$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: VhUTKTTFntRBlWNkyCkmOxTriNP+oMEBwZeT83vedng= Subject key identifier: 53:93:A9:0D:A7:5A:A1:39:B8:B2:99:F4:A8:56:B1:08:1D:96:3B:C9 Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 44C324ED800F3BB4850C6DAAF184A740CCCBA693 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: 0D Signing time: Thu 16 Apr 2026 05:34:30 +0000 Manifest this update: Thu 16 Apr 2026 05:29:30 +0000 Manifest next update: Fri 17 Apr 2026 07:47:30 +0000 Files and hashes: 1: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: HNK/FpR2RFSf1vNHa2qi+orcc5vz9yGQth+2YzER/zg=) 2: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 3: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 07:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c3:24:ed:80:0f:3b:b4:85:0c:6d:aa:f1:84:a7:40:cc:cb:a6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Apr 16 05:29:30 2026 GMT Not After : Apr 17 07:47:30 2026 GMT Subject: CN=5393A90DA75AA139B8B299F4A856B1081D963BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3d:99:75:03:9d:fa:27:ca:73:ad:18:17:49: ac:b8:37:68:bc:eb:89:1e:93:b8:12:d1:9b:89:5b: 98:e6:42:89:4d:80:24:75:ad:d9:71:19:4e:d3:8e: 06:8f:77:cd:a3:a6:99:41:93:32:bb:f1:59:ef:19: 9c:8b:ca:bd:09:ff:08:3b:50:58:90:66:4e:a8:f3: 22:0b:05:a7:ce:b2:3e:a3:c4:d4:4c:b7:37:06:0d: b3:53:3a:ca:0d:33:c7:b9:6b:5f:43:91:e0:d5:a1: 94:97:d0:9e:17:d8:0c:a1:57:a0:3a:71:fe:dd:10: 8d:76:64:4e:3b:99:68:74:7a:e5:a1:6f:c3:58:94: 6e:6c:d3:9b:20:f2:4f:9f:18:46:0a:e4:3e:3d:85: 26:11:83:3d:c1:38:38:b1:72:40:12:43:e8:e3:85: ec:a4:72:0f:b7:45:74:03:3b:0d:50:30:59:41:de: 41:06:49:70:36:d8:d3:bc:67:f1:f3:b3:a6:cb:cf: 01:1f:cc:df:a9:a4:1c:c8:9c:95:c6:b8:c1:7d:b2: 57:1a:8f:e8:0e:9d:95:95:58:20:33:f8:c0:7c:0b: e8:6a:17:50:4d:e5:90:f6:50:44:19:de:34:81:0d: 33:b8:1c:87:58:50:e1:4e:0e:ca:c2:3b:0c:40:78: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:93:A9:0D:A7:5A:A1:39:B8:B2:99:F4:A8:56:B1:08:1D:96:3B:C9 X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:93:e1:f4:07:70:28:18:a3:6a:47:2c:a1:29:bc:48:5f:4a: a7:f7:19:6c:e7:56:46:b1:6d:f0:3d:61:47:9c:8a:e3:29:a0: b7:bb:9c:f5:c3:e8:69:a6:0d:36:fe:85:27:c5:e9:82:6b:6b: fb:e3:6d:73:90:cd:09:43:b5:08:4f:bf:3e:1e:4e:05:c3:0f: 14:08:0a:9b:ac:84:3c:7c:57:18:c0:3f:b2:f4:8d:3e:09:00: 26:1d:37:25:a5:f2:87:b2:13:bf:5a:f6:97:0b:02:3e:cb:3e: e7:83:67:37:9d:9a:c4:53:d7:60:e4:34:ed:b9:b3:d7:91:91: 98:03:e9:aa:09:ba:92:23:e8:96:76:fd:71:a7:3f:a4:ac:38: 63:c8:f8:c0:6b:65:2e:5a:1a:67:de:b9:62:b1:3f:4b:f7:81: 5a:70:31:3b:dd:2a:f2:68:e5:0b:95:cb:70:48:09:07:2c:a9: 19:42:02:ec:d2:b1:39:22:9f:18:59:8e:a8:75:70:e7:da:fb: a8:7e:87:bf:24:94:a4:35:33:1b:41:e0:08:25:2e:91:5f:e4: db:2d:18:b4:b1:2f:52:d8:29:46:44:db:e9:37:5a:2b:e4:1e: 2d:9d:ca:ed:dc:61:9c:d3:bc:ec:d8:2e:10:dd:cc:90:ec:8b: 21:1e:a8:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURMMk7YAPO7SFDG2q8YSnQMzLppMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA0MTYwNTI5MzBaFw0yNjA0MTcwNzQ3MzBaMDMxMTAvBgNV BAMTKDUzOTNBOTBEQTc1QUExMzlCOEIyOTlGNEE4NTZCMTA4MUQ5NjNCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOPZl1A536J8pzrRgXSay4N2i8 64kek7gS0ZuJW5jmQolNgCR1rdlxGU7TjgaPd82jpplBkzK78VnvGZyLyr0J/wg7 UFiQZk6o8yILBafOsj6jxNRMtzcGDbNTOsoNM8e5a19DkeDVoZSX0J4X2AyhV6A6 cf7dEI12ZE47mWh0euWhb8NYlG5s05sg8k+fGEYK5D49hSYRgz3BODixckASQ+jj heykcg+3RXQDOw1QMFlB3kEGSXA22NO8Z/Hzs6bLzwEfzN+ppBzInJXGuMF9slca j+gOnZWVWCAz+MB8C+hqF1BN5ZD2UEQZ3jSBDTO4HIdYUOFODsrCOwxAeH6fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU5OpDadaoTm4spn0qFaxCB2WO8kwHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipPh9AdwKBij akcsoSm8SF9Kp/cZbOdWRrFt8D1hR5yK4ymgt7uc9cPoaaYNNv6FJ8Xpgmtr++Nt c5DNCUO1CE+/Ph5OBcMPFAgKm6yEPHxXGMA/svSNPgkAJh03JaXyh7ITv1r2lwsC Pss+54NnN52axFPXYOQ07bmz15GRmAPpqgm6kiPolnb9cac/pKw4Y8j4wGtlLloa Z965YrE/S/eBWnAxO90q8mjlC5XLcEgJByypGUIC7NKxOSKfGFmOqHVw59r7qH6H vySUpDUzG0HgCCUukV/k2y0YtLEvUtgpRkTb6TdaK+QeLZ3K7dxhnNO87NguEN3M kOyLIR6oPQ== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:48 2026 by rpki-client