$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: FNiw0/awPGrwFZsc8k9Y6mpWXa4kxhSWJbGG5zm3aks= Subject key identifier: 40:42:1A:96:4C:60:87:AC:78:B2:94:A5:07:15:DD:AD:87:60:74:2C Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 1FB83C552478588D905AF93377C0839FCC2980CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 22:19:48 +0000 Manifest this update: Fri 17 Apr 2026 22:14:48 +0000 Manifest next update: Sat 18 Apr 2026 23:59:48 +0000 Files and hashes: 1: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 2: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) 3: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: WYE2GdtNslQGcXtBdUdRxIiLwWHP5jUyQtLXnT7nXHA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b8:3c:55:24:78:58:8d:90:5a:f9:33:77:c0:83:9f:cc:29:80:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Apr 17 22:14:48 2026 GMT Not After : Apr 18 23:59:48 2026 GMT Subject: CN=40421A964C6087AC78B294A50715DDAD8760742C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:12:9c:13:be:b2:5d:46:ba:d4:2c:14:9c:e5: 52:ce:e3:7f:13:29:94:14:59:9e:e9:2d:db:6e:b2: c3:e9:e8:a6:80:3d:84:44:e7:d5:65:46:85:0a:18: 6f:1b:02:26:a8:20:cb:9d:6a:c7:7b:5f:2a:0a:c7: 8b:fe:08:87:5b:81:6e:f3:9e:2a:0d:3f:34:fc:92: 68:7e:cb:c4:b3:67:53:9c:e4:aa:92:5b:22:58:70: c2:27:ba:7c:8a:1d:4c:83:ed:60:41:17:b7:e3:63: 99:eb:83:3a:67:cd:58:2a:52:98:7e:ae:1f:2b:c5: 87:20:c5:04:08:01:ac:13:09:4c:9d:45:66:40:90: 1f:58:1a:58:54:98:af:57:a3:52:59:01:d4:12:71: 22:b3:ec:ad:00:66:e4:97:e2:34:d3:75:5b:66:ab: 26:61:2a:14:66:6b:51:93:27:b7:74:9f:07:d8:7a: ba:af:56:56:ae:28:83:5c:c3:8b:9c:7d:f2:b9:11: fd:09:d3:65:7b:ae:fa:c4:c6:ac:25:e4:2e:83:f0: 72:98:dd:a6:cc:c9:fd:b1:9a:a0:b9:71:3f:b6:ee: 31:48:fb:e8:9e:95:d4:c4:4f:0d:aa:f9:49:28:a1: c9:39:a9:36:3c:a1:d0:1c:1b:8f:62:95:ab:13:45: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:42:1A:96:4C:60:87:AC:78:B2:94:A5:07:15:DD:AD:87:60:74:2C X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:cb:e3:f5:1e:3d:c9:b6:2f:0b:78:c0:d1:08:1c:18:c6:44: 11:8b:18:94:9f:95:13:2c:b0:06:66:53:7e:27:56:e8:3a:7a: 67:c3:7e:7f:98:4d:4e:99:f1:36:5e:2f:1c:39:3e:a7:25:cd: 08:01:36:73:7e:64:e8:22:ea:ed:b0:1a:7c:a5:60:f5:d1:6b: 8a:cf:20:e5:2c:9f:18:26:c2:18:a3:bc:0c:b6:e4:1a:93:4f: f9:9a:e3:6e:ed:14:92:e8:0c:78:ff:e2:55:27:a1:bc:11:c0: 87:89:11:a1:f6:84:30:92:ef:17:35:f2:c5:a1:18:73:c9:d9: 41:aa:ca:93:61:85:dc:c8:a5:5d:e3:8b:af:ee:52:ae:23:12: f0:75:dd:95:b8:7c:0b:26:b4:4c:b3:a9:fb:a3:92:de:58:04: db:88:37:34:11:c8:b9:2c:bc:10:d1:a5:a0:e0:56:c6:ae:31: 18:84:0e:99:5b:53:31:a4:32:bb:80:51:93:92:a9:de:ee:99: e8:d0:ce:dd:a5:e9:b8:23:52:42:41:5e:bc:d7:35:94:ba:78: ec:50:4d:bc:98:6d:99:9d:6b:ee:f5:0e:8f:d1:6b:5d:b6:31: 7e:91:30:42:7a:78:76:2d:68:2e:28:52:75:7a:5d:53:47:b0: 52:5d:7d:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH7g8VSR4WI2QWvkzd8CDn8wpgM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA0MTcyMjE0NDhaFw0yNjA0MTgyMzU5NDhaMDMxMTAvBgNV BAMTKDQwNDIxQTk2NEM2MDg3QUM3OEIyOTRBNTA3MTVEREFEODc2MDc0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkEpwTvrJdRrrULBSc5VLO438T KZQUWZ7pLdtussPp6KaAPYRE59VlRoUKGG8bAiaoIMudasd7XyoKx4v+CIdbgW7z nioNPzT8kmh+y8SzZ1Oc5KqSWyJYcMInunyKHUyD7WBBF7fjY5nrgzpnzVgqUph+ rh8rxYcgxQQIAawTCUydRWZAkB9YGlhUmK9Xo1JZAdQScSKz7K0AZuSX4jTTdVtm qyZhKhRma1GTJ7d0nwfYerqvVlauKINcw4ucffK5Ef0J02V7rvrExqwl5C6D8HKY 3abMyf2xmqC5cT+27jFI++ieldTETw2q+Ukoock5qTY8odAcG49ilasTRVA5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQEIalkxgh6x4spSlBxXdrYdgdCwwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8vj9R49ybYv C3jA0QgcGMZEEYsYlJ+VEyywBmZTfidW6Dp6Z8N+f5hNTpnxNl4vHDk+pyXNCAE2 c35k6CLq7bAafKVg9dFris8g5SyfGCbCGKO8DLbkGpNP+Zrjbu0UkugMeP/iVSeh vBHAh4kRofaEMJLvFzXyxaEYc8nZQarKk2GF3MilXeOLr+5SriMS8HXdlbh8Cya0 TLOp+6OS3lgE24g3NBHIuSy8ENGloOBWxq4xGIQOmVtTMaQyu4BRk5Kp3u6Z6NDO 3aXpuCNSQkFevNc1lLp47FBNvJhtmZ1r7vUOj9FrXbYxfpEwQnp4di1oLihSdXpd U0ewUl19Tg== -----END CERTIFICATE-----Generated at Sat Apr 18 02:09:38 2026 by rpki-client