$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: +GC8IbRxp6ivvFV4+trXDw9cVIgjrYHVkGOYEpmA0YI= Subject key identifier: 65:56:D4:B5:B8:5A:BE:1A:37:00:2F:4F:E1:66:50:21:D4:07:3F:E6 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 6538FCD5F9215EDE1993E6845C647FEE1A10B699 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 17:24:44 +0000 Manifest this update: Fri 17 Apr 2026 17:19:44 +0000 Manifest next update: Sat 18 Apr 2026 18:07:44 +0000 Files and hashes: 1: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: Odhcqer0vkjfojF+aInOSKyU1t8aCYFGSvIvwKQI4OM=) 2: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:38:fc:d5:f9:21:5e:de:19:93:e6:84:5c:64:7f:ee:1a:10:b6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Apr 17 17:19:44 2026 GMT Not After : Apr 18 18:07:44 2026 GMT Subject: CN=6556D4B5B85ABE1A37002F4FE1665021D4073FE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bb:c7:54:44:4a:9d:ab:53:f0:4a:63:57:6f: c7:ac:5c:c5:7a:70:52:00:6d:b1:6d:8b:6c:c9:ff: 25:6e:7b:37:2b:64:2d:8e:88:54:30:db:8d:73:6d: 82:07:88:c4:1e:34:c5:0e:53:9e:c6:71:c4:db:14: ef:c7:76:55:82:72:c5:b8:27:68:5c:1c:e9:fe:69: 15:2e:83:75:a5:e7:0d:c9:83:92:ca:48:f2:b2:3c: 25:9e:69:28:b9:70:10:ad:cd:bf:2a:33:8d:27:74: 01:85:d9:f6:77:82:91:64:66:29:18:d9:e7:e5:f8: 5b:d0:01:85:75:0a:ff:68:0e:f1:b6:60:e6:6f:54: 6c:b7:27:05:1d:9f:ea:64:01:f3:51:3e:d4:69:d4: 78:f7:f8:8d:1d:94:7f:d9:e1:46:ae:0e:73:3b:07: 96:71:fa:25:37:d3:3b:ab:e0:26:92:10:43:95:fa: a6:52:5e:01:ce:3e:df:ab:54:13:fa:cb:df:40:aa: 7a:49:68:37:d8:6e:9d:de:86:02:d8:f0:1f:0a:70: 3d:d6:ab:35:22:07:15:46:73:51:4f:cb:b0:b6:11: 3e:9f:cb:6e:66:c9:77:08:71:76:2f:60:fb:7f:0e: d7:66:04:3f:69:45:25:04:02:b3:9e:a5:df:34:fa: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:56:D4:B5:B8:5A:BE:1A:37:00:2F:4F:E1:66:50:21:D4:07:3F:E6 X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:0a:fa:48:f9:f9:fb:cb:24:5c:b8:f4:e3:44:0d:ac:19:3d: f4:13:9b:51:ee:67:61:9a:06:3a:d6:47:20:31:bc:e6:87:c1: fb:a8:ab:6d:f8:da:a4:20:f3:36:d1:16:54:bb:87:47:27:ee: 15:9f:8a:18:78:f0:12:70:8c:eb:d8:d5:fc:1d:80:e2:1a:fd: 07:cd:da:04:86:01:39:44:ec:20:b4:7b:5a:43:00:40:b6:f8: fd:b9:68:00:c6:5b:74:b9:a1:95:58:eb:7a:8a:1b:ab:fc:49: e1:dd:c7:7f:a0:59:bc:f6:97:19:70:93:57:b2:a3:b0:5d:9a: 07:d4:15:cb:ed:bb:57:82:8d:17:6b:a2:8f:da:f9:75:f6:37: 22:6d:2e:4e:40:77:87:bd:10:94:e1:d1:cd:2f:83:a4:45:a9: f5:c1:b3:bf:4f:28:fe:63:7d:ab:89:73:5c:92:aa:32:e2:91: be:d6:65:01:95:05:bb:3e:a9:77:f3:82:d4:13:79:4f:e7:ff: f2:7a:c5:bd:9b:b0:5c:60:00:d6:17:87:1d:da:83:68:cf:fd: 58:b1:eb:64:54:37:b6:5f:bc:94:9b:14:f8:6f:88:df:54:34: ce:74:95:a1:73:15:05:6c:50:49:2b:a5:94:db:bc:a0:db:8e: 5d:5b:71:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZTj81fkhXt4Zk+aEXGR/7hoQtpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjA0MTcxNzE5NDRaFw0yNjA0MTgxODA3NDRaMDMxMTAvBgNV BAMTKDY1NTZENEI1Qjg1QUJFMUEzNzAwMkY0RkUxNjY1MDIxRDQwNzNGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQu8dUREqdq1PwSmNXb8esXMV6 cFIAbbFti2zJ/yVuezcrZC2OiFQw241zbYIHiMQeNMUOU57GccTbFO/HdlWCcsW4 J2hcHOn+aRUug3Wl5w3Jg5LKSPKyPCWeaSi5cBCtzb8qM40ndAGF2fZ3gpFkZikY 2efl+FvQAYV1Cv9oDvG2YOZvVGy3JwUdn+pkAfNRPtRp1Hj3+I0dlH/Z4UauDnM7 B5Zx+iU30zur4CaSEEOV+qZSXgHOPt+rVBP6y99AqnpJaDfYbp3ehgLY8B8KcD3W qzUiBxVGc1FPy7C2ET6fy25myXcIcXYvYPt/DtdmBD9pRSUEArOepd80+hl/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZVbUtbhavho3AC9P4WZQIdQHP+YwHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxwr6SPn5+8sk XLj040QNrBk99BObUe5nYZoGOtZHIDG85ofB+6irbfjapCDzNtEWVLuHRyfuFZ+K GHjwEnCM69jV/B2A4hr9B83aBIYBOUTsILR7WkMAQLb4/bloAMZbdLmhlVjreoob q/xJ4d3Hf6BZvPaXGXCTV7KjsF2aB9QVy+27V4KNF2uij9r5dfY3Im0uTkB3h70Q lOHRzS+DpEWp9cGzv08o/mN9q4lzXJKqMuKRvtZlAZUFuz6pd/OC1BN5T+f/8nrF vZuwXGAA1heHHdqDaM/9WLHrZFQ3tl+8lJsU+G+I31Q0znSVoXMVBWxQSSullNu8 oNuOXVtxJw== -----END CERTIFICATE-----Generated at Sat Apr 18 00:42:03 2026 by rpki-client