25:5f:a4:a0:b3: ea:6c:20:dc:e3:06:62:1c:c8:99:b0:4b:43:72:0b:f5:35:51: ed:83:bc:3c:6b:71:e1:94:bd:38:0c:a5:ed:62:28:ef:3c:81: 8b:90:e1:07:4f:f3:0c:da:3d:90:cd:14:fb:20:e1:c7:fe:f8: 4e:66:a8:19:82:f6:19:e6:91:0a:bf:73:bd:fc:d2:5e:11:41: 9e:ef:b4:14:f3:ee:ac:84:2b:08:7c:19:b2:2c:05:f7:ff:e1: c9:fa:fb:e9:c0:33:d3:88:62:d0:11:01:d8:40:5b:02:c1:70: 9c:41:a5:c5:a5:e8:ba:73:8c:b9:69:0e:9a:8c:7e:1d:68:f9: f4:b4:55:d4:f6:c4:75:76:a6:b4:c0:7f:dc:48:e6:33:03:99: 1d:a5:ab:2e:5e:13:ed:83:43:b6:36:3e:f7:63:a1:47:23:a0: 4c:82:7e:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM7tYw/zSLe2ZD6dEeG8Fia51BCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjA0MTcxNDM5NDNaFw0yNjA0MTgxNTIwNDNaMDMxMTAvBgNV BAMTKEJFOTk3MDBDRTM2Q0ExMDNFNDMwREREOEMzODk4MUZEN0Y5QTcwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhdxnlksHDrjCDWxHRkyxctG+3 jnS6EZZUgV+7riBZ5vidXnIxDxdjutVxaCllNqFqnFo1Fdy9Nemq3uVArKFMrT4y K2J0YNnjRAU+Kj6DV3C7KCmAzv6jN2IvkBja5g4GomA38C2K6RfHZjKVBdyLAO4j ODD9RHH12ODUbPuGyUrE/mlPKpDRBRHUgxx7MuSIrtwdI/OaGupH3yY8EscjDUPa cgODOHbT/MnLgQm4ozBHMnUdf89+HdFeNDvyvTUp4nEuTI+MI9N17qeD7GobGFxl aGoKk8v/A+75oGQkGc/MzrnafAjZ/H7H/RGIGk00+jHs+Hpsb4ObCD8rVsZfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvplwDONsoQPkMN3Yw4mB/X+acG8wHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0pEktFOuj9N5 Z1IX6sYulNkR2nmyrUtkG59YHueKdXx5GUe5W5S71AvtSDuFP6hZqAWeyUAGeofb qKOg3M7KkndmdwJRflI3leijpdAGNJ7vjpZ7HSVfpKCz6mwg3OMGYhzImbBLQ3IL 9TVR7YO8PGtx4ZS9OAyl7WIo7zyBi5DhB0/zDNo9kM0U+yDhx/74TmaoGYL2GeaR Cr9zvfzSXhFBnu+0FPPurIQrCHwZsiwF9//hyfr76cAz04hi0BEB2EBbAsFwnEGl xaXounOMuWkOmox+HWj59LRV1PbEdXamtMB/3EjmMwOZHaWrLl4T7YNDtjY+92Oh RyOgTIJ+cw== -----END CERTIFICATE-----Generated at Sat Apr 18 04:59:51 2026 by rpki-client