$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: P1WKLupTrGD4Ya1nPeAlA5bA6zvIRf3frvzbwdPM9s4= Subject key identifier: 3F:8D:D2:23:3C:DA:76:73:BB:28:32:98:05:72:A3:DF:06:9E:15:7B Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 44069FAD0FB8F6B097806ED30FBF0F5A9360B7DC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: 78 Signing time: Fri 17 Apr 2026 15:24:43 +0000 Manifest this update: Fri 17 Apr 2026 15:19:43 +0000 Manifest next update: Sat 18 Apr 2026 18:04:43 +0000 Files and hashes: 1: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=) 2: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=) 3: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: H6xqaxAD8wociy3js19TXKtdQailletkhQUQk65GFO4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:06:9f:ad:0f:b8:f6:b0:97:80:6e:d3:0f:bf:0f:5a:93:60:b7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: Apr 17 15:19:43 2026 GMT Not After : Apr 18 18:04:43 2026 GMT Subject: CN=3F8DD2233CDA7673BB2832980572A3DF069E157B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:31:fe:93:44:b5:1d:8c:e5:4c:bf:9e:fc:22: 61:67:0e:fa:54:c4:2a:31:3b:e4:2b:95:0e:d3:73: ab:ce:5e:b0:cf:54:72:8a:1e:2f:49:2f:18:68:c1: 9d:6a:94:2d:c1:39:2f:9e:f3:df:d6:06:b7:5b:05: 5a:8b:11:8d:73:13:72:71:37:13:8e:48:f5:ef:00: 69:d3:e4:69:43:6e:c1:00:41:48:b0:58:78:8e:d5: 62:e2:81:9b:a4:a6:70:18:f6:ca:f3:1d:d7:9f:f8: ca:4c:9b:01:00:45:b1:cc:2f:05:df:0b:70:9e:2e: ec:c8:44:53:2e:b4:64:15:4c:9b:b5:50:95:b0:9e: 20:9f:f2:67:8a:72:34:c0:78:dc:98:1a:7a:da:cb: d3:c6:42:47:21:af:55:e0:26:4f:d9:b4:93:69:71: 25:4c:ee:c8:fb:c8:c8:30:5d:af:24:09:d3:1c:51: 9a:bf:14:cb:09:80:0a:d6:57:2c:3e:d3:4d:29:4f: 85:45:0c:b5:e4:83:ce:5f:d4:d5:cd:01:e9:08:28: ac:9c:39:77:f1:aa:da:7e:75:c2:da:31:b7:bf:b0: a3:27:0f:e0:f3:3a:b4:b6:2a:da:87:1a:4e:4c:a5: 9b:39:63:ab:00:ae:e0:a0:40:ac:ee:44:d1:7b:cd: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8D:D2:23:3C:DA:76:73:BB:28:32:98:05:72:A3:DF:06:9E:15:7B X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:65:0a:39:6e:5b:ee:51:6c:64:98:0e:c7:29:f7:8e:d0:9c: a1:93:11:64:ef:60:f1:09:34:3f:ed:f9:2b:d3:54:cd:31:8c: dc:71:67:ee:0d:22:72:98:78:ca:0e:87:6b:92:69:1b:c4:2c: cf:70:e2:fd:78:a4:da:c4:d9:e3:2d:0e:b5:f6:52:1f:44:2e: 96:36:73:57:17:0a:6a:2d:af:2c:fe:13:a1:88:c3:98:9f:ee: 19:01:2c:72:26:8d:e7:48:21:e6:52:68:b0:35:48:90:3f:5d: 83:07:43:c0:a7:f1:83:4b:de:c5:04:1c:67:3a:97:64:bd:b2: ad:b3:84:65:36:6a:56:70:8e:29:12:3c:c6:8c:e8:7e:34:d3: b0:16:94:21:2c:b1:d4:c5:2f:54:eb:62:51:31:36:65:be:57: 5a:c2:0f:aa:f9:49:00:a4:cc:6e:b7:79:2f:41:21:bf:0b:ea: e2:f4:a6:12:6f:19:ae:30:91:47:ac:7d:31:ce:3a:83:18:bb: 46:7b:ff:56:d9:b4:3c:ff:ab:e6:68:3b:6f:1d:bc:bb:36:bb: 31:39:fb:b1:b6:e9:23:c5:b8:6f:09:cf:6b:e2:c6:91:b7:5c: 99:b5:84:54:54:a1:87:94:c7:5d:6d:15:92:60:79:65:70:ee: a7:f3:19:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURAafrQ+49rCXgG7TD78PWpNgt9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjA0MTcxNTE5NDNaFw0yNjA0MTgxODA0NDNaMDMxMTAvBgNV BAMTKDNGOEREMjIzM0NEQTc2NzNCQjI4MzI5ODA1NzJBM0RGMDY5RTE1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiMf6TRLUdjOVMv578ImFnDvpU xCoxO+QrlQ7Tc6vOXrDPVHKKHi9JLxhowZ1qlC3BOS+e89/WBrdbBVqLEY1zE3Jx NxOOSPXvAGnT5GlDbsEAQUiwWHiO1WLigZukpnAY9srzHdef+MpMmwEARbHMLwXf C3CeLuzIRFMutGQVTJu1UJWwniCf8meKcjTAeNyYGnray9PGQkchr1XgJk/ZtJNp cSVM7sj7yMgwXa8kCdMcUZq/FMsJgArWVyw+000pT4VFDLXkg85f1NXNAekIKKyc OXfxqtp+dcLaMbe/sKMnD+DzOrS2KtqHGk5MpZs5Y6sAruCgQKzuRNF7zY0lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP43SIzzadnO7KDKYBXKj3waeFXswHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmUKOW5b7lFs ZJgOxyn3jtCcoZMRZO9g8Qk0P+35K9NUzTGM3HFn7g0icph4yg6Ha5JpG8Qsz3Di /Xik2sTZ4y0OtfZSH0QuljZzVxcKai2vLP4ToYjDmJ/uGQEsciaN50gh5lJosDVI kD9dgwdDwKfxg0vexQQcZzqXZL2yrbOEZTZqVnCOKRI8xozofjTTsBaUISyx1MUv VOtiUTE2Zb5XWsIPqvlJAKTMbrd5L0Ehvwvq4vSmEm8ZrjCRR6x9Mc46gxi7Rnv/ Vtm0PP+r5mg7bx28uza7MTn7sbbpI8W4bwnPa+LGkbdcmbWEVFShh5THXW0VkmB5 ZXDup/MZ0w== -----END CERTIFICATE-----Generated at Sat Apr 18 04:44:11 2026 by rpki-client