$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft File: B8D245B2C5B99498F3D8E0632643FF2259597775.mft (raw, json) Hash identifier: 0nHZnZyJS19TepFwJBZ5i8F6r0NXN40rlM4sP3WAywg= Subject key identifier: E5:1D:05:5A:10:CF:F5:AC:7E:DB:CE:A3:84:B3:89:DA:3D:BA:D5:07 Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 Certificate issuer: /CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Certificate serial: 59AC651F0513FBC803664A410AE9BBE0722A7908 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft Manifest number: 10 Signing time: Thu 16 Apr 2026 07:27:47 +0000 Manifest this update: Thu 16 Apr 2026 07:22:47 +0000 Manifest next update: Fri 17 Apr 2026 09:11:47 +0000 Files and hashes: 1: 3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (hash: IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=) 2: 3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (hash: Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=) 3: 3130332e34302e3139342e302f32332d3233203d3e203536303436.roa (hash: A56RessCo/o2qpX6UU6X8QMTdA6aVv+8u7nwTKz9K10=) 4: 34332e3234392e3132302e302f32322d3232203d3e2030.roa (hash: 5lC4W2GRTvqJOrMPbe5QKcwqWe7taOcbgtBKzu603/U=) 5: 3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (hash: wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=) 6: 3130332e34302e3139322e302f32332d3233203d3e20313337363937.roa (hash: 8krCSaNfYX3iLOiFRQl5cBRmSM0T12NtNqkmnO0sU3g=) 7: B8D245B2C5B99498F3D8E0632643FF2259597775.crl (hash: gxbN+Q/mXvr4fzI2M4Whg7aFxW6tBOPTlvfdTjCiVwE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 09:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ac:65:1f:05:13:fb:c8:03:66:4a:41:0a:e9:bb:e0:72:2a:79:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775 Validity Not Before: Apr 16 07:22:47 2026 GMT Not After : Apr 17 09:11:47 2026 GMT Subject: CN=E51D055A10CFF5AC7EDBCEA384B389DA3DBAD507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0c:3d:ef:f1:b9:75:c1:22:56:fb:1e:47:3f: 32:2b:2e:27:76:86:99:b9:0c:c4:dd:db:ee:7b:fb: 65:07:56:0b:44:cc:38:66:04:f6:47:e7:ac:1a:30: e5:22:f3:fb:33:5a:c0:1b:3a:ff:10:9d:3d:80:74: 30:88:a6:5d:60:ff:49:a5:d4:db:7f:bc:2d:d7:9d: 86:e8:b1:dc:2f:2b:3e:1a:69:21:b3:8c:61:f3:7f: ef:77:53:e9:7d:9b:49:8d:1d:ff:6a:2e:d5:e2:0c: 27:29:74:84:a9:b9:0d:e7:bf:bd:92:e2:14:7b:3f: fc:2e:13:82:46:04:28:df:29:2e:83:a4:2d:83:2a: 6e:2c:f7:38:4d:9d:31:24:6d:b9:e7:1f:df:31:f7: 32:1d:7e:c3:44:5a:0e:3c:4a:e4:38:44:9c:ac:98: 5f:30:be:f7:fb:d4:48:e4:54:d0:fd:d5:70:f3:44: 4e:c9:b6:82:4a:e6:3c:87:35:ee:3a:d3:ac:55:19: 1f:9a:70:03:01:42:31:a5:b7:cf:3d:34:c0:8b:9b: f3:a6:c6:13:38:fc:ec:07:cb:96:1a:c6:64:ab:7c: dd:6c:ae:1b:b0:43:9d:95:c7:24:32:51:ce:c4:52: a7:48:01:10:b6:1a:10:f9:c4:37:12:23:71:da:0f: 95:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1D:05:5A:10:CF:F5:AC:7E:DB:CE:A3:84:B3:89:DA:3D:BA:D5:07 X509v3 Authority Key Identifier: keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:11:3d:f2:a7:a0:c3:e5:ba:f2:60:f1:73:e8:71:7d:9f:b4: 1d:84:97:6c:1f:98:9c:ef:72:ae:74:c8:dd:8a:17:99:e2:b3: ab:9c:31:49:3b:7f:4b:95:2a:d2:85:93:f0:58:d2:7d:66:5a: 6c:d0:5d:d3:fd:40:23:4c:8f:5e:75:0a:8d:9c:54:14:de:6c: 1f:6d:87:1f:8a:5b:8a:74:1a:e2:bf:68:f3:21:a3:6c:ea:9b: b5:fb:a6:c8:b8:71:19:b1:53:52:7f:d1:70:2b:72:ac:7c:b5: b0:45:68:0e:1b:18:f1:ae:a5:46:fd:d3:a5:5f:a4:77:22:ce: 93:e3:26:53:a6:49:ac:d0:b6:9b:e4:69:52:be:5b:90:15:08: d9:9b:1f:c8:ee:df:44:5d:92:79:f6:30:6c:59:78:50:4c:1e: e5:31:ae:b8:fd:a0:fe:af:88:c3:07:01:c7:91:33:e6:22:ad: b8:5b:e2:e2:bc:c2:38:e5:6c:06:83:dd:25:af:03:c8:6b:cc: 62:b9:83:33:12:17:dd:19:c9:a7:02:95:a5:42:39:8e:d7:a0: 41:ee:02:38:92:41:9d:84:6b:f3:91:d1:27:be:72:49:98:35: eb:df:dc:45:8a:bf:cb:53:90:46:8d:b5:dc:7b:d9:8c:af:39: da:63:be:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWaxlHwUT+8gDZkpBCum74HIqeQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1 OTU5Nzc3NTAeFw0yNjA0MTYwNzIyNDdaFw0yNjA0MTcwOTExNDdaMDMxMTAvBgNV BAMTKEU1MUQwNTVBMTBDRkY1QUM3RURCQ0VBMzg0QjM4OURBM0RCQUQ1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXDD3v8bl1wSJW+x5HPzIrLid2 hpm5DMTd2+57+2UHVgtEzDhmBPZH56waMOUi8/szWsAbOv8QnT2AdDCIpl1g/0ml 1Nt/vC3XnYbosdwvKz4aaSGzjGHzf+93U+l9m0mNHf9qLtXiDCcpdISpuQ3nv72S 4hR7P/wuE4JGBCjfKS6DpC2DKm4s9zhNnTEkbbnnH98x9zIdfsNEWg48SuQ4RJys mF8wvvf71EjkVND91XDzRE7JtoJK5jyHNe4606xVGR+acAMBQjGlt889NMCLm/Om xhM4/OwHy5YaxmSrfN1srhuwQ52VxyQyUc7EUqdIARC2GhD5xDcSI3HaD5WvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5R0FWhDP9ax+286jhLOJ2j261QcwHwYDVR0j BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC9COEQyNDVCMkM1Qjk5 NDk4RjNEOEUwNjMyNjQzRkYyMjU5NTk3Nzc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhE98qegw+W6 8mDxc+hxfZ+0HYSXbB+YnO9yrnTI3YoXmeKzq5wxSTt/S5Uq0oWT8FjSfWZabNBd 0/1AI0yPXnUKjZxUFN5sH22HH4pbinQa4r9o8yGjbOqbtfumyLhxGbFTUn/RcCty rHy1sEVoDhsY8a6lRv3TpV+kdyLOk+MmU6ZJrNC2m+RpUr5bkBUI2ZsfyO7fRF2S efYwbFl4UEwe5TGuuP2g/q+IwwcBx5Ez5iKtuFvi4rzCOOVsBoPdJa8DyGvMYrmD MxIX3RnJpwKVpUI5jtegQe4COJJBnYRr85HRJ75ySZg169/cRYq/y1OQRo213HvZ jK852mO+3Q== -----END CERTIFICATE-----Generated at Thu Apr 16 23:54:33 2026 by rpki-client