$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: e8DUyPBogTkpZHb4C5cPXet19iP3nZ3lZMUM+fCrRgo= Subject key identifier: 91:D4:A7:64:03:CF:1C:D2:A5:2B:28:25:CA:30:EB:44:3A:B2:E1:49 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 099E440B60F89C04DB5E95823952F8EEF84DED38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 02:34:38 +0000 Manifest this update: Fri 17 Apr 2026 02:29:38 +0000 Manifest next update: Sat 18 Apr 2026 03:22:38 +0000 Files and hashes: 1: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: //zuQ8Vyv0Ip54PSTElp6AisB2vDiuV63ZMjjBPZO1A=) 2: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 3: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) 4: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 5: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 6: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9e:44:0b:60:f8:9c:04:db:5e:95:82:39:52:f8:ee:f8:4d:ed:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Apr 17 02:29:38 2026 GMT Not After : Apr 18 03:22:38 2026 GMT Subject: CN=91D4A76403CF1CD2A52B2825CA30EB443AB2E149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:1e:11:2b:ba:3c:91:1a:62:e7:53:f2:d9: 46:97:25:50:8c:54:39:9e:ff:6c:75:5a:c0:b9:5e: 63:e2:dc:b2:8a:97:47:1c:11:d7:fd:7f:05:05:55: be:0e:c5:b8:be:ab:74:60:c7:71:38:a4:16:b3:c1: 5f:f1:1e:4a:82:95:29:cf:f3:51:09:47:ff:4f:cb: f9:d9:7b:d8:d5:e0:66:cf:2c:50:e9:39:7a:ea:28: 85:c5:7b:25:1c:79:7b:f5:cc:53:24:db:62:c0:95: cf:ff:6b:66:1a:96:59:2d:0a:c2:8f:74:ee:64:2b: 37:67:24:ab:b7:c8:8e:f6:d5:06:87:91:55:de:2f: 81:66:a6:4f:d1:51:5c:db:ef:e6:ab:3d:60:18:dc: 2a:d9:fe:e2:4c:aa:87:26:cd:fb:d4:69:aa:ad:45: 5d:d7:57:f3:c9:44:40:83:85:b7:97:d1:0a:78:2d: b2:c7:ab:e9:2d:20:b9:5c:99:50:4e:3f:c1:78:db: 34:e4:ac:2e:cd:3e:92:4a:06:7f:5c:d5:45:f5:44: 27:21:76:06:5a:e8:ca:0f:54:31:3b:e5:4d:42:df: 6e:44:42:15:75:b8:ba:42:7b:63:51:b0:7a:b4:6b: 9b:5c:0c:5a:25:98:0d:7f:6d:c6:15:76:d8:3b:14: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D4:A7:64:03:CF:1C:D2:A5:2B:28:25:CA:30:EB:44:3A:B2:E1:49 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:43:82:49:bd:63:ce:d3:25:e3:69:2a:4e:2d:db:e9:ca:2c: 5f:69:a7:a1:14:58:3e:55:11:e7:df:d7:e9:94:ef:e8:dc:38: b5:5f:82:d1:f3:bd:24:14:7e:e7:3c:b6:2e:fc:3b:40:a3:f1: 6e:7b:0c:9c:a8:04:8a:90:e9:c2:ae:b1:93:8b:1f:c7:56:62: 72:7f:95:ff:23:09:3c:d1:a4:30:5a:d9:a8:b6:43:14:cb:a1: d0:a7:3c:a4:28:30:5f:2b:a6:4e:b2:5a:89:29:ec:3d:73:d7: 85:aa:18:7f:3b:8f:ef:cc:35:35:fb:32:38:a4:bb:cb:54:09: 0a:34:8e:b3:e7:14:fc:e2:dd:e7:be:d9:9f:08:d0:6b:5a:56: 52:0a:58:f4:ba:db:e5:5c:7c:f3:7b:8f:b3:0e:d1:2f:c2:88: 95:7f:52:57:6e:fa:33:93:9c:58:54:32:d8:58:b2:8d:fc:3f: 08:5d:20:43:39:c6:36:e1:e5:01:04:ef:33:de:14:73:d5:f2: df:45:f5:89:7b:9f:31:90:72:c0:63:dd:cf:4c:fa:ea:66:6a: c5:8b:df:35:97:38:29:8a:ef:6d:ef:26:6c:69:e1:ed:65:ca: c9:dd:58:1a:c2:95:33:8b:e7:0f:55:20:61:12:07:23:6c:6c: 23:22:6c:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCZ5EC2D4nATbXpWCOVL47vhN7TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA0MTcwMjI5MzhaFw0yNjA0MTgwMzIyMzhaMDMxMTAvBgNV BAMTKDkxRDRBNzY0MDNDRjFDRDJBNTJCMjgyNUNBMzBFQjQ0M0FCMkUxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2B4RK7o8kRpi51Py2UaXJVCM VDme/2x1WsC5XmPi3LKKl0ccEdf9fwUFVb4Oxbi+q3Rgx3E4pBazwV/xHkqClSnP 81EJR/9Py/nZe9jV4GbPLFDpOXrqKIXFeyUceXv1zFMk22LAlc//a2YallktCsKP dO5kKzdnJKu3yI721QaHkVXeL4Fmpk/RUVzb7+arPWAY3CrZ/uJMqocmzfvUaaqt RV3XV/PJRECDhbeX0Qp4LbLHq+ktILlcmVBOP8F42zTkrC7NPpJKBn9c1UX1RCch dgZa6MoPVDE75U1C325EQhV1uLpCe2NRsHq0a5tcDFolmA1/bcYVdtg7FIXdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkdSnZAPPHNKlKyglyjDrRDqy4UkwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0OCSb1jztMl 42kqTi3b6cosX2mnoRRYPlUR59/X6ZTv6Nw4tV+C0fO9JBR+5zy2Lvw7QKPxbnsM nKgEipDpwq6xk4sfx1Zicn+V/yMJPNGkMFrZqLZDFMuh0Kc8pCgwXyumTrJaiSns PXPXhaoYfzuP78w1NfsyOKS7y1QJCjSOs+cU/OLd577ZnwjQa1pWUgpY9Lrb5Vx8 83uPsw7RL8KIlX9SV276M5OcWFQy2Fiyjfw/CF0gQznGNuHlAQTvM94Uc9Xy30X1 iXufMZBywGPdz0z66mZqxYvfNZc4KYrvbe8mbGnh7WXKyd1YGsKVM4vnD1UgYRIH I2xsIyJsYA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:18:01 2026 by rpki-client