$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: Fk1gsBMIWFn+/Z9F1AfvJdc08uYxBImW9tCghPBlXxQ= Subject key identifier: 96:8C:D7:C2:FE:72:D3:CA:41:FD:E9:E3:F7:CC:44:EB:C2:07:13:51 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 151E6F5D19CB5FA16B7A6C6E22A4029338A25EAD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 07:49:41 +0000 Manifest this update: Fri 17 Apr 2026 07:44:41 +0000 Manifest next update: Sat 18 Apr 2026 09:32:41 +0000 Files and hashes: 1: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: QAtZxceOxzIlZYvCVmfz3addlzpmIVB6wIJewSzqQJY=) 2: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 3: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1e:6f:5d:19:cb:5f:a1:6b:7a:6c:6e:22:a4:02:93:38:a2:5e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Apr 17 07:44:41 2026 GMT Not After : Apr 18 09:32:41 2026 GMT Subject: CN=968CD7C2FE72D3CA41FDE9E3F7CC44EBC2071351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:e7:9e:93:af:ae:c5:f5:f0:22:12:dc:3e: d4:f0:43:39:ab:08:64:60:c3:66:a9:2e:50:3a:ae: 64:a3:e0:bc:69:d2:44:9f:25:e5:01:b6:ea:3e:c6: 82:df:43:15:44:d7:cc:3f:c7:f4:35:00:58:b5:3d: 43:92:c7:e3:8e:48:9c:16:3a:50:16:0e:38:1b:d1: d5:60:13:f1:c8:f5:62:50:c8:bf:9b:59:f9:b1:94: 89:03:d6:e6:da:a4:3a:eb:27:8e:0d:55:dd:e6:d8: 2e:8b:1b:6a:19:97:86:37:8a:32:11:c4:2f:fa:47: 06:65:e8:1f:e9:7f:a8:fd:76:b9:ca:cc:84:5b:c9: 3f:95:1d:e8:4e:2a:68:c2:79:74:59:b0:ec:f6:d0: eb:33:2b:26:c0:01:be:33:4f:a5:a8:8b:04:43:eb: 54:93:1b:b5:ab:6d:9b:de:6a:03:bc:a3:8b:c4:39: ac:5d:f0:06:c8:58:89:f3:2e:f2:22:7e:3f:6b:eb: 2b:8d:b7:5f:d8:2b:47:47:2e:93:50:b2:94:94:58: 6f:94:f4:2e:35:34:81:a0:f1:08:da:c5:71:64:73: 6b:c2:b9:81:ae:dc:c2:8d:78:1a:fc:4e:10:ec:7d: 61:21:06:87:5f:60:ff:b5:17:d2:70:f7:c4:57:7c: 79:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8C:D7:C2:FE:72:D3:CA:41:FD:E9:E3:F7:CC:44:EB:C2:07:13:51 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:01:3a:c8:81:c4:e2:ea:f6:8b:e6:c2:ad:1b:f4:e9:8e:16: 3d:aa:d4:74:e7:62:55:96:92:e7:8d:b6:89:19:3a:83:8e:5d: c6:0a:83:73:9c:63:9f:2d:17:ae:1f:ad:64:00:79:4a:22:45: bc:7a:6f:6a:14:a4:de:12:e5:93:d8:14:8b:c5:5d:71:90:78: dc:2d:44:4d:39:c0:2c:7c:e1:c7:25:ac:b6:36:af:54:55:34: ee:8f:2c:62:05:fa:dc:fd:ac:18:bd:44:c4:b0:e5:e4:7a:3f: 87:ea:0f:c2:a3:35:08:94:cd:d9:1f:3e:97:ec:4f:f5:af:aa: ef:26:d8:15:f7:6a:57:ea:2d:2d:41:15:9c:1a:4f:8c:61:9a: c2:c4:86:53:4f:1f:9f:1b:73:02:ae:20:19:15:e9:94:82:60: af:da:bb:93:5e:2a:e4:ff:08:8d:53:18:3a:af:92:9b:46:f5: c0:dc:72:d4:45:62:1b:40:87:67:6e:82:0e:4a:81:84:10:1a: 7e:d2:7c:fa:4e:a7:c0:fe:ef:29:8c:e8:7e:48:b1:90:4e:49: 4d:44:c1:73:85:fe:93:54:cd:c4:31:e0:f2:e5:d8:b9:71:4b: 92:77:a7:ff:8f:76:96:55:99:6e:d2:46:e9:e1:5c:40:9e:c4: ca:37:91:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFR5vXRnLX6FremxuIqQCkziiXq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjA0MTcwNzQ0NDFaFw0yNjA0MTgwOTMyNDFaMDMxMTAvBgNV BAMTKDk2OENEN0MyRkU3MkQzQ0E0MUZERTlFM0Y3Q0M0NEVCQzIwNzEzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjeOeek6+uxfXwIhLcPtTwQzmr CGRgw2apLlA6rmSj4Lxp0kSfJeUBtuo+xoLfQxVE18w/x/Q1AFi1PUOSx+OOSJwW OlAWDjgb0dVgE/HI9WJQyL+bWfmxlIkD1ubapDrrJ44NVd3m2C6LG2oZl4Y3ijIR xC/6RwZl6B/pf6j9drnKzIRbyT+VHehOKmjCeXRZsOz20OszKybAAb4zT6WoiwRD 61STG7WrbZveagO8o4vEOaxd8AbIWInzLvIifj9r6yuNt1/YK0dHLpNQspSUWG+U 9C41NIGg8QjaxXFkc2vCuYGu3MKNeBr8ThDsfWEhBodfYP+1F9Jw98RXfHnRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlozXwv5y08pB/enj98xE68IHE1EwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwE6yIHE4ur2 i+bCrRv06Y4WParUdOdiVZaS5422iRk6g45dxgqDc5xjny0Xrh+tZAB5SiJFvHpv ahSk3hLlk9gUi8VdcZB43C1ETTnALHzhxyWstjavVFU07o8sYgX63P2sGL1ExLDl 5Ho/h+oPwqM1CJTN2R8+l+xP9a+q7ybYFfdqV+otLUEVnBpPjGGawsSGU08fnxtz Aq4gGRXplIJgr9q7k14q5P8IjVMYOq+Sm0b1wNxy1EViG0CHZ26CDkqBhBAaftJ8 +k6nwP7vKYzofkixkE5JTUTBc4X+k1TNxDHg8uXYuXFLknen/492llWZbtJG6eFc QJ7EyjeRGA== -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:58 2026 by rpki-client