$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: wmJuVNdTQ57Q0/qPmt6QEodFxIDQJF24b5CI1MVIv/Y= Subject key identifier: F2:28:8A:D2:D3:78:F9:19:1F:85:BB:BB:5F:64:78:38:3E:7E:97:6B Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 72B4E2CFEB07E8D932189A8ABCBDB6D8468C2475 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 19:54:48 +0000 Manifest this update: Fri 17 Apr 2026 19:49:48 +0000 Manifest next update: Sat 18 Apr 2026 22:46:48 +0000 Files and hashes: 1: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) 2: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: 2Yo5BEoCFXrQHjzlE6afzUc58iC0D2gSTAIya98ZbGY=) 3: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b4:e2:cf:eb:07:e8:d9:32:18:9a:8a:bc:bd:b6:d8:46:8c:24:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Apr 17 19:49:48 2026 GMT Not After : Apr 18 22:46:48 2026 GMT Subject: CN=F2288AD2D378F9191F85BBBB5F6478383E7E976B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:f4:df:63:91:df:b5:e6:80:0e:a0:35:13: 97:00:00:15:6a:a4:28:68:b9:c4:e2:65:94:ce:46: 72:42:b9:80:b4:5b:ca:a9:36:27:3a:91:18:fb:5d: e6:67:d0:4b:a3:4b:31:d5:80:b5:f2:06:9b:5e:d2: 22:84:d0:2d:65:15:a1:7b:ff:c6:87:04:94:bf:b9: 34:c8:b7:2e:aa:56:26:a4:04:b2:7d:29:fa:ba:e7: 2c:8b:d0:98:4b:8a:53:61:be:2d:a0:61:1d:e4:54: d0:b7:9d:e9:54:45:42:26:df:12:bc:8b:6b:de:a5: ea:b0:64:c6:b4:61:ef:f4:03:f2:94:a3:47:0b:e6: d8:7f:23:86:9d:51:fa:7c:18:b2:c9:26:8f:1c:94: 8e:fd:af:b1:dd:e9:5e:4d:e1:c3:af:ac:89:17:af: de:6b:ad:b9:ae:47:2b:22:1e:70:91:0a:c8:b5:36: c6:c8:c2:54:a7:2b:83:df:35:fe:76:69:d0:3a:35: 3d:b1:b3:15:75:45:b1:d7:88:eb:ad:c8:0c:34:88: 50:a9:eb:dd:b8:02:86:db:2a:10:73:2c:be:53:2c: e0:9a:f2:bc:7d:29:05:c0:1c:5f:eb:ee:f2:6e:72: 7e:7a:8f:a2:cb:a3:58:15:12:ef:aa:ef:51:ec:7b: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:28:8A:D2:D3:78:F9:19:1F:85:BB:BB:5F:64:78:38:3E:7E:97:6B X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5e:f6:7f:5f:ce:32:cf:77:85:a8:82:4b:88:20:ab:89:7b: d0:5a:a1:d9:0d:4d:5e:2e:83:89:13:09:67:5a:b8:af:28:f2: 00:e2:d1:2c:97:1c:a0:da:df:7e:e9:b9:bf:65:36:d1:6d:63: 40:86:4b:de:96:b0:7d:01:e6:74:a6:6d:cc:a3:bb:47:7b:ea: 6e:e0:f3:99:33:48:c8:9d:6b:de:35:fe:6f:59:eb:cb:d2:6f: 26:3e:f3:54:6d:6c:c2:9e:04:ef:12:bd:df:4f:b1:ac:0d:d5: ab:c2:9a:99:bf:ff:55:2e:89:1f:4a:b8:56:23:04:ad:5a:ef: d8:1c:3b:30:a7:33:01:cc:2f:a1:17:11:cc:12:1b:5a:b9:e8: 6a:17:9f:8f:1e:30:fd:c9:ae:1c:d3:95:50:35:1d:3f:17:e5: b8:04:7a:81:dc:37:8b:23:8d:96:52:84:21:13:4b:e0:4b:8f: c8:bd:98:b9:52:71:00:e4:96:bf:4d:59:61:8e:86:af:ef:20: 48:c1:17:1c:7e:43:08:96:b3:87:28:17:cd:23:e4:52:48:b3: 84:8f:12:9f:ae:e3:0d:28:42:1d:ae:6c:3c:0d:c6:de:57:3f: 1e:2f:3d:28:03:42:b9:51:90:7f:62:5d:cc:6c:ba:4a:0d:38: bd:2b:91:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcrTiz+sH6NkyGJqKvL222EaMJHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjA0MTcxOTQ5NDhaFw0yNjA0MTgyMjQ2NDhaMDMxMTAvBgNV BAMTKEYyMjg4QUQyRDM3OEY5MTkxRjg1QkJCQjVGNjQ3ODM4M0U3RTk3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyI/TfY5HfteaADqA1E5cAABVq pChoucTiZZTORnJCuYC0W8qpNic6kRj7XeZn0EujSzHVgLXyBpte0iKE0C1lFaF7 /8aHBJS/uTTIty6qViakBLJ9Kfq65yyL0JhLilNhvi2gYR3kVNC3nelURUIm3xK8 i2vepeqwZMa0Ye/0A/KUo0cL5th/I4adUfp8GLLJJo8clI79r7Hd6V5N4cOvrIkX r95rrbmuRysiHnCRCsi1NsbIwlSnK4PfNf52adA6NT2xsxV1RbHXiOutyAw0iFCp 6924AobbKhBzLL5TLOCa8rx9KQXAHF/r7vJucn56j6LLo1gVEu+q71HsexApAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8iiK0tN4+Rkfhbu7X2R4OD5+l2swHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjl72f1/OMs93 haiCS4ggq4l70Fqh2Q1NXi6DiRMJZ1q4ryjyAOLRLJccoNrffum5v2U20W1jQIZL 3pawfQHmdKZtzKO7R3vqbuDzmTNIyJ1r3jX+b1nry9JvJj7zVG1swp4E7xK930+x rA3Vq8Kamb//VS6JH0q4ViMErVrv2Bw7MKczAcwvoRcRzBIbWrnoahefjx4w/cmu HNOVUDUdPxfluAR6gdw3iyONllKEIRNL4EuPyL2YuVJxAOSWv01ZYY6Gr+8gSMEX HH5DCJazhygXzSPkUkizhI8Sn67jDShCHa5sPA3G3lc/Hi89KANCuVGQf2JdzGy6 Sg04vSuRew== -----END CERTIFICATE-----Generated at Sat Apr 18 04:59:18 2026 by rpki-client