$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: 6QO1LhVH75o1SnxnfM+IEUer1zNsCnm/itYSstoqqu4= Subject key identifier: B0:10:F9:3D:02:37:79:34:12:5D:E9:C7:FE:7C:47:0B:78:F1:DD:D1 Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 148525D5C2337E48D09BE70A43A4672C99562788 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 07:04:41 +0000 Manifest this update: Fri 17 Apr 2026 06:59:41 +0000 Manifest next update: Sat 18 Apr 2026 07:21:41 +0000 Files and hashes: 1: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: OXiWtbUVHSWM/E/zv+TGi/F7R/b3H1J7Nws5qdI9N5k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:85:25:d5:c2:33:7e:48:d0:9b:e7:0a:43:a4:67:2c:99:56:27:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: Apr 17 06:59:41 2026 GMT Not After : Apr 18 07:21:41 2026 GMT Subject: CN=B010F93D02377934125DE9C7FE7C470B78F1DDD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:c9:c6:f3:48:55:eb:13:75:86:89:86:28: 30:bb:4a:5f:54:93:94:69:8a:c0:23:12:cd:e9:18: 63:0e:06:61:52:84:e5:11:c5:25:0d:26:cd:e9:3e: 83:cf:3e:16:57:d5:71:9a:53:0a:d7:41:44:15:88: 4b:e2:62:a7:79:c8:3d:95:7e:e1:3b:67:98:d9:61: 88:52:26:a8:a9:2d:c1:f5:f4:f9:46:1e:ec:60:a3: f7:ce:f3:1b:0b:0c:54:d4:22:6a:f3:1c:fa:09:52: 37:81:35:ba:30:45:b8:5d:93:fd:80:f0:d6:7f:7e: 62:f3:60:72:8f:7d:16:07:88:6f:7e:5f:06:06:a0: 4f:2a:62:0f:b7:8a:04:7b:12:55:f6:f1:46:ec:43: 91:28:ae:ef:e4:a6:3b:d5:61:c9:03:b3:40:35:bc: 4e:19:a7:cd:76:53:36:73:0a:0c:47:79:db:b7:f6: fc:ab:ed:37:e6:d2:37:60:ed:e4:b8:d8:d9:85:3c: 42:d5:46:83:bb:d2:a1:f5:ed:9f:64:e3:bf:15:80: 1c:9c:47:f7:4f:da:64:6b:c2:4c:99:2f:93:f1:65: eb:fc:1e:13:cf:53:8c:84:68:d6:75:95:ed:c5:6f: 62:ba:18:cc:3b:d4:7b:13:5d:1c:f7:74:c3:d5:92: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:10:F9:3D:02:37:79:34:12:5D:E9:C7:FE:7C:47:0B:78:F1:DD:D1 X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fe:33:ad:99:89:66:f6:b7:30:a8:f8:f9:f2:1c:b3:b3:05: 00:8f:6f:9c:4e:39:f3:0e:fd:08:f9:af:98:13:74:e4:2e:0d: 22:82:cf:9a:07:91:0a:bd:2c:3d:d7:9b:3e:a4:0b:9a:b0:5b: 41:a2:cc:44:0e:72:14:65:75:1b:53:f2:a3:2f:f0:c0:70:d4: 52:87:4c:b1:79:c6:85:b0:9c:87:5d:fb:0a:8f:70:b8:05:e7: 83:d8:5e:e1:c2:2c:85:32:ed:30:c0:ee:4e:cf:31:4f:66:97: 2f:06:75:47:45:69:4b:94:c8:44:88:ab:e4:b3:29:3b:27:c6: 7a:cf:41:72:9d:0d:cd:a6:54:a3:d3:3d:a6:76:79:96:0b:26: fa:a5:6f:04:78:f3:5d:54:e9:fb:f6:50:57:f8:a1:44:a7:2f: 87:3a:88:51:f5:97:d2:79:17:84:ec:4a:c7:de:3b:f5:ff:86: e2:95:7f:ef:16:47:0f:1a:d3:6e:e6:73:03:05:ae:a4:22:47: 34:08:d3:9f:b2:8c:5b:57:f6:e0:2f:52:f2:68:f7:5d:6f:66: cc:0b:fd:ae:a6:e5:0b:46:6d:99:ec:d1:08:59:7c:fc:7f:42: 60:fd:77:c0:65:aa:81:67:15:35:6b:11:8b:cc:a1:ce:14:85: 60:87:da:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFIUl1cIzfkjQm+cKQ6RnLJlWJ4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjA0MTcwNjU5NDFaFw0yNjA0MTgwNzIxNDFaMDMxMTAvBgNV BAMTKEIwMTBGOTNEMDIzNzc5MzQxMjVERTlDN0ZFN0M0NzBCNzhGMURERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZysnG80hV6xN1homGKDC7Sl9U k5RpisAjEs3pGGMOBmFShOURxSUNJs3pPoPPPhZX1XGaUwrXQUQViEviYqd5yD2V fuE7Z5jZYYhSJqipLcH19PlGHuxgo/fO8xsLDFTUImrzHPoJUjeBNbowRbhdk/2A 8NZ/fmLzYHKPfRYHiG9+XwYGoE8qYg+3igR7ElX28UbsQ5Eoru/kpjvVYckDs0A1 vE4Zp812UzZzCgxHedu39vyr7Tfm0jdg7eS42NmFPELVRoO70qH17Z9k478VgByc R/dP2mRrwkyZL5PxZev8HhPPU4yEaNZ1le3Fb2K6GMw71HsTXRz3dMPVkpy1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsBD5PQI3eTQSXenH/nxHC3jx3dEwHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav4zrZmJZva3 MKj4+fIcs7MFAI9vnE458w79CPmvmBN05C4NIoLPmgeRCr0sPdebPqQLmrBbQaLM RA5yFGV1G1Pyoy/wwHDUUodMsXnGhbCch137Co9wuAXng9he4cIshTLtMMDuTs8x T2aXLwZ1R0VpS5TIRIir5LMpOyfGes9Bcp0NzaZUo9M9pnZ5lgsm+qVvBHjzXVTp +/ZQV/ihRKcvhzqIUfWX0nkXhOxKx9479f+G4pV/7xZHDxrTbuZzAwWupCJHNAjT n7KMW1f24C9S8mj3XW9mzAv9rqblC0ZtmezRCFl8/H9CYP13wGWqgWcVNWsRi8yh zhSFYIfaHA== -----END CERTIFICATE-----Generated at Sat Apr 18 00:28:18 2026 by rpki-client