$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft File: D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft (raw, json) Hash identifier: 7wgJn/5+thcJViS24oSMfkTjgP6ykw8dRiVDtuFH8HQ= Subject key identifier: B9:59:E1:D2:A4:7A:92:BE:BD:44:9C:39:38:56:5F:DF:EB:F7:FB:20 Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 730D7F994D5CFF89D932816F833CE12FB71E2079 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft Manifest number: 22 Signing time: Thu 16 Apr 2026 10:49:32 +0000 Manifest this update: Thu 16 Apr 2026 10:44:32 +0000 Manifest next update: Fri 17 Apr 2026 12:19:32 +0000 Files and hashes: 1: 34352e3235332e36382e302f32322d3232203d3e2030.roa (hash: mmMfzoUN1gpXnyhzt0vhchCEg6AvelT3TF2IUsxWxcM=) 2: 323430303a353430303a3a2f33322d3332203d3e2030.roa (hash: GHsGrth7ip4IuQtwHI1hcsguA2fNuYO4g2UTrLkxeMU=) 3: D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl (hash: sY9ySRhdUbx6FSZqsY/e5I5qwFggEmpCvmPBsHdCLVk=) 4: 3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa (hash: msUHNNmDuf0xFczzqOuI1kN210zxZ1Wrfaif6pe6eEA=) 5: 3130332e3232322e3139322e302f32322d3232203d3e2030.roa (hash: kSZsRPKkn+fO9KmuamYn7A4rJ1w7FiU1lG47DtciKdk=) 6: 3130332e3233352e3134382e302f32322d3232203d3e2030.roa (hash: Y0YyaYjGyKIlIKXTKEIEynRYQ5GTL8UjVEAC8Ds5ChE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 12:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0d:7f:99:4d:5c:ff:89:d9:32:81:6f:83:3c:e1:2f:b7:1e:20:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 16 10:44:32 2026 GMT Not After : Apr 17 12:19:32 2026 GMT Subject: CN=B959E1D2A47A92BEBD449C3938565FDFEBF7FB20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:bd:26:5c:8f:5c:7c:87:ae:0a:c6:1e:00: c7:db:81:97:8b:c9:b8:73:79:d1:ce:ec:33:37:08: 1a:d8:63:7c:a2:c6:d6:8a:e3:9d:fa:20:51:96:99: 6f:24:3d:b7:ce:b1:86:6f:06:4a:6d:aa:3a:19:d0: 17:e8:35:a5:41:75:0c:04:35:10:72:8d:4a:47:fd: a6:be:f2:c4:0c:e8:d7:2a:15:63:5e:d8:c3:20:02: cb:fb:cd:5d:3c:81:a4:86:35:6b:bc:4f:1d:e7:da: ee:8d:db:01:8f:77:30:e5:b0:da:5a:9e:12:ad:a6: 3c:e0:72:64:d0:1d:20:34:fe:00:8e:aa:47:ca:aa: f5:44:8e:80:b8:07:7e:2f:5a:dd:bc:b8:41:b0:99: f1:38:78:f4:02:8b:e9:b2:9c:1f:b3:07:5b:43:b6: 83:fc:7d:94:68:52:88:39:45:63:e2:e4:c9:3d:03: 77:e2:ed:7f:eb:31:c9:c7:4d:e8:ae:85:43:54:e1: e9:f6:58:0a:35:2e:c1:1f:46:01:72:f4:62:36:91: ea:07:df:d9:4d:ba:7d:9a:1d:17:e1:0d:82:ff:32: ba:e8:c2:43:a1:85:36:05:60:5f:e8:e7:fc:2a:6d: 08:5e:c2:83:cf:53:87:aa:ba:f8:5e:ad:ab:90:de: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:59:E1:D2:A4:7A:92:BE:BD:44:9C:39:38:56:5F:DF:EB:F7:FB:20 X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c7:ff:4a:33:76:50:19:7d:ab:d6:c6:b2:35:c9:b3:14:66: 78:0b:44:4f:da:c7:bb:73:ec:13:03:46:58:02:57:6b:cc:52: f5:c0:47:0e:45:f8:0f:cc:dd:23:1d:c7:89:98:2c:f3:4d:64: 79:cf:ce:1c:b9:64:b7:57:40:16:a4:ed:f1:dc:5f:fd:52:7e: d6:af:2e:82:a4:f8:81:b2:fa:b8:23:d2:61:aa:e2:60:a8:9a: a6:00:0b:bc:fb:fb:c7:1d:26:4a:08:6a:41:c0:aa:ee:43:c3: ff:3b:55:3a:c1:ee:ba:2f:97:4a:b6:5f:05:3e:4c:af:1a:65: 10:0c:d3:58:ee:61:90:c4:ac:e0:61:dd:e1:d2:3d:dc:7d:87: 9d:f1:c0:7f:18:15:8a:d0:9f:40:64:fc:8e:86:9f:3d:9c:81: 75:5b:9f:a9:97:4a:f7:e8:12:ac:cd:82:27:e1:7b:ec:09:df: 32:7c:0f:13:de:8f:88:90:e2:10:13:51:5b:0b:66:c6:ee:92: bc:81:e7:76:8a:89:1d:67:cc:76:72:ee:e9:5f:f7:d8:26:2b: fa:34:b1:a3:a4:f3:bf:8e:2c:88:99:76:7a:db:b8:77:95:7d: e7:a6:8a:be:42:3b:71:06:ba:a5:f5:de:a2:f4:81:00:bd:47: 58:fb:61:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcw1/mU1c/4nZMoFvgzzhL7ceIHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTYxMDQ0MzJaFw0yNjA0MTcxMjE5MzJaMDMxMTAvBgNV BAMTKEI5NTlFMUQyQTQ3QTkyQkVCRDQ0OUMzOTM4NTY1RkRGRUJGN0ZCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GL0mXI9cfIeuCsYeAMfbgZeL ybhzedHO7DM3CBrYY3yixtaK4536IFGWmW8kPbfOsYZvBkptqjoZ0BfoNaVBdQwE NRByjUpH/aa+8sQM6NcqFWNe2MMgAsv7zV08gaSGNWu8Tx3n2u6N2wGPdzDlsNpa nhKtpjzgcmTQHSA0/gCOqkfKqvVEjoC4B34vWt28uEGwmfE4ePQCi+mynB+zB1tD toP8fZRoUog5RWPi5Mk9A3fi7X/rMcnHTeiuhUNU4en2WAo1LsEfRgFy9GI2keoH 39lNun2aHRfhDYL/MrrowkOhhTYFYF/o5/wqbQhewoPPU4equvherauQ3gAZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuVnh0qR6kr69RJw5OFZf3+v3+yAwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODg2NTEwMTUxODEzMDM4MTAvMC9ENUVGMkE3OTIxNjZG OTRGQkUzMzM3N0UwMjM5MDM0RUQyRkMyRjgwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsf/SjN2UBl9 q9bGsjXJsxRmeAtET9rHu3PsEwNGWAJXa8xS9cBHDkX4D8zdIx3HiZgs801kec/O HLlkt1dAFqTt8dxf/VJ+1q8ugqT4gbL6uCPSYariYKiapgALvPv7xx0mSghqQcCq 7kPD/ztVOsHuui+XSrZfBT5MrxplEAzTWO5hkMSs4GHd4dI93H2HnfHAfxgVitCf QGT8joafPZyBdVufqZdK9+gSrM2CJ+F77AnfMnwPE96PiJDiEBNRWwtmxu6SvIHn doqJHWfMdnLu6V/32CYr+jSxo6Tzv44siJl2etu4d5V956aKvkI7cQa6pfXeovSB AL1HWPth6A== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:04 2026 by rpki-client