$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json) Hash identifier: 7jrLXYVwd/a9/pJII9R7RkgP2w0Gpn0whdBKoZHi4oE= Subject key identifier: 4C:AB:75:05:B6:EB:BC:B6:E8:AE:90:F9:8C:50:2C:54:A4:C5:AF:C1 Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Certificate serial: 5A8805866F6E19B31B231414F6FBFE2D5318B34F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 18:44:47 +0000 Manifest this update: Fri 17 Apr 2026 18:39:47 +0000 Manifest next update: Sat 18 Apr 2026 22:28:47 +0000 Files and hashes: 1: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=) 2: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=) 3: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: WyXdMF2mltGmTtaFnkZ5DXaJaqUp8gEzFhIJzlbpfmg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:88:05:86:6f:6e:19:b3:1b:23:14:14:f6:fb:fe:2d:53:18:b3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Validity Not Before: Apr 17 18:39:47 2026 GMT Not After : Apr 18 22:28:47 2026 GMT Subject: CN=4CAB7505B6EBBCB6E8AE90F98C502C54A4C5AFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:a2:1b:d5:b5:29:b3:76:c3:54:00:8f:41: 54:f1:aa:11:aa:83:01:e4:7f:1e:2d:29:b5:40:6a: eb:bf:b5:5a:c7:32:4c:a9:cf:ac:71:9d:36:72:5c: 99:d1:50:d8:59:b4:6a:b3:a9:fa:b2:a8:fd:67:fd: b2:d3:75:d6:ba:2a:6a:b7:6e:61:80:6f:4b:be:13: 0a:3b:df:6e:44:49:d5:00:b1:c3:44:8e:0d:49:85: 29:e3:1f:40:ed:fd:12:0f:89:4d:bc:13:f3:d6:ec: 98:5d:66:1a:d3:2a:47:81:82:51:8f:f2:60:c3:58: ee:6b:1b:56:31:62:9e:c3:61:a6:f2:98:de:0b:65: 2b:db:06:11:fa:67:38:17:ce:7a:db:34:f4:a5:25: 40:89:b6:30:1a:4d:ae:50:27:91:a7:3c:63:ae:44: 8d:a1:37:41:08:d2:16:dd:4b:ca:d2:a5:e0:50:1f: d2:e8:06:45:1d:f1:e1:12:23:a0:5a:d4:bb:2f:91: e6:92:06:31:92:a1:2b:d1:d7:12:c1:fc:75:95:86: 50:1d:19:e6:4b:fb:30:78:84:42:42:eb:74:13:50: 98:cf:6d:f5:c6:ae:0f:c5:5b:9a:67:b4:2d:72:fe: cb:07:c0:5b:02:5c:4d:92:69:3d:26:ba:5e:52:90: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AB:75:05:B6:EB:BC:B6:E8:AE:90:F9:8C:50:2C:54:A4:C5:AF:C1 X509v3 Authority Key Identifier: keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:5e:af:b2:46:79:fe:39:61:a2:1b:03:f8:b7:b2:e5:62:d9: 22:3d:4c:da:c5:04:eb:bb:1c:f8:87:6c:53:c1:16:fc:ad:08: f6:34:37:4f:aa:84:77:73:31:c0:eb:cc:b9:14:5c:31:2a:3a: b8:80:a5:e0:94:d2:97:b7:87:5a:c8:0a:95:c1:03:14:f0:ae: a8:08:b6:e7:c9:14:06:e7:39:3c:8d:f2:8a:66:ad:80:4e:fc: e6:51:e2:9f:e3:82:55:63:69:d6:b1:4e:e9:5b:30:c2:da:dc: f0:52:d9:b3:d7:83:26:8f:57:5e:3e:64:99:43:d3:57:3d:16: b1:7b:45:64:b3:5d:9f:e6:1b:2a:45:19:c1:bb:b0:59:d8:72: 1a:de:86:3f:38:cc:c9:d9:b9:01:62:b4:7a:47:af:c7:1c:7f: 6d:4d:3d:a1:40:5b:ec:4f:26:03:3c:a4:25:18:2a:9b:bb:8b: fb:92:42:ed:ae:db:68:25:87:48:56:bd:25:b4:80:f1:34:bb: d6:4b:78:4b:a0:a3:6f:1d:20:d2:b4:e1:b7:43:81:a8:f7:73: 1c:40:33:05:9d:05:d6:80:bf:c9:6f:bb:98:e7:f9:16:49:ea: 16:7a:00:55:3c:b2:65:c4:64:6c:e4:ea:8a:e6:11:e0:4f:db: b7:2b:56:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWogFhm9uGbMbIxQU9vv+LVMYs08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2 M0EwNjcxNjAeFw0yNjA0MTcxODM5NDdaFw0yNjA0MTgyMjI4NDdaMDMxMTAvBgNV BAMTKDRDQUI3NTA1QjZFQkJDQjZFOEFFOTBGOThDNTAyQzU0QTRDNUFGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH0aIb1bUps3bDVACPQVTxqhGq gwHkfx4tKbVAauu/tVrHMkypz6xxnTZyXJnRUNhZtGqzqfqyqP1n/bLTdda6Kmq3 bmGAb0u+Ewo7325ESdUAscNEjg1JhSnjH0Dt/RIPiU28E/PW7JhdZhrTKkeBglGP 8mDDWO5rG1YxYp7DYabymN4LZSvbBhH6ZzgXznrbNPSlJUCJtjAaTa5QJ5GnPGOu RI2hN0EI0hbdS8rSpeBQH9LoBkUd8eESI6Ba1LsvkeaSBjGSoSvR1xLB/HWVhlAd GeZL+zB4hEJC63QTUJjPbfXGrg/FW5pntC1y/ssHwFsCXE2SaT0mul5SkKC9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTKt1BbbrvLborpD5jFAsVKTFr8EwHwYDVR0j BBgwFoAUEikqjOQnbtPILnm6N296A2OgZxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTY2MjQ2NS8wLzEyMjkyQThDRTQyNzZFRDNDODJFNzlCQTM3NkY3 QTAzNjNBMDY3MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2M0EwNjcxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE2NjI0NjUvMC8xMjI5MkE4Q0U0Mjc2 RUQzQzgyRTc5QkEzNzZGN0EwMzYzQTA2NzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxl6vskZ5/jlh ohsD+Ley5WLZIj1M2sUE67sc+IdsU8EW/K0I9jQ3T6qEd3MxwOvMuRRcMSo6uICl 4JTSl7eHWsgKlcEDFPCuqAi258kUBuc5PI3yimatgE785lHin+OCVWNp1rFO6Vsw wtrc8FLZs9eDJo9XXj5kmUPTVz0WsXtFZLNdn+YbKkUZwbuwWdhyGt6GPzjMydm5 AWK0ekevxxx/bU09oUBb7E8mAzykJRgqm7uL+5JC7a7baCWHSFa9JbSA8TS71kt4 S6Cjbx0g0rTht0OBqPdzHEAzBZ0F1oC/yW+7mOf5FknqFnoAVTyyZcRkbOTqiuYR 4E/btytWAA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:47:20 2026 by rpki-client