$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json) Hash identifier: lnBVdiXVVgucm3LRnZKP2pmJ1M+8B1aDrX90Xmq3VIM= Subject key identifier: D0:E8:C5:D9:66:E1:DD:C8:C4:62:F0:35:D8:C8:66:0B:93:56:6F:D5 Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Certificate serial: 38D15E19D025C39ABB22C9ABCB548189044B59B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft Manifest number: 06 Signing time: Fri 17 Apr 2026 17:14:43 +0000 Manifest this update: Fri 17 Apr 2026 17:09:43 +0000 Manifest next update: Sat 18 Apr 2026 20:24:43 +0000 Files and hashes: 1: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=) 2: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: rYF5qxWiTvyWrgsE7009OumfSksiTnvLdLVjOlLRWmE=) 3: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=) 4: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d1:5e:19:d0:25:c3:9a:bb:22:c9:ab:cb:54:81:89:04:4b:59:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7 Validity Not Before: Apr 17 17:09:43 2026 GMT Not After : Apr 18 20:24:43 2026 GMT Subject: CN=D0E8C5D966E1DDC8C462F035D8C8660B93566FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:12:8a:fa:dc:fa:2b:6f:24:82:a8:e2:fa:70: 2f:c1:08:62:bd:6d:a0:4b:62:c7:0f:f7:24:2c:75: e7:a2:41:4d:f1:b1:b1:8a:f5:fa:76:62:97:1d:bb: 17:3c:5f:db:fc:f3:62:78:63:6d:65:76:f6:f7:24: a9:de:14:b6:4d:ac:a9:e4:55:50:d9:3f:b5:97:09: df:87:15:60:bd:e6:50:09:31:f1:5d:41:d8:c9:90: 35:a8:89:1d:67:6c:87:ed:62:46:f7:63:37:16:ec: bf:af:81:91:da:df:a3:0d:bc:40:25:ae:45:9d:6e: 7f:d2:65:3e:f6:82:04:a2:84:8e:97:9b:95:5f:ca: 87:27:ba:2f:3f:a7:b0:d9:88:4a:80:37:75:39:4c: 53:d1:fd:83:b9:46:5a:a5:df:32:84:87:f3:54:67: 36:35:a0:a7:fc:51:82:6c:d2:7a:03:67:09:1b:86: bf:49:ee:bb:a8:99:52:9a:e1:4e:35:d7:92:42:cd: d7:45:ef:76:e5:4b:1c:6c:4a:7d:a3:30:fa:63:40: 8c:77:af:1d:38:1c:6d:00:06:e1:fb:33:8c:ac:6d: a7:00:0e:22:eb:6c:1c:89:f8:93:ed:bf:c4:58:72: cf:f0:fa:46:47:8a:77:5f:b1:27:af:bc:df:5d:7d: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E8:C5:D9:66:E1:DD:C8:C4:62:F0:35:D8:C8:66:0B:93:56:6F:D5 X509v3 Authority Key Identifier: keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2b:97:32:fa:d1:ab:04:2a:c0:7d:40:74:72:18:82:24:d8: 45:bf:61:e6:ec:85:08:a4:ea:98:cb:01:72:b7:3a:da:12:02: 43:38:a9:56:1c:af:a2:0b:a1:70:d6:32:83:5f:6e:e1:9f:43: 8a:3f:5d:45:ad:9a:e9:e6:13:ea:c5:37:59:08:67:64:38:b8: 18:90:fc:b9:db:74:05:75:a7:3f:2e:1d:09:8e:79:0a:7b:11: 3f:98:18:58:c7:11:a1:62:55:9f:4c:7a:c8:1c:19:87:48:ed: 68:44:31:fc:6b:a0:e7:8d:bc:70:e0:85:33:65:9c:0e:05:8c: dd:05:12:0a:cc:c0:9b:c9:58:10:66:f3:f6:27:c7:f1:75:23: 32:59:06:53:72:e2:66:94:f7:9f:97:0c:c7:4d:69:aa:6d:aa: f0:2a:4c:35:54:cf:e8:5d:50:96:14:be:02:e1:91:c1:bc:85: 17:0f:75:6a:f3:86:2a:ea:a6:e2:95:d4:5c:4e:89:e0:ca:7f: d4:13:d4:7a:41:d9:fc:57:96:9d:48:2f:b7:95:42:8c:4b:82: af:3d:0a:f4:75:01:cd:f4:52:f8:60:d7:04:79:2d:d0:98:0b: 9f:06:21:88:75:47:3e:42:ed:cb:69:3a:30:11:b7:e0:20:61: 68:d8:08:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUONFeGdAlw5q7Ismry1SBiQRLWbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0 NzVFMkRCNzAeFw0yNjA0MTcxNzA5NDNaFw0yNjA0MTgyMDI0NDNaMDMxMTAvBgNV BAMTKEQwRThDNUQ5NjZFMUREQzhDNDYyRjAzNUQ4Qzg2NjBCOTM1NjZGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Eor63PorbySCqOL6cC/BCGK9 baBLYscP9yQsdeeiQU3xsbGK9fp2Ypcduxc8X9v882J4Y21ldvb3JKneFLZNrKnk VVDZP7WXCd+HFWC95lAJMfFdQdjJkDWoiR1nbIftYkb3YzcW7L+vgZHa36MNvEAl rkWdbn/SZT72ggSihI6Xm5Vfyocnui8/p7DZiEqAN3U5TFPR/YO5Rlql3zKEh/NU ZzY1oKf8UYJs0noDZwkbhr9J7ruomVKa4U4115JCzddF73blSxxsSn2jMPpjQIx3 rx04HG0ABuH7M4ysbacADiLrbByJ+JPtv8RYcs/w+kZHindfsSevvN9dfSWPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0OjF2Wbh3cjEYvA12MhmC5NWb9UwHwYDVR0j BBgwFoAU+Mb5Nn9Nc09x8IyOFTzFIEdeLbcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2OTMxMDAzODc1MzI4MS8wL0Y4QzZGOTM2N0Y0RDczNEY3MUYwOEM4RTE1M0ND NTIwNDc1RTJEQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhDNkY5MzY3RjRENzM0RjcxRjA4QzhFMTUzQ0M1MjA0NzVFMkRCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjkzMTAwMzg3NTMyODEvMC9GOEM2RjkzNjdGNEQ3 MzRGNzFGMDhDOEUxNTNDQzUyMDQ3NUUyREI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniuXMvrRqwQq wH1AdHIYgiTYRb9h5uyFCKTqmMsBcrc62hICQzipVhyvoguhcNYyg19u4Z9Dij9d Ra2a6eYT6sU3WQhnZDi4GJD8udt0BXWnPy4dCY55CnsRP5gYWMcRoWJVn0x6yBwZ h0jtaEQx/Gug5428cOCFM2WcDgWM3QUSCszAm8lYEGbz9ifH8XUjMlkGU3LiZpT3 n5cMx01pqm2q8CpMNVTP6F1QlhS+AuGRwbyFFw91avOGKuqm4pXUXE6J4Mp/1BPU ekHZ/FeWnUgvt5VCjEuCrz0K9HUBzfRS+GDXBHkt0JgLnwYhiHVHPkLty2k6MBG3 4CBhaNgIWw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:38 2026 by rpki-client