$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: voH9EWf+HlYuhUwXzoNE1Jx/dsBBdZ/JRKunwQsCD/E= Subject key identifier: 99:A6:40:E3:7C:9D:6A:6C:A4:10:C3:20:BD:28:0F:C9:E9:52:A7:17 Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 7444FBF0E634FDFF2A6317E8D619BC51F424CBF4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 05:09:40 +0000 Manifest this update: Fri 17 Apr 2026 05:04:40 +0000 Manifest next update: Sat 18 Apr 2026 09:00:40 +0000 Files and hashes: 1: 3230332e3133302e35322e302f32342d3234203d3e203534393934.roa (hash: et7fLev1+45NO77skAOlV3NvfYmJj7KbgAsloiOQxpo=) 2: 3230332e3133302e36332e302f32342d3234203d3e203534393934.roa (hash: UBRqylYTLGDVfK3g4RFGUeCrUxzDzQEIc6ZZPYpaGWE=) 3: 3230332e3133302e35302e302f32342d3234203d3e203534393934.roa (hash: Ujrh8dXiv3ar3WusLzYw5/Zpebj94GN0ZVIqrzqX81U=) 4: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: OSZoW2HQvGYCgPtqdx/DswbunA6eXdh0Zp8efYXh7K0=) 5: 3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa (hash: ktVeTgessk6xRjmQOhmm5CHyeA7OAmRW1PFH8DCbCvo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:44:fb:f0:e6:34:fd:ff:2a:63:17:e8:d6:19:bc:51:f4:24:cb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Apr 17 05:04:40 2026 GMT Not After : Apr 18 09:00:40 2026 GMT Subject: CN=99A640E37C9D6A6CA410C320BD280FC9E952A717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:6c:8b:c0:ea:b0:69:ed:30:df:6a:ec:59: 7b:6e:1d:ea:13:d5:51:58:c1:91:3c:44:a6:f9:65: 6a:8a:d4:2b:a6:bf:f0:2a:60:a8:b6:ca:33:15:83: a4:55:93:70:4e:9b:c1:e6:6c:b8:d4:54:4d:85:ab: 0d:77:c7:b9:f6:21:9b:e0:61:7e:af:e5:51:8d:20: 28:d4:b8:6f:3e:b0:15:7e:1e:fa:f0:4e:6f:84:47: 7f:4e:ca:4c:dc:f5:5f:bd:17:54:b7:9b:4f:a2:6e: 2f:c9:07:8c:5e:dc:0d:45:bb:3b:db:7f:91:2d:33: f7:b5:45:61:e1:2b:43:fa:83:4e:d5:00:e7:19:61: c6:08:93:4a:0b:52:72:b2:82:aa:86:9b:19:f8:12: 2a:93:fa:60:13:cb:c9:ab:54:94:d2:e1:0b:e4:78: ec:62:4f:38:fc:2c:30:56:2b:20:56:17:27:b3:05: da:69:12:28:0b:ae:8f:c3:71:0b:4d:34:25:dc:22: 59:0f:59:85:f9:1c:1f:dd:76:c9:e2:5c:15:97:2f: 2a:10:53:b9:ad:a4:a5:1a:fc:72:02:26:40:29:fa: ee:95:51:3b:fd:79:65:54:9a:f8:32:f2:bd:4b:2d: 55:78:67:e5:a7:9a:ab:74:ef:31:c6:5a:57:f3:91: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A6:40:E3:7C:9D:6A:6C:A4:10:C3:20:BD:28:0F:C9:E9:52:A7:17 X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:06:c7:ff:93:91:e5:4f:bf:b1:f1:60:af:45:9c:96:7d:b7: 28:28:78:cb:1f:d8:d9:bc:2e:4e:4f:5d:69:83:d8:8f:a6:19: 14:d7:1d:9b:d2:2e:00:1f:6c:cd:5f:3a:e5:3b:2d:2a:f2:78: 5e:65:b3:cc:36:7c:0d:62:76:9f:7c:3a:74:28:e6:c9:ef:37: 37:e6:ac:f3:e8:1c:70:db:d5:bd:5a:5a:2b:43:89:b1:61:4d: ef:b4:e5:7d:3e:5c:cc:fe:b6:a2:87:23:17:87:35:7d:e7:c2: b7:31:76:07:6d:4b:5c:d2:41:e2:07:6b:b9:ff:5a:bc:09:12: c8:c1:cc:3f:4d:66:30:a8:12:43:cf:08:b3:53:d3:24:74:65: cd:1f:42:22:0c:52:5e:ac:51:5a:25:4d:85:4e:89:96:50:66: d7:1f:cd:84:8f:d0:df:cb:91:9b:02:73:0a:89:e2:47:be:bf: f8:74:00:d0:b3:d2:27:5d:fa:01:af:e4:f5:04:7e:10:ec:5b: d4:2e:7d:a2:7a:10:de:e8:4a:3a:84:eb:82:d8:b5:d5:60:2d: 62:75:a7:2b:c6:97:2a:d8:bb:f3:54:7d:ad:95:d8:98:76:8c: 7c:5c:33:d3:29:c3:7c:f7:eb:4d:01:33:79:10:1b:af:24:b7: 74:e6:92:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdET78OY0/f8qYxfo1hm8UfQky/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA0MTcwNTA0NDBaFw0yNjA0MTgwOTAwNDBaMDMxMTAvBgNV BAMTKDk5QTY0MEUzN0M5RDZBNkNBNDEwQzMyMEJEMjgwRkM5RTk1MkE3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NWyLwOqwae0w32rsWXtuHeoT 1VFYwZE8RKb5ZWqK1Cumv/AqYKi2yjMVg6RVk3BOm8HmbLjUVE2Fqw13x7n2IZvg YX6v5VGNICjUuG8+sBV+HvrwTm+ER39Oykzc9V+9F1S3m0+ibi/JB4xe3A1Fuzvb f5EtM/e1RWHhK0P6g07VAOcZYcYIk0oLUnKygqqGmxn4EiqT+mATy8mrVJTS4Qvk eOxiTzj8LDBWKyBWFyezBdppEigLro/DcQtNNCXcIlkPWYX5HB/ddsniXBWXLyoQ U7mtpKUa/HICJkAp+u6VUTv9eWVUmvgy8r1LLVV4Z+Wnmqt07zHGWlfzkVBhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmaZA43ydamykEMMgvSgPyelSpxcwHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAbH/5OR5U+/ sfFgr0Wcln23KCh4yx/Y2bwuTk9daYPYj6YZFNcdm9IuAB9szV865TstKvJ4XmWz zDZ8DWJ2n3w6dCjmye83N+as8+gccNvVvVpaK0OJsWFN77TlfT5czP62oocjF4c1 fefCtzF2B21LXNJB4gdruf9avAkSyMHMP01mMKgSQ88Is1PTJHRlzR9CIgxSXqxR WiVNhU6JllBm1x/NhI/Q38uRmwJzConiR76/+HQA0LPSJ136Aa/k9QR+EOxb1C59 onoQ3uhKOoTrgti11WAtYnWnK8aXKti781R9rZXYmHaMfFwz0ynDfPfrTQEzeRAb ryS3dOaSjw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:05:09 2026 by rpki-client