$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: gmlTBTVo2WY4KxCWYzWJi+BqUD6LrHm2hs+Wre4m/dA= Subject key identifier: 16:2B:2B:8B:EF:FE:4B:F9:F8:FB:37:F1:56:1D:F7:EB:E5:B9:F7:43 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 2963AB22A8508C1BA9DC33E09E908D0A5D6F4A95 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 08:04:42 +0000 Manifest this update: Fri 17 Apr 2026 07:59:42 +0000 Manifest next update: Sat 18 Apr 2026 09:23:42 +0000 Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 2: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 3: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: c3DdsHLhmksIdVDZWgJDlH2DXbDP2YnMjshHCjVYYd0=) 4: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 5: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:63:ab:22:a8:50:8c:1b:a9:dc:33:e0:9e:90:8d:0a:5d:6f:4a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Apr 17 07:59:42 2026 GMT Not After : Apr 18 09:23:42 2026 GMT Subject: CN=162B2B8BEFFE4BF9F8FB37F1561DF7EBE5B9F743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:b2:e1:42:06:d1:51:68:30:e6:7c:c7:24: be:76:5a:6e:48:24:16:f2:63:4d:0a:a4:82:fb:71: 2c:91:1a:6f:3b:ec:0b:9c:0a:f9:c4:79:a2:49:71: 60:73:ab:09:ec:e4:7b:b8:b2:a3:04:cc:73:a8:fd: 30:96:94:16:1c:93:a9:a3:f8:45:f1:9e:fd:ca:80: d6:99:8e:39:1d:9e:8a:3c:f6:77:28:65:f6:b1:75: 77:c6:b5:ac:70:d4:65:35:20:45:58:98:aa:87:a5: 56:ce:46:e1:91:67:c2:50:fc:9f:55:8f:3a:ee:a9: ec:d3:d2:3c:6f:11:2a:1d:44:1a:4d:9d:eb:7f:17: b1:bf:5e:21:59:b2:c4:9f:c7:48:86:fb:86:0a:d3: 68:31:20:97:98:60:d0:9d:dc:b6:72:1b:ff:3b:72: 22:0b:e7:11:0b:a1:db:68:15:d9:e5:da:55:61:b1: 6b:32:5b:4d:70:6a:16:50:50:9b:f9:5b:c2:37:6a: 42:42:df:82:19:cf:fb:00:d2:bd:f2:cc:62:20:13: 69:80:8b:70:c3:d6:4e:cf:e7:5b:b8:dd:af:42:67: 7a:e2:18:5e:f3:a7:15:4c:71:77:0a:87:3c:1c:90: 16:fa:a2:bf:95:47:14:9f:4e:a5:c3:14:dc:bf:39: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2B:2B:8B:EF:FE:4B:F9:F8:FB:37:F1:56:1D:F7:EB:E5:B9:F7:43 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b2:4e:34:eb:c3:20:b4:f8:d9:a2:af:f0:09:36:77:2b:67: f3:ee:2f:9d:33:7c:7f:8a:9d:32:10:de:89:ed:8c:0c:9d:57: ad:9e:54:69:9a:95:1b:be:68:74:ae:2d:32:d3:31:30:b9:d8: e8:cd:70:e7:f7:ff:72:67:20:ae:32:00:47:25:bf:ac:84:3b: 0e:b0:85:92:18:ff:2c:c2:0a:e6:d8:06:1e:1f:f1:6d:d0:43: 78:09:95:5f:54:4b:be:43:cf:75:45:5a:03:ab:11:49:13:d9: a3:08:90:c6:cd:7d:6b:42:fc:b4:33:08:b2:00:12:3c:e4:1a: f5:ec:2f:06:55:bc:04:b4:e6:42:ab:f3:5a:b3:23:d9:37:95: bf:00:f8:84:27:9e:53:a5:e4:93:e0:cb:e8:a3:1c:f0:64:c9: 44:7d:b8:70:e0:27:e3:8c:6f:13:4c:f3:1c:e8:82:48:4c:dd: d6:11:96:b7:9c:a7:a2:2a:4c:da:f5:2b:5a:7f:e6:af:18:df: 3a:58:0c:1e:3c:d0:2c:d4:79:30:40:6e:c8:fd:f9:de:61:2a: 51:c8:60:56:0e:73:98:00:8a:dd:59:41:6a:39:81:f2:1e:c0: 3a:58:a4:d8:c7:7a:93:ab:6d:2f:f6:59:c0:fd:2e:60:44:2e: 35:d7:af:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKWOrIqhQjBup3DPgnpCNCl1vSpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjA0MTcwNzU5NDJaFw0yNjA0MTgwOTIzNDJaMDMxMTAvBgNV BAMTKDE2MkIyQjhCRUZGRTRCRjlGOEZCMzdGMTU2MURGN0VCRTVCOUY3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvrLhQgbRUWgw5nzHJL52Wm5I JBbyY00KpIL7cSyRGm877AucCvnEeaJJcWBzqwns5Hu4sqMEzHOo/TCWlBYck6mj +EXxnv3KgNaZjjkdnoo89ncoZfaxdXfGtaxw1GU1IEVYmKqHpVbORuGRZ8JQ/J9V jzruqezT0jxvESodRBpNnet/F7G/XiFZssSfx0iG+4YK02gxIJeYYNCd3LZyG/87 ciIL5xELodtoFdnl2lVhsWsyW01wahZQUJv5W8I3akJC34IZz/sA0r3yzGIgE2mA i3DD1k7P51u43a9CZ3riGF7zpxVMcXcKhzwckBb6or+VRxSfTqXDFNy/OUiJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFisri+/+S/n4+zfxVh336+W590MwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrJONOvDILT4 2aKv8Ak2dytn8+4vnTN8f4qdMhDeie2MDJ1XrZ5UaZqVG75odK4tMtMxMLnY6M1w 5/f/cmcgrjIARyW/rIQ7DrCFkhj/LMIK5tgGHh/xbdBDeAmVX1RLvkPPdUVaA6sR SRPZowiQxs19a0L8tDMIsgASPOQa9ewvBlW8BLTmQqvzWrMj2TeVvwD4hCeeU6Xk k+DL6KMc8GTJRH24cOAn44xvE0zzHOiCSEzd1hGWt5ynoipM2vUrWn/mrxjfOlgM HjzQLNR5MEBuyP353mEqUchgVg5zmACK3VlBajmB8h7AOlik2Md6k6ttL/ZZwP0u YEQuNdevjw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:03:47 2026 by rpki-client