$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft File: 786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json) Hash identifier: vAcIVdT6TmTDFN1V4HtDGgWPxswyfq2e2kwLQhxWzkw= Subject key identifier: 24:56:F3:45:8A:54:D4:37:C9:62:F9:33:0B:A2:C0:E5:79:1F:59:94 Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3 Certificate serial: 661D3E49CC59FF459BE732EBC082290A7C5E027C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft Manifest number: 0D Signing time: Thu 16 Apr 2026 08:24:31 +0000 Manifest this update: Thu 16 Apr 2026 08:19:31 +0000 Manifest next update: Fri 17 Apr 2026 11:34:31 +0000 Files and hashes: 1: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: VfpNAbVsDIb3m2SJzMMG44j5LMx7wSY/9sjFQaGBgnU=) 2: 34322e3139352e302e302f31362d3136203d3e2030.roa (hash: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=) 3: 323430333a323734303a3a2f33322d3332203d3e2030.roa (hash: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 11:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1d:3e:49:cc:59:ff:45:9b:e7:32:eb:c0:82:29:0a:7c:5e:02:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Validity Not Before: Apr 16 08:19:31 2026 GMT Not After : Apr 17 11:34:31 2026 GMT Subject: CN=2456F3458A54D437C962F9330BA2C0E5791F5994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:3a:58:1d:fb:6c:a1:ec:9f:6a:d0:51:13: 9f:99:3b:44:9b:cf:df:c0:3e:f4:1e:5f:c4:13:2e: e8:55:f2:60:eb:49:3d:8e:6b:d7:6c:4a:a5:c4:48: 2a:fa:9f:85:36:c2:38:28:69:90:97:ad:a2:15:67: 4d:33:80:4c:94:5a:70:8e:27:e5:90:01:69:20:b7: c5:3e:f8:12:1c:81:07:2a:19:ea:a3:7b:d5:82:28: 50:7e:d3:6b:0b:28:d6:6b:cd:d4:b2:67:8c:ee:d1: e1:b7:ea:52:b2:ff:7e:80:28:9c:8c:9b:b8:c9:f1: 27:93:f9:28:4f:13:f6:5c:ee:bc:40:31:5f:81:2b: 1e:e8:60:e3:34:dd:b0:38:6e:7f:1a:00:a8:83:08: d8:ce:8b:ff:6c:1f:8a:81:82:b8:1f:4f:28:79:16: b3:ce:0b:08:24:a8:b3:32:6c:4b:cd:d1:fd:56:e5: 9b:4c:d5:12:7a:4d:bf:c5:f1:9a:1a:cf:df:ac:d0: 65:37:69:41:2c:43:2e:d2:30:84:a4:3c:b5:94:43: 22:45:22:16:19:51:7f:55:68:b3:9a:54:04:bb:9d: ff:5c:bc:3d:7b:37:30:73:aa:2f:c2:a9:e8:cb:f2: 38:bc:70:d3:dd:3c:15:ce:4c:82:9a:cb:26:1f:84: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:56:F3:45:8A:54:D4:37:C9:62:F9:33:0B:A2:C0:E5:79:1F:59:94 X509v3 Authority Key Identifier: keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:24:ef:57:5d:a4:92:56:68:7c:dd:17:7a:67:ee:50:cb:92: 5e:94:cc:87:03:96:da:e5:cb:3d:ee:20:d8:05:d1:af:01:b5: b8:11:4b:ca:19:cf:72:73:00:44:86:80:23:6f:2d:53:fb:a7: 7a:7c:75:1c:9d:5c:bb:b1:0b:7a:af:fc:82:07:e8:b2:87:87: 2d:93:87:e5:a3:a0:96:37:6c:01:49:9d:b5:78:e2:ed:97:73: 31:fe:68:ad:5b:fd:21:aa:2e:05:5d:75:93:67:de:04:f8:e8: 2a:3c:6f:d7:79:8a:65:cf:0e:84:02:ab:64:6f:a0:36:a5:bc: 45:8c:96:ee:48:e6:c9:1a:a4:06:f9:00:6b:bb:08:bd:45:c5: 92:29:da:26:99:59:8c:eb:fe:88:10:c0:8e:11:af:c8:89:b0: d0:5b:21:bc:bd:4b:68:8f:73:88:e4:3e:e2:d5:f1:af:f1:bc: f9:68:94:7c:eb:da:1a:04:93:ef:06:e3:4c:15:d7:5e:db:f6: 2a:ee:33:9b:de:f7:29:e8:8c:4a:e3:23:a3:9e:3e:da:79:1a: f6:bc:ac:1e:96:b3:be:6f:19:46:1a:37:ac:bc:f3:32:c4:8c: 3f:d1:d2:b1:01:51:40:f8:d3:27:96:14:5a:02:36:7b:15:4a: f1:33:bd:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZh0+ScxZ/0Wb5zLrwIIpCnxeAnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIz QTBFMDNFMzAeFw0yNjA0MTYwODE5MzFaFw0yNjA0MTcxMTM0MzFaMDMxMTAvBgNV BAMTKDI0NTZGMzQ1OEE1NEQ0MzdDOTYyRjkzMzBCQTJDMEU1NzkxRjU5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4DpYHftsoeyfatBRE5+ZO0Sb z9/APvQeX8QTLuhV8mDrST2Oa9dsSqXESCr6n4U2wjgoaZCXraIVZ00zgEyUWnCO J+WQAWkgt8U++BIcgQcqGeqje9WCKFB+02sLKNZrzdSyZ4zu0eG36lKy/36AKJyM m7jJ8SeT+ShPE/Zc7rxAMV+BKx7oYOM03bA4bn8aAKiDCNjOi/9sH4qBgrgfTyh5 FrPOCwgkqLMybEvN0f1W5ZtM1RJ6Tb/F8Zoaz9+s0GU3aUEsQy7SMISkPLWUQyJF IhYZUX9VaLOaVAS7nf9cvD17NzBzqi/CqejL8ji8cNPdPBXOTIKayyYfhFv7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJFbzRYpU1DfJYvkzC6LA5XkfWZQwHwYDVR0j BBgwFoAUeGWIwofQ+UmjefTVEzX5QjoOA+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8xLzc4NjU4OEMyODdEMEY5NDlBMzc5RjRENTEzMzVG OTQyM0EwRTAzRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMS83ODY1ODhDMjg3RDBG OTQ5QTM3OUY0RDUxMzM1Rjk0MjNBMEUwM0UzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyTvV12kklZo fN0XemfuUMuSXpTMhwOW2uXLPe4g2AXRrwG1uBFLyhnPcnMARIaAI28tU/unenx1 HJ1cu7ELeq/8ggfosoeHLZOH5aOgljdsAUmdtXji7ZdzMf5orVv9IaouBV11k2fe BPjoKjxv13mKZc8OhAKrZG+gNqW8RYyW7kjmyRqkBvkAa7sIvUXFkinaJplZjOv+ iBDAjhGvyImw0FshvL1LaI9ziOQ+4tXxr/G8+WiUfOvaGgST7wbjTBXXXtv2Ku4z m973KeiMSuMjo54+2nka9rysHpazvm8ZRho3rLzzMsSMP9HSsQFRQPjTJ5YUWgI2 exVK8TO9NA== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:39 2026 by rpki-client