$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json) Hash identifier: njO8sqErUEnehGAhYsXAWBtpIwG+srd7HUga9USztO0= Subject key identifier: F6:5E:8D:74:5C:06:58:3D:D4:2B:AB:BE:E6:63:DF:3C:F2:3F:B3:72 Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 7B3E259697AED05701F7F052EDDA2E1AA776C30F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 00:34:37 +0000 Manifest this update: Fri 17 Apr 2026 00:29:37 +0000 Manifest next update: Sat 18 Apr 2026 03:47:37 +0000 Files and hashes: 1: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: 7h+t9JnbrWcmKJbL5z3rZU+ADNvW5+mHLhNdmFg+4A8=) 2: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3e:25:96:97:ae:d0:57:01:f7:f0:52:ed:da:2e:1a:a7:76:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: Apr 17 00:29:37 2026 GMT Not After : Apr 18 03:47:37 2026 GMT Subject: CN=F65E8D745C06583DD42BABBEE663DF3CF23FB372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:41:d3:1c:31:13:57:9c:9b:63:6b:dc:09: 62:a6:2c:1f:ef:44:f1:53:f5:df:3b:c2:47:ac:89: cd:70:6c:99:22:5f:1d:f1:ec:51:81:71:4d:74:30: f9:7d:ce:44:64:8a:f3:cf:96:3b:ba:05:46:ba:e4: 41:25:b3:f6:5b:07:f6:fb:d8:6c:98:23:6b:c3:78: e3:51:fd:b2:94:3c:5e:15:c6:39:5f:d3:67:aa:51: 8b:34:35:02:52:2c:e7:8a:52:5b:82:8c:01:24:10: 6d:90:70:f9:7f:26:2b:8f:73:a2:3c:1f:f1:92:48: fc:44:f1:cd:36:34:63:86:bc:8a:6b:84:94:87:cc: a1:87:c8:18:7e:1b:54:30:f2:83:d6:3e:50:a0:de: 61:8f:a8:20:3f:b7:38:22:19:30:c6:9f:b5:7b:9b: 6e:94:f8:1c:79:3c:94:6b:cb:29:02:5c:6c:aa:56: fc:60:0e:a0:d6:5b:5a:77:5c:95:32:94:88:79:87: e3:b8:3b:78:ea:be:af:f7:69:30:88:be:02:72:69: bd:8f:fb:80:60:0a:b5:14:be:3e:92:da:e9:86:a4: 19:59:e0:35:18:e1:63:a8:ee:ab:00:9d:57:be:5d: c6:e0:d7:86:b6:e0:f8:58:68:49:19:11:f4:29:1a: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5E:8D:74:5C:06:58:3D:D4:2B:AB:BE:E6:63:DF:3C:F2:3F:B3:72 X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3e:71:89:af:06:25:a2:e2:94:ba:87:2a:48:2c:d1:5c:d1: d3:c2:e8:e6:79:52:ed:89:80:f9:f6:44:83:65:e5:d6:2b:7b: 22:f0:dc:87:c7:a1:70:8f:4c:5a:7b:c3:a9:eb:60:d9:2c:97: 73:0a:81:ed:d1:8f:a3:44:5f:74:b0:be:2d:7c:fc:0f:76:a0: 1d:c1:c0:34:4b:e3:27:19:ac:12:6b:b3:b3:c1:ef:89:66:61: 47:c1:04:b1:c4:82:3b:a9:31:64:13:7e:39:a7:ed:bc:8e:13: 9b:01:de:c6:7e:cf:1d:e7:5a:0e:29:b6:b8:4d:08:11:0a:f8: 71:4e:9b:46:f5:7e:3c:45:88:fb:bf:a8:b3:7d:36:69:c7:6c: 20:32:ac:23:9e:e1:f1:64:b9:8c:03:9d:1f:39:95:16:f0:5d: 98:f5:7f:89:d0:c0:09:82:0a:28:ef:c2:05:44:df:92:57:84: b0:18:4d:75:3f:af:ae:3e:ef:fe:31:d7:82:63:1b:8c:61:75: 2c:50:9f:80:46:aa:67:6a:d6:d0:0c:b5:50:33:ca:89:40:d8: 40:60:75:dd:71:da:39:ed:84:99:d9:9d:34:c5:a3:5c:4a:47: 5a:2e:fb:50:32:89:74:9a:70:15:91:53:19:fd:42:4e:be:eb: 91:bc:15:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUez4llpeu0FcB9/BS7douGqd2ww8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjA0MTcwMDI5MzdaFw0yNjA0MTgwMzQ3MzdaMDMxMTAvBgNV BAMTKEY2NUU4RDc0NUMwNjU4M0RENDJCQUJCRUU2NjNERjNDRjIzRkIzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGG0HTHDETV5ybY2vcCWKmLB/v RPFT9d87wkesic1wbJkiXx3x7FGBcU10MPl9zkRkivPPlju6BUa65EEls/ZbB/b7 2GyYI2vDeONR/bKUPF4Vxjlf02eqUYs0NQJSLOeKUluCjAEkEG2QcPl/JiuPc6I8 H/GSSPxE8c02NGOGvIprhJSHzKGHyBh+G1Qw8oPWPlCg3mGPqCA/tzgiGTDGn7V7 m26U+Bx5PJRryykCXGyqVvxgDqDWW1p3XJUylIh5h+O4O3jqvq/3aTCIvgJyab2P +4BgCrUUvj6S2umGpBlZ4DUY4WOo7qsAnVe+Xcbg14a24PhYaEkZEfQpGmfPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9l6NdFwGWD3UK6u+5mPfPPI/s3IwHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC9FQzdFNDc2REQxRkE2 NUExQTEzQzc0RThBNTQ3QzlFMUQyN0Q4REYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnD5xia8GJaLi lLqHKkgs0VzR08Lo5nlS7YmA+fZEg2Xl1it7IvDch8ehcI9MWnvDqetg2SyXcwqB 7dGPo0RfdLC+LXz8D3agHcHANEvjJxmsEmuzs8HviWZhR8EEscSCO6kxZBN+Oaft vI4TmwHexn7PHedaDim2uE0IEQr4cU6bRvV+PEWI+7+os302acdsIDKsI57h8WS5 jAOdHzmVFvBdmPV/idDACYIKKO/CBUTfkleEsBhNdT+vrj7v/jHXgmMbjGF1LFCf gEaqZ2rW0Ay1UDPKiUDYQGB13XHaOe2EmdmdNMWjXEpHWi77UDKJdJpwFZFTGf1C Tr7rkbwV5w== -----END CERTIFICATE-----Generated at Fri Apr 17 04:00:14 2026 by rpki-client