$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: kx4l/qVoANh112T47t8W2JQjCQZv/dmyNy5c+vKnQtk= Subject key identifier: 9A:1A:BA:CA:83:F2:08:4D:16:29:A7:50:C0:D1:F9:B7:17:79:62:F7 Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 437B7180BFD019EFF59C5E03FF7533A162D5BE10 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 10:24:42 +0000 Manifest this update: Fri 17 Apr 2026 10:19:42 +0000 Manifest next update: Sat 18 Apr 2026 11:49:42 +0000 Files and hashes: 1: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: aQk6YqVM9spZ9jk+GFUsGn01OKTjwfjkPGEmfLqOxhI=) 2: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7b:71:80:bf:d0:19:ef:f5:9c:5e:03:ff:75:33:a1:62:d5:be:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Apr 17 10:19:42 2026 GMT Not After : Apr 18 11:49:42 2026 GMT Subject: CN=9A1ABACA83F2084D1629A750C0D1F9B7177962F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fb:3a:a9:d4:27:92:2d:33:50:ba:74:fa:d9: 2f:4d:fc:d9:32:a9:f4:b5:59:3d:29:26:b4:ce:01: d7:93:14:bf:2c:c6:6f:d2:f7:2a:e5:e5:c9:7e:45: ef:4d:6f:5b:cb:1e:3a:9f:ba:c8:bf:57:c8:77:96: 0f:ac:e5:ed:d2:20:87:b8:36:f0:0d:10:03:3e:50: f9:60:3f:ed:8c:a4:ee:b0:9b:d5:e4:27:d4:cd:8b: c7:f8:78:ac:79:e6:d4:db:a8:08:26:95:8a:44:2a: bc:3d:09:7c:4a:2f:1a:4a:71:eb:bc:3b:bc:2e:ac: 85:7d:f7:a4:30:d8:ab:4b:6a:8f:5c:78:4f:7d:1e: 75:da:2c:2c:47:bc:7e:48:de:cc:6b:e9:49:6e:2b: f6:62:94:35:65:6f:fa:2a:fd:b7:8c:44:64:21:5b: 62:4b:eb:a1:ed:1d:76:02:89:40:0a:76:21:b0:cd: 22:9c:48:c9:9a:02:2a:9a:13:c9:b0:6d:49:84:62: b7:6e:64:dc:5b:6b:c4:30:2f:73:7a:6a:24:e3:4c: 2f:18:af:cc:60:fb:13:82:95:26:ed:e3:e4:cf:de: 6f:8e:15:80:2a:b4:60:d1:7a:a6:95:b7:f3:57:25: 66:f7:40:ef:c8:a7:10:cb:97:91:35:d4:f6:b6:ac: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1A:BA:CA:83:F2:08:4D:16:29:A7:50:C0:D1:F9:B7:17:79:62:F7 X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:70:6e:6f:fa:27:6e:d7:61:8a:7e:8f:ae:1f:8d:46:e5:47: f1:b4:e5:4a:f5:25:79:e5:b2:47:19:59:a3:4b:e7:06:ae:1e: e0:53:7e:57:7b:e9:97:4e:1b:5a:06:18:0c:be:78:17:cb:7f: 21:bb:5d:68:09:be:3e:2e:2c:c7:ab:84:70:6c:99:70:cb:ee: 14:ef:2c:9f:db:05:0f:be:84:8f:32:e7:82:e8:fa:5a:c0:4e: 40:53:88:e2:05:aa:0c:f5:13:6b:95:2c:2b:af:25:17:21:1c: 1d:36:85:43:cb:1e:5b:a2:8b:6a:78:bb:9e:f3:6e:1a:f9:49: 29:95:d1:3c:bc:52:eb:9e:d2:87:df:ad:b5:e8:f2:4b:9e:92: 67:33:aa:35:32:98:4f:0c:c2:c8:7b:71:8c:4f:92:31:98:9a: db:fe:43:59:a2:a5:e9:09:63:de:f2:b0:07:d3:f5:59:24:7b: d4:e1:31:a6:46:e9:30:0a:46:1c:9f:7e:6d:01:fa:78:de:dd: 98:84:93:e0:7a:cd:2e:2e:08:f4:b7:44:73:57:ac:01:56:e5: 29:5a:de:66:a9:08:9e:69:b2:50:59:9c:70:2e:b8:0f:d9:81: 29:4a:f2:1a:20:be:1e:4d:1c:c6:ba:d8:e8:9a:95:38:12:9a: 95:d0:74:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ3txgL/QGe/1nF4D/3UzoWLVvhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjA0MTcxMDE5NDJaFw0yNjA0MTgxMTQ5NDJaMDMxMTAvBgNV BAMTKDlBMUFCQUNBODNGMjA4NEQxNjI5QTc1MEMwRDFGOUI3MTc3OTYyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp+zqp1CeSLTNQunT62S9N/Nky qfS1WT0pJrTOAdeTFL8sxm/S9yrl5cl+Re9Nb1vLHjqfusi/V8h3lg+s5e3SIIe4 NvANEAM+UPlgP+2MpO6wm9XkJ9TNi8f4eKx55tTbqAgmlYpEKrw9CXxKLxpKceu8 O7wurIV996Qw2KtLao9ceE99HnXaLCxHvH5I3sxr6UluK/ZilDVlb/oq/beMRGQh W2JL66HtHXYCiUAKdiGwzSKcSMmaAiqaE8mwbUmEYrduZNxba8QwL3N6aiTjTC8Y r8xg+xOClSbt4+TP3m+OFYAqtGDReqaVt/NXJWb3QO/IpxDLl5E11Pa2rJE/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmhq6yoPyCE0WKadQwNH5txd5YvcwHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3Bub/onbtdh in6Prh+NRuVH8bTlSvUleeWyRxlZo0vnBq4e4FN+V3vpl04bWgYYDL54F8t/Ibtd aAm+Pi4sx6uEcGyZcMvuFO8sn9sFD76EjzLnguj6WsBOQFOI4gWqDPUTa5UsK68l FyEcHTaFQ8seW6KLani7nvNuGvlJKZXRPLxS657Sh9+ttejyS56SZzOqNTKYTwzC yHtxjE+SMZia2/5DWaKl6Qlj3vKwB9P1WSR71OExpkbpMApGHJ9+bQH6eN7dmIST 4HrNLi4I9LdEc1esAVblKVreZqkInmmyUFmccC64D9mBKUryGiC+Hk0cxrrY6JqV OBKaldB0jw== -----END CERTIFICATE-----Generated at Sat Apr 18 03:01:46 2026 by rpki-client