$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: KjwICSJZCJMckzUE/aOZz9l22fHK8ddzyob9Afghju0= Subject key identifier: CA:04:12:02:87:6F:7F:1C:2D:D7:BC:F9:1F:62:9C:60:86:9F:98:FA Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 58ECD60C79AC2F871E56337C33E6E9F8AFCA572C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 05:09:40 +0000 Manifest this update: Fri 17 Apr 2026 05:04:40 +0000 Manifest next update: Sat 18 Apr 2026 08:01:40 +0000 Files and hashes: 1: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 2: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) 3: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: KSVPg0WfLpRNxM9lU8bl12i8mHposVg0BVqBOlYq6vE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ec:d6:0c:79:ac:2f:87:1e:56:33:7c:33:e6:e9:f8:af:ca:57:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Apr 17 05:04:40 2026 GMT Not After : Apr 18 08:01:40 2026 GMT Subject: CN=CA041202876F7F1C2DD7BCF91F629C60869F98FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:25:62:bb:39:70:7e:42:7a:f7:3e:dd:57: d6:46:8f:de:fb:2c:ec:ee:c0:b9:ed:95:7f:de:2e: 2f:5b:39:8f:b2:33:7c:dc:ee:1a:3b:40:5d:95:97: 22:fc:9b:53:f5:18:75:7b:b6:5e:7a:e6:6a:7f:85: 9a:f8:ee:9a:ff:67:60:3c:71:ac:ff:99:d3:80:8d: 6e:72:25:b6:af:02:13:76:d3:ff:30:0a:fe:01:a6: 9d:cd:be:fa:0d:85:1b:3c:11:0d:ea:da:ad:65:cd: 41:91:01:ff:a4:e8:ff:00:ea:06:2a:c0:21:5b:33: 7a:02:ae:d6:79:b1:8f:f2:df:2c:d6:1e:9e:64:a6: b8:0a:1e:4d:49:58:f3:93:09:3d:45:93:96:70:1c: 4c:49:60:eb:ea:09:c8:64:7c:2d:39:9b:aa:98:6e: 48:a5:92:e1:54:8d:7d:0a:9c:27:df:60:4d:9c:6b: 91:e0:0b:c1:87:b2:3f:6d:85:da:70:af:6a:41:68: ae:6e:d2:97:87:c1:7f:03:3b:11:17:d6:62:e8:74: be:1e:cc:65:b8:a0:e5:2b:a9:af:b6:10:3a:c6:72: 2a:64:fa:c6:08:9d:26:60:c6:17:f5:57:94:a7:4a: 8d:25:1a:cf:49:48:db:c3:2a:fd:80:f6:c7:99:4a: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:04:12:02:87:6F:7F:1C:2D:D7:BC:F9:1F:62:9C:60:86:9F:98:FA X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3e:a3:18:32:39:e6:c1:45:46:17:23:52:cf:3c:5e:1f:b6: 5a:b7:57:ff:b7:f5:86:87:78:f2:10:71:04:22:f2:36:65:c4: bc:3a:f7:f0:c8:46:f3:9a:aa:8f:df:cb:f5:af:1a:cd:d0:1c: 74:ff:98:52:d4:97:c8:92:14:5a:9c:25:a3:a8:84:12:02:34: 0c:9a:dc:e3:cc:96:34:98:6d:f2:04:4b:7d:4c:d8:01:26:db: d3:90:ad:a3:91:9c:69:d1:14:0c:6e:fe:b7:b6:f5:ac:7f:ac: c6:0d:45:4d:4c:b1:89:62:f0:9b:10:fb:00:8e:b9:27:cd:61: 12:f9:de:80:37:ad:dc:01:99:3b:95:ac:74:a8:a9:88:1f:dc: 13:d4:71:83:d2:2d:29:9d:0c:54:ca:57:1c:21:82:b1:1d:28: fa:03:49:2e:08:c5:96:99:84:76:e3:0f:73:dd:c7:57:a7:21: 3b:ea:4e:04:f7:06:a4:16:7f:0d:a9:86:02:5a:f8:46:fb:f5: 42:6f:de:c1:a2:ba:dd:68:79:96:b9:8b:ba:a7:a5:7e:f9:ce: 6a:c4:a4:9c:6e:d9:5c:9e:bf:f6:ff:ee:1f:e1:61:45:bf:c5: f0:8f:84:4b:6f:74:3f:51:d8:d9:9e:1b:fa:98:56:19:47:81: 5c:30:70:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWOzWDHmsL4ceVjN8M+bp+K/KVywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjA0MTcwNTA0NDBaFw0yNjA0MTgwODAxNDBaMDMxMTAvBgNV BAMTKENBMDQxMjAyODc2RjdGMUMyREQ3QkNGOTFGNjI5QzYwODY5Rjk4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RSViuzlwfkJ69z7dV9ZGj977 LOzuwLntlX/eLi9bOY+yM3zc7ho7QF2VlyL8m1P1GHV7tl565mp/hZr47pr/Z2A8 caz/mdOAjW5yJbavAhN20/8wCv4Bpp3NvvoNhRs8EQ3q2q1lzUGRAf+k6P8A6gYq wCFbM3oCrtZ5sY/y3yzWHp5kprgKHk1JWPOTCT1Fk5ZwHExJYOvqCchkfC05m6qY bkilkuFUjX0KnCffYE2ca5HgC8GHsj9thdpwr2pBaK5u0peHwX8DOxEX1mLodL4e zGW4oOUrqa+2EDrGcipk+sYInSZgxhf1V5SnSo0lGs9JSNvDKv2A9seZSriNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUygQSAodvfxwt17z5H2KcYIafmPowHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj6jGDI55sFF RhcjUs88Xh+2WrdX/7f1hod48hBxBCLyNmXEvDr38MhG85qqj9/L9a8azdAcdP+Y UtSXyJIUWpwlo6iEEgI0DJrc48yWNJht8gRLfUzYASbb05Cto5GcadEUDG7+t7b1 rH+sxg1FTUyxiWLwmxD7AI65J81hEvnegDet3AGZO5WsdKipiB/cE9Rxg9ItKZ0M VMpXHCGCsR0o+gNJLgjFlpmEduMPc93HV6chO+pOBPcGpBZ/DamGAlr4Rvv1Qm/e waK63Wh5lrmLuqelfvnOasSknG7ZXJ6/9v/uH+FhRb/F8I+ES290P1HY2Z4b+phW GUeBXDBwyg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:04:35 2026 by rpki-client