$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft File: 833355AAAB477A3A1D2F649973B483982F9BA6CE.mft (raw, json) Hash identifier: he9XbTc6oBwSyvjSD2gMqPYN3fWVZUTIYK4RtAc/wh8= Subject key identifier: BB:76:42:DE:83:B3:70:1C:E6:B8:3B:57:14:81:70:B6:45:31:20:C1 Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Certificate serial: 1E2A292699B070A1A226A91B238A0769BA609DD2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 16:39:43 +0000 Manifest this update: Fri 17 Apr 2026 16:34:43 +0000 Manifest next update: Sat 18 Apr 2026 17:09:43 +0000 Files and hashes: 1: 3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (hash: A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=) 2: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (hash: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=) 3: 3130332e3233382e3235322e302f32322d3232203d3e203234313337.roa (hash: hvPHlirHDecyBdSPetseNQaYzkpvvym+uBRstvU2nAo=) 4: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (hash: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=) 5: 34332e3235352e342e302f32322d3232203d3e203234313337.roa (hash: +gOi9g7AvYMGXZweSvI7M0D/yREUi2fnQBbiw9Ibq0Q=) 6: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (hash: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=) 7: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (hash: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=) 8: 833355AAAB477A3A1D2F649973B483982F9BA6CE.crl (hash: kW9uG8Unv8K7fA/FYa6c7pqJeCFaPMmtGYpPYO0LJ/w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2a:29:26:99:b0:70:a1:a2:26:a9:1b:23:8a:07:69:ba:60:9d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Validity Not Before: Apr 17 16:34:43 2026 GMT Not After : Apr 18 17:09:43 2026 GMT Subject: CN=BB7642DE83B3701CE6B83B57148170B6453120C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:81:23:1a:38:7c:10:6c:9d:1e:36:7d:c5: d4:7b:68:58:56:c5:39:14:7b:b6:45:9c:34:98:99: 95:ac:f2:00:70:11:db:7a:01:f3:64:d4:90:25:09: 8a:65:c5:49:5b:6d:13:f4:9a:8c:0b:71:cc:a8:69: 5d:80:25:70:88:ff:96:1a:17:a5:6e:0e:42:ab:92: 41:02:71:4d:3c:eb:e8:30:57:90:b1:72:32:0e:a9: 98:94:6c:14:f4:4f:2f:e9:94:43:d2:b6:97:a3:b5: da:e1:d3:56:97:a7:5a:9b:c5:99:53:6a:f7:71:c8: a6:fb:09:29:f6:8d:45:67:df:0c:60:66:16:50:57: f5:4d:bb:51:0e:1a:77:96:aa:6b:d2:28:e5:a2:fa: d9:76:d1:28:53:6c:e1:bd:91:29:fa:16:ae:49:99: 50:42:5e:67:31:25:94:bd:1b:50:f4:ac:8a:5d:d7: 33:44:7b:80:3e:04:33:b2:23:6b:8a:c7:57:7f:4a: 02:ab:df:49:d8:3f:00:14:5d:86:ea:06:a4:cb:61: 23:f4:e0:71:04:af:ac:18:80:56:60:50:be:20:37: b9:e2:6c:9f:15:0c:65:d7:ee:a4:9c:93:a2:aa:bd: e5:e4:18:94:d6:7a:cf:c3:7f:86:72:f5:8f:a8:d7: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:76:42:DE:83:B3:70:1C:E6:B8:3B:57:14:81:70:B6:45:31:20:C1 X509v3 Authority Key Identifier: keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ca:bc:58:f9:36:d3:f2:1e:4f:75:5b:c1:f9:42:c3:9a:d1: 4e:15:f6:3e:00:dd:bf:a1:46:3c:bc:b1:f7:88:af:21:66:6e: 22:5b:ec:04:74:3a:a2:3e:98:1a:6c:5e:fb:11:3d:3b:95:d0: f2:63:82:07:74:e7:ba:27:47:fa:b8:fb:9b:26:e5:13:00:7b: 41:8c:f7:4e:82:b1:9c:0d:56:b5:96:71:69:49:61:8c:e1:5e: 2e:1e:dc:5e:74:31:20:1e:44:c4:12:21:08:a9:ea:2b:2a:ad: 57:34:46:95:31:d6:aa:cf:89:5b:5d:6a:54:bf:86:01:e1:ad: c3:9b:42:42:fb:34:05:30:58:51:dc:de:e6:5e:8a:34:ee:5d: 7c:38:59:a5:34:ef:4d:dc:06:b3:bd:4a:3d:50:48:e9:d5:d6: 77:ed:a2:ef:f0:73:16:66:8c:c5:43:87:f0:a5:fe:51:e1:52: e6:bd:6a:e9:12:55:40:d6:21:fd:d6:2c:6e:d5:8e:25:e8:5a: 2a:9a:0f:33:c1:e5:d0:7c:80:96:7d:51:58:f7:fe:bc:5b:ba: 50:6c:04:c9:d7:4c:53:eb:dd:46:86:c2:56:1f:77:84:5b:38: f6:cd:76:8d:87:01:e6:11:e1:76:95:f5:3b:01:e5:ff:67:64: 58:48:f2:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHiopJpmwcKGiJqkbI4oHabpgndIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgy RjlCQTZDRTAeFw0yNjA0MTcxNjM0NDNaFw0yNjA0MTgxNzA5NDNaMDMxMTAvBgNV BAMTKEJCNzY0MkRFODNCMzcwMUNFNkI4M0I1NzE0ODE3MEI2NDUzMTIwQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5d4EjGjh8EGydHjZ9xdR7aFhW xTkUe7ZFnDSYmZWs8gBwEdt6AfNk1JAlCYplxUlbbRP0mowLccyoaV2AJXCI/5Ya F6VuDkKrkkECcU086+gwV5CxcjIOqZiUbBT0Ty/plEPStpejtdrh01aXp1qbxZlT avdxyKb7CSn2jUVn3wxgZhZQV/VNu1EOGneWqmvSKOWi+tl20ShTbOG9kSn6Fq5J mVBCXmcxJZS9G1D0rIpd1zNEe4A+BDOyI2uKx1d/SgKr30nYPwAUXYbqBqTLYSP0 4HEEr6wYgFZgUL4gN7nibJ8VDGXX7qSck6KqveXkGJTWes/Df4Zy9Y+o16/DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu3ZC3oOzcBzmuDtXFIFwtkUxIMEwHwYDVR0j BBgwFoAUgzNVqqtHejodL2SZc7SDmC+bps4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjY1MTY1MC8wLzgzMzM1NUFBQUI0NzdBM0ExRDJGNjQ5OTczQjQ4 Mzk4MkY5QkE2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI2NTE2NTAvMC84MzMzNTVBQUFCNDc3 QTNBMUQyRjY0OTk3M0I0ODM5ODJGOUJBNkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcq8WPk20/Ie T3VbwflCw5rRThX2PgDdv6FGPLyx94ivIWZuIlvsBHQ6oj6YGmxe+xE9O5XQ8mOC B3TnuidH+rj7myblEwB7QYz3ToKxnA1WtZZxaUlhjOFeLh7cXnQxIB5ExBIhCKnq KyqtVzRGlTHWqs+JW11qVL+GAeGtw5tCQvs0BTBYUdze5l6KNO5dfDhZpTTvTdwG s71KPVBI6dXWd+2i7/BzFmaMxUOH8KX+UeFS5r1q6RJVQNYh/dYsbtWOJehaKpoP M8Hl0HyAln1RWPf+vFu6UGwEyddMU+vdRobCVh93hFs49s12jYcB5hHhdpX1OwHl /2dkWEjyiA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:19:18 2026 by rpki-client