$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft File: 0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft (raw, json) Hash identifier: rMWCVY/F9lvWKmaIVYYL51sDi1zQTXZFBiNzHlqz6W4= Subject key identifier: 65:EA:67:5D:58:83:C3:C9:94:8F:C8:27:62:11:9F:3F:FC:3E:A4:72 Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 6988DCCE51064DA739F16DD26D91FD7C5BD217B1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 15:19:43 +0000 Manifest this update: Fri 17 Apr 2026 15:14:43 +0000 Manifest next update: Sat 18 Apr 2026 16:49:43 +0000 Files and hashes: 1: 34352e3132342e38302e302f32322d3234203d3e20313338393530.roa (hash: Y4T9EW+No31nd5HxtkDNYhM6DOQ8f/8wsIv7Nmb80aw=) 2: 34332e3232342e35362e302f32322d3234203d3e20313338393530.roa (hash: 4VtSR2wzYMEQ2hKkCXuVPDWataP8J4lzMQ7CaxYoU20=) 3: 3130332e3235352e3230302e302f32322d3234203d3e203539303438.roa (hash: gOiZTUVOyq4onUlyh1mFjdWkav1xY00AkAMnkgJhbb0=) 4: 0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl (hash: t87B1Vz5J/RgbiDTB+NuyEA6RMxoNc1GVe0U759Ncwo=) 5: 3130332e3235352e3230302e302f32322d3234203d3e20313338393530.roa (hash: /77yHLTvOVF7ETXvim5g76++7Vwhk5vnSL2FrN2h/uo=) 6: 3130332e3235352e3230302e302f32322d3234203d3e20313430373136.roa (hash: 7DRrNy0ly8jqOlHzBf8BUeKoJY3H7Oc4IRuif84g95w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:88:dc:ce:51:06:4d:a7:39:f1:6d:d2:6d:91:fd:7c:5b:d2:17:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: Apr 17 15:14:43 2026 GMT Not After : Apr 18 16:49:43 2026 GMT Subject: CN=65EA675D5883C3C9948FC82762119F3FFC3EA472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:7d:01:e1:7e:cb:b5:79:89:61:54:f4:f1: a2:db:f1:a2:d2:9d:ea:f6:c7:fa:ca:0c:89:86:3e: d8:f7:56:11:3a:02:bd:dc:79:b7:e2:ef:f5:40:1c: 15:c5:4e:d9:d3:98:6b:43:af:2e:d6:5c:48:45:22: 02:80:3f:c3:02:41:ce:0a:93:46:6f:38:75:c6:b6: a2:32:17:7b:83:86:14:8c:2b:d5:58:1f:35:e3:45: 2e:7f:e4:09:f0:c4:07:a4:34:6a:81:8c:81:4f:7b: ec:d8:40:0d:f4:34:e4:29:d6:e1:1b:e2:72:01:49: 6c:d1:4d:69:48:69:dc:4f:71:8b:a0:e0:a4:a7:62: 07:fd:32:1f:6d:a3:b0:fe:d5:3f:15:7d:76:12:af: 59:31:8d:a0:57:6c:6d:6b:2d:1b:13:b0:ec:e6:d0: 71:17:92:8e:d9:52:1b:dd:d5:74:11:fb:64:37:08: 8a:7d:3a:aa:40:e1:17:a9:25:b0:55:b1:0b:78:a3: 3d:92:0b:da:b4:5d:eb:d4:ca:ff:98:62:87:96:88: 17:31:38:8c:05:a9:33:97:72:f6:da:65:ea:86:5d: 06:13:a1:37:49:f6:31:cb:89:7a:62:7f:7d:87:41: 5a:16:c9:a6:15:bd:b9:c4:23:ed:71:8e:c6:e5:f9: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EA:67:5D:58:83:C3:C9:94:8F:C8:27:62:11:9F:3F:FC:3E:A4:72 X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:af:94:c4:e3:5c:19:f2:cf:db:b1:46:8a:ef:9a:d3:c5:99: 0c:03:ab:a3:d2:6c:c9:84:3f:bf:3e:a2:14:40:b0:6d:f8:25: ce:60:ba:e5:7e:8c:e4:11:cd:e6:30:08:fe:84:39:4d:43:f9: 58:57:ce:e1:6d:e3:5a:84:ec:ff:29:9e:a5:d2:80:1e:76:10: 98:45:d3:eb:13:97:60:46:02:16:84:52:f5:49:a0:8e:a5:38: 05:a0:ab:be:85:2f:86:76:e4:e2:86:4d:d1:a4:4d:d0:44:03: 9e:23:02:1d:a8:a6:51:06:b4:fe:4f:c0:02:e3:79:c6:89:9a: 1b:24:43:f8:4c:7b:76:78:c8:57:98:93:1e:61:e3:7f:77:ff: f4:21:70:c8:ab:25:06:a4:63:f3:ae:ae:90:88:ed:e3:3c:bf: ae:7f:f4:eb:af:0a:22:06:cf:1e:81:a6:71:03:4d:27:58:82: 1b:83:22:71:bf:e9:79:08:21:32:fc:06:20:4e:3c:22:bf:33: 87:9d:61:50:63:31:db:3e:3a:97:d0:65:ce:a2:e8:c2:b9:6a: 0e:64:a4:ff:bc:38:4d:21:6d:13:9a:6e:e3:3e:5b:e5:83:6e: 1e:87:f4:ca:a5:03:c5:14:05:0f:4e:59:83:36:23:27:aa:a7: b4:69:38:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaYjczlEGTac58W3SbZH9fFvSF7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA0MTcxNTE0NDNaFw0yNjA0MTgxNjQ5NDNaMDMxMTAvBgNV BAMTKDY1RUE2NzVENTg4M0MzQzk5NDhGQzgyNzYyMTE5RjNGRkMzRUE0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+n0B4X7LtXmJYVT08aLb8aLS ner2x/rKDImGPtj3VhE6Ar3cebfi7/VAHBXFTtnTmGtDry7WXEhFIgKAP8MCQc4K k0ZvOHXGtqIyF3uDhhSMK9VYHzXjRS5/5AnwxAekNGqBjIFPe+zYQA30NOQp1uEb 4nIBSWzRTWlIadxPcYug4KSnYgf9Mh9to7D+1T8VfXYSr1kxjaBXbG1rLRsTsOzm 0HEXko7ZUhvd1XQR+2Q3CIp9OqpA4RepJbBVsQt4oz2SC9q0XevUyv+YYoeWiBcx OIwFqTOXcvbaZeqGXQYToTdJ9jHLiXpif32HQVoWyaYVvbnEI+1xjsbl+YNdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZepnXViDw8mUj8gnYhGfP/w+pHIwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5MTI0MTA4NTk5NjIzNzEvMC8wRTRBNjRBOTBCNDhD OEVENEFBMjg2RTg4ODNENTk1Qjc2OUZERjhCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq+UxONcGfLP 27FGiu+a08WZDAOro9JsyYQ/vz6iFECwbfglzmC65X6M5BHN5jAI/oQ5TUP5WFfO 4W3jWoTs/ymepdKAHnYQmEXT6xOXYEYCFoRS9UmgjqU4BaCrvoUvhnbk4oZN0aRN 0EQDniMCHaimUQa0/k/AAuN5xomaGyRD+Ex7dnjIV5iTHmHjf3f/9CFwyKslBqRj 866ukIjt4zy/rn/0668KIgbPHoGmcQNNJ1iCG4Micb/peQghMvwGIE48Ir8zh51h UGMx2z46l9BlzqLowrlqDmSk/7w4TSFtE5pu4z5b5YNuHof0yqUDxRQFD05ZgzYj J6qntGk49g== -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:49 2026 by rpki-client