$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft File: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json) Hash identifier: Hv8bOXvCEskCTEijKnICd44qAt6KobHIsd+oKxUbAZM= Subject key identifier: B8:81:2C:08:B2:3E:D5:35:4A:65:AA:92:BD:D4:46:00:11:F1:F1:D2 Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 738559F7078AFDC866ECD70FFDF5B0EBC61ECE27 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 03:39:39 +0000 Manifest this update: Fri 17 Apr 2026 03:34:39 +0000 Manifest next update: Sat 18 Apr 2026 04:31:39 +0000 Files and hashes: 1: 3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa (hash: y6H54bzWpbbgzpsGKzSFZwssxd2MOGR7qkMWJLAw/ls=) 2: 3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa (hash: XtA9p9+3iEqJl9oNL4XSEWEUSb6vE+lI29hPVM6jgl8=) 3: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: 677Wg5nArkH9iRPI+Rnu8V6YQ52y2vKc4avPBCmQh28=) 4: 3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa (hash: LJLHnynahTuEBARxNRPN8UwyfsQaRWudvGF9ghrX2DQ=) 5: 3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa (hash: PGdlBkvIO8J6pjhNUuYTr3nEOg0TKMZhDugFcUldVRM=) 6: 3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa (hash: 0lrHVMK2Zz6L13Vbn9041R65XWn4Q9Io4S10ZHxxpeE=) 7: 3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa (hash: 0TeDafE41i2d4QLC5hOPZb7MUJrvUFIXOE/K9ScN3/I=) 8: 3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa (hash: HDVqXdA4D8OhtaouQqSuZCb+F1lHRss6pFhHi0qkluk=) 9: 3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa (hash: c/V9C/LDSLsX3ipXcneziAHRUZXaaPLA6P0kk/Q1q+w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:85:59:f7:07:8a:fd:c8:66:ec:d7:0f:fd:f5:b0:eb:c6:1e:ce:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Apr 17 03:34:39 2026 GMT Not After : Apr 18 04:31:39 2026 GMT Subject: CN=B8812C08B23ED5354A65AA92BDD4460011F1F1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:6f:35:f7:66:55:77:16:83:77:01:ec:fd: 68:c1:00:19:79:74:03:d7:59:7d:23:60:e1:22:bb: fe:23:1a:66:aa:5d:11:0e:63:4d:91:8b:2a:81:92: 4e:14:a1:f1:5f:db:86:60:5d:9e:ed:e3:33:0a:e9: f2:d1:c8:15:b0:17:f7:67:16:15:f3:a7:47:6f:87: 5f:76:a8:ff:aa:e8:d3:c0:98:f6:17:0e:1e:b9:34: 9b:50:17:5a:ef:f3:1a:76:82:5b:ef:ab:5c:cc:fd: 8f:c0:bc:32:de:df:74:40:d0:cd:99:6e:a9:cf:b0: a3:a8:00:af:94:69:26:87:19:29:1c:2f:9f:a8:33: 00:fe:89:30:aa:d0:ce:39:48:4b:38:cd:6a:99:68: 9f:55:5c:cc:40:fe:fd:42:97:b7:2e:96:02:ba:66: 0e:e9:df:18:c4:d9:1a:c9:94:e8:12:93:ab:e1:a2: 85:8a:30:60:f5:be:36:9c:82:ab:05:c9:0e:ab:c9: d8:e7:9e:44:ac:82:00:9c:ce:5f:37:de:17:76:f0: 1d:de:00:5c:bf:90:80:05:d9:0c:f4:4d:67:98:37: 99:52:5f:3d:04:f6:15:26:1d:bf:ac:63:a5:67:f4: cb:43:aa:f0:86:7c:10:54:15:75:be:b3:b4:dc:11: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:81:2C:08:B2:3E:D5:35:4A:65:AA:92:BD:D4:46:00:11:F1:F1:D2 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ff:c9:28:46:5f:0a:5d:f4:63:23:51:67:42:98:6f:92:ab: d6:c5:1f:fe:87:98:13:ed:ef:be:af:fa:d0:c0:1b:fd:29:87: 81:2b:86:d9:64:53:2a:27:0f:b9:bf:76:e7:4a:2e:b5:29:d3: 91:35:8a:6a:5a:ba:fc:6a:89:27:bc:07:e4:87:ce:3a:be:50: b2:5c:33:53:df:7b:32:fa:64:ac:c1:66:85:4e:84:ec:4b:ba: f8:52:a7:67:bb:97:8f:07:5f:a5:8d:0d:ab:9b:03:87:21:43: 08:50:4a:1c:cb:58:96:d7:97:08:a8:d7:4d:50:69:f8:b5:a1: cc:f1:85:e2:d2:21:3c:7e:da:8f:c7:b0:9d:50:9f:b0:2d:9d: 76:58:8e:db:69:f8:dc:60:a6:ad:ab:f2:0c:2d:52:58:b0:c6: e0:2b:0f:63:77:ca:62:e0:18:e1:28:f1:bd:41:96:26:3b:d6: 35:0a:13:3d:47:60:1a:2d:bd:1a:d0:6b:79:78:5e:72:6d:73: 3b:49:b2:fb:d0:7f:59:65:48:72:c4:f1:2f:21:d2:dd:68:73: 01:00:e2:6d:f7:a7:34:6a:4a:94:22:64:01:66:d1:32:a3:56: 0c:58:40:35:46:aa:b5:7f:0a:2b:d3:d9:1e:ac:a8:9c:09:ec: 0c:10:d1:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc4VZ9weK/chm7NcP/fWw68YezicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjA0MTcwMzM0MzlaFw0yNjA0MTgwNDMxMzlaMDMxMTAvBgNV BAMTKEI4ODEyQzA4QjIzRUQ1MzU0QTY1QUE5MkJERDQ0NjAwMTFGMUYxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXm8192ZVdxaDdwHs/WjBABl5 dAPXWX0jYOEiu/4jGmaqXREOY02RiyqBkk4UofFf24ZgXZ7t4zMK6fLRyBWwF/dn FhXzp0dvh192qP+q6NPAmPYXDh65NJtQF1rv8xp2glvvq1zM/Y/AvDLe33RA0M2Z bqnPsKOoAK+UaSaHGSkcL5+oMwD+iTCq0M45SEs4zWqZaJ9VXMxA/v1Cl7culgK6 Zg7p3xjE2RrJlOgSk6vhooWKMGD1vjacgqsFyQ6rydjnnkSsggCczl833hd28B3e AFy/kIAF2Qz0TWeYN5lSXz0E9hUmHb+sY6Vn9MtDqvCGfBBUFXW+s7TcEcuTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuIEsCLI+1TVKZaqSvdRGABHx8dIwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8yMzM5OTIxMzYzRjcw MDNDM0RFQjQ3RUQ4NTM0QUZFMUY0ODJEOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf/JKEZfCl30 YyNRZ0KYb5Kr1sUf/oeYE+3vvq/60MAb/SmHgSuG2WRTKicPub9250outSnTkTWK alq6/GqJJ7wH5IfOOr5QslwzU997MvpkrMFmhU6E7Eu6+FKnZ7uXjwdfpY0Nq5sD hyFDCFBKHMtYlteXCKjXTVBp+LWhzPGF4tIhPH7aj8ewnVCfsC2ddliO22n43GCm ravyDC1SWLDG4CsPY3fKYuAY4SjxvUGWJjvWNQoTPUdgGi29GtBreXhecm1zO0my +9B/WWVIcsTxLyHS3WhzAQDibfenNGpKlCJkAWbRMqNWDFhANUaqtX8KK9PZHqyo nAnsDBDRmQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:58 2026 by rpki-client