$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: qJZvFdhz8OT1t4VehK16k8/ZRHJ3pJu/f0Zz4wV+QRg= Subject key identifier: EF:7D:B2:90:3F:5A:01:6F:8A:4D:6D:48:0A:04:BD:70:1F:11:E5:84 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 701AC14CC93D32168F135225684FFC908540758A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 17:34:44 +0000 Manifest this update: Fri 17 Apr 2026 17:29:44 +0000 Manifest next update: Sat 18 Apr 2026 17:39:44 +0000 Files and hashes: 1: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) 2: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: 8xXprcTIMmIMvbZdqJKdEIvxUfB5D9pNfE49zPxpFH0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1a:c1:4c:c9:3d:32:16:8f:13:52:25:68:4f:fc:90:85:40:75:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Apr 17 17:29:44 2026 GMT Not After : Apr 18 17:39:44 2026 GMT Subject: CN=EF7DB2903F5A016F8A4D6D480A04BD701F11E584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:75:87:77:31:db:73:28:4e:52:37:63:10: 9c:05:60:9b:8f:cb:13:5e:41:2b:6e:ab:b3:24:6e: 1b:fb:6e:fa:96:7c:17:59:70:b7:03:11:b3:ae:bd: e9:ab:6c:89:81:7d:a8:a9:42:0c:c6:da:08:1e:0e: 44:23:e6:2c:28:aa:19:f6:84:6e:65:c6:90:61:eb: 29:5d:b0:0a:eb:f2:f7:e0:47:4f:24:f6:9d:9d:39: 58:8e:38:5f:c7:04:03:76:34:8f:c6:8f:66:d6:78: 3b:b9:5b:81:a3:66:fe:a5:55:d6:89:79:82:02:01: 1b:8c:10:d6:af:d0:6a:bd:6e:28:c6:6f:f6:0d:db: f5:db:ab:29:f3:2b:b9:20:94:6d:b4:06:64:3e:91: 45:03:27:25:e5:e8:bb:68:15:2f:2f:fc:fb:2d:24: 65:2b:a4:65:f8:7a:54:bf:b9:4c:62:97:de:7e:58: f2:0d:d6:1a:36:8c:62:12:40:6e:28:11:b8:73:99: 02:5c:5c:e2:d7:ba:28:f1:be:3b:45:4b:58:b9:db: 8d:10:1b:01:85:ab:92:50:62:58:54:f9:09:83:5a: 64:39:16:2d:8f:87:2d:cd:a3:91:8c:4f:ff:50:63: ec:ba:38:88:75:52:31:4f:a2:b2:6b:e0:55:7f:c2: ab:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7D:B2:90:3F:5A:01:6F:8A:4D:6D:48:0A:04:BD:70:1F:11:E5:84 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2a:99:2d:51:9e:24:6b:5f:c7:c2:cc:50:11:07:75:1a:8c: ed:94:e5:94:4a:c0:b9:1e:16:28:95:be:49:23:e8:66:3d:29: b6:63:44:73:c5:1f:c6:bc:86:ca:c3:b5:49:ed:de:37:1b:37: 9a:4c:18:cb:bd:1d:59:b2:cd:7e:01:87:5a:27:b3:7c:db:59: 89:50:9f:74:e8:8a:3e:05:97:59:16:ed:38:ea:9d:35:5c:8c: b4:d4:d9:87:32:07:7a:cf:87:13:43:7b:68:d3:57:5a:ac:7c: 65:ec:fc:7a:c5:1e:32:b1:1f:2b:34:ce:fd:c2:de:76:80:88: 9a:af:5b:2f:45:42:77:d1:1d:3e:70:f8:0a:74:74:17:47:b1: 71:90:e1:b3:d8:0a:fa:18:48:27:8d:47:4b:57:03:48:82:d1: d9:e6:62:77:9f:ea:e6:df:cd:11:8e:4a:ca:69:8c:06:fc:e1: 39:e2:52:76:0d:3e:51:1a:c0:0c:6a:d2:f2:fe:b9:c7:f2:d1: 1d:07:8e:0d:fb:32:b3:6f:69:6e:83:13:e1:bb:26:cf:8b:3d: b5:75:96:e1:fb:97:bd:e3:6f:5f:84:b7:77:31:7a:6d:69:ff: ef:92:65:f4:53:d4:70:88:24:45:ee:51:56:30:3a:ce:c5:82: 2e:41:76:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcBrBTMk9MhaPE1IlaE/8kIVAdYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA0MTcxNzI5NDRaFw0yNjA0MTgxNzM5NDRaMDMxMTAvBgNV BAMTKEVGN0RCMjkwM0Y1QTAxNkY4QTRENkQ0ODBBMDRCRDcwMUYxMUU1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8nWHdzHbcyhOUjdjEJwFYJuP yxNeQStuq7Mkbhv7bvqWfBdZcLcDEbOuvemrbImBfaipQgzG2ggeDkQj5iwoqhn2 hG5lxpBh6yldsArr8vfgR08k9p2dOViOOF/HBAN2NI/Gj2bWeDu5W4GjZv6lVdaJ eYICARuMENav0Gq9bijGb/YN2/XbqynzK7kglG20BmQ+kUUDJyXl6LtoFS8v/Pst JGUrpGX4elS/uUxil95+WPIN1ho2jGISQG4oEbhzmQJcXOLXuijxvjtFS1i5240Q GwGFq5JQYlhU+QmDWmQ5Fi2Phy3No5GMT/9QY+y6OIh1UjFPorJr4FV/wqsTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU732ykD9aAW+KTW1ICgS9cB8R5YQwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCqZLVGeJGtf x8LMUBEHdRqM7ZTllErAuR4WKJW+SSPoZj0ptmNEc8UfxryGysO1Se3eNxs3mkwY y70dWbLNfgGHWiezfNtZiVCfdOiKPgWXWRbtOOqdNVyMtNTZhzIHes+HE0N7aNNX Wqx8Zez8esUeMrEfKzTO/cLedoCImq9bL0VCd9EdPnD4CnR0F0excZDhs9gK+hhI J41HS1cDSILR2eZid5/q5t/NEY5KymmMBvzhOeJSdg0+URrADGrS8v65x/LRHQeO Dfsys29pboMT4bsmz4s9tXWW4fuXveNvX4S3dzF6bWn/75Jl9FPUcIgkRe5RVjA6 zsWCLkF29g== -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:54 2026 by rpki-client