$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json) Hash identifier: F8IHq6kMDUGuULPidwFqtnzr73jn1PXz/1SKJNQPtyk= Subject key identifier: B9:5E:8D:7F:19:CD:DD:24:BE:81:4A:6F:23:8C:37:6F:AD:34:92:C7 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 54BCDEE75BFB238BDEE0B789A07298B60D0F7CBB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft Manifest number: 7F Signing time: Fri 17 Apr 2026 17:39:44 +0000 Manifest this update: Fri 17 Apr 2026 17:34:44 +0000 Manifest next update: Sat 18 Apr 2026 19:06:44 +0000 Files and hashes: 1: AS244400.roa (hash: bhI1UKxrm3GLN+fc8qGvC+xkunPjqFis517LeIEdzh8=) 2: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=) 3: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: UI5YHbixf8RoBuzbGgRCgF/am98kvpIb3bgVBurDjzs=) 4: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=) 5: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=) 6: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=) 7: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=) 8: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=) 9: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=) 10: AS146788.roa (hash: zpRF+orMm1cXnAI2EXsq1WNqOE/Y017y0m/dOiaCEbE=) 11: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=) 12: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=) 13: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=) 14: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=) 15: AS9808.roa (hash: lDrAoTUnYB64grsjpP1t7+3xH0Ykk2SmzdWPX2wFqNM=) 16: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=) 17: AS24400.roa (hash: ql35zIap451HVcpWGnoICAb2sHI19dHkxqC8PGi+o/s=) 18: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=) 19: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bc:de:e7:5b:fb:23:8b:de:e0:b7:89:a0:72:98:b6:0d:0f:7c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Apr 17 17:34:44 2026 GMT Not After : Apr 18 19:06:44 2026 GMT Subject: CN=B95E8D7F19CDDD24BE814A6F238C376FAD3492C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6f:c6:75:d7:0d:38:0b:32:e9:04:13:f5:ad: 66:6c:ff:c8:8e:a1:c7:c4:fc:3a:8e:9f:d0:f6:c4: 57:fa:2a:fd:bf:9e:b8:cb:ba:ba:c8:2f:10:cb:29: 87:db:dc:d4:6b:c3:28:be:d0:b4:fa:d3:48:34:a2: 14:bb:f5:27:a2:ac:ba:db:cf:41:dd:d9:19:1f:1c: d1:8c:06:5f:eb:4e:81:58:7a:6e:f6:60:9c:9d:4c: 3a:77:58:f1:e4:d1:c2:13:d0:42:06:2a:4b:e5:06: 7c:7c:ab:94:20:20:55:06:1a:25:04:89:55:98:69: a9:70:c0:ef:0a:06:66:d7:d3:c9:bd:7d:58:a3:f0: 3c:67:d3:ef:9f:ff:01:08:35:6a:16:55:c3:da:39: db:34:f2:fc:bc:8c:22:c4:c6:07:dd:4b:36:1a:ea: 0b:a5:72:cd:79:6a:82:73:68:f0:6a:94:03:5e:38: 98:8a:9d:a8:9d:3c:36:8e:a6:c3:92:6f:05:32:de: 22:4d:0d:b9:a7:e7:c2:ae:0d:cc:5a:43:ba:cd:36: 45:0e:98:71:32:07:6b:7e:66:ac:2d:58:8d:50:5d: 39:72:03:9b:1a:11:2e:08:17:ba:4d:69:6a:6f:fa: 2b:e4:53:a5:9c:09:37:94:41:28:1e:02:ec:c9:3c: 83:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5E:8D:7F:19:CD:DD:24:BE:81:4A:6F:23:8C:37:6F:AD:34:92:C7 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:81:4b:8d:27:e4:0f:4b:77:14:6d:40:0c:c2:e1:3d:ab:a5: cb:82:e9:cb:b1:f5:06:3c:a1:ce:28:7f:3f:3d:c7:d8:6a:f2: b0:d2:34:40:60:ea:a2:35:ac:17:3a:a6:9c:43:e3:bb:9a:43: b6:58:73:86:e7:60:de:98:5e:23:a6:07:6c:15:48:91:17:6c: 19:43:f8:2a:29:78:5a:ac:73:c3:f4:0c:fb:2e:9f:3d:3b:2f: e3:e2:de:f0:42:35:07:cb:0a:d4:02:d3:c4:dd:10:b3:89:cc: 9a:ea:70:94:22:e8:ea:de:df:69:65:c4:03:3a:f4:a4:5d:cd: 2b:d1:79:ba:43:6c:24:47:59:aa:27:5c:14:34:97:23:23:ad: 22:03:8e:8d:a9:2a:2d:eb:2b:db:2b:47:18:d4:38:8f:33:42: 8a:42:c1:b5:af:47:0c:13:c5:26:3b:de:69:f8:83:fa:0b:01: cb:79:b4:ca:3d:3b:ae:ba:9d:d6:c3:1f:24:7c:b0:ea:f8:8d: 13:42:2c:b2:c4:43:00:b8:9b:8d:f0:ad:a8:b4:1d:ef:cb:ec: 52:19:f9:00:08:1b:b6:79:13:f1:6c:f1:97:37:d5:e1:45:cb: 43:a1:45:79:0d:d8:07:64:1b:82:b0:0e:22:e3:27:99:e9:b7: a5:75:bb:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVLze51v7I4ve4LeJoHKYtg0PfLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjA0MTcxNzM0NDRaFw0yNjA0MTgxOTA2NDRaMDMxMTAvBgNV BAMTKEI5NUU4RDdGMTlDREREMjRCRTgxNEE2RjIzOEMzNzZGQUQzNDkyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtb8Z11w04CzLpBBP1rWZs/8iO ocfE/DqOn9D2xFf6Kv2/nrjLurrILxDLKYfb3NRrwyi+0LT600g0ohS79SeirLrb z0Hd2RkfHNGMBl/rToFYem72YJydTDp3WPHk0cIT0EIGKkvlBnx8q5QgIFUGGiUE iVWYaalwwO8KBmbX08m9fVij8Dxn0++f/wEINWoWVcPaOds08vy8jCLExgfdSzYa 6gulcs15aoJzaPBqlANeOJiKnaidPDaOpsOSbwUy3iJNDbmn58KuDcxaQ7rNNkUO mHEyB2t+ZqwtWI1QXTlyA5saES4IF7pNaWpv+ivkU6WcCTeUQSgeAuzJPIMBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuV6NfxnN3SS+gUpvI4w3b600kscwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC84NDVCQjMwN0UyQTEx MDBFODlGQTBDOTM5QTkzODk2ODY3OTZGMEY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIFLjSfkD0t3 FG1ADMLhPauly4Lpy7H1Bjyhzih/Pz3H2GrysNI0QGDqojWsFzqmnEPju5pDtlhz hudg3pheI6YHbBVIkRdsGUP4Kil4Wqxzw/QM+y6fPTsv4+Le8EI1B8sK1ALTxN0Q s4nMmupwlCLo6t7faWXEAzr0pF3NK9F5ukNsJEdZqidcFDSXIyOtIgOOjakqLesr 2ytHGNQ4jzNCikLBta9HDBPFJjveafiD+gsBy3m0yj07rrqd1sMfJHyw6viNE0Is ssRDALibjfCtqLQd78vsUhn5AAgbtnkT8WzxlzfV4UXLQ6FFeQ3YB2QbgrAOIuMn mem3pXW7eA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:36 2026 by rpki-client