$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: tPqDydcqQ73CESddgrdVgTRprNY8Y8rcy+27LsE3o54= Subject key identifier: F7:E9:EC:DE:07:C4:62:18:8F:60:FC:2B:8D:21:7A:25:EA:0C:A9:50 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 26D4A1C63C0078A1177BBFADB5752E5E77C9EC83 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 13:44:43 +0000 Manifest this update: Fri 17 Apr 2026 13:39:43 +0000 Manifest next update: Sat 18 Apr 2026 16:43:43 +0000 Files and hashes: 1: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: KeFhQp1g5vesTtvKNAmGvBrVSSzm3mbGP+xSpv9xQHk=) 2: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 3: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 4: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d4:a1:c6:3c:00:78:a1:17:7b:bf:ad:b5:75:2e:5e:77:c9:ec:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Apr 17 13:39:43 2026 GMT Not After : Apr 18 16:43:43 2026 GMT Subject: CN=F7E9ECDE07C462188F60FC2B8D217A25EA0CA950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:0e:26:9b:57:a8:60:b5:3d:14:c0:98:b6: ce:8a:37:35:9a:cd:68:e7:e2:1d:90:25:76:e5:67: 15:86:aa:72:f5:c5:d2:02:e0:31:58:df:64:6d:5e: ed:35:b5:b0:f8:cd:a1:43:e7:53:5c:e0:e7:d1:a1: 1e:c8:3f:0e:ce:9e:6f:00:a6:a2:ae:34:30:29:14: e4:e5:74:d7:d1:f1:48:81:e6:87:fa:a1:35:9a:88: 4d:ac:b6:b6:9e:62:ec:5f:87:00:4c:c2:e9:59:41: 65:7f:35:15:ad:e9:bb:bf:7a:e5:5d:87:89:06:e0: 63:1d:d1:0d:39:09:24:3f:85:41:40:83:41:4a:61: 9f:5c:28:0b:fb:f1:cf:8a:e8:43:a3:19:1d:c1:3d: 7c:a1:51:55:c0:86:ae:c3:bf:dc:00:48:9f:9a:ee: 81:d4:33:07:93:b8:e8:fb:3d:67:e1:86:be:d2:f2: 2e:67:8f:c2:3d:a7:65:31:cf:df:4e:3b:8f:b6:0d: 3f:ea:db:b1:e4:6a:8a:e9:8e:d0:ad:90:46:17:de: 3f:1f:cb:7a:7c:89:5e:4d:75:c2:91:70:c2:2b:d6: 5e:e0:a3:9d:c4:26:10:f7:91:97:70:d9:78:9c:76: 3b:c9:a9:48:8f:cd:0b:f4:b6:04:fd:8b:9d:fa:3d: b4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E9:EC:DE:07:C4:62:18:8F:60:FC:2B:8D:21:7A:25:EA:0C:A9:50 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:dc:5d:b0:a7:a0:2b:b4:d5:18:23:bd:47:11:3a:70:4e:0a: be:2a:49:fc:01:bb:f7:22:89:57:d2:b3:b6:e5:fc:cb:ec:27: d9:14:0b:ff:39:b2:a8:0c:ab:67:3a:57:07:2b:52:21:35:9b: 30:d3:5e:16:bf:b8:24:47:9c:d0:1f:70:4b:df:31:0d:5b:0f: bd:d5:34:92:1c:ee:08:d7:1a:e7:f1:c9:63:39:a5:dc:37:0f: 52:58:39:34:85:7c:81:f7:a3:45:f6:19:ce:7f:d2:36:9a:31: 0b:3b:ef:bf:c7:1d:dc:80:56:cb:f8:ee:81:e7:76:cc:4f:cf: ea:d0:be:4c:56:62:c2:32:32:58:a4:38:a9:b2:d2:87:b4:87: 4d:4a:54:84:2d:a8:c2:3d:c2:4f:59:f3:90:e2:ef:c8:f5:d6: 03:48:01:52:43:50:5b:1c:c9:41:99:64:16:3e:ff:34:bd:30: c3:08:53:e6:1f:1f:0e:11:51:3c:ca:a3:5f:3a:5a:c9:d5:84: 8f:56:41:7f:61:1b:f9:21:ca:ff:75:35:3c:40:3c:09:5d:e8: 99:8f:87:16:3a:34:a1:06:8a:c9:62:f6:2f:76:b3:2b:1a:a5: 10:ff:64:75:a1:1d:e7:49:b7:b3:6a:ee:80:fa:c2:a8:60:30: dd:7f:32:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJtShxjwAeKEXe7+ttXUuXnfJ7IMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjA0MTcxMzM5NDNaFw0yNjA0MTgxNjQzNDNaMDMxMTAvBgNV BAMTKEY3RTlFQ0RFMDdDNDYyMTg4RjYwRkMyQjhEMjE3QTI1RUEwQ0E5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/A4mm1eoYLU9FMCYts6KNzWa zWjn4h2QJXblZxWGqnL1xdIC4DFY32RtXu01tbD4zaFD51Nc4OfRoR7IPw7Onm8A pqKuNDApFOTldNfR8UiB5of6oTWaiE2straeYuxfhwBMwulZQWV/NRWt6bu/euVd h4kG4GMd0Q05CSQ/hUFAg0FKYZ9cKAv78c+K6EOjGR3BPXyhUVXAhq7Dv9wASJ+a 7oHUMweTuOj7PWfhhr7S8i5nj8I9p2Uxz99OO4+2DT/q27HkaorpjtCtkEYX3j8f y3p8iV5NdcKRcMIr1l7go53EJhD3kZdw2XicdjvJqUiPzQv0tgT9i536PbTzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9+ns3gfEYhiPYPwrjSF6JeoMqVAwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtxdsKegK7TV GCO9RxE6cE4KvipJ/AG79yKJV9KztuX8y+wn2RQL/zmyqAyrZzpXBytSITWbMNNe Fr+4JEec0B9wS98xDVsPvdU0khzuCNca5/HJYzml3DcPUlg5NIV8gfejRfYZzn/S NpoxCzvvv8cd3IBWy/juged2zE/P6tC+TFZiwjIyWKQ4qbLSh7SHTUpUhC2owj3C T1nzkOLvyPXWA0gBUkNQWxzJQZlkFj7/NL0wwwhT5h8fDhFRPMqjXzpaydWEj1ZB f2Eb+SHK/3U1PEA8CV3omY+HFjo0oQaKyWL2L3azKxqlEP9kdaEd50m3s2rugPrC qGAw3X8y3g== -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:15 2026 by rpki-client