$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json) Hash identifier: gifraZVrdwAIn9b1qaGy8i2CL6gLdambkolLO1NyT8I= Subject key identifier: 9A:AF:75:31:5F:78:66:59:EB:78:AE:58:8F:93:70:70:0E:3F:F3:8C Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 25F10E0AF3F636C0AAABB0B6D7F0AC274118DB02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft Manifest number: 07 Signing time: Fri 17 Apr 2026 14:39:43 +0000 Manifest this update: Fri 17 Apr 2026 14:34:43 +0000 Manifest next update: Sat 18 Apr 2026 15:55:43 +0000 Files and hashes: 1: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: m4lBoWTQfGidNIK5XpY34SeHWOy2ko4pZOaGqWMSvCM=) 2: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=) 3: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=) 4: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=) 5: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f1:0e:0a:f3:f6:36:c0:aa:ab:b0:b6:d7:f0:ac:27:41:18:db:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: Apr 17 14:34:43 2026 GMT Not After : Apr 18 15:55:43 2026 GMT Subject: CN=9AAF75315F786659EB78AE588F9370700E3FF38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:2f:e0:90:0c:98:49:fd:4a:03:3a:05:60: 88:96:ad:64:26:cc:61:59:47:ec:d1:61:70:45:a1: 7a:4e:34:49:8d:bd:ce:22:8d:fe:ca:01:34:56:27: b6:b0:f6:89:00:f0:be:26:03:dc:85:85:4b:31:84: 84:65:83:50:13:b3:32:f7:ec:72:97:17:55:bf:0e: 1e:91:ab:52:4a:e3:f8:1b:0e:66:e2:e9:a5:f9:b7: 56:dd:24:af:8a:c0:cb:a2:93:30:9c:2c:5e:2e:e9: 4c:5d:d6:0f:81:fc:65:7e:bb:78:af:ab:50:42:51: 30:e3:ef:43:ab:e7:b4:8a:d4:bf:75:2d:0b:b9:07: 20:ce:14:98:7c:a6:c2:fc:f5:c0:29:ed:81:56:57: 9b:20:67:53:e4:dc:d9:61:1a:97:8e:1d:5b:6e:f0: 18:9b:27:20:85:b7:13:a6:f6:4c:dd:09:6a:29:03: b7:19:e3:bb:52:21:00:8b:7c:c2:b4:0e:47:b4:6b: ab:d8:d9:2e:c9:6f:ce:a7:63:6e:0b:55:88:a2:ed: fb:90:e6:a4:37:ae:ca:a4:9c:f5:1d:64:14:0c:79: 05:9a:74:43:31:65:1d:ce:ea:b9:8d:11:a9:f1:05: 2c:10:c8:28:03:7e:61:86:35:da:b2:17:3d:f7:4c: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AF:75:31:5F:78:66:59:EB:78:AE:58:8F:93:70:70:0E:3F:F3:8C X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:ca:89:8e:13:0a:c9:44:f1:57:fb:63:d4:a3:d0:59:29:53: 58:c5:33:24:e3:a5:63:1d:5a:67:61:b5:61:ff:47:4f:cf:7d: a6:a2:4d:0b:e0:7a:d4:22:3c:99:04:00:d8:9a:55:8e:69:b0: f3:73:d8:5b:9f:66:20:13:c1:88:88:67:b1:6f:b4:56:b1:29: b9:39:ab:54:d4:85:1f:52:c2:5a:d9:22:74:a4:1e:2d:05:6a: ce:41:5a:bf:21:8b:7e:92:e7:68:f1:9f:c1:b0:48:c5:8e:cf: 56:7e:1b:aa:87:50:6f:de:bf:a6:8b:cb:58:9a:40:2f:92:88: ca:80:ab:4a:0c:13:86:ad:05:a4:61:d4:f8:11:27:72:c7:6b: 88:fa:70:7c:70:ee:98:33:02:03:ec:c4:9a:ac:5e:fb:4c:59: b9:66:fc:dd:de:08:3e:48:a1:50:18:df:f2:db:04:f9:e1:54: ba:2b:47:df:47:d5:6c:80:60:f2:50:e7:d6:b9:3f:ae:a7:12: ea:1d:80:69:cd:11:8a:7f:10:08:23:b7:0b:fb:22:d4:bb:bc: 09:0d:b6:82:13:4c:4a:88:81:23:0c:64:bb:dc:8d:19:1c:26: 8f:b6:e0:3a:bb:3b:22:a7:69:5f:61:80:53:6b:a9:6d:79:cb: d7:37:6e:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJfEOCvP2NsCqq7C21/CsJ0EY2wIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjA0MTcxNDM0NDNaFw0yNjA0MTgxNTU1NDNaMDMxMTAvBgNV BAMTKDlBQUY3NTMxNUY3ODY2NTlFQjc4QUU1ODhGOTM3MDcwMEUzRkYzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDi/gkAyYSf1KAzoFYIiWrWQm zGFZR+zRYXBFoXpONEmNvc4ijf7KATRWJ7aw9okA8L4mA9yFhUsxhIRlg1ATszL3 7HKXF1W/Dh6Rq1JK4/gbDmbi6aX5t1bdJK+KwMuikzCcLF4u6Uxd1g+B/GV+u3iv q1BCUTDj70Or57SK1L91LQu5ByDOFJh8psL89cAp7YFWV5sgZ1Pk3NlhGpeOHVtu 8BibJyCFtxOm9kzdCWopA7cZ47tSIQCLfMK0Dke0a6vY2S7Jb86nY24LVYii7fuQ 5qQ3rsqknPUdZBQMeQWadEMxZR3O6rmNEanxBSwQyCgDfmGGNdqyFz33TIXdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmq91MV94ZlnreK5Yj5NwcA4/84wwHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzY3Njc1ODMyNTY1NzgvMC8yQkI2MTczRDgxODkw RTQ3ODlFMUI0QkE2QTJFM0E5MTZDMzhBMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAycqJjhMKyUTx V/tj1KPQWSlTWMUzJOOlYx1aZ2G1Yf9HT899pqJNC+B61CI8mQQA2JpVjmmw83PY W59mIBPBiIhnsW+0VrEpuTmrVNSFH1LCWtkidKQeLQVqzkFavyGLfpLnaPGfwbBI xY7PVn4bqodQb96/povLWJpAL5KIyoCrSgwThq0FpGHU+BEncsdriPpwfHDumDMC A+zEmqxe+0xZuWb83d4IPkihUBjf8tsE+eFUuitH30fVbIBg8lDn1rk/rqcS6h2A ac0Rin8QCCO3C/si1Lu8CQ22ghNMSoiBIwxku9yNGRwmj7bgOrs7IqdpX2GAU2up bXnL1zdugQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:18 2026 by rpki-client