$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: EFsbZ4QgRJdC7iKKvjt5bgmtjwwbFOKcaaq1YE2Y6iA= Subject key identifier: D7:0A:5A:A5:7C:C0:B0:FC:CF:DB:FA:6E:52:1D:EE:5B:7C:86:E1:95 Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 13D7A2C542C5A563D3E419348AF1297AB2FE411D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: 7B Signing time: Fri 17 Apr 2026 01:54:38 +0000 Manifest this update: Fri 17 Apr 2026 01:49:38 +0000 Manifest next update: Sat 18 Apr 2026 05:45:38 +0000 Files and hashes: 1: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 2: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) 3: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=) 4: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: 5e5/+bqgiTCvhf6ovrGT9G7DgjmLpVP/o2Gk3wGASKc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d7:a2:c5:42:c5:a5:63:d3:e4:19:34:8a:f1:29:7a:b2:fe:41:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Apr 17 01:49:38 2026 GMT Not After : Apr 18 05:45:38 2026 GMT Subject: CN=D70A5AA57CC0B0FCCFDBFA6E521DEE5B7C86E195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:32:81:14:1e:9a:4c:c9:8f:7e:04:df:85: ac:c5:16:0d:ad:c8:63:5f:69:46:a0:d0:82:43:ab: 97:22:1f:15:66:e0:26:ba:53:87:74:30:ee:4c:d4: 32:86:6a:d5:f8:8a:3d:b6:92:90:0c:b4:1b:c9:1a: 51:68:ef:4a:e0:83:7a:72:96:1e:ad:f3:62:9b:70: c1:86:c6:61:04:bd:4f:49:06:db:91:48:3a:e2:c3: 70:0f:40:21:2e:4e:6e:43:be:5c:ce:e4:5a:f1:f6: 7e:53:68:00:55:cf:2a:53:b4:15:d5:24:5b:71:62: 0f:f3:52:e2:65:c0:1f:ec:50:a9:f0:57:84:71:01: 4e:a0:d7:3d:8f:b7:00:70:7c:1b:49:d1:1c:46:c1: 04:51:43:ac:7f:9e:bd:7e:51:1a:f5:e1:e5:93:c3: 10:ac:c4:fa:d3:63:2d:2d:78:76:61:da:b1:04:9c: e6:f0:80:91:ed:11:47:0b:39:02:5f:0e:1a:0f:34: 27:fd:e3:9c:61:a2:ed:89:b5:a3:ad:00:ea:cf:95: 34:42:a6:36:9a:1c:c9:90:6c:dd:95:1c:b9:2c:47: 16:52:d4:91:cc:d4:82:df:0b:b8:6f:f3:1a:e2:99: 6a:01:17:1f:ee:ec:2d:56:37:e5:8c:87:6b:24:94: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:5A:A5:7C:C0:B0:FC:CF:DB:FA:6E:52:1D:EE:5B:7C:86:E1:95 X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c4:63:4b:f0:bd:1d:d2:07:84:39:1e:62:c1:03:46:de:6b: 5b:64:c2:a4:05:d1:8f:5d:f3:5f:99:7f:8e:f0:7d:97:9a:dc: d0:fc:b0:69:0a:eb:e8:5e:81:e6:df:a6:1d:6f:83:d1:4e:1d: 53:e1:f0:5b:2e:95:12:2b:e8:c6:b3:4a:13:c4:8b:58:0a:87: fd:bb:53:30:c8:80:dc:70:9e:f3:74:fd:1d:da:14:77:92:51: 04:ce:9c:dc:ad:49:dc:12:b7:4a:fa:47:0a:d6:a7:93:5b:89: a2:27:8b:66:89:5f:6e:ca:d7:86:56:e5:31:d7:bc:7b:bf:c9: ac:df:3d:52:31:c8:04:9f:f3:9c:76:13:c6:ee:9d:6e:dc:3d: 06:ac:cc:5c:77:ae:16:63:06:e6:52:c2:04:e1:43:c4:0e:02: 95:67:e6:15:a4:53:0e:ec:91:8a:f5:10:1e:7a:5c:b5:96:78: 0f:0c:8c:83:9c:02:c4:e0:e5:98:78:98:c0:fa:a0:8e:08:34: 8c:d7:10:9b:38:3e:ec:65:f8:eb:80:9c:75:53:fa:e3:00:1b: 22:5f:11:f3:9d:3a:3a:ca:fa:91:2f:70:42:86:8c:3f:1e:51: f7:f1:bd:6c:c3:67:d2:19:18:4f:1f:b1:f5:a1:81:56:57:f4: 55:75:a2:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE9eixULFpWPT5Bk0ivEperL+QR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjA0MTcwMTQ5MzhaFw0yNjA0MTgwNTQ1MzhaMDMxMTAvBgNV BAMTKEQ3MEE1QUE1N0NDMEIwRkNDRkRCRkE2RTUyMURFRTVCN0M4NkUxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KzKBFB6aTMmPfgTfhazFFg2t yGNfaUag0IJDq5ciHxVm4Ca6U4d0MO5M1DKGatX4ij22kpAMtBvJGlFo70rgg3py lh6t82KbcMGGxmEEvU9JBtuRSDriw3APQCEuTm5DvlzO5Frx9n5TaABVzypTtBXV JFtxYg/zUuJlwB/sUKnwV4RxAU6g1z2PtwBwfBtJ0RxGwQRRQ6x/nr1+URr14eWT wxCsxPrTYy0teHZh2rEEnObwgJHtEUcLOQJfDhoPNCf945xhou2JtaOtAOrPlTRC pjaaHMmQbN2VHLksRxZS1JHM1ILfC7hv8xrimWoBFx/u7C1WN+WMh2sklHRVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1wpapXzAsPzP2/puUh3uW3yG4ZUwHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsRjS/C9HdIH hDkeYsEDRt5rW2TCpAXRj13zX5l/jvB9l5rc0PywaQrr6F6B5t+mHW+D0U4dU+Hw Wy6VEivoxrNKE8SLWAqH/btTMMiA3HCe83T9HdoUd5JRBM6c3K1J3BK3SvpHCtan k1uJoieLZolfbsrXhlblMde8e7/JrN89UjHIBJ/znHYTxu6dbtw9BqzMXHeuFmMG 5lLCBOFDxA4ClWfmFaRTDuyRivUQHnpctZZ4DwyMg5wCxODlmHiYwPqgjgg0jNcQ mzg+7GX464CcdVP64wAbIl8R8506Osr6kS9wQoaMPx5R9/G9bMNn0hkYTx+x9aGB Vlf0VXWiQw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:42 2026 by rpki-client