$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: hbCg1bDIUgFzz+hzeJPsjLN9QU3hvBOp8+cUPZ/VYZk= Subject key identifier: AC:9A:C6:13:F9:2E:8B:5F:4D:11:6D:3F:21:B8:21:6E:DF:86:9B:E2 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 56E73015B3AFAA890937CC286D7E9EAE734553BA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 15:29:43 +0000 Manifest this update: Fri 17 Apr 2026 15:24:43 +0000 Manifest next update: Sat 18 Apr 2026 16:33:43 +0000 Files and hashes: 1: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: 8Qe6u4MKUT9X+D9eSF5doJAHQzTrC+GZxErf6UyykZI=) 2: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e7:30:15:b3:af:aa:89:09:37:cc:28:6d:7e:9e:ae:73:45:53:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Apr 17 15:24:43 2026 GMT Not After : Apr 18 16:33:43 2026 GMT Subject: CN=AC9AC613F92E8B5F4D116D3F21B8216EDF869BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:ac:50:fa:4f:ee:46:5d:76:94:f5:03:40: 16:ec:b4:3f:54:fa:46:5a:48:42:f1:b7:90:85:5e: 9c:ef:9e:11:fc:99:cc:bc:0c:07:ee:6c:e8:70:23: 8d:99:e3:08:14:dd:63:06:b3:44:6a:65:e4:fb:33: 1f:d9:65:22:fc:2c:a2:26:d8:46:89:cd:2f:ca:9d: 56:b9:98:71:60:c3:f4:16:a1:e5:66:2c:6b:c7:95: 11:46:69:44:cb:eb:1d:ec:40:d6:1e:bd:ef:cd:fe: 53:2b:c2:4e:66:1a:e0:2d:a1:96:80:be:a7:4c:32: 82:e1:fd:1c:c6:00:6b:f1:e8:e2:1b:3b:b3:f2:6e: c4:c4:6c:3b:53:2b:57:20:5b:9b:fa:dd:30:12:bd: 05:4f:15:cf:41:3f:c8:13:f5:f2:6c:c8:1d:2b:e3: 1e:b8:30:ee:f6:ff:b4:af:b0:0d:12:cd:42:5f:0f: 11:fa:06:3b:0a:fb:b1:95:4f:9a:49:3b:7b:88:23: 89:f1:23:4e:08:be:88:2a:95:88:14:28:81:7e:1e: 4d:d8:32:4e:3d:39:b7:4c:a7:1e:e6:e1:ef:4e:62: 07:e7:d8:2c:40:b8:ee:31:a1:31:93:3d:06:43:21: 04:3c:f3:e2:9b:35:34:de:3a:5f:51:39:c7:2d:63: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9A:C6:13:F9:2E:8B:5F:4D:11:6D:3F:21:B8:21:6E:DF:86:9B:E2 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:82:e0:14:bc:2b:f7:29:6c:a9:36:f1:19:85:21:f7:b5:1c: 75:7a:3d:7f:01:be:b2:b0:76:49:cf:97:e6:98:22:b7:45:ad: 1b:90:21:f0:e5:01:25:e0:a9:02:08:72:56:d2:5b:a6:32:7e: c8:b6:b2:67:a8:c5:e6:e8:26:3b:4d:5a:74:8f:44:80:fb:7c: e8:80:ed:e4:25:4a:16:4b:ba:02:bd:12:81:55:85:04:84:85: 04:09:bf:9c:4b:3f:e3:8c:fc:64:08:25:5e:32:43:4d:1a:52: 4b:9f:01:fc:03:25:c2:23:da:4d:47:95:37:96:8c:b0:2e:31: c8:79:ce:d9:d5:2e:b5:f3:d5:cd:22:b9:8a:d9:0c:af:cb:c9: c0:3d:ca:2e:43:6c:dc:84:21:d6:a8:d3:9d:99:3a:0c:0b:b6: 49:f0:9f:5f:b4:06:a0:a9:7c:0b:98:b7:e9:26:d1:9f:b5:1b: c6:21:76:f6:0c:8a:68:d4:b0:37:94:a9:f9:6a:47:9f:c2:bb: 8f:b3:48:10:a4:15:62:c1:5e:6c:1e:19:85:fc:59:3c:f1:64: 4d:f6:f8:d1:30:51:50:02:77:1f:93:11:b7:33:3f:be:af:6d: b0:9d:85:5d:8e:50:71:45:39:41:bf:0f:dd:ca:d2:75:1d:4a: f7:a2:fc:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVucwFbOvqokJN8wobX6ernNFU7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjA0MTcxNTI0NDNaFw0yNjA0MTgxNjMzNDNaMDMxMTAvBgNV BAMTKEFDOUFDNjEzRjkyRThCNUY0RDExNkQzRjIxQjgyMTZFREY4NjlCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUqxQ+k/uRl12lPUDQBbstD9U +kZaSELxt5CFXpzvnhH8mcy8DAfubOhwI42Z4wgU3WMGs0RqZeT7Mx/ZZSL8LKIm 2EaJzS/KnVa5mHFgw/QWoeVmLGvHlRFGaUTL6x3sQNYeve/N/lMrwk5mGuAtoZaA vqdMMoLh/RzGAGvx6OIbO7PybsTEbDtTK1cgW5v63TASvQVPFc9BP8gT9fJsyB0r 4x64MO72/7SvsA0SzUJfDxH6BjsK+7GVT5pJO3uII4nxI04IvogqlYgUKIF+Hk3Y Mk49ObdMpx7m4e9OYgfn2CxAuO4xoTGTPQZDIQQ88+KbNTTeOl9ROcctY7SxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrJrGE/kui19NEW0/Ibghbt+Gm+IwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFILgFLwr9yls qTbxGYUh97UcdXo9fwG+srB2Sc+X5pgit0WtG5Ah8OUBJeCpAghyVtJbpjJ+yLay Z6jF5ugmO01adI9EgPt86IDt5CVKFku6Ar0SgVWFBISFBAm/nEs/44z8ZAglXjJD TRpSS58B/AMlwiPaTUeVN5aMsC4xyHnO2dUutfPVzSK5itkMr8vJwD3KLkNs3IQh 1qjTnZk6DAu2SfCfX7QGoKl8C5i36SbRn7UbxiF29gyKaNSwN5Sp+WpHn8K7j7NI EKQVYsFebB4ZhfxZPPFkTfb40TBRUAJ3H5MRtzM/vq9tsJ2FXY5QcUU5Qb8P3crS dR1K96L8rQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:05 2026 by rpki-client