$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json) Hash identifier: /oHVOT3KdNzXvqwR2mN/02NTRsD/7gQYwihKuQqPWl4= Subject key identifier: 7A:10:8E:7B:04:3D:A0:63:61:B5:42:27:03:62:95:3F:E0:8C:62:3D Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Certificate serial: 63FD3311902C1F68511094A6B6A2EB3EAD3BACB6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 18:04:46 +0000 Manifest this update: Fri 17 Apr 2026 17:59:46 +0000 Manifest next update: Sat 18 Apr 2026 18:48:46 +0000 Files and hashes: 1: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=) 2: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: R4bc16M0jqTV2/QtnouUoHoXZDtQWAftfzHOu3znLDA=) 3: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fd:33:11:90:2c:1f:68:51:10:94:a6:b6:a2:eb:3e:ad:3b:ac:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309 Validity Not Before: Apr 17 17:59:46 2026 GMT Not After : Apr 18 18:48:46 2026 GMT Subject: CN=7A108E7B043DA06361B542270362953FE08C623D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:8e:09:95:a3:22:f1:5e:35:06:b6:59:2a: 79:81:4b:cf:ed:20:87:f9:ef:ea:91:35:ae:ed:be: b5:d4:c7:a4:1b:c3:05:45:ab:ed:f6:f6:05:4d:12: a7:09:a8:b6:4c:08:fe:a5:68:97:dc:16:b3:e5:8a: 76:aa:57:35:ab:ee:b2:75:f6:5d:fe:c2:05:45:6c: e4:0b:d7:0a:b5:f1:b1:58:5d:84:3a:e8:5c:2c:ce: 79:ec:05:ba:7d:d7:42:d4:3c:d0:7d:73:30:28:0b: 9b:5a:bf:ea:85:5a:39:1d:aa:0f:ac:9f:e7:b1:c0: 43:b5:08:47:43:b7:0e:9b:85:34:fd:46:fd:79:e6: 5a:aa:99:37:e7:5e:96:24:47:24:af:f4:6f:ed:8c: 4d:62:35:8e:43:41:cf:ef:25:eb:ea:d4:0e:a2:ba: 90:98:22:52:88:92:4c:b6:c5:13:37:a8:d1:aa:70: 42:0e:74:9c:bb:41:65:25:8f:06:4c:4f:97:e6:5d: 01:42:0b:d0:ca:52:17:88:1d:7a:5b:f7:7c:d5:c0: 03:e9:8b:0c:a6:d2:21:04:6f:88:81:8d:83:5d:6f: a8:d5:3d:02:d7:38:44:07:82:63:2b:93:a4:35:41: 5d:35:c4:c1:fc:79:9b:38:ca:8d:13:58:a8:63:00: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:10:8E:7B:04:3D:A0:63:61:B5:42:27:03:62:95:3F:E0:8C:62:3D X509v3 Authority Key Identifier: keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c4:6f:b1:42:da:62:1d:e6:64:75:91:e8:35:7d:0c:90:9e: d5:5c:95:a6:ea:54:3c:57:ad:ae:3b:68:2e:d2:61:96:43:ea: ad:5c:7b:4c:92:e8:1f:4b:79:31:7c:a2:13:53:e2:13:fe:e7: 17:48:3c:ba:ee:20:22:cb:02:f9:ab:96:ec:ac:2b:ad:9d:bf: 48:f7:30:1c:a7:e4:8c:9d:87:c1:9b:17:9b:90:d0:e9:d4:ca: b8:a4:1d:c9:ca:f4:77:21:17:9d:21:68:c4:29:40:7c:45:a4: 8e:c7:35:af:f6:e9:c2:7f:5f:81:d3:1e:93:63:7f:2a:42:84: 2a:e6:50:54:57:51:06:ff:53:b5:86:ff:0b:d5:70:e3:94:e5: 31:68:a2:d4:92:5f:40:7e:ee:0e:f1:ba:8e:37:af:11:35:24: a4:05:65:c3:3f:53:d7:5d:f6:d6:4c:35:08:72:71:2c:0c:6e: 89:d8:3c:ea:7b:cf:98:da:46:b2:0e:54:9c:37:09:ce:82:38: 4d:b9:7f:49:f4:89:b5:16:46:60:59:9b:f5:e1:37:b5:e9:9b: 41:52:0d:47:55:a0:c6:f1:6e:c0:df:51:2b:82:77:a1:b0:06: 7d:0a:96:70:44:1c:61:5f:98:7a:39:9b:a4:d7:63:86:96:23: ae:67:c1:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY/0zEZAsH2hREJSmtqLrPq07rLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVB RTZFNzMwOTAeFw0yNjA0MTcxNzU5NDZaFw0yNjA0MTgxODQ4NDZaMDMxMTAvBgNV BAMTKDdBMTA4RTdCMDQzREEwNjM2MUI1NDIyNzAzNjI5NTNGRTA4QzYyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD44JlaMi8V41BrZZKnmBS8/t IIf57+qRNa7tvrXUx6QbwwVFq+329gVNEqcJqLZMCP6laJfcFrPlinaqVzWr7rJ1 9l3+wgVFbOQL1wq18bFYXYQ66FwsznnsBbp910LUPNB9czAoC5tav+qFWjkdqg+s n+exwEO1CEdDtw6bhTT9Rv155lqqmTfnXpYkRySv9G/tjE1iNY5DQc/vJevq1A6i upCYIlKIkky2xRM3qNGqcEIOdJy7QWUljwZMT5fmXQFCC9DKUheIHXpb93zVwAPp iwym0iEEb4iBjYNdb6jVPQLXOEQHgmMrk6Q1QV01xMH8eZs4yo0TWKhjAKQVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUehCOewQ9oGNhtUInA2KVP+CMYj0wHwYDVR0j BBgwFoAUsblCkzaoYEZ8cQU93qBWXq5ucwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NjU5NTI3MDkxODE0Ny8wL0IxQjk0MjkzMzZBODYwNDY3QzcxMDUzRERFQTA1 NjVFQUU2RTczMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFCOTQyOTMzNkE4NjA0NjdDNzEwNTNEREVBMDU2NUVBRTZFNzMwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjY1OTUyNzA5MTgxNDcvMC9CMUI5NDI5MzM2QTg2 MDQ2N0M3MTA1M0RERUEwNTY1RUFFNkU3MzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusRvsULaYh3m ZHWR6DV9DJCe1VyVpupUPFetrjtoLtJhlkPqrVx7TJLoH0t5MXyiE1PiE/7nF0g8 uu4gIssC+auW7KwrrZ2/SPcwHKfkjJ2HwZsXm5DQ6dTKuKQdycr0dyEXnSFoxClA fEWkjsc1r/bpwn9fgdMek2N/KkKEKuZQVFdRBv9TtYb/C9Vw45TlMWii1JJfQH7u DvG6jjevETUkpAVlwz9T11321kw1CHJxLAxuidg86nvPmNpGsg5UnDcJzoI4Tbl/ SfSJtRZGYFmb9eE3tembQVINR1WgxvFuwN9RK4J3obAGfQqWcEQcYV+YejmbpNdj hpYjrmfB5Q== -----END CERTIFICATE-----Generated at Fri Apr 17 22:27:42 2026 by rpki-client