$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft File: 745EC59458DF98DC3674219750AB7E7BC251E62C.mft (raw, json) Hash identifier: 44TyT8T1T0e/m9PSYur+5nUO7qeDpivoeGh43BQU92o= Subject key identifier: 08:8F:62:EA:88:09:0F:E8:05:1C:F9:1B:98:85:33:06:AB:99:69:12 Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C Certificate issuer: /CN=745EC59458DF98DC3674219750AB7E7BC251E62C Certificate serial: 7767D8BBE55FE1D7DDD8E0148CA2A7810A036AA2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 11:59:43 +0000 Manifest this update: Fri 17 Apr 2026 11:54:43 +0000 Manifest next update: Sat 18 Apr 2026 12:14:43 +0000 Files and hashes: 1: 323430323a616530303a3a2f33322d3332203d3e2039333931.roa (hash: FTYIWfCnmmvW90OE/8bpSjtcoyCXbulb9f9TPye52qc=) 2: 3231382e39372e3232342e302f32302d3230203d3e2039333931.roa (hash: Q+3AnXH0y0d7c5nDlvD7W2yKYZPR5Q1odJ1oD7AGUO4=) 3: 3230332e3131382e3139322e302f31392d3139203d3e2039333931.roa (hash: ftO2KpGExa6jnpukq7xnTVq+eIsEnXrt8N3x54iJtxw=) 4: 3231302e37382e36342e302f31392d3139203d3e2039333931.roa (hash: jvALRiPVY3SMKzJOoNBmUmRGQM09Xnh580YLiGxSUOQ=) 5: 3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa (hash: uaz7nh1lANmo95TsLAJg/2r0Jd5wHe4ugsrTZ4tQ/wk=) 6: 745EC59458DF98DC3674219750AB7E7BC251E62C.crl (hash: 501vRQp4cV1ulwxIr2SxrMMCtsyN9PACpxcF8AEJsKc=) 7: 3231302e37372e39362e302f31392d3139203d3e2039333931.roa (hash: wRxoeMzOEughYBGY4DD9cRQKKuKMdzQ5cat72iTv48E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:67:d8:bb:e5:5f:e1:d7:dd:d8:e0:14:8c:a2:a7:81:0a:03:6a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C Validity Not Before: Apr 17 11:54:43 2026 GMT Not After : Apr 18 12:14:43 2026 GMT Subject: CN=088F62EA88090FE8051CF91B98853306AB996912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:94:22:23:22:c9:12:30:60:47:05:87:2f: 4e:5b:51:b0:5a:6a:36:65:28:e9:e6:08:e0:65:9d: 3c:a9:af:71:99:77:f9:f3:e8:32:45:05:37:bb:cc: a4:56:82:93:6e:23:a7:77:01:f8:9d:53:0e:c9:92: 4b:4f:0b:df:fa:f5:b4:9f:b1:89:03:f7:c6:9b:1c: de:57:b1:a8:c6:f5:fb:1c:9b:e3:48:2c:37:2d:58: 21:8e:13:be:26:d9:f9:74:98:dc:b4:41:62:45:4d: 6f:7f:e5:f2:df:f2:5e:96:0b:8c:83:b6:86:d6:6a: 39:4c:38:02:6f:c3:c5:5d:02:09:84:5e:aa:7d:b9: 1b:2c:ad:98:a8:3e:40:1b:8c:95:25:d4:09:b4:b7: fc:8f:cf:ef:d1:bc:e0:4e:66:3b:a0:94:4d:55:db: 69:2d:d4:ec:dd:7f:eb:b0:fc:fd:9c:02:94:b1:3b: 62:7f:81:59:fc:7c:cb:e6:ba:88:fa:8c:df:45:63: 7d:44:98:80:78:71:22:86:95:ec:6c:63:84:24:49: 5a:63:92:12:75:f8:16:52:cb:7b:e3:2b:8a:be:12: cd:9e:28:37:50:a7:fd:a0:cb:e0:83:9c:c8:d1:5a: a7:bb:85:f0:a3:93:1e:fa:fa:b7:ea:a7:1b:87:81: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8F:62:EA:88:09:0F:E8:05:1C:F9:1B:98:85:33:06:AB:99:69:12 X509v3 Authority Key Identifier: keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c1:80:db:3e:05:38:ed:16:41:45:c3:0c:96:2d:1c:dc:4f: 3a:9c:0f:70:90:9c:97:28:74:26:fc:5d:0d:4e:66:78:46:19: df:19:76:7b:e1:c8:fe:5f:19:f3:c6:13:8c:2d:35:84:23:ce: 86:27:2e:22:50:03:c4:45:de:c7:08:c1:b3:c2:4d:36:83:b4: b1:e7:bc:e8:ee:12:29:93:9e:82:9c:e5:25:c4:ce:25:4d:6b: 84:cb:52:65:19:bb:2d:18:94:5b:64:bc:43:09:03:f3:72:a4: 53:f5:7e:08:54:7d:f5:89:34:16:26:6b:20:44:2f:dc:b7:0f: 10:63:50:9d:0a:03:9b:3d:3a:fc:41:0c:af:03:f6:54:62:f4: 66:a0:5c:e3:91:08:fa:71:f1:bd:0f:14:69:0a:29:23:d7:6a: 94:b8:38:20:15:89:3d:40:a6:d8:39:25:11:cd:b2:e1:ba:76: be:e0:54:ad:ed:35:f0:30:f1:83:fa:f7:a4:51:cb:47:57:5c: cc:1e:ad:dd:f7:5c:8f:6f:67:4d:ab:c0:be:b9:53:32:56:8c: 23:f2:65:41:79:1d:6a:bc:c6:55:fa:ca:32:b2:fc:a9:0c:f9: 0d:3e:e3:73:33:47:6a:90:f9:66:63:19:a3:90:25:ab:c2:24: 7b:7f:b8:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd2fYu+Vf4dfd2OAUjKKngQoDaqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JD MjUxRTYyQzAeFw0yNjA0MTcxMTU0NDNaFw0yNjA0MTgxMjE0NDNaMDMxMTAvBgNV BAMTKDA4OEY2MkVBODgwOTBGRTgwNTFDRjkxQjk4ODUzMzA2QUI5OTY5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7upQiIyLJEjBgRwWHL05bUbBa ajZlKOnmCOBlnTypr3GZd/nz6DJFBTe7zKRWgpNuI6d3AfidUw7JkktPC9/69bSf sYkD98abHN5XsajG9fscm+NILDctWCGOE74m2fl0mNy0QWJFTW9/5fLf8l6WC4yD tobWajlMOAJvw8VdAgmEXqp9uRssrZioPkAbjJUl1Am0t/yPz+/RvOBOZjuglE1V 22kt1Ozdf+uw/P2cApSxO2J/gVn8fMvmuoj6jN9FY31EmIB4cSKGlexsY4QkSVpj khJ1+BZSy3vjK4q+Es2eKDdQp/2gy+CDnMjRWqe7hfCjkx76+rfqpxuHgenBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCI9i6ogJD+gFHPkbmIUzBquZaRIwHwYDVR0j BBgwFoAUdF7FlFjfmNw2dCGXUKt+e8JR5iwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTg1MTc3OC8wLzc0NUVDNTk0NThERjk4REMzNjc0MjE5NzUwQUI3 RTdCQzI1MUU2MkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JDMjUxRTYyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE4NTE3NzgvMC83NDVFQzU5NDU4REY5 OERDMzY3NDIxOTc1MEFCN0U3QkMyNTFFNjJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsGA2z4FOO0W QUXDDJYtHNxPOpwPcJCclyh0JvxdDU5meEYZ3xl2e+HI/l8Z88YTjC01hCPOhicu IlADxEXexwjBs8JNNoO0see86O4SKZOegpzlJcTOJU1rhMtSZRm7LRiUW2S8QwkD 83KkU/V+CFR99Yk0FiZrIEQv3LcPEGNQnQoDmz06/EEMrwP2VGL0ZqBc45EI+nHx vQ8UaQopI9dqlLg4IBWJPUCm2DklEc2y4bp2vuBUre018DDxg/r3pFHLR1dczB6t 3fdcj29nTavAvrlTMlaMI/JlQXkdarzGVfrKMrL8qQz5DT7jczNHapD5ZmMZo5Al q8Ike3+46w== -----END CERTIFICATE-----Generated at Sat Apr 18 00:03:07 2026 by rpki-client