$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: igSDklCWGXzkGh8LjsagkRitEgjLW3ue52iDla0LRdE= Subject key identifier: DC:44:A6:97:06:75:3F:CE:60:77:25:CA:A8:48:9D:0A:99:E9:23:88 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 74E9DBEDEFD9A27CE2A3EEE895C09533014DD244 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 01:44:38 +0000 Manifest this update: Fri 17 Apr 2026 01:39:38 +0000 Manifest next update: Sat 18 Apr 2026 05:23:38 +0000 Files and hashes: 1: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: 76DG8b4k9s4+LVfTuykr6RTnHrH2DmSfAUOA+sVzIl8=) 2: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) 3: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 4: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) 5: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 6: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e9:db:ed:ef:d9:a2:7c:e2:a3:ee:e8:95:c0:95:33:01:4d:d2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Apr 17 01:39:38 2026 GMT Not After : Apr 18 05:23:38 2026 GMT Subject: CN=DC44A69706753FCE607725CAA8489D0A99E92388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:d2:ae:40:59:00:22:4b:fb:21:10:25:c8: 3f:e8:e1:f4:c7:94:a9:23:0d:59:f1:cd:66:51:e9: 78:54:78:1d:5e:c3:b0:b5:29:62:ce:65:be:0f:bb: 89:6b:12:29:fa:a6:0c:fc:60:90:eb:22:b3:27:6a: 52:b0:76:54:9d:21:08:a1:39:79:04:2d:71:b3:8a: 91:3d:51:86:4a:d8:93:12:2a:53:cd:b3:22:89:8d: ca:4b:61:49:5d:79:a4:29:3b:d9:d0:7e:2f:03:04: b6:50:f1:1f:83:c8:55:ce:33:20:3c:7e:1e:14:0f: 69:3a:8d:1e:6f:95:22:32:37:57:08:9f:02:b8:70: 31:bd:ef:73:59:64:54:7e:f6:96:f7:57:b6:2f:2c: c1:c9:2e:b3:e2:12:d7:09:4b:55:af:bb:cf:48:95: 81:b8:7c:3d:22:f0:68:c8:39:23:2d:dd:ee:23:4f: b2:72:54:cf:13:6a:f1:6a:20:98:88:20:aa:2d:aa: 23:72:9f:84:d0:7e:d2:d7:c3:30:0b:0c:e0:65:1d: 6b:a5:bc:62:83:69:18:3b:7c:6e:57:91:22:7d:8f: 62:82:90:93:4a:ee:5a:9e:e2:a7:e3:4e:b5:db:e6: f5:ea:12:d6:cb:51:da:ae:f4:53:85:e8:87:15:50: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:44:A6:97:06:75:3F:CE:60:77:25:CA:A8:48:9D:0A:99:E9:23:88 X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d6:15:37:b3:05:80:a9:46:b9:2e:b2:ab:c3:e4:0d:9c:a4: b4:e0:b9:b9:3f:aa:8a:7f:2d:7c:9b:c5:62:00:6b:ff:83:ca: 84:21:0d:ac:3a:48:44:5c:af:80:25:29:73:d3:82:54:b1:3b: e1:12:ab:b2:97:fa:07:18:bf:9d:87:96:57:f5:bb:06:6d:1a: 2a:40:92:25:e1:76:14:79:1f:07:68:72:fa:37:3c:f9:d7:00: d9:de:82:06:41:74:88:e1:6f:74:b3:9b:e0:cd:6d:d4:e1:92: d8:c9:6a:7f:ab:e8:38:58:a9:36:85:bf:83:ec:70:d0:82:e3: db:58:ca:d2:6b:cd:df:41:e3:6e:37:8f:18:33:0d:43:10:8d: a0:10:98:c3:0d:82:dc:06:9f:fb:46:4f:7d:80:da:43:8f:a4: 0e:d3:d2:bf:40:61:31:37:81:97:f1:17:73:01:ca:d1:e8:e1: ff:5b:d5:f8:a1:f4:66:b3:42:cf:04:45:a9:99:42:e9:15:0c: 61:69:5f:36:7c:8c:45:de:e2:a0:a3:da:3e:ca:41:37:26:b4: 2b:e8:5b:79:03:45:85:80:24:ec:b6:9d:b9:77:eb:24:96:f2: be:57:0c:78:81:69:b1:77:80:61:de:38:66:39:27:5d:0e:d9: 69:24:58:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdOnb7e/Zonzio+7olcCVMwFN0kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA0MTcwMTM5MzhaFw0yNjA0MTgwNTIzMzhaMDMxMTAvBgNV BAMTKERDNDRBNjk3MDY3NTNGQ0U2MDc3MjVDQUE4NDg5RDBBOTlFOTIzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHtKuQFkAIkv7IRAlyD/o4fTH lKkjDVnxzWZR6XhUeB1ew7C1KWLOZb4Pu4lrEin6pgz8YJDrIrMnalKwdlSdIQih OXkELXGzipE9UYZK2JMSKlPNsyKJjcpLYUldeaQpO9nQfi8DBLZQ8R+DyFXOMyA8 fh4UD2k6jR5vlSIyN1cInwK4cDG973NZZFR+9pb3V7YvLMHJLrPiEtcJS1Wvu89I lYG4fD0i8GjIOSMt3e4jT7JyVM8TavFqIJiIIKotqiNyn4TQftLXwzALDOBlHWul vGKDaRg7fG5XkSJ9j2KCkJNK7lqe4qfjTrXb5vXqEtbLUdqu9FOF6IcVUIn3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3ESmlwZ1P85gdyXKqEidCpnpI4gwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdYVN7MFgKlG uS6yq8PkDZyktOC5uT+qin8tfJvFYgBr/4PKhCENrDpIRFyvgCUpc9OCVLE74RKr spf6Bxi/nYeWV/W7Bm0aKkCSJeF2FHkfB2hy+jc8+dcA2d6CBkF0iOFvdLOb4M1t 1OGS2Mlqf6voOFipNoW/g+xw0ILj21jK0mvN30HjbjePGDMNQxCNoBCYww2C3Aaf +0ZPfYDaQ4+kDtPSv0BhMTeBl/EXcwHK0ejh/1vV+KH0ZrNCzwRFqZlC6RUMYWlf NnyMRd7ioKPaPspBNya0K+hbeQNFhYAk7LaduXfrJJbyvlcMeIFpsXeAYd44Zjkn XQ7ZaSRY7g== -----END CERTIFICATE-----Generated at Fri Apr 17 19:53:16 2026 by rpki-client