$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json) Hash identifier: IFApfaq1XP0fOdh/2kAzHpCnazljconUpC1J2H7uinU= Subject key identifier: 5B:5E:FB:0E:DF:E4:BF:BE:5C:93:76:62:08:E4:F0:B1:5E:13:49:CE Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Certificate serial: 38B2FB75EAACDA344820CE6308D41F11BBBB3F7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 18:19:47 +0000 Manifest this update: Fri 17 Apr 2026 18:14:47 +0000 Manifest next update: Sat 18 Apr 2026 21:58:47 +0000 Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: 3woV3cQwCqpb32njRLYDJ1/oW6vMqSDSFJgGd9zpoMc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b2:fb:75:ea:ac:da:34:48:20:ce:63:08:d4:1f:11:bb:bb:3f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Validity Not Before: Apr 17 18:14:47 2026 GMT Not After : Apr 18 21:58:47 2026 GMT Subject: CN=5B5EFB0EDFE4BFBE5C93766208E4F0B15E1349CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:80:24:5a:dc:3e:45:7b:41:50:dc:dc:52: 7d:02:23:f1:75:3f:18:07:2d:40:92:76:21:c7:09: bb:75:11:48:9b:63:60:69:e3:a3:9f:8e:88:ac:13: 4e:78:ce:11:17:f0:65:ca:f4:7d:c8:07:07:0d:04: 1b:dc:6f:54:b4:47:77:7d:ad:00:20:78:cf:70:31: 95:cb:15:d9:f4:aa:46:96:2b:da:f9:aa:65:83:32: 64:f5:7c:ba:8f:3b:8c:33:7e:d2:78:8d:e5:12:de: 77:d4:5c:51:f7:e4:bc:5a:89:bd:65:1c:51:75:c9: 85:36:43:e9:1b:8d:e1:dc:bd:0f:34:ca:f4:99:62: 22:e8:70:84:1f:4b:4e:d6:93:a7:67:53:ef:1d:15: 5b:98:f9:19:df:56:22:7e:85:34:ef:18:14:02:14: 54:36:2e:c8:83:48:ff:2b:2f:df:25:e0:96:f2:88: dc:90:1c:0e:a2:e7:4f:da:c1:c9:99:ee:15:35:31: 3e:48:72:44:c5:2d:fe:dd:f9:1a:84:76:fd:b4:d8: b6:75:86:0d:81:3f:8d:80:a8:c8:ec:00:6d:e6:a6: 9f:07:08:5e:69:d9:92:30:6d:a1:e1:19:07:ec:86: e6:05:6b:70:3a:11:ed:70:0f:21:ed:92:2d:9b:a4: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5E:FB:0E:DF:E4:BF:BE:5C:93:76:62:08:E4:F0:B1:5E:13:49:CE X509v3 Authority Key Identifier: keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8e:89:39:a3:47:e5:65:e1:09:a2:69:b1:6a:50:d4:61:dc: 03:09:18:27:cd:55:77:fb:60:c3:70:c2:92:08:8d:1e:aa:5b: 51:ed:b1:44:b2:7f:e7:74:df:f4:08:e5:3b:d4:03:b7:71:01: 55:4c:ce:53:08:b3:d3:d0:14:a9:20:18:1b:e3:46:4b:44:b5: 44:60:58:95:f5:41:d2:b3:d0:8b:ee:0a:5c:28:df:1f:38:a4: c3:99:fa:93:f7:f5:7d:1f:f8:6d:2b:35:7e:fc:54:12:5a:e8: 5d:29:84:be:06:43:5a:26:e6:55:ae:80:ef:c0:b7:2c:2f:f6: 1b:c8:91:e4:bb:9d:1f:9e:7c:9b:b0:5e:7c:4e:30:07:e1:75: e6:49:0a:6e:67:af:99:fa:0b:a1:6f:f2:60:93:5c:2a:b5:69: 48:05:57:96:22:bc:01:bb:93:6a:7f:1e:2d:fb:f4:cc:09:35: 82:64:45:86:30:00:22:99:2c:b7:c1:51:cf:6a:a6:a0:0c:e0: 89:40:10:15:82:f3:d9:91:7b:78:f7:d7:c5:4b:bd:2e:ff:9b: e2:33:be:7a:54:ad:3c:e3:4d:a5:38:dd:bb:98:20:5e:29:94: 15:99:5d:4b:c1:e4:08:e3:64:6a:19:21:66:1f:64:9f:74:7e: d0:d5:d3:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOLL7deqs2jRIIM5jCNQfEbu7P3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0 QjI0MjcwNDAeFw0yNjA0MTcxODE0NDdaFw0yNjA0MTgyMTU4NDdaMDMxMTAvBgNV BAMTKDVCNUVGQjBFREZFNEJGQkU1QzkzNzY2MjA4RTRGMEIxNUUxMzQ5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsYAkWtw+RXtBUNzcUn0CI/F1 PxgHLUCSdiHHCbt1EUibY2Bp46OfjoisE054zhEX8GXK9H3IBwcNBBvcb1S0R3d9 rQAgeM9wMZXLFdn0qkaWK9r5qmWDMmT1fLqPO4wzftJ4jeUS3nfUXFH35Lxaib1l HFF1yYU2Q+kbjeHcvQ80yvSZYiLocIQfS07Wk6dnU+8dFVuY+RnfViJ+hTTvGBQC FFQ2LsiDSP8rL98l4JbyiNyQHA6i50/awcmZ7hU1MT5IckTFLf7d+RqEdv202LZ1 hg2BP42AqMjsAG3mpp8HCF5p2ZIwbaHhGQfshuYFa3A6Ee1wDyHtki2bpNpTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW177Dt/kv75ck3ZiCOTwsV4TSc4wHwYDVR0j BBgwFoAU02n3Hf2WUZ3rS8oowqeyN0skJwQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8xL0QzNjlGNzFERkQ5NjUxOURFQjRCQ0EyOEMyQTdC MjM3NEIyNDI3MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMS9EMzY5RjcxREZEOTY1 MTlERUI0QkNBMjhDMkE3QjIzNzRCMjQyNzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE46JOaNH5WXh CaJpsWpQ1GHcAwkYJ81Vd/tgw3DCkgiNHqpbUe2xRLJ/53Tf9AjlO9QDt3EBVUzO Uwiz09AUqSAYG+NGS0S1RGBYlfVB0rPQi+4KXCjfHzikw5n6k/f1fR/4bSs1fvxU ElroXSmEvgZDWibmVa6A78C3LC/2G8iR5LudH558m7BefE4wB+F15kkKbmevmfoL oW/yYJNcKrVpSAVXliK8AbuTan8eLfv0zAk1gmRFhjAAIpkst8FRz2qmoAzgiUAQ FYLz2ZF7ePfXxUu9Lv+b4jO+elStPONNpTjdu5ggXimUFZldS8HkCONkahkhZh9k n3R+0NXTBw== -----END CERTIFICATE-----Generated at Sat Apr 18 03:23:21 2026 by rpki-client