$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: d6eX1sYsNrLdI83Isn8M2aHgNe8TXjYYP1t3Jgo7Bxk= Subject key identifier: EF:7D:52:60:A7:86:E4:07:F0:03:81:6A:C1:8A:A1:74:C1:77:92:5C Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 7FE518DF0F7DD66F50F6E1CB434352803BCA9F02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 11:59:43 +0000 Manifest this update: Fri 17 Apr 2026 11:54:43 +0000 Manifest next update: Sat 18 Apr 2026 15:26:43 +0000 Files and hashes: 1: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 2: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) 3: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 4: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: fDxZ5pagE9OLG+jTOEqwOQJhcY4x54Mr3GuHhlBAzgE=) 5: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e5:18:df:0f:7d:d6:6f:50:f6:e1:cb:43:43:52:80:3b:ca:9f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Apr 17 11:54:43 2026 GMT Not After : Apr 18 15:26:43 2026 GMT Subject: CN=EF7D5260A786E407F003816AC18AA174C177925C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:e0:54:a0:fb:88:b2:0a:5c:ba:ad:97:13: d4:f7:4f:c6:8b:40:a5:3b:f1:aa:bd:1d:05:b8:71: 63:86:7c:43:6f:29:d6:f0:2c:78:d3:ae:d5:05:c3: df:55:36:b5:a6:10:46:68:f9:9e:e2:7b:2f:27:3b: 25:a2:85:ca:09:9e:f2:6f:6b:66:28:8d:21:ba:b5: 62:c0:e3:b3:af:86:2b:e9:01:a8:ad:d9:62:55:05: 07:28:5e:ea:d5:46:18:6b:0f:14:f2:67:cc:44:5a: 7d:ff:b4:e7:1e:43:07:7f:22:59:af:9c:0c:20:15: 5e:8f:93:4d:ab:65:c3:9f:f1:1c:c3:42:1e:15:3f: 31:b5:63:c0:7b:47:33:ff:8a:02:05:f4:8a:24:5f: 5b:c6:62:87:7b:1d:c0:60:04:55:d6:b3:be:45:a1: 88:c1:d3:09:b3:63:48:3e:27:17:98:e3:00:d1:fa: 59:0e:e4:d6:46:21:40:cf:35:a0:fd:0d:6b:be:cb: b0:5b:ca:16:8f:b0:f7:30:01:3a:21:67:9d:d0:51: 25:2c:8a:3c:7a:68:4e:52:ef:4c:dc:8c:c4:fb:91: c4:d8:fe:f9:8c:4c:07:c9:34:ac:fb:89:ca:ce:08: ac:a0:7f:0b:6c:fc:0c:00:ef:c2:54:72:89:f8:a6: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7D:52:60:A7:86:E4:07:F0:03:81:6A:C1:8A:A1:74:C1:77:92:5C X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1f:e4:fe:69:69:73:0f:9b:7e:69:50:3c:29:53:7a:bc:5a: 87:15:01:56:72:07:28:f8:39:f8:b1:5d:6c:ab:b2:ef:11:61: 4e:71:e9:5e:f5:99:da:c9:81:3e:9a:e9:0b:f9:3b:82:d0:f5: 1c:7a:0a:01:28:47:38:39:36:ba:e6:6f:f0:93:5f:b2:c9:ff: 5e:52:63:19:d3:f3:58:7b:61:f8:aa:68:0f:7e:3d:4e:32:07: 81:4e:4e:c3:b2:25:c7:c1:4d:f5:ae:44:b9:b4:4c:66:65:34: f5:c1:05:e4:25:4a:d5:bb:66:ed:45:f6:b6:96:57:d2:89:2d: 24:24:78:dc:89:69:62:ec:b0:6a:fa:2e:ec:01:af:4e:1e:66: b8:5e:6d:95:ba:dd:c9:65:64:92:ab:a9:1e:8e:a7:43:a9:f1: 8a:be:ff:b0:d2:75:3e:3c:6a:a6:78:e3:61:3f:c3:79:c3:61: ed:03:16:b0:0f:7f:9b:5e:75:5a:0d:0b:de:24:a2:47:eb:1b: 15:9e:80:a8:9b:04:9f:06:19:b3:18:6b:29:94:d9:a2:14:78: 12:75:83:e5:49:36:f4:b1:33:73:4e:06:14:65:97:81:2b:17: bc:e9:48:d9:5a:f1:7c:d8:97:6c:76:be:8c:82:fc:2b:1d:6d: 25:25:d8:66 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf+UY3w991m9Q9uHLQ0NSgDvKnwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjA0MTcxMTU0NDNaFw0yNjA0MTgxNTI2NDNaMDMxMTAvBgNV BAMTKEVGN0Q1MjYwQTc4NkU0MDdGMDAzODE2QUMxOEFBMTc0QzE3NzkyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRzeBUoPuIsgpcuq2XE9T3T8aL QKU78aq9HQW4cWOGfENvKdbwLHjTrtUFw99VNrWmEEZo+Z7iey8nOyWihcoJnvJv a2YojSG6tWLA47OvhivpAait2WJVBQcoXurVRhhrDxTyZ8xEWn3/tOceQwd/Ilmv nAwgFV6Pk02rZcOf8RzDQh4VPzG1Y8B7RzP/igIF9IokX1vGYod7HcBgBFXWs75F oYjB0wmzY0g+JxeY4wDR+lkO5NZGIUDPNaD9DWu+y7BbyhaPsPcwATohZ53QUSUs ijx6aE5S70zcjMT7kcTY/vmMTAfJNKz7icrOCKygfwts/AwA78JUcon4phZHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU731SYKeG5AfwA4FqwYqhdMF3klwwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqx/k/mlpcw+b fmlQPClTerxahxUBVnIHKPg5+LFdbKuy7xFhTnHpXvWZ2smBPprpC/k7gtD1HHoK AShHODk2uuZv8JNfssn/XlJjGdPzWHth+KpoD349TjIHgU5Ow7Ilx8FN9a5EubRM ZmU09cEF5CVK1btm7UX2tpZX0oktJCR43IlpYuywavou7AGvTh5muF5tlbrdyWVk kqupHo6nQ6nxir7/sNJ1PjxqpnjjYT/DecNh7QMWsA9/m151Wg0L3iSiR+sbFZ6A qJsEnwYZsxhrKZTZohR4EnWD5Uk29LEzc04GFGWXgSsXvOlI2VrxfNiXbHa+jIL8 Kx1tJSXYZg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:50:43 2026 by rpki-client