$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json) Hash identifier: U0Cz1rpHGmlaB4e9TCA4Pm2Jm+64WB7vyivcfm/VAsI= Subject key identifier: 43:67:E9:0B:2B:CD:33:AA:4D:BC:D8:2F:71:69:7A:2E:08:71:DE:9D Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Certificate serial: 79FB28D53F7F034FE777DC12B7B76DA9CDBB654F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 00:49:37 +0000 Manifest this update: Fri 17 Apr 2026 00:44:37 +0000 Manifest next update: Sat 18 Apr 2026 03:31:37 +0000 Files and hashes: 1: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=) 2: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: tgtYIzH6enaZdAGL3k7vbVCfsv8azfbNR1kbJwfXu5M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fb:28:d5:3f:7f:03:4f:e7:77:dc:12:b7:b7:6d:a9:cd:bb:65:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Validity Not Before: Apr 17 00:44:37 2026 GMT Not After : Apr 18 03:31:37 2026 GMT Subject: CN=4367E90B2BCD33AA4DBCD82F71697A2E0871DE9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:85:92:5d:ac:19:f6:ea:42:cf:7d:d9:1b: 28:0b:06:9a:f0:72:7b:3a:87:07:89:2b:16:cd:1e: c0:e1:1f:9a:f4:af:e0:35:91:aa:2e:eb:04:3f:f6: 47:2d:0b:a7:0d:45:7a:fb:dc:95:96:2f:7e:cf:fd: 92:87:4d:67:fd:a5:7e:aa:d1:f7:2a:c0:ac:62:ad: 9d:3b:19:8f:36:31:a1:9b:20:aa:ff:12:c0:2c:df: 2d:60:7d:51:86:fa:31:a6:6c:46:12:c8:20:97:0a: e0:33:71:6e:13:61:01:f5:ed:12:9f:67:3e:f3:97: 4c:80:34:cd:e7:cf:a0:20:15:38:e5:0f:96:3b:97: 03:9d:9b:19:1e:67:21:37:53:99:81:3b:73:e1:43: c7:77:16:9c:f3:51:a7:2b:89:e7:d9:6f:82:c2:7b: 22:ba:4f:87:31:d1:48:97:f1:e1:af:02:13:c8:e8: 34:12:61:69:35:9f:99:94:d6:85:fe:b2:2c:fb:a2: 68:23:9b:5d:34:5d:6b:8a:ea:44:8e:a6:28:8d:4e: 4b:97:c7:df:d0:f6:30:a5:a5:73:8d:2a:03:62:49: 96:92:af:b6:61:f8:ec:fd:1b:9b:b3:cd:bb:f4:3e: ec:b7:24:ae:c6:c2:b7:f4:3e:e3:59:aa:a4:5f:ba: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:E9:0B:2B:CD:33:AA:4D:BC:D8:2F:71:69:7A:2E:08:71:DE:9D X509v3 Authority Key Identifier: keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ce:60:19:21:50:68:62:7c:b4:e1:2a:7e:3b:9d:fc:8a:75: f5:48:db:be:76:98:02:dc:67:f0:de:60:00:04:2f:a9:90:27: c1:1e:52:0c:68:ba:e0:fa:43:02:c7:4e:3b:69:4b:af:12:16: 44:9c:de:bf:a2:23:fc:f2:fb:06:a4:86:78:23:4c:36:45:f4: a8:c7:8e:d2:85:ad:ef:a4:69:03:3b:e5:6a:04:38:a5:90:3a: 73:c5:02:ef:de:f0:37:b6:d0:88:f2:6a:32:1e:b2:50:59:b3: 8b:55:ed:ea:2b:1c:28:18:45:af:31:29:84:d4:4f:50:fa:c0: ea:51:76:84:d1:da:ad:6a:08:7d:89:17:ef:82:a1:82:f8:a0: 0e:f0:06:2c:d4:ac:dc:b4:4f:03:fd:44:7e:51:45:1b:58:d5: 0d:2e:17:8e:68:b8:e6:ec:06:c2:9c:23:9d:65:00:15:a9:8e: 93:64:e5:46:87:46:a4:09:b2:fd:4d:75:75:bb:b5:c9:6d:c3: 93:dc:92:d0:b5:ab:2f:79:21:87:1c:b4:bb:d2:46:e7:12:ca: 55:7e:48:93:df:89:c2:f4:07:33:f9:cf:49:f1:c3:d5:74:8f: 92:55:23:d4:16:38:53:68:a4:d2:ee:e9:2b:f4:d6:c0:2c:28: 4e:b2:be:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUefso1T9/A0/nd9wSt7dtqc27ZU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1 ODFBNUM4NTAeFw0yNjA0MTcwMDQ0MzdaFw0yNjA0MTgwMzMxMzdaMDMxMTAvBgNV BAMTKDQzNjdFOTBCMkJDRDMzQUE0REJDRDgyRjcxNjk3QTJFMDg3MURFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfYWSXawZ9upCz33ZGygLBprw cns6hweJKxbNHsDhH5r0r+A1kaou6wQ/9kctC6cNRXr73JWWL37P/ZKHTWf9pX6q 0fcqwKxirZ07GY82MaGbIKr/EsAs3y1gfVGG+jGmbEYSyCCXCuAzcW4TYQH17RKf Zz7zl0yANM3nz6AgFTjlD5Y7lwOdmxkeZyE3U5mBO3PhQ8d3FpzzUacriefZb4LC eyK6T4cx0UiX8eGvAhPI6DQSYWk1n5mU1oX+siz7omgjm100XWuK6kSOpiiNTkuX x9/Q9jClpXONKgNiSZaSr7Zh+Oz9G5uzzbv0Puy3JK7Gwrf0PuNZqqRfusMpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ2fpCyvNM6pNvNgvcWl6Lghx3p0wHwYDVR0j BBgwFoAULmvn7gQ6AdPNSD8wLDReRlgaXIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzU0NjQ5OS8wLzJFNkJFN0VFMDQzQTAxRDNDRDQ4M0YzMDJDMzQ1 RTQ2NTgxQTVDODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc1NDY0OTkvMC8yRTZCRTdFRTA0M0Ew MUQzQ0Q0ODNGMzAyQzM0NUU0NjU4MUE1Qzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT85gGSFQaGJ8 tOEqfjud/Ip19UjbvnaYAtxn8N5gAAQvqZAnwR5SDGi64PpDAsdOO2lLrxIWRJze v6Ij/PL7BqSGeCNMNkX0qMeO0oWt76RpAzvlagQ4pZA6c8UC797wN7bQiPJqMh6y UFmzi1Xt6iscKBhFrzEphNRPUPrA6lF2hNHarWoIfYkX74KhgvigDvAGLNSs3LRP A/1EflFFG1jVDS4Xjmi45uwGwpwjnWUAFamOk2TlRodGpAmy/U11dbu1yW3Dk9yS 0LWrL3khhxy0u9JG5xLKVX5Ik9+JwvQHM/nPSfHD1XSPklUj1BY4U2ik0u7pK/TW wCwoTrK+Hw== -----END CERTIFICATE-----Generated at Fri Apr 17 03:24:23 2026 by rpki-client