$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft File: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json) Hash identifier: Y9hdQNeSadE/1ZzL3wqKhRsp4KaeZIm/vIhPWE9/JdA= Subject key identifier: 86:9E:83:5E:65:10:C7:81:62:69:79:FA:47:01:C7:12:DC:28:8C:71 Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Certificate serial: 78265E7F967CA013E9C6C02BCFB7AFBBF41F1498 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft Manifest number: 22 Signing time: Fri 17 Apr 2026 09:49:42 +0000 Manifest this update: Fri 17 Apr 2026 09:44:42 +0000 Manifest next update: Sat 18 Apr 2026 12:25:42 +0000 Files and hashes: 1: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=) 2: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=) 3: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=) 4: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=) 5: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=) 6: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=) 7: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=) 8: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=) 9: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=) 10: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=) 11: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=) 12: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=) 13: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=) 14: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=) 15: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=) 16: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=) 17: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=) 18: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=) 19: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=) 20: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=) 21: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=) 22: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=) 23: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=) 24: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=) 25: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: gCmLktrsYEso7U2dZhb4hAZB1BeEaeU1QdBlCHHC4Gg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:26:5e:7f:96:7c:a0:13:e9:c6:c0:2b:cf:b7:af:bb:f4:1f:14:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Validity Not Before: Apr 17 09:44:42 2026 GMT Not After : Apr 18 12:25:42 2026 GMT Subject: CN=869E835E6510C781626979FA4701C712DC288C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:46:3e:63:cf:d9:34:13:b0:cd:98:2d:6b: 6e:c9:95:ad:cd:90:c7:11:f4:5c:02:37:8c:d5:5a: bf:37:0f:be:c6:aa:2e:02:61:9a:9a:d2:4e:43:73: bf:fb:b6:28:45:42:12:9d:55:be:70:08:26:36:8d: a6:ff:59:f3:64:25:d0:9b:ef:c9:4f:e9:7b:5f:59: cd:99:d3:21:80:ce:d9:18:01:62:2a:56:ec:97:1b: 25:bf:ad:70:4e:51:cf:fa:fa:82:fa:23:a4:d5:65: f8:2b:ef:6e:6d:ed:4c:70:eb:10:b9:1d:b3:61:83: 06:b2:fb:1a:53:8c:16:51:f7:bf:fc:35:3e:e8:b6: 92:5f:ac:73:5b:9c:24:80:9e:94:49:43:11:d5:ce: a3:ce:1c:56:2e:48:3b:a3:a7:b2:9e:04:6e:da:2c: 0c:62:f3:18:d3:6e:4b:58:07:80:9f:cf:ca:8a:c2: 49:3c:7e:e7:cb:02:85:5e:55:d7:60:1a:d3:8d:e9: 8e:39:41:a5:7e:d6:66:a1:7c:2f:81:7d:16:ad:a4: 8f:57:3d:1f:82:c8:dc:88:d4:50:97:61:c1:06:69: a2:69:04:58:0b:21:71:12:0b:e2:7e:75:3b:9e:2f: 5c:53:41:23:df:22:49:f7:7b:1a:3d:3d:b3:3b:b2: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9E:83:5E:65:10:C7:81:62:69:79:FA:47:01:C7:12:DC:28:8C:71 X509v3 Authority Key Identifier: keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7a:e8:34:7f:4d:ca:47:cb:ba:7c:17:aa:51:7c:bc:9b:66: b9:ac:25:50:2f:15:76:14:7c:82:be:df:69:34:25:1b:d3:7f: e2:fd:47:c2:9f:b5:be:d3:1f:1f:e5:f9:3d:a5:1b:2d:34:29: 1e:4a:8a:5f:9f:bb:57:c4:26:67:9c:59:ca:d4:0d:ca:18:3d: 47:13:40:9c:6b:c0:b0:85:3a:b7:4c:44:dc:e7:06:0b:c9:01: fb:bb:83:f8:77:39:7d:c1:b4:aa:16:4f:06:3e:cb:ca:fd:a8: e5:9c:e2:be:b7:61:ef:5c:14:32:85:b7:1d:a6:b3:3f:b6:e7: 31:25:73:0f:80:3f:ab:47:0e:17:86:8f:eb:f9:8d:15:7b:08: c0:1b:72:10:84:8e:ec:87:cc:e0:eb:27:5d:e5:9e:9a:e8:b8: bb:f2:0a:74:54:0d:da:ba:6b:d3:59:3c:6d:08:47:af:4d:09: 4c:22:f1:9d:29:17:84:07:f4:31:f0:d6:88:d6:2a:a8:ed:28: 34:0e:02:07:65:16:b2:e2:62:ac:df:3d:d8:ae:c8:dc:1c:90: 1d:1a:86:2d:e9:84:d0:83:3d:6e:8f:57:f4:7a:20:e0:88:40: e6:49:26:ed:43:e0:6d:c5:f5:ee:b3:09:54:d0:cc:bd:87:da: c3:8d:14:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeCZef5Z8oBPpxsArz7evu/QfFJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy MjZFRjhBODAeFw0yNjA0MTcwOTQ0NDJaFw0yNjA0MTgxMjI1NDJaMDMxMTAvBgNV BAMTKDg2OUU4MzVFNjUxMEM3ODE2MjY5NzlGQTQ3MDFDNzEyREMyODhDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSkY+Y8/ZNBOwzZgta27Jla3N kMcR9FwCN4zVWr83D77Gqi4CYZqa0k5Dc7/7tihFQhKdVb5wCCY2jab/WfNkJdCb 78lP6XtfWc2Z0yGAztkYAWIqVuyXGyW/rXBOUc/6+oL6I6TVZfgr725t7Uxw6xC5 HbNhgway+xpTjBZR97/8NT7otpJfrHNbnCSAnpRJQxHVzqPOHFYuSDujp7KeBG7a LAxi8xjTbktYB4Cfz8qKwkk8fufLAoVeVddgGtON6Y45QaV+1mahfC+BfRatpI9X PR+CyNyI1FCXYcEGaaJpBFgLIXESC+J+dTueL1xTQSPfIkn3exo9PbM7sr/PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhp6DXmUQx4FiaXn6RwHHEtwojHEwHwYDVR0j BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0 NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY1ODY3NjQwMTQ4NDU5NTUvMC9GOEI0RkMyOUZFRjIw QURGQUZCMjRBNkRBRjVGNDQxNTIyNkVGOEE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXroNH9NykfL unwXqlF8vJtmuawlUC8VdhR8gr7faTQlG9N/4v1Hwp+1vtMfH+X5PaUbLTQpHkqK X5+7V8QmZ5xZytQNyhg9RxNAnGvAsIU6t0xE3OcGC8kB+7uD+Hc5fcG0qhZPBj7L yv2o5Zzivrdh71wUMoW3HaazP7bnMSVzD4A/q0cOF4aP6/mNFXsIwBtyEISO7IfM 4OsnXeWemui4u/IKdFQN2rpr01k8bQhHr00JTCLxnSkXhAf0MfDWiNYqqO0oNA4C B2UWsuJirN892K7I3ByQHRqGLemE0IM9bo9X9Hog4IhA5kkm7UPgbcX17rMJVNDM vYfaw40Uvw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:30:32 2026 by rpki-client