$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft (raw, json) Hash identifier: /o5aWyIotqHFzIVGuS4YG5vsGhBhHxRuMNQw9D+YRxk= Subject key identifier: 11:49:42:BB:0E:1B:53:78:B0:4A:5E:0B:54:00:C3:3F:21:75:10:46 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 69ACBA8936A288DA72AEDEF8B945942A7D85C3A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 10:44:43 +0000 Manifest this update: Fri 17 Apr 2026 10:39:43 +0000 Manifest next update: Sat 18 Apr 2026 12:43:43 +0000 Files and hashes: 1: 32372e302e3133332e302f32342d3234203d3e20313338393135.roa (hash: yjVaS9fU/BmpI0d1y40icFKgvmXLnvrVPGA9lnAYovg=) 2: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl (hash: EWxxMgLYrM6rBmr4nK0pXvokCE5Z/yJZV+WgkfkUOB0=) 3: 3130332e32372e342e302f32342d3234203d3e203538383534.roa (hash: qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ac:ba:89:36:a2:88:da:72:ae:de:f8:b9:45:94:2a:7d:85:c3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: Apr 17 10:39:43 2026 GMT Not After : Apr 18 12:43:43 2026 GMT Subject: CN=114942BB0E1B5378B04A5E0B5400C33F21751046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:6b:ad:29:d6:bd:98:bb:46:4e:fb:ba:d5: c1:e4:db:2b:0c:72:03:e2:a2:f4:f7:f2:0e:58:8f: 72:34:18:f0:42:11:4f:93:c8:dd:16:40:0c:0e:56: ad:1a:e9:05:62:0c:48:31:ec:eb:23:30:a4:0e:94: 71:13:68:98:6d:30:d3:c0:3b:41:c2:52:fc:e2:9e: 39:e4:28:94:19:84:88:10:2a:33:3e:d0:1f:54:18: af:a9:ca:59:a7:56:fc:de:b1:91:83:54:ad:5f:0d: 2f:43:95:73:d5:9a:87:c0:d4:85:7d:57:dc:fa:a1: 2f:30:ba:db:4b:fa:18:3e:d6:27:10:73:d7:ce:63: 26:91:f7:24:c1:8f:68:ad:f2:41:ef:54:a4:42:4b: 62:a2:91:9b:40:d7:a5:6e:c5:1d:e6:23:3f:a9:0c: aa:54:7b:2b:ee:0c:21:78:02:21:d1:52:b8:ef:39: f4:7b:39:4b:7d:39:24:52:99:6e:aa:fa:89:79:03: 81:fa:4c:20:99:63:9a:24:94:c4:c3:b6:bb:72:50: ac:c0:a0:ff:cc:8a:02:38:ff:7e:10:c4:85:41:8d: e4:af:98:2a:8d:28:fd:57:14:b9:f6:43:1f:12:7f: 65:d3:2c:68:26:2f:2c:2c:f3:2a:61:36:3c:d5:15: 9f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:49:42:BB:0E:1B:53:78:B0:4A:5E:0B:54:00:C3:3F:21:75:10:46 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c1:61:00:e1:bd:75:53:5c:d4:db:91:a9:4a:61:79:20:ad: 54:d2:92:98:c2:56:c5:23:96:ae:3c:20:d0:39:9c:64:34:ab: 89:3b:68:02:b5:27:3c:b2:00:a7:c2:bc:8b:0c:30:04:d6:40: 93:be:1b:c0:d5:49:21:b0:e6:ba:d1:cb:75:c1:0a:f6:df:fb: 47:0d:b3:00:6f:21:6e:b0:45:8a:6e:c7:77:7d:b4:a4:ec:72: ba:c6:7d:79:d1:ae:e1:2f:48:67:3e:bb:18:55:e2:2c:20:06: 32:eb:e9:2e:67:71:4d:d2:6f:c1:df:ce:d7:aa:91:a1:e6:3f: d1:04:58:85:9e:81:cb:43:2f:b8:2f:d4:f2:5f:79:79:97:72: e2:be:a4:69:e0:b2:ab:86:65:e8:3d:7a:fa:5d:76:01:cb:59: d9:1e:3d:e2:75:8e:f4:f6:56:44:12:8a:e5:fb:ea:50:dd:ac: 29:9c:3b:77:91:8b:66:5c:00:91:10:6a:4a:d4:42:c3:c0:d6: 69:3e:e6:e8:cf:51:f3:1b:d7:18:74:c8:6b:bd:3e:5b:f8:00: 82:d0:3e:09:9b:13:77:f8:98:d0:1d:d0:44:9f:f1:07:7c:c5: aa:93:4c:55:6c:be:27:e8:19:b6:33:d4:fe:23:9e:aa:87:fb: b9:ae:96:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaay6iTaiiNpyrt74uUWUKn2Fw6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA0MTcxMDM5NDNaFw0yNjA0MTgxMjQzNDNaMDMxMTAvBgNV BAMTKDExNDk0MkJCMEUxQjUzNzhCMDRBNUUwQjU0MDBDMzNGMjE3NTEwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWm2utKda9mLtGTvu61cHk2ysM cgPiovT38g5Yj3I0GPBCEU+TyN0WQAwOVq0a6QViDEgx7OsjMKQOlHETaJhtMNPA O0HCUvzinjnkKJQZhIgQKjM+0B9UGK+pylmnVvzesZGDVK1fDS9DlXPVmofA1IV9 V9z6oS8wuttL+hg+1icQc9fOYyaR9yTBj2it8kHvVKRCS2KikZtA16VuxR3mIz+p DKpUeyvuDCF4AiHRUrjvOfR7OUt9OSRSmW6q+ol5A4H6TCCZY5oklMTDtrtyUKzA oP/MigI4/34QxIVBjeSvmCqNKP1XFLn2Qx8Sf2XTLGgmLyws8yphNjzVFZ/rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEUlCuw4bU3iwSl4LVADDPyF1EEYwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC9FQzlFMUM4NDBDODcw NUU3NTRDMkUzRkYzMkE0NEZCOUQ3ODEwMUQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8FhAOG9dVNc 1NuRqUpheSCtVNKSmMJWxSOWrjwg0DmcZDSriTtoArUnPLIAp8K8iwwwBNZAk74b wNVJIbDmutHLdcEK9t/7Rw2zAG8hbrBFim7Hd320pOxyusZ9edGu4S9IZz67GFXi LCAGMuvpLmdxTdJvwd/O16qRoeY/0QRYhZ6By0MvuC/U8l95eZdy4r6kaeCyq4Zl 6D16+l12ActZ2R494nWO9PZWRBKK5fvqUN2sKZw7d5GLZlwAkRBqStRCw8DWaT7m 6M9R8xvXGHTIa70+W/gAgtA+CZsTd/iY0B3QRJ/xB3zFqpNMVWy+J+gZtjPU/iOe qof7ua6WeQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:47 2026 by rpki-client