$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: NOtlXNozqkOBZ48/xja5M8mcP9rwptFqWshf2GNR0Kw= Subject key identifier: 00:7C:78:6A:AC:91:CA:55:7B:B9:BC:3F:D1:79:61:58:4D:A0:EE:EB Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 7568521AD73C4168743D86266E4FD3E4CB1F559E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 23:49:50 +0000 Manifest this update: Fri 17 Apr 2026 23:44:50 +0000 Manifest next update: Sun 19 Apr 2026 00:29:50 +0000 Files and hashes: 1: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: jUTzEri/ZZaCC87K8+x5JGnK8dh1UobLbMi6QRdvhug=) 2: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 3: 3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (hash: vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:68:52:1a:d7:3c:41:68:74:3d:86:26:6e:4f:d3:e4:cb:1f:55:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Apr 17 23:44:50 2026 GMT Not After : Apr 19 00:29:50 2026 GMT Subject: CN=007C786AAC91CA557BB9BC3FD17961584DA0EEEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:b6:35:ca:6f:14:8d:2a:18:2f:42:f3:23: a7:01:fe:47:6c:41:36:0d:57:8d:b7:f6:ff:e2:a3: ea:bb:32:f9:d1:e2:9f:7b:04:0b:2f:b0:76:24:34: 31:a2:52:5d:77:27:50:a8:41:43:70:93:8c:42:ff: e0:e6:bc:60:c7:d6:0b:ce:81:57:53:99:8c:15:04: c9:9f:fb:ed:9a:39:06:cf:b3:79:a3:ac:62:c8:10: e0:f1:bf:c0:36:c5:73:f8:c9:fa:2c:15:2c:98:cc: fa:69:bf:63:a7:35:77:a1:d8:57:d5:15:b5:a1:b8: b4:2c:bf:d2:b2:06:13:30:f3:96:26:74:85:b1:88: 24:3d:9c:59:df:40:cb:ff:37:eb:93:b5:b6:3a:29: 6b:ea:fd:2a:60:b0:24:46:01:c0:d0:19:7a:e2:c2: 80:fa:30:07:f8:29:58:d6:1a:31:16:56:ee:46:5e: 81:09:8f:68:72:c6:f5:8e:57:d1:23:3e:c8:01:0f: b9:9e:f5:43:64:68:61:7c:28:25:ac:2f:b6:aa:24: c4:61:51:30:ab:7d:09:d7:5d:b9:1c:9b:ff:08:ef: d0:ab:58:62:55:b2:a9:e1:00:72:d7:89:0f:4b:20: 9c:71:83:fb:62:a1:e9:ab:66:88:13:01:c0:89:ee: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7C:78:6A:AC:91:CA:55:7B:B9:BC:3F:D1:79:61:58:4D:A0:EE:EB X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7c:3d:97:17:62:73:84:6c:47:63:ab:7d:01:fc:8e:c0:02: c0:87:53:7f:d7:78:5a:5b:60:8f:b5:51:64:f8:42:10:97:4a: 32:1d:a4:2c:74:04:94:57:0b:64:7c:77:fb:d2:41:2d:9f:5c: 3d:f0:12:ee:41:28:9e:76:dd:23:45:08:ab:b0:36:69:cc:d5: 85:ee:cd:89:4d:8f:ff:16:85:35:8c:0c:13:3c:d7:2c:0c:02: 53:27:d7:1f:e7:1a:0f:9f:c1:a6:dc:9f:fc:5a:71:3c:b8:28: 21:29:77:8a:67:7f:1f:49:8b:32:c9:7c:f6:75:68:58:33:7d: bf:e8:51:e7:5c:39:f0:2d:a2:18:ee:d3:7b:a6:43:84:c4:e9: 7f:5d:0a:7f:dc:bf:e3:3a:5d:e7:1f:77:15:68:12:bb:bc:26: 82:40:25:c6:61:cd:37:62:0e:62:49:10:72:59:bf:b2:c7:dc: 79:a7:31:84:c8:91:24:7c:b4:43:88:68:85:ee:46:e3:19:44: 12:46:88:fc:d3:b5:e5:c2:ae:14:13:f8:b9:3f:8c:bd:be:b3: b2:94:66:d1:96:5f:94:1f:2d:a0:bf:39:34:1b:ba:94:90:e3: f1:29:ba:d0:fd:c9:db:e4:e5:87:19:8c:40:ce:91:fc:47:38: 4a:2d:e2:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdWhSGtc8QWh0PYYmbk/T5MsfVZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA0MTcyMzQ0NTBaFw0yNjA0MTkwMDI5NTBaMDMxMTAvBgNV BAMTKDAwN0M3ODZBQUM5MUNBNTU3QkI5QkMzRkQxNzk2MTU4NERBMEVFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+rY1ym8UjSoYL0LzI6cB/kds QTYNV4239v/io+q7MvnR4p97BAsvsHYkNDGiUl13J1CoQUNwk4xC/+DmvGDH1gvO gVdTmYwVBMmf++2aOQbPs3mjrGLIEODxv8A2xXP4yfosFSyYzPppv2OnNXeh2FfV FbWhuLQsv9KyBhMw85YmdIWxiCQ9nFnfQMv/N+uTtbY6KWvq/SpgsCRGAcDQGXri woD6MAf4KVjWGjEWVu5GXoEJj2hyxvWOV9EjPsgBD7me9UNkaGF8KCWsL7aqJMRh UTCrfQnXXbkcm/8I79CrWGJVsqnhAHLXiQ9LIJxxg/tioemrZogTAcCJ7jpNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAHx4aqyRylV7ubw/0XlhWE2g7uswHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXw9lxdic4Rs R2OrfQH8jsACwIdTf9d4Wltgj7VRZPhCEJdKMh2kLHQElFcLZHx3+9JBLZ9cPfAS 7kEonnbdI0UIq7A2aczVhe7NiU2P/xaFNYwMEzzXLAwCUyfXH+caD5/Bptyf/Fpx PLgoISl3imd/H0mLMsl89nVoWDN9v+hR51w58C2iGO7Te6ZDhMTpf10Kf9y/4zpd 5x93FWgSu7wmgkAlxmHNN2IOYkkQclm/ssfceacxhMiRJHy0Q4hohe5G4xlEEkaI /NO15cKuFBP4uT+Mvb6zspRm0ZZflB8toL85NBu6lJDj8Sm60P3J2+TlhxmMQM6R /Ec4Si3ioA== -----END CERTIFICATE-----Generated at Sat Apr 18 05:00:18 2026 by rpki-client