$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: NCKrlyE7pfHihmGxmGrPif7c26IIO3lUPl1hlvL7soY= Subject key identifier: 2A:ED:40:36:82:2C:56:53:7F:E2:6C:A5:FD:F8:0C:36:A5:EB:9C:42 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 3195C4AE00A4F103101BC149188E61D23FFCCBEF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 16:49:43 +0000 Manifest this update: Fri 17 Apr 2026 16:44:43 +0000 Manifest next update: Sat 18 Apr 2026 17:26:43 +0000 Files and hashes: 1: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: n4ICE0JxGA5zpeYrC7tHTQtDQnzTeMdLDHo5G+dg39Y=) 2: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 3: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 4: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 5: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 6: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:95:c4:ae:00:a4:f1:03:10:1b:c1:49:18:8e:61:d2:3f:fc:cb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Apr 17 16:44:43 2026 GMT Not After : Apr 18 17:26:43 2026 GMT Subject: CN=2AED4036822C56537FE26CA5FDF80C36A5EB9C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:35:4d:9d:58:90:97:97:10:46:8c:0f:d7: da:19:a4:76:32:b4:32:ca:4d:40:b2:6d:29:71:7b: 20:47:16:9d:10:70:9b:94:70:6e:19:8f:d1:0f:00: 53:13:02:1c:0d:24:9e:01:a6:3a:31:ba:bb:01:60: 43:f9:1c:5c:35:e8:c9:f0:62:71:d1:60:de:30:6a: e9:d7:71:24:21:23:89:5f:19:72:6a:d5:70:f3:bb: 68:22:1c:8a:c8:26:56:7c:20:8d:c0:b4:05:95:10: d4:5c:4c:77:69:62:43:40:55:29:50:4c:ec:8c:59: 22:6c:0f:86:53:1b:84:b4:f9:99:58:08:20:1d:e0: 75:12:40:a3:b6:5f:05:85:23:26:91:6e:5f:68:36: 88:8d:30:fe:52:41:c1:a6:7d:69:0d:06:ed:d0:d8: a9:c2:b9:31:ce:b0:38:68:40:56:c6:2a:b8:a8:8b: b2:26:fa:ac:0f:34:8e:67:7d:70:55:e7:44:b7:ed: c3:86:30:d4:dc:34:3c:79:30:24:a7:09:97:08:8f: 0a:03:45:b9:6c:2d:c1:0d:1e:f8:c7:9a:b6:c7:a9: 02:09:5e:b9:20:8e:72:13:65:72:9d:33:48:0e:7f: 72:e5:14:ac:d2:e2:e4:9d:08:3b:e3:d0:c1:3d:5b: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:ED:40:36:82:2C:56:53:7F:E2:6C:A5:FD:F8:0C:36:A5:EB:9C:42 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9c:61:2a:db:05:82:3d:14:cc:d0:eb:54:7c:c1:60:50:41: ed:66:af:b1:7c:85:b0:b8:fb:4a:61:ca:6e:c9:8d:bf:01:ed: ce:2e:a4:a2:95:28:d1:94:8e:18:b8:b0:55:c8:05:26:0f:3b: 3f:ef:79:c3:1e:e5:89:31:2f:56:9a:89:28:2f:e7:72:db:b3: 25:bd:e3:7f:bf:3b:35:ee:35:71:37:95:20:43:13:65:21:da: 71:5e:07:e6:8d:e8:71:91:5d:aa:a2:9a:da:cd:ce:d8:1c:d2: fe:4e:65:84:ea:01:40:2a:f9:87:e3:d2:8e:fd:0b:f3:d5:02: 68:5d:a3:db:cc:e2:bd:a4:a5:7c:47:e5:41:48:92:8a:76:e4: 4f:69:9b:75:7f:c7:e2:c5:6e:c2:74:64:ef:73:2c:7a:56:ce: 2c:76:a5:ce:ce:bf:a7:81:71:06:b2:69:3a:f7:d8:0e:55:76: 6e:12:9c:4a:05:dd:d4:32:c6:4c:d9:e9:c5:a5:61:d0:19:e5: a5:a5:d3:df:f8:42:9d:89:4e:9c:db:ab:6c:21:c4:d8:45:74: 15:9d:71:d3:b1:e5:c4:9f:e7:10:1e:6e:fb:44:65:b8:17:7a: 17:c8:1d:66:1f:3d:cb:2e:eb:c5:f0:8f:a3:7f:07:8d:ee:c7: 6e:a4:05:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMZXErgCk8QMQG8FJGI5h0j/8y+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjA0MTcxNjQ0NDNaFw0yNjA0MTgxNzI2NDNaMDMxMTAvBgNV BAMTKDJBRUQ0MDM2ODIyQzU2NTM3RkUyNkNBNUZERjgwQzM2QTVFQjlDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBzVNnViQl5cQRowP19oZpHYy tDLKTUCybSlxeyBHFp0QcJuUcG4Zj9EPAFMTAhwNJJ4BpjoxursBYEP5HFw16Mnw YnHRYN4waunXcSQhI4lfGXJq1XDzu2giHIrIJlZ8II3AtAWVENRcTHdpYkNAVSlQ TOyMWSJsD4ZTG4S0+ZlYCCAd4HUSQKO2XwWFIyaRbl9oNoiNMP5SQcGmfWkNBu3Q 2KnCuTHOsDhoQFbGKrioi7Im+qwPNI5nfXBV50S37cOGMNTcNDx5MCSnCZcIjwoD RblsLcENHvjHmrbHqQIJXrkgjnITZXKdM0gOf3LlFKzS4uSdCDvj0ME9W0EPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKu1ANoIsVlN/4myl/fgMNqXrnEIwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5xhKtsFgj0U zNDrVHzBYFBB7WavsXyFsLj7SmHKbsmNvwHtzi6kopUo0ZSOGLiwVcgFJg87P+95 wx7liTEvVpqJKC/nctuzJb3jf787Ne41cTeVIEMTZSHacV4H5o3ocZFdqqKa2s3O 2BzS/k5lhOoBQCr5h+PSjv0L89UCaF2j28zivaSlfEflQUiSinbkT2mbdX/H4sVu wnRk73MselbOLHalzs6/p4FxBrJpOvfYDlV2bhKcSgXd1DLGTNnpxaVh0BnlpaXT 3/hCnYlOnNurbCHE2EV0FZ1x07HlxJ/nEB5u+0RluBd6F8gdZh89yy7rxfCPo38H je7HbqQFfA== -----END CERTIFICATE-----Generated at Sat Apr 18 04:59:19 2026 by rpki-client