$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: JZWrjIgXQWTRO/09leOHI727Br9k1hCCFFjfaNVOH9M= Subject key identifier: F6:4C:ED:29:96:20:E0:C2:62:52:B9:B3:B8:AB:86:DF:74:23:39:95 Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 15988B80ACA7F0CC1640B2A91FD68841D82A4164 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 7C Signing time: Fri 17 Apr 2026 06:54:41 +0000 Manifest this update: Fri 17 Apr 2026 06:49:41 +0000 Manifest next update: Sat 18 Apr 2026 09:59:41 +0000 Files and hashes: 1: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=) 2: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=) 3: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: Ylb+Fer3AHVCO51SWrTW7rFV19/0kZHg+7W4rhRuufg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:98:8b:80:ac:a7:f0:cc:16:40:b2:a9:1f:d6:88:41:d8:2a:41:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Apr 17 06:49:41 2026 GMT Not After : Apr 18 09:59:41 2026 GMT Subject: CN=F64CED299620E0C26252B9B3B8AB86DF74233995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:79:b0:ca:4c:03:74:54:26:80:0d:18:ac:94: e8:49:ca:e9:7c:cb:c6:01:a2:3c:5b:7f:67:58:52: 6c:ce:1d:06:f6:4d:b3:96:bb:a2:60:09:b7:6a:14: 47:e1:2e:63:48:6e:29:eb:d5:b4:d3:bb:ab:42:76: ba:f4:bd:6c:be:8c:96:80:0f:79:6a:ae:48:40:07: 6f:32:9d:12:2f:0d:75:89:91:47:f9:f0:6e:0e:5a: 76:ff:18:3e:25:7e:7d:a5:39:c5:09:0b:fa:dd:72: 30:bd:d6:2f:79:ad:9a:29:49:58:59:2c:0c:ed:00: ca:a7:ff:ad:26:d1:b5:9f:97:c3:bd:6b:3e:72:d2: d1:6d:fc:4d:0e:3a:30:93:0b:93:89:df:1e:c4:ba: 0a:be:31:22:a3:52:7e:fa:de:8c:ef:33:00:d0:53: 44:1c:79:0d:13:15:ca:58:8d:fe:71:14:72:ff:b0: 8d:88:1f:65:b4:86:0c:63:df:d8:ef:68:83:2f:a1: df:44:59:82:66:9f:cc:28:55:38:6c:f9:ac:fc:2a: 2c:ad:92:0f:91:c9:db:4e:75:d6:50:ad:df:69:60: 92:ba:ae:71:e3:93:4e:58:6c:28:b2:c5:bd:5e:68: 27:2d:de:47:73:f2:48:4b:70:78:69:53:e3:4e:59: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4C:ED:29:96:20:E0:C2:62:52:B9:B3:B8:AB:86:DF:74:23:39:95 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:49:6f:d1:b0:bb:46:eb:34:9c:f2:a3:f5:8d:32:a3:60:24: 32:a5:49:4a:9f:e5:4d:c4:79:01:f6:e1:e7:75:4a:fb:0c:f5: 82:37:a7:91:86:bb:5f:17:6a:12:07:71:d3:82:df:b5:c2:c7: 58:54:84:1d:60:7c:13:20:02:84:ab:12:22:73:96:77:51:58: 0b:c7:47:cc:07:b6:39:15:55:a0:5b:72:78:28:a0:db:16:71: 73:5d:55:81:0d:e0:b8:c8:b9:18:79:71:52:15:67:55:c7:51: 0e:a3:2d:5d:5c:c6:59:48:89:aa:33:b8:76:0c:31:34:7b:83: a1:9e:7b:64:71:00:8f:5e:89:df:47:1a:0d:a2:28:9d:63:92: 44:a5:09:04:f6:c7:d2:6a:7d:8b:99:03:f7:87:eb:c6:95:93: a3:45:05:43:4c:20:41:40:fc:07:8c:f4:92:c4:f6:4a:59:52: 32:ee:e4:55:23:14:1b:12:77:0e:85:d4:b3:bb:6a:0b:59:a5: 29:4b:5c:dc:91:51:eb:b8:35:66:e5:fc:8d:66:6a:a2:01:78: 9e:d8:bb:ce:27:45:05:32:81:cb:1c:c6:63:ef:91:31:41:27: 52:d7:d0:a5:1b:af:39:69:e3:df:89:06:7a:ca:e9:9d:e5:f2: 47:9d:a7:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFZiLgKyn8MwWQLKpH9aIQdgqQWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjA0MTcwNjQ5NDFaFw0yNjA0MTgwOTU5NDFaMDMxMTAvBgNV BAMTKEY2NENFRDI5OTYyMEUwQzI2MjUyQjlCM0I4QUI4NkRGNzQyMzM5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbebDKTAN0VCaADRislOhJyul8 y8YBojxbf2dYUmzOHQb2TbOWu6JgCbdqFEfhLmNIbinr1bTTu6tCdrr0vWy+jJaA D3lqrkhAB28ynRIvDXWJkUf58G4OWnb/GD4lfn2lOcUJC/rdcjC91i95rZopSVhZ LAztAMqn/60m0bWfl8O9az5y0tFt/E0OOjCTC5OJ3x7Eugq+MSKjUn763ozvMwDQ U0QceQ0TFcpYjf5xFHL/sI2IH2W0hgxj39jvaIMvod9EWYJmn8woVThs+az8Kiyt kg+RydtOddZQrd9pYJK6rnHjk05YbCiyxb1eaCct3kdz8khLcHhpU+NOWTK1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9kztKZYg4MJiUrmzuKuG33QjOZUwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUlv0bC7Rus0 nPKj9Y0yo2AkMqVJSp/lTcR5Afbh53VK+wz1gjenkYa7XxdqEgdx04LftcLHWFSE HWB8EyAChKsSInOWd1FYC8dHzAe2ORVVoFtyeCig2xZxc11VgQ3guMi5GHlxUhVn VcdRDqMtXVzGWUiJqjO4dgwxNHuDoZ57ZHEAj16J30caDaIonWOSRKUJBPbH0mp9 i5kD94frxpWTo0UFQ0wgQUD8B4z0ksT2SllSMu7kVSMUGxJ3DoXUs7tqC1mlKUtc 3JFR67g1ZuX8jWZqogF4nti7zidFBTKByxzGY++RMUEnUtfQpRuvOWnj34kGesrp neXyR52noA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:47 2026 by rpki-client