$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: ALpidzG9ktued+TyzJRSiSwCZyTgp3I0kP1DB+J95Mk= Subject key identifier: 5C:82:BE:92:6B:69:0D:6C:D6:3D:17:BA:4F:21:BA:9D:0F:AE:46:28 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 2D1DE61FE7CA5239C27AAA2BC694EFF21E28910C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 05:19:40 +0000 Manifest this update: Fri 17 Apr 2026 05:14:40 +0000 Manifest next update: Sat 18 Apr 2026 05:53:40 +0000 Files and hashes: 1: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 2: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 3: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 4: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 5: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 6: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: ChNL6/8aB4JoGQ9zi2ZgmdUIh+X5AeL61dGPdraP9x8=) 7: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1d:e6:1f:e7:ca:52:39:c2:7a:aa:2b:c6:94:ef:f2:1e:28:91:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Apr 17 05:14:40 2026 GMT Not After : Apr 18 05:53:40 2026 GMT Subject: CN=5C82BE926B690D6CD63D17BA4F21BA9D0FAE4628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:1d:91:3b:9a:a4:f8:2d:cf:d5:34:eb:60: 29:bf:d7:88:d9:3a:05:b3:83:c9:1a:22:ab:13:ac: ed:08:25:23:b3:4d:f8:43:32:be:ed:22:8c:bb:6f: 10:0f:c6:8b:21:bb:09:82:bd:39:91:17:ab:19:79: be:59:e5:cf:a6:0c:aa:b5:25:97:a5:db:5b:4f:f3: bf:1c:47:de:90:fa:72:f8:3f:0b:af:6c:49:be:00: e5:82:5d:7c:c6:d6:09:f4:73:f0:f7:49:09:40:d7: ce:8b:73:6a:dc:76:cd:dc:a3:ae:b7:90:c7:87:d5: 8d:32:b0:f3:f1:f4:05:39:50:d1:be:c1:d2:7f:3c: b7:d6:da:54:d8:76:3a:e4:52:82:0e:2d:80:69:96: 07:6b:2f:c6:58:0f:9d:6f:b6:ae:d8:6e:48:2f:93: a4:fa:16:dc:a8:a4:3c:49:7e:39:a6:65:1e:43:aa: b4:0b:d9:2c:49:58:4d:bd:52:a3:31:0d:0b:b1:4e: e5:f3:66:33:57:21:8f:45:88:de:ab:5c:1d:05:fc: dc:14:ed:dc:9d:bb:06:5b:32:44:c3:6a:2c:f8:2f: 54:d6:0c:84:ef:11:04:56:e8:ae:1c:42:85:72:93: e2:51:e6:0f:2d:96:af:5e:dc:36:98:35:7c:81:e6: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:82:BE:92:6B:69:0D:6C:D6:3D:17:BA:4F:21:BA:9D:0F:AE:46:28 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:98:e7:8e:ed:75:05:ce:27:05:6d:17:c0:cb:dc:41:e8:c3: f2:4d:0a:57:c1:bc:bb:47:fc:3c:60:48:8a:44:d9:c2:f1:7f: f4:7f:1b:d6:99:f1:01:f1:d0:63:88:03:83:21:c0:14:3a:c3: 85:be:8b:1d:c8:cb:19:34:52:ed:76:86:fa:ae:a6:2d:6f:f8: 15:35:7b:fe:50:08:8a:e3:da:b7:85:e0:ca:cf:dc:dc:df:e7: 04:13:46:e8:d6:e0:37:39:d5:3a:22:bb:18:4d:58:df:ff:62: f9:73:65:39:3f:de:ca:ed:1d:a4:6d:24:f8:ff:f2:1c:ae:3e: 27:33:c9:f2:73:e8:52:87:d4:63:28:13:6a:f2:41:79:35:c8: be:4f:a5:33:85:41:43:09:6f:02:5c:6b:e6:12:cb:fc:98:08: 79:51:9b:bc:aa:4f:92:7b:d5:29:dc:d0:d3:48:a9:c4:3d:0f: fe:d8:c6:71:a4:7f:c9:4d:fa:e2:fa:e1:7a:21:4d:1d:ab:ba: c7:6b:4b:83:d6:ba:af:06:4a:ec:3d:9c:90:4e:8f:1d:b4:dc: e4:24:6f:34:cf:c2:51:07:bc:9e:d2:63:63:29:72:f6:c7:f0: 10:b8:33:dc:38:65:50:2c:10:60:2e:17:cb:e2:55:42:79:87: 49:53:8a:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULR3mH+fKUjnCeqorxpTv8h4okQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjA0MTcwNTE0NDBaFw0yNjA0MTgwNTUzNDBaMDMxMTAvBgNV BAMTKDVDODJCRTkyNkI2OTBENkNENjNEMTdCQTRGMjFCQTlEMEZBRTQ2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3B2RO5qk+C3P1TTrYCm/14jZ OgWzg8kaIqsTrO0IJSOzTfhDMr7tIoy7bxAPxoshuwmCvTmRF6sZeb5Z5c+mDKq1 JZel21tP878cR96Q+nL4PwuvbEm+AOWCXXzG1gn0c/D3SQlA186Lc2rcds3co663 kMeH1Y0ysPPx9AU5UNG+wdJ/PLfW2lTYdjrkUoIOLYBplgdrL8ZYD51vtq7Ybkgv k6T6FtyopDxJfjmmZR5DqrQL2SxJWE29UqMxDQuxTuXzZjNXIY9FiN6rXB0F/NwU 7dyduwZbMkTDaiz4L1TWDITvEQRW6K4cQoVyk+JR5g8tlq9e3DaYNXyB5n6vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXIK+kmtpDWzWPRe6TyG6nQ+uRigwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5jnju11Bc4n BW0XwMvcQejD8k0KV8G8u0f8PGBIikTZwvF/9H8b1pnxAfHQY4gDgyHAFDrDhb6L HcjLGTRS7XaG+q6mLW/4FTV7/lAIiuPat4Xgys/c3N/nBBNG6NbgNznVOiK7GE1Y 3/9i+XNlOT/eyu0dpG0k+P/yHK4+JzPJ8nPoUofUYygTavJBeTXIvk+lM4VBQwlv Alxr5hLL/JgIeVGbvKpPknvVKdzQ00ipxD0P/tjGcaR/yU364vrheiFNHau6x2tL g9a6rwZK7D2ckE6PHbTc5CRvNM/CUQe8ntJjYyly9sfwELgz3DhlUCwQYC4Xy+JV QnmHSVOKJw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:59:09 2026 by rpki-client