$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: Dc35u8Q3zbYOieyLqyAc5KPjERlXUmjMwyeglF3Tmac= Subject key identifier: A6:EE:33:3A:B2:B9:9F:12:E9:C1:F2:6C:BE:DE:9C:E5:C9:DF:50:64 Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 6D302F2FF5736689BAEE0EF84D549B2FC4792566 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 11:54:43 +0000 Manifest this update: Fri 17 Apr 2026 11:49:43 +0000 Manifest next update: Sat 18 Apr 2026 15:25:43 +0000 Files and hashes: 1: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 2: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 3: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: /RGoBToJOzNNhUnXYHCSldo4aPqf7sGH9Q7mJCVJIcQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:30:2f:2f:f5:73:66:89:ba:ee:0e:f8:4d:54:9b:2f:c4:79:25:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Apr 17 11:49:43 2026 GMT Not After : Apr 18 15:25:43 2026 GMT Subject: CN=A6EE333AB2B99F12E9C1F26CBEDE9CE5C9DF5064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:96:8a:54:c9:0e:57:44:bd:6d:92:18:b1:d3: 43:ee:c4:8c:53:ac:1e:e1:7e:c7:f8:30:fb:0f:2d: 0f:7d:11:2c:3d:72:5b:7b:b3:14:55:c5:21:ed:be: 43:bf:0e:45:25:55:d0:48:17:cb:b1:40:e9:cc:fb: 88:d8:a0:c4:6b:d8:f5:72:de:cc:79:f3:fe:ee:ce: 5b:cc:53:e2:88:3d:9e:39:0d:8f:0b:6e:25:0d:4e: 11:07:38:9c:f1:14:eb:1d:e5:32:97:b7:94:c9:90: 1d:18:d4:55:25:c8:ae:83:92:ce:1c:b3:dc:f9:69: c9:3d:67:38:c6:b4:c0:d2:31:bf:df:e2:7f:ff:5c: ba:df:ae:9f:7e:42:3b:7c:a4:9b:2c:a6:ac:56:cf: f5:80:bf:73:1c:55:f8:84:6f:96:7b:dc:6d:be:09: 1d:d7:a1:15:6e:49:0f:6c:62:89:f6:c1:ef:59:e2: c6:35:e2:82:bd:42:c2:05:ab:45:d6:fd:74:5d:1b: a7:41:68:71:1d:85:05:9f:2d:a6:a3:51:5b:30:d9: 3b:b1:82:87:17:9b:a0:d7:01:dc:e7:a3:d9:88:dd: ab:cf:6e:80:3c:a7:d4:67:f2:ff:ec:1a:26:25:d1: db:2e:d5:00:56:2c:2e:2f:26:6a:8d:b1:24:13:29: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EE:33:3A:B2:B9:9F:12:E9:C1:F2:6C:BE:DE:9C:E5:C9:DF:50:64 X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:27:8b:c6:42:1a:a1:f3:e4:89:f7:6c:b5:22:25:2d:d6:38: d2:41:b0:12:6a:be:25:cb:03:bd:d4:7a:19:92:7f:ee:46:cc: bb:7c:e4:26:ea:0d:09:c9:17:4e:f8:f1:1b:90:4a:ee:89:5b: d9:4d:2c:50:53:03:7b:09:7e:24:6e:d3:fe:86:2f:6e:d7:ab: da:5f:b1:d9:37:69:93:57:6d:4a:37:b3:55:82:43:4e:eb:89: 88:e6:a3:c7:21:0c:88:f4:7e:86:81:86:69:65:e1:ba:e7:59: a5:d6:2f:03:ed:1d:5e:f4:8c:08:28:2a:2a:03:a0:cf:16:ef: 12:07:7e:ac:3c:09:78:92:95:0c:6f:38:31:5e:d1:e8:89:98: fe:52:f4:27:8c:df:76:2f:2b:a7:b8:17:93:d8:e6:66:c9:c7: 76:ca:42:ad:c7:95:95:0e:6c:b6:72:3f:83:35:4a:11:e7:3a: b4:0f:b1:5c:a5:fc:7b:44:5e:82:01:30:8e:74:7a:23:0e:36: 47:27:30:79:84:07:0a:d1:9b:1c:5b:1e:3e:34:93:d8:0f:c7: 94:87:7d:e3:5e:ec:9d:c2:2c:20:7f:f6:05:23:08:f8:b5:9c: 05:4c:70:9a:93:f3:d1:68:40:4f:f1:e5:3d:b3:6b:f5:80:9b: 28:4e:da:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbTAvL/VzZom67g74TVSbL8R5JWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjA0MTcxMTQ5NDNaFw0yNjA0MTgxNTI1NDNaMDMxMTAvBgNV BAMTKEE2RUUzMzNBQjJCOTlGMTJFOUMxRjI2Q0JFREU5Q0U1QzlERjUwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDelopUyQ5XRL1tkhix00PuxIxT rB7hfsf4MPsPLQ99ESw9clt7sxRVxSHtvkO/DkUlVdBIF8uxQOnM+4jYoMRr2PVy 3sx58/7uzlvMU+KIPZ45DY8LbiUNThEHOJzxFOsd5TKXt5TJkB0Y1FUlyK6Dks4c s9z5ack9ZzjGtMDSMb/f4n//XLrfrp9+Qjt8pJsspqxWz/WAv3McVfiEb5Z73G2+ CR3XoRVuSQ9sYon2we9Z4sY14oK9QsIFq0XW/XRdG6dBaHEdhQWfLaajUVsw2Tux gocXm6DXAdzno9mI3avPboA8p9Rn8v/sGiYl0dsu1QBWLC4vJmqNsSQTKdORAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpu4zOrK5nxLpwfJsvt6c5cnfUGQwHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSeLxkIaofPk ifdstSIlLdY40kGwEmq+JcsDvdR6GZJ/7kbMu3zkJuoNCckXTvjxG5BK7olb2U0s UFMDewl+JG7T/oYvbter2l+x2Tdpk1dtSjezVYJDTuuJiOajxyEMiPR+hoGGaWXh uudZpdYvA+0dXvSMCCgqKgOgzxbvEgd+rDwJeJKVDG84MV7R6ImY/lL0J4zfdi8r p7gXk9jmZsnHdspCrceVlQ5stnI/gzVKEec6tA+xXKX8e0ReggEwjnR6Iw42Rycw eYQHCtGbHFsePjST2A/HlId9417sncIsIH/2BSMI+LWcBUxwmpPz0WhAT/HlPbNr 9YCbKE7a8A== -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:29 2026 by rpki-client