$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: 5Yab6EJ2dQqLXWArkjhi5JVcU1lViAugAa5C5gpLEX0= Subject key identifier: 99:5A:63:E7:22:CC:F7:E7:55:FA:D9:8B:56:25:CB:D1:AD:4A:0B:D8 Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 267668EE0CB3E59155AD72096BB30EACC0EA7158 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 10:34:43 +0000 Manifest this update: Fri 17 Apr 2026 10:29:43 +0000 Manifest next update: Sat 18 Apr 2026 14:30:43 +0000 Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 3: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) 4: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: JLpKyTE7D9k17A4osoi/8xtBNIjmEgrpWWh4LczB5x0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:76:68:ee:0c:b3:e5:91:55:ad:72:09:6b:b3:0e:ac:c0:ea:71:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Apr 17 10:29:43 2026 GMT Not After : Apr 18 14:30:43 2026 GMT Subject: CN=995A63E722CCF7E755FAD98B5625CBD1AD4A0BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:0a:ef:94:b6:35:13:32:dd:0e:2c:b3:72: e2:6c:46:71:78:80:fc:ae:0d:a0:47:4b:4b:32:94: 55:dc:14:f3:08:11:59:78:5b:d3:10:e7:1b:80:78: 28:85:86:68:73:22:3e:9a:20:a9:7c:01:a9:53:a2: 58:2f:c4:ed:1e:3b:b4:72:56:94:5d:0e:01:ee:e7: e7:20:e7:c9:28:50:fc:77:d9:b9:6b:df:55:43:9a: 57:c0:50:27:51:8b:bd:f1:1d:fc:86:82:93:a5:26: 1e:36:66:21:38:b9:1e:f7:3a:73:5c:0d:ac:f0:b9: 1a:23:7a:b6:d2:5b:67:15:f2:0d:1f:49:ed:79:3d: d5:3f:85:d0:5a:bb:6c:44:79:43:9c:e5:c4:b3:48: bb:ea:7a:07:82:50:70:40:36:96:f1:cd:c6:36:e8: e5:95:55:56:98:fd:5b:67:bc:6e:9d:ad:aa:1b:b2: 4c:d1:44:63:74:ee:f5:2c:fd:6d:88:f9:08:a0:32: 82:ee:e5:75:56:18:ef:62:38:da:c5:0e:a7:34:80: a7:51:3d:1b:fd:11:1b:8a:93:34:55:e8:34:6f:d7: 7b:60:9c:90:9a:eb:49:5d:22:d9:ba:23:a2:2f:34: 9a:bd:c1:08:2f:4f:62:40:ac:bd:79:ae:f1:43:ab: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5A:63:E7:22:CC:F7:E7:55:FA:D9:8B:56:25:CB:D1:AD:4A:0B:D8 X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:97:34:5f:d4:b2:69:98:ae:71:4d:c7:ac:1c:ba:d0:26:6d: d7:96:7f:0f:7b:5c:4a:20:34:e0:f7:47:7f:13:a2:50:2e:53: 93:6d:46:bf:6b:df:a1:b2:37:66:0f:8f:9c:76:16:be:96:aa: 87:4a:e1:2e:4f:d8:10:0a:d6:fc:68:d8:41:ee:a5:5a:f9:9a: b5:a7:15:82:c6:77:bb:92:d9:c4:c5:19:5a:4d:52:ab:61:a5: 6e:32:be:ef:55:22:27:5d:b3:26:3f:26:5c:d8:41:e8:fb:89: 9a:f4:99:9f:99:f3:af:16:a2:30:c9:34:8b:88:1b:57:83:f1: a0:33:18:b2:0f:46:56:96:57:68:ea:b7:39:30:db:bd:cc:ff: 80:41:d1:dc:79:28:df:78:1f:56:b1:68:01:b8:ce:ac:09:35: 91:f7:ae:69:74:bd:74:2f:ed:2c:7b:0e:e0:c7:bd:5e:7e:4c: 77:3a:25:f1:1f:c7:f2:ca:44:9f:d8:0c:19:27:df:b9:27:22: bf:94:b6:66:5f:4a:38:d5:38:78:e9:f6:69:cc:fe:d4:e7:ce: 79:a3:d5:d5:42:02:f2:dc:70:95:2a:f9:c3:7c:6e:ad:a1:32: 4f:79:7e:25:e2:b1:a3:cd:ac:9f:e1:45:e6:90:50:a4:9d:15: ff:6d:15:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJnZo7gyz5ZFVrXIJa7MOrMDqcVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjA0MTcxMDI5NDNaFw0yNjA0MTgxNDMwNDNaMDMxMTAvBgNV BAMTKDk5NUE2M0U3MjJDQ0Y3RTc1NUZBRDk4QjU2MjVDQkQxQUQ0QTBCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8wrvlLY1EzLdDiyzcuJsRnF4 gPyuDaBHS0sylFXcFPMIEVl4W9MQ5xuAeCiFhmhzIj6aIKl8AalTolgvxO0eO7Ry VpRdDgHu5+cg58koUPx32blr31VDmlfAUCdRi73xHfyGgpOlJh42ZiE4uR73OnNc DazwuRojerbSW2cV8g0fSe15PdU/hdBau2xEeUOc5cSzSLvqegeCUHBANpbxzcY2 6OWVVVaY/VtnvG6draobskzRRGN07vUs/W2I+QigMoLu5XVWGO9iONrFDqc0gKdR PRv9ERuKkzRV6DRv13tgnJCa60ldItm6I6IvNJq9wQgvT2JArL15rvFDqz8BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmVpj5yLM9+dV+tmLViXL0a1KC9gwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZc0X9SyaZiu cU3HrBy60CZt15Z/D3tcSiA04PdHfxOiUC5Tk21Gv2vfobI3Zg+PnHYWvpaqh0rh Lk/YEArW/GjYQe6lWvmatacVgsZ3u5LZxMUZWk1Sq2GlbjK+71UiJ12zJj8mXNhB 6PuJmvSZn5nzrxaiMMk0i4gbV4PxoDMYsg9GVpZXaOq3OTDbvcz/gEHR3Hko33gf VrFoAbjOrAk1kfeuaXS9dC/tLHsO4Me9Xn5Mdzol8R/H8spEn9gMGSffuSciv5S2 Zl9KONU4eOn2acz+1OfOeaPV1UIC8txwlSr5w3xuraEyT3l+JeKxo82sn+FF5pBQ pJ0V/20VXA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:37 2026 by rpki-client