$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json) Hash identifier: yO13JLPHnIgccw8/nvI76o7porp2TxuExBpuBTz5ENY= Subject key identifier: 72:CD:24:AB:D7:CB:7A:24:1F:D5:E9:60:B7:C8:58:7B:1D:6E:46:F9 Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Certificate serial: 2E95E88F1DCDD685A825530EEA64B5B503861846 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 01:44:38 +0000 Manifest this update: Fri 17 Apr 2026 01:39:38 +0000 Manifest next update: Sat 18 Apr 2026 03:54:38 +0000 Files and hashes: 1: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=) 2: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=) 3: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=) 4: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: ID+vEnG1mSI3iAKEnvOvEiNc6kQ0Lxs9uWbO3P+4DO8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:95:e8:8f:1d:cd:d6:85:a8:25:53:0e:ea:64:b5:b5:03:86:18:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Validity Not Before: Apr 17 01:39:38 2026 GMT Not After : Apr 18 03:54:38 2026 GMT Subject: CN=72CD24ABD7CB7A241FD5E960B7C8587B1D6E46F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:a6:2a:7b:41:9b:c3:3b:7a:a0:96:14:f4: 88:8b:dd:13:06:75:2d:5f:22:71:35:02:a2:96:f7: 73:aa:79:92:be:02:4b:1e:b2:54:5a:07:30:ce:5c: 56:5f:ad:e1:b6:bd:d4:a7:65:ab:95:5a:ab:5e:d5: 25:d5:52:73:58:f2:01:53:77:7e:a8:b8:93:c2:2b: 55:2f:11:6d:88:8a:80:65:0e:89:42:6e:cf:99:80: 95:8d:8e:33:9f:ec:1d:f4:cf:17:5e:7b:36:e9:9e: e2:05:85:86:54:ec:ab:16:79:3f:06:12:ac:a6:e3: 3b:5a:85:91:8d:44:62:42:1e:2c:f3:69:bc:56:42: 4a:d7:e2:ee:c1:b7:f2:37:d2:14:6a:10:64:9f:1e: 48:21:a1:ee:f6:ae:4f:8a:4d:c3:83:e1:1e:75:fb: 82:99:41:58:87:75:f4:2c:87:f5:0e:a8:25:be:82: 52:91:04:54:26:99:cf:53:5c:bc:7f:30:8e:46:e0: 22:0d:1b:53:d9:b7:cc:ad:a0:38:53:8b:28:40:40: 52:9e:49:ff:0b:69:11:0f:63:29:64:8e:a2:0e:19: a7:79:aa:ff:91:13:4c:2c:78:d3:f3:de:98:75:df: 98:3d:d9:41:1d:a4:d8:6a:1e:a9:b8:55:2a:f7:9d: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CD:24:AB:D7:CB:7A:24:1F:D5:E9:60:B7:C8:58:7B:1D:6E:46:F9 X509v3 Authority Key Identifier: keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d8:99:b8:0c:a2:ef:21:5c:14:3d:c3:10:80:66:c9:66:bb: 4c:8c:c7:a0:b9:9a:a8:67:db:e2:54:e7:8f:af:03:44:66:86: 06:86:52:a6:be:c7:7c:9c:37:e4:1d:0a:a1:c3:6d:c5:c1:0d: 35:f3:a7:77:5e:6c:d8:f3:09:86:63:1a:77:e0:13:3d:84:dc: 19:c9:15:11:e8:5f:14:ff:f7:c5:53:b7:25:9d:3f:6c:49:32: c2:2a:50:3e:dc:41:17:ce:4c:21:18:f2:35:35:1b:e7:d6:9c: 13:bf:2d:22:f1:17:9f:90:49:a9:17:4d:23:bf:ef:11:ad:1f: b8:7f:87:82:6d:1d:88:83:21:62:60:4e:9e:6a:a1:bb:ad:f1: 2d:b5:7f:e4:71:b9:8e:22:9e:4b:8b:29:72:c8:cc:fc:5b:20: bf:9b:ad:ac:7c:65:87:33:0a:9e:86:f7:5b:43:09:e5:4e:b9: 26:59:c9:c9:2c:9d:0a:a6:4d:d6:88:7a:cd:8a:0f:f9:5d:2c: 03:fd:73:23:99:74:17:89:24:54:98:dc:d6:47:9a:f3:70:c0: fb:2c:40:81:06:36:63:fb:66:3e:47:df:90:0b:eb:89:93:69: a1:b8:dc:75:1b:67:7d:69:60:c0:d4:ff:c3:d2:da:6f:e1:d7: 2f:66:05:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULpXojx3N1oWoJVMO6mS1tQOGGEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC NERBQjhGNTAeFw0yNjA0MTcwMTM5MzhaFw0yNjA0MTgwMzU0MzhaMDMxMTAvBgNV BAMTKDcyQ0QyNEFCRDdDQjdBMjQxRkQ1RTk2MEI3Qzg1ODdCMUQ2RTQ2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT3KYqe0Gbwzt6oJYU9IiL3RMG dS1fInE1AqKW93OqeZK+AkseslRaBzDOXFZfreG2vdSnZauVWqte1SXVUnNY8gFT d36ouJPCK1UvEW2IioBlDolCbs+ZgJWNjjOf7B30zxdeezbpnuIFhYZU7KsWeT8G Eqym4ztahZGNRGJCHizzabxWQkrX4u7Bt/I30hRqEGSfHkghoe72rk+KTcOD4R51 +4KZQViHdfQsh/UOqCW+glKRBFQmmc9TXLx/MI5G4CING1PZt8ytoDhTiyhAQFKe Sf8LaREPYylkjqIOGad5qv+RE0wseNPz3ph135g92UEdpNhqHqm4VSr3nQptAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcs0kq9fLeiQf1elgt8hYex1uRvkwHwYDVR0j BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtiZuAyi7yFc FD3DEIBmyWa7TIzHoLmaqGfb4lTnj68DRGaGBoZSpr7HfJw35B0KocNtxcENNfOn d15s2PMJhmMad+ATPYTcGckVEehfFP/3xVO3JZ0/bEkywipQPtxBF85MIRjyNTUb 59acE78tIvEXn5BJqRdNI7/vEa0fuH+Hgm0diIMhYmBOnmqhu63xLbV/5HG5jiKe S4spcsjM/Fsgv5utrHxlhzMKnob3W0MJ5U65JlnJySydCqZN1oh6zYoP+V0sA/1z I5l0F4kkVJjc1kea83DA+yxAgQY2Y/tmPkffkAvriZNpobjcdRtnfWlgwNT/w9La b+HXL2YFLw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:15 2026 by rpki-client