$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: 20tE+zagnhIO+Qx8f/QqlzrUaxvupCzDXiIMU6C2mvE= Subject key identifier: 5C:94:69:A4:F5:AF:01:8A:FC:28:FA:A5:B8:2A:EF:3A:8A:BF:65:B3 Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 09AF34219E099FC3F3E910236B219237A86D33F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 16:14:43 +0000 Manifest this update: Fri 17 Apr 2026 16:09:43 +0000 Manifest next update: Sat 18 Apr 2026 16:15:43 +0000 Files and hashes: 1: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: Uz+rOKtfgxHVxenfDs1h0ZvCrm+C9KoBlMf2zHTEDzk=) 2: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) 3: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:af:34:21:9e:09:9f:c3:f3:e9:10:23:6b:21:92:37:a8:6d:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Apr 17 16:09:43 2026 GMT Not After : Apr 18 16:15:43 2026 GMT Subject: CN=5C9469A4F5AF018AFC28FAA5B82AEF3A8ABF65B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:d3:af:33:7f:3e:3d:ab:c3:6a:75:09:2d: fc:93:58:4b:ef:f3:6e:1d:fc:0e:ae:01:8d:71:2a: 4a:a8:9e:08:ba:d4:6f:2b:6f:6e:e1:ea:3a:00:ff: fd:77:14:4d:2e:69:65:18:d3:91:44:4a:93:4a:ad: 97:fa:13:02:b4:d6:32:06:7a:38:61:d9:60:45:da: d6:c7:9b:a9:7e:2d:c8:75:d1:25:55:01:2f:f6:90: 4a:fe:84:de:a6:24:5c:00:93:c1:1e:eb:70:b7:26: 3d:7a:6a:73:cd:67:fb:c1:d7:9f:7b:78:5d:0c:ab: ad:7d:6e:06:3a:c4:f8:b0:c1:af:73:d4:63:29:30: dd:84:08:6d:1c:4b:93:56:bc:8a:e0:4d:93:f1:3e: 69:39:9b:b7:0e:21:be:c0:3b:89:de:2e:25:91:31: 67:38:c2:4e:5d:fa:c3:66:da:6f:3e:2f:6a:61:af: fc:8f:75:83:43:11:04:34:50:44:b8:16:c4:aa:31: 3d:12:3a:6f:43:07:dd:4d:0c:6d:3d:74:30:ec:cb: 8f:e9:19:cf:dc:09:8e:02:b1:db:5b:fa:fc:d8:f6: 72:62:44:5e:be:e7:32:3e:5b:25:d6:13:4c:12:64: 19:c1:27:82:3f:70:29:5c:19:f1:3d:7f:ce:86:b7: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:94:69:A4:F5:AF:01:8A:FC:28:FA:A5:B8:2A:EF:3A:8A:BF:65:B3 X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0c:47:5d:cf:2e:fd:a0:c1:a6:d1:5a:18:b0:89:d6:11:54: 53:db:1a:25:ca:e5:42:80:94:3a:77:ba:0c:11:29:a8:b6:3b: d6:ac:42:96:00:d6:f0:7a:a7:2d:f0:dc:9d:2e:4f:2b:39:a3: 45:42:50:f0:8b:2f:a5:1d:0c:1b:a3:e2:32:de:87:e8:15:31: e9:21:c8:1e:8b:56:bb:20:2c:61:71:aa:e9:c0:fa:61:69:58: ca:ff:c1:08:1e:f7:59:a7:25:1b:6a:96:db:35:f1:98:98:4a: d3:ad:cd:46:76:05:52:29:41:b5:b6:af:66:93:ed:d6:ce:5b: dc:69:7a:e5:76:a0:0f:79:a7:62:75:ad:c0:44:64:30:04:73: 58:92:af:ac:94:2c:74:a2:40:53:e4:75:aa:17:50:7f:e2:ff: 19:5d:18:f0:1f:8a:f7:17:2a:60:be:7d:a2:32:66:d5:c6:2e: 06:b8:15:41:1e:67:18:06:61:bb:a6:23:9a:27:2f:1b:eb:16: 18:cf:99:16:b4:0c:99:b2:50:d9:a2:93:2c:da:32:1a:67:20: 1d:94:69:a9:b9:02:1f:03:19:b6:7f:ca:a5:9a:27:cf:55:ca: a8:ce:32:b5:ca:e0:4c:d8:51:9c:7d:71:28:7a:0e:94:4a:8c: af:64:ee:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCa80IZ4Jn8Pz6RAjayGSN6htM/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjA0MTcxNjA5NDNaFw0yNjA0MTgxNjE1NDNaMDMxMTAvBgNV BAMTKDVDOTQ2OUE0RjVBRjAxOEFGQzI4RkFBNUI4MkFFRjNBOEFCRjY1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuNOvM38+PavDanUJLfyTWEvv 824d/A6uAY1xKkqongi61G8rb27h6joA//13FE0uaWUY05FESpNKrZf6EwK01jIG ejhh2WBF2tbHm6l+Lch10SVVAS/2kEr+hN6mJFwAk8Ee63C3Jj16anPNZ/vB1597 eF0Mq619bgY6xPiwwa9z1GMpMN2ECG0cS5NWvIrgTZPxPmk5m7cOIb7AO4neLiWR MWc4wk5d+sNm2m8+L2phr/yPdYNDEQQ0UES4FsSqMT0SOm9DB91NDG09dDDsy4/p Gc/cCY4Csdtb+vzY9nJiRF6+5zI+WyXWE0wSZBnBJ4I/cClcGfE9f86Gt3VlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXJRppPWvAYr8KPqluCrvOoq/ZbMwHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQxHXc8u/aDB ptFaGLCJ1hFUU9saJcrlQoCUOne6DBEpqLY71qxClgDW8HqnLfDcnS5PKzmjRUJQ 8IsvpR0MG6PiMt6H6BUx6SHIHotWuyAsYXGq6cD6YWlYyv/BCB73WaclG2qW2zXx mJhK063NRnYFUilBtbavZpPt1s5b3Gl65XagD3mnYnWtwERkMARzWJKvrJQsdKJA U+R1qhdQf+L/GV0Y8B+K9xcqYL59ojJm1cYuBrgVQR5nGAZhu6YjmicvG+sWGM+Z FrQMmbJQ2aKTLNoyGmcgHZRpqbkCHwMZtn/KpZonz1XKqM4ytcrgTNhRnH1xKHoO lEqMr2TuNw== -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:23 2026 by rpki-client