$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft File: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft (raw, json) Hash identifier: OpfcEMsqa4J5cZHWUgN5xLzvDdE45vhXiLGzuA30cBU= Subject key identifier: 0A:8C:86:D3:92:E1:3B:32:AF:4A:F4:55:38:E0:B3:35:28:48:E4:FB Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 7846CC3CB7414D61E021B7E6E2649575D4D94B6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft Manifest number: 06 Signing time: Fri 17 Apr 2026 07:09:41 +0000 Manifest this update: Fri 17 Apr 2026 07:04:41 +0000 Manifest next update: Sat 18 Apr 2026 07:21:41 +0000 Files and hashes: 1: 3134342e34382e3231332e302f32342d3234203d3e203536303436.roa (hash: 9rruxfBtc3Po2Kcfh6A2jkuFy4C64mi5rqrB9y/j9lg=) 2: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (hash: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E=) 3: 3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (hash: qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=) 4: 3130332e3231352e33392e302f32342d3234203d3e203536303436.roa (hash: p6FgftTcMGm810mxMbm4vOq8OBqCWSWi01lBsK+/mO0=) 5: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl (hash: gMF+42/CvEnsO+PfjIrfg7XKPbGlDo3UycfHUe0Ewus=) 6: 3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (hash: zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=) 7: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (hash: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=) 8: 3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (hash: Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=) 9: 3130332e3231352e33362e302f32322d3232203d3e203233363530.roa (hash: Z7qfxupQ6TOi75qeAxQIukqaySG+uH05FoMhY9vC090=) 10: 3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (hash: ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=) 11: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (hash: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo=) 12: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (hash: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:46:cc:3c:b7:41:4d:61:e0:21:b7:e6:e2:64:95:75:d4:d9:4b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Apr 17 07:04:41 2026 GMT Not After : Apr 18 07:21:41 2026 GMT Subject: CN=0A8C86D392E13B32AF4AF45538E0B3352848E4FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:a3:33:27:92:51:42:ce:d1:49:3b:72:c4: 6a:c8:cb:8f:b6:66:28:0c:0e:af:89:3a:92:ab:fd: 9d:16:c9:79:b1:07:52:1b:04:16:ab:c9:23:10:d0: 6e:0e:70:0c:e1:4b:f6:d0:30:cb:c5:4e:9f:c9:6d: 8f:8f:f2:e4:83:de:19:ab:b8:ff:05:b3:4e:1d:6b: 4a:2d:de:cd:fa:1c:98:65:8a:9a:8d:59:ac:13:f5: 7d:ad:b9:81:fc:36:a3:2a:8b:2f:7e:25:b8:d4:aa: ac:47:9e:13:4a:4e:a5:00:d9:20:54:fb:0b:3f:5b: 45:c0:e1:43:cc:21:7f:f3:96:de:c9:96:b4:e9:94: 8f:af:0c:23:ea:a7:d0:4c:0b:6f:a8:35:8f:3c:9d: a9:27:28:83:f1:a2:29:81:55:1a:f5:45:3b:0e:95: f1:d7:fb:0c:d1:69:85:0a:56:59:53:3f:5d:78:ec: 1c:53:6b:ea:47:aa:85:a2:c8:1f:86:72:eb:48:d0: 6d:99:8c:52:30:09:b9:e0:ca:79:18:15:c9:3e:f4: c2:03:61:69:16:f3:78:84:03:97:00:4b:c0:24:4f: 44:93:c1:c3:54:73:a9:de:6d:b5:7a:a6:bf:fd:4b: a2:aa:32:69:12:41:42:82:97:c3:88:61:c0:b6:3a: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8C:86:D3:92:E1:3B:32:AF:4A:F4:55:38:E0:B3:35:28:48:E4:FB X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3f:fd:21:99:2f:2d:27:3e:a6:e4:95:bf:68:b8:62:06:26: 75:0d:3b:8d:b2:81:cb:ba:92:a5:fd:60:34:8b:d9:db:17:fc: 36:95:2b:4e:39:43:38:52:59:ab:d4:76:a8:f8:54:c8:51:e0: 32:7a:40:58:67:10:aa:6c:84:02:24:d1:99:96:40:e4:79:ba: 86:ff:5e:78:4b:56:7c:92:2a:af:6b:7f:3a:d8:dd:92:1a:7b: 6c:21:f3:02:76:67:f2:8a:ac:38:c2:e3:42:c5:31:78:7b:60: 0b:31:eb:aa:12:67:44:c8:8a:e0:2b:52:a0:8b:5c:f3:8d:6a: 30:4c:f4:6d:c3:f9:ba:dc:f2:65:49:74:76:8b:ae:8b:76:9b: 7f:59:7a:9f:95:1d:e3:0c:37:7a:53:9c:46:75:19:fe:8d:b0: cf:2b:a6:ed:c3:e8:f3:1c:97:0d:9d:3c:24:b6:46:90:69:51: 7a:5a:b0:f8:7a:fc:e2:28:51:2e:92:df:6d:1e:5c:f9:c4:34: ff:3d:0b:b0:f6:77:2b:31:14:b5:86:f3:36:79:a1:3e:3d:e7: 6a:2a:4f:15:2d:80:47:ff:c8:35:7f:71:2d:ed:63:67:ef:9d: 8a:c9:20:f5:75:57:32:26:b8:fe:a8:83:57:e0:e6:b7:df:8a: b7:43:51:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeEbMPLdBTWHgIbfm4mSVddTZS20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA0MTcwNzA0NDFaFw0yNjA0MTgwNzIxNDFaMDMxMTAvBgNV BAMTKDBBOEM4NkQzOTJFMTNCMzJBRjRBRjQ1NTM4RTBCMzM1Mjg0OEU0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jKMzJ5JRQs7RSTtyxGrIy4+2 ZigMDq+JOpKr/Z0WyXmxB1IbBBarySMQ0G4OcAzhS/bQMMvFTp/JbY+P8uSD3hmr uP8Fs04da0ot3s36HJhlipqNWawT9X2tuYH8NqMqiy9+JbjUqqxHnhNKTqUA2SBU +ws/W0XA4UPMIX/zlt7JlrTplI+vDCPqp9BMC2+oNY88naknKIPxoimBVRr1RTsO lfHX+wzRaYUKVllTP1147BxTa+pHqoWiyB+GcutI0G2ZjFIwCbngynkYFck+9MID YWkW83iEA5cAS8AkT0STwcNUc6nebbV6pr/9S6KqMmkSQUKCl8OIYcC2OjljAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCoyG05LhOzKvSvRVOOCzNShI5PswHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTEyMTU1MTczODQ3MDUvMC9EMTM1OEU5NkE1Mjc4 QUMyMThBRkI3MThFMkExQkJFRjU0QjkxNDlELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmD/9IZkvLSc+ puSVv2i4YgYmdQ07jbKBy7qSpf1gNIvZ2xf8NpUrTjlDOFJZq9R2qPhUyFHgMnpA WGcQqmyEAiTRmZZA5Hm6hv9eeEtWfJIqr2t/Otjdkhp7bCHzAnZn8oqsOMLjQsUx eHtgCzHrqhJnRMiK4CtSoItc841qMEz0bcP5utzyZUl0douui3abf1l6n5Ud4ww3 elOcRnUZ/o2wzyum7cPo8xyXDZ08JLZGkGlRelqw+Hr84ihRLpLfbR5c+cQ0/z0L sPZ3KzEUtYbzNnmhPj3naipPFS2AR//INX9xLe1jZ++diskg9XVXMia4/qiDV+Dm t9+Kt0NREg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:34:21 2026 by rpki-client