$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json) Hash identifier: 3cKNJjkhb8QqSspweGhzr4nnfFTIDDudyLPZwSzANew= Subject key identifier: EB:0B:40:C0:C5:DF:F8:78:A0:BC:BC:89:90:C5:E0:C5:47:31:20:A4 Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Certificate serial: 2BDAEDE18EE6576B63FEF7AAB15B146F82287C61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 12:24:43 +0000 Manifest this update: Fri 17 Apr 2026 12:19:43 +0000 Manifest next update: Sat 18 Apr 2026 15:16:43 +0000 Files and hashes: 1: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=) 2: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=) 3: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: Gzy2rvXwTe2TYEiuEoJ7ZLVt0wAVU0CstvLjhub8AHE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:da:ed:e1:8e:e6:57:6b:63:fe:f7:aa:b1:5b:14:6f:82:28:7c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Validity Not Before: Apr 17 12:19:43 2026 GMT Not After : Apr 18 15:16:43 2026 GMT Subject: CN=EB0B40C0C5DFF878A0BCBC8990C5E0C5473120A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:6f:ee:92:40:32:d2:95:94:ab:a1:0f:a5: 6e:36:25:dd:ec:28:ab:a1:4d:33:be:7a:0f:f8:94: bc:5d:57:74:d5:3f:38:ed:51:da:70:ff:38:49:23: 02:76:52:69:bc:24:ab:75:92:e9:eb:15:a7:79:3b: 9d:e4:2e:46:05:14:43:d6:9c:8b:eb:75:6d:4e:8f: d5:46:dc:8f:6a:2f:4d:67:d7:9e:ad:f4:b3:57:86: 68:61:ba:d5:8d:e4:95:51:3a:10:8a:d4:2b:fa:0f: f8:e7:08:1f:6c:5f:0f:62:52:3a:48:92:eb:24:27: a5:e2:03:55:d6:f4:ee:e8:34:8e:de:b8:9d:3e:f0: b5:44:87:3c:ca:74:91:92:29:7d:7d:09:5b:ae:ca: 91:15:be:3a:8a:51:ec:db:21:9d:76:f3:5a:bf:5e: 59:bc:53:a1:a3:e1:a0:95:bf:82:65:4a:b6:18:cd: cf:75:84:1f:90:04:60:ae:4a:2b:75:27:df:a5:36: a9:6f:75:ec:08:37:33:67:19:22:6a:53:c2:9a:4d: d6:74:a3:ba:ca:05:83:50:78:ad:dd:40:47:3e:54: 35:8d:c9:1f:b6:6c:42:fb:6a:dc:5d:c4:9c:41:0f: af:4d:44:64:4d:b6:45:f0:37:bd:f5:c5:4c:2d:9b: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0B:40:C0:C5:DF:F8:78:A0:BC:BC:89:90:C5:E0:C5:47:31:20:A4 X509v3 Authority Key Identifier: keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7d:89:9c:e8:59:71:52:75:d5:e4:3d:f2:37:3f:00:1e:66: fe:12:26:b8:7a:e9:3d:ed:c1:4b:a4:09:12:0a:dc:9b:61:8d: 2e:2c:48:8f:6e:52:d1:e2:6b:c2:d1:26:ba:b6:c3:97:82:05: d0:d2:4c:6e:e6:f4:64:12:12:a3:0c:38:7a:ab:5f:d2:2d:fe: 88:00:ba:98:4a:26:5f:52:97:a9:d4:49:c4:7e:c0:69:d3:94: 11:9f:47:e5:53:97:44:65:66:8c:3b:08:27:7e:0e:28:0d:d4: 60:6b:c9:bf:38:59:2c:8e:8f:84:8c:50:72:1e:ad:9c:ba:c5: 08:5b:db:f2:c6:5a:fc:d0:de:7e:13:fb:31:61:d5:e7:25:f5: c8:f5:80:3f:3a:58:34:cf:62:7a:58:15:b0:2f:d5:2e:6c:b7: 60:cf:8e:db:e6:ea:1a:0b:12:6f:72:72:7f:03:3a:fb:f1:32: 3a:0d:51:7c:14:f8:06:48:08:7c:ee:a1:41:3e:58:b5:6b:f0: 0d:2c:1a:cc:ac:f6:82:28:83:e5:c7:74:3c:c5:a7:57:38:3f: d4:ca:96:5d:a2:c8:04:08:ec:99:a2:c0:8c:48:0f:8e:e5:d9: 8c:5e:83:5d:04:ea:f5:40:c2:bd:d5:2f:1f:9f:68:2c:96:f5: ec:d7:ac:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK9rt4Y7mV2tj/veqsVsUb4IofGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBG RUIxRkZCMjAeFw0yNjA0MTcxMjE5NDNaFw0yNjA0MTgxNTE2NDNaMDMxMTAvBgNV BAMTKEVCMEI0MEMwQzVERkY4NzhBMEJDQkM4OTkwQzVFMEM1NDczMTIwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1A2/ukkAy0pWUq6EPpW42Jd3s KKuhTTO+eg/4lLxdV3TVPzjtUdpw/zhJIwJ2Umm8JKt1kunrFad5O53kLkYFFEPW nIvrdW1Oj9VG3I9qL01n156t9LNXhmhhutWN5JVROhCK1Cv6D/jnCB9sXw9iUjpI kuskJ6XiA1XW9O7oNI7euJ0+8LVEhzzKdJGSKX19CVuuypEVvjqKUezbIZ1281q/ Xlm8U6Gj4aCVv4JlSrYYzc91hB+QBGCuSit1J9+lNqlvdewINzNnGSJqU8KaTdZ0 o7rKBYNQeK3dQEc+VDWNyR+2bEL7atxdxJxBD69NRGRNtkXwN731xUwtm1jpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6wtAwMXf+HigvLyJkMXgxUcxIKQwHwYDVR0j BBgwFoAUeHFK7YcoHk9VpnxdQuj98P6x/7IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM3NDE2MjI2MTI3ODcyMy8wLzc4NzE0QUVEODcyODFFNEY1NUE2N0M1RDQyRThG REYwRkVCMUZGQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNzQxNjIyNjEyNzg3MjMvMC83ODcxNEFFRDg3Mjgx RTRGNTVBNjdDNUQ0MkU4RkRGMEZFQjFGRkIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX2JnOhZcVJ1 1eQ98jc/AB5m/hImuHrpPe3BS6QJEgrcm2GNLixIj25S0eJrwtEmurbDl4IF0NJM bub0ZBISoww4eqtf0i3+iAC6mEomX1KXqdRJxH7AadOUEZ9H5VOXRGVmjDsIJ34O KA3UYGvJvzhZLI6PhIxQch6tnLrFCFvb8sZa/NDefhP7MWHV5yX1yPWAPzpYNM9i elgVsC/VLmy3YM+O2+bqGgsSb3JyfwM6+/EyOg1RfBT4BkgIfO6hQT5YtWvwDSwa zKz2giiD5cd0PMWnVzg/1MqWXaLIBAjsmaLAjEgPjuXZjF6DXQTq9UDCvdUvH59o LJb17Neslg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:53:05 2026 by rpki-client