$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: gSUJ0DVozlVPL34UGDRupVi7nslWtK10vBnbFCpAUic= Subject key identifier: F1:A8:C2:96:87:37:AC:7D:45:56:C5:10:17:B4:B3:88:85:2D:78:36 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 7A1096072C017F08269C52F11BC1C8BEF40083AC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 07:09:41 +0000 Manifest this update: Fri 17 Apr 2026 07:04:41 +0000 Manifest next update: Sat 18 Apr 2026 09:35:41 +0000 Files and hashes: 1: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: A6oWc6stE9EmnZSqMe/9dcNYz+0YBMuIk0KWJWyiUfI=) 2: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) 3: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 4: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 5: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 6: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:10:96:07:2c:01:7f:08:26:9c:52:f1:1b:c1:c8:be:f4:00:83:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Apr 17 07:04:41 2026 GMT Not After : Apr 18 09:35:41 2026 GMT Subject: CN=F1A8C2968737AC7D4556C51017B4B388852D7836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:a9:24:7e:59:fd:05:05:c4:2c:2d:f6:0e: 38:1e:61:3e:86:12:dd:e1:df:b3:7b:2e:31:c3:f6: fb:39:aa:d7:b3:76:72:f7:af:5f:60:38:ef:f8:15: 58:0f:0b:04:de:0d:e0:f5:2d:1a:99:7a:ab:57:64: 70:26:57:70:00:bf:25:8a:85:2a:fc:70:9c:85:dc: 9c:9f:0d:2b:ce:c4:ac:58:6d:16:84:20:a1:ef:aa: dc:2c:39:16:de:81:25:23:6c:38:e8:1b:99:f0:dc: a7:0d:79:df:c8:47:86:27:34:2c:d8:fc:d8:4c:bd: 97:33:38:83:ad:e8:de:28:f5:90:de:02:9e:5c:da: db:6e:91:14:10:8d:be:6d:1f:ad:40:8f:39:83:ad: eb:6a:21:6d:c8:f4:06:3c:cf:bb:7f:4f:ef:2c:1d: a7:c4:50:f8:58:9b:da:41:9e:62:01:6a:5e:7f:97: 35:11:34:30:32:5a:4f:a0:7f:78:47:aa:5c:b6:15: 5f:3c:44:12:d3:89:4d:0b:69:b1:0a:4f:c7:bc:61: 54:55:3f:ad:1f:2f:53:a1:fe:08:b0:95:be:bb:96: 91:64:06:4e:1f:57:98:67:32:0c:64:19:f6:dc:0d: 18:5e:d2:45:67:02:00:5d:db:09:ff:70:cd:38:ac: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A8:C2:96:87:37:AC:7D:45:56:C5:10:17:B4:B3:88:85:2D:78:36 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b6:28:a1:ea:57:12:03:26:b2:d3:c3:d6:d6:7b:03:19:80: 83:31:58:e7:c0:29:59:4a:3a:4f:37:85:78:ab:e2:6f:19:0e: 73:b0:be:b4:0c:1f:81:01:d3:d6:49:d6:13:03:cf:b0:07:40: f8:fd:cc:2d:68:a6:b4:12:9f:f0:88:96:8d:fc:f5:fa:16:1a: 9e:03:6a:9c:d5:cc:75:57:39:e3:50:42:e0:13:25:18:46:d6: 08:43:9d:01:51:fd:cf:71:76:90:ec:ca:85:e6:ce:c6:3b:c4: 91:dc:dc:b9:52:73:7c:9c:af:7e:29:8c:6b:50:2d:51:98:a5: 43:6f:d8:f9:ce:df:43:c3:f5:c8:fd:9b:e7:b9:96:3a:99:cc: e8:5a:30:19:79:05:00:c5:2d:a7:f8:e0:58:6f:c8:19:c6:19: 63:b6:e7:2e:bc:ba:a8:4b:be:3a:ef:82:59:35:c8:af:e1:36: 52:f5:db:bb:51:b5:f6:d5:6c:45:83:e6:a7:b9:f3:d0:0b:3b: 9a:e0:d1:c4:65:07:fa:dd:84:12:e5:4f:03:61:bd:9c:af:64: 58:cc:cd:fa:5d:e2:e7:52:9a:4b:8c:59:4c:25:71:d3:ed:50: 64:80:e7:58:85:53:e9:5a:d1:49:70:a1:36:bf:67:4c:51:17: 50:d0:0b:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUehCWBywBfwgmnFLxG8HIvvQAg6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjA0MTcwNzA0NDFaFw0yNjA0MTgwOTM1NDFaMDMxMTAvBgNV BAMTKEYxQThDMjk2ODczN0FDN0Q0NTU2QzUxMDE3QjRCMzg4ODUyRDc4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgqkkfln9BQXELC32DjgeYT6G Et3h37N7LjHD9vs5qtezdnL3r19gOO/4FVgPCwTeDeD1LRqZeqtXZHAmV3AAvyWK hSr8cJyF3JyfDSvOxKxYbRaEIKHvqtwsORbegSUjbDjoG5nw3KcNed/IR4YnNCzY /NhMvZczOIOt6N4o9ZDeAp5c2ttukRQQjb5tH61AjzmDretqIW3I9AY8z7t/T+8s HafEUPhYm9pBnmIBal5/lzURNDAyWk+gf3hHqly2FV88RBLTiU0LabEKT8e8YVRV P60fL1Oh/giwlb67lpFkBk4fV5hnMgxkGfbcDRhe0kVnAgBd2wn/cM04rKIvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8ajCloc3rH1FVsUQF7SziIUteDYwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbYooepXEgMm stPD1tZ7AxmAgzFY58ApWUo6TzeFeKvibxkOc7C+tAwfgQHT1knWEwPPsAdA+P3M LWimtBKf8IiWjfz1+hYangNqnNXMdVc541BC4BMlGEbWCEOdAVH9z3F2kOzKhebO xjvEkdzcuVJzfJyvfimMa1AtUZilQ2/Y+c7fQ8P1yP2b57mWOpnM6FowGXkFAMUt p/jgWG/IGcYZY7bnLry6qEu+Ou+CWTXIr+E2UvXbu1G19tVsRYPmp7nz0As7muDR xGUH+t2EEuVPA2G9nK9kWMzN+l3i51KaS4xZTCVx0+1QZIDnWIVT6VrRSXChNr9n TFEXUNALLg== -----END CERTIFICATE-----Generated at Sat Apr 18 02:07:51 2026 by rpki-client