$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: QcGnpymKfZhKcnEsj2x0rW2tlcrBA93u38ljVAJmKrk= Subject key identifier: 2A:DE:B7:FE:D1:57:F5:56:44:88:7B:6B:15:24:90:4E:1A:8C:00:1C Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 6FEEC79B4BF6FECAF1C682E97002E8171B71DAAF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 67 Signing time: Sun 05 Apr 2026 11:33:56 +0000 Manifest this update: Sun 05 Apr 2026 11:28:56 +0000 Manifest next update: Mon 06 Apr 2026 14:41:56 +0000 Files and hashes: 1: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) 2: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 3: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 4: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: yQqv4EuoWie/6ZFvFcZknrb/gry/nDoNSCn9dX6n0eY=) 5: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 6: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 11:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ee:c7:9b:4b:f6:fe:ca:f1:c6:82:e9:70:02:e8:17:1b:71:da:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Apr 5 11:28:56 2026 GMT Not After : Apr 6 14:41:56 2026 GMT Subject: CN=2ADEB7FED157F55644887B6B1524904E1A8C001C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:ed:0c:a1:1e:93:37:cb:d9:80:f8:ff:91: f0:12:ba:cc:fe:62:71:c3:9c:a5:3a:9e:6e:6c:9d: 54:e8:27:9a:b5:e9:15:35:13:f1:86:93:21:05:79: 43:53:dc:85:67:bf:27:1a:13:33:40:21:8b:dc:7b: f7:07:4a:46:96:c7:17:eb:78:63:3f:1c:58:e8:bd: 75:0c:ed:f1:2d:05:91:35:5c:d3:2a:d8:2e:61:0d: d6:8b:d4:4b:21:a1:c3:ae:0b:a2:46:af:1b:50:7b: 4a:6a:f5:3c:48:70:74:38:1b:8b:58:f0:01:d8:c9: 05:f1:09:71:15:6e:0f:9b:44:9e:03:cb:dd:91:09: e0:c2:cb:cd:50:82:10:42:41:62:f4:87:43:7f:28: c1:f9:3c:eb:0f:bf:58:2e:18:a3:2b:14:a9:45:0b: ff:b4:b3:87:1f:bd:89:d1:7a:df:cd:80:5e:6b:09: 56:4b:be:6b:1e:3e:2c:55:54:ec:98:2e:be:dc:82: cb:d0:92:c1:54:83:91:f8:28:a4:e3:25:65:f9:d3: 70:26:0a:57:b3:a0:d7:de:9f:d6:d1:2f:ce:30:34: e5:02:10:a6:1a:c0:4b:3e:5e:c0:d9:dd:04:5c:95: e2:c6:d8:f7:dc:b5:4c:8a:10:45:a4:a5:04:d8:de: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DE:B7:FE:D1:57:F5:56:44:88:7B:6B:15:24:90:4E:1A:8C:00:1C X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c4:93:cb:66:4e:8f:9e:34:6e:13:39:06:b9:02:2f:6b:20: 62:ab:f4:20:3c:04:76:b6:54:27:db:fd:0c:32:e0:32:aa:f1: fb:ae:a4:97:3f:f3:99:e1:1f:d7:ee:a6:29:10:ec:63:04:12: 69:05:e3:34:42:f9:c3:c1:7b:9b:b9:9f:e2:1e:e0:31:ba:fd: 3a:a2:78:50:5e:ac:00:8b:5a:d0:d9:ab:cb:4a:89:a8:4d:7a: ba:b0:e9:ed:e8:c9:57:d3:92:f6:32:1a:59:ce:1c:1a:15:e7: 0b:98:48:19:60:d6:86:46:7d:c8:7a:29:16:c9:19:0d:69:1c: 36:57:ef:18:d1:62:d4:34:b8:f5:70:f6:7b:5d:8e:4d:07:1f: f4:99:5e:51:66:19:58:6d:98:56:31:1e:a4:97:3e:bc:49:7d: 18:98:b2:8a:50:17:fe:b2:8c:3d:65:8d:eb:ea:f3:98:38:db: ae:44:b4:a5:25:dd:3c:c3:99:02:e8:38:f6:10:29:7f:fc:b1: c3:ea:e3:27:de:0b:e4:5b:ce:cb:09:c6:16:ef:58:a2:9e:f3: 7c:6c:da:27:b0:aa:45:5a:a0:b0:49:ac:6b:5e:65:db:4c:81: 1a:60:55:1f:12:04:46:22:1b:1b:33:51:45:5d:9c:b3:4f:aa: 3e:5c:4b:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb+7Hm0v2/srxxoLpcALoFxtx2q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjA0MDUxMTI4NTZaFw0yNjA0MDYxNDQxNTZaMDMxMTAvBgNV BAMTKDJBREVCN0ZFRDE1N0Y1NTY0NDg4N0I2QjE1MjQ5MDRFMUE4QzAwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiO0MoR6TN8vZgPj/kfASusz+ YnHDnKU6nm5snVToJ5q16RU1E/GGkyEFeUNT3IVnvycaEzNAIYvce/cHSkaWxxfr eGM/HFjovXUM7fEtBZE1XNMq2C5hDdaL1EshocOuC6JGrxtQe0pq9TxIcHQ4G4tY 8AHYyQXxCXEVbg+bRJ4Dy92RCeDCy81QghBCQWL0h0N/KMH5POsPv1guGKMrFKlF C/+0s4cfvYnRet/NgF5rCVZLvmsePixVVOyYLr7cgsvQksFUg5H4KKTjJWX503Am ClezoNfen9bRL84wNOUCEKYawEs+XsDZ3QRcleLG2PfctUyKEEWkpQTY3nFPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKt63/tFX9VZEiHtrFSSQThqMABwwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMSTy2ZOj540 bhM5BrkCL2sgYqv0IDwEdrZUJ9v9DDLgMqrx+66klz/zmeEf1+6mKRDsYwQSaQXj NEL5w8F7m7mf4h7gMbr9OqJ4UF6sAIta0Nmry0qJqE16urDp7ejJV9OS9jIaWc4c GhXnC5hIGWDWhkZ9yHopFskZDWkcNlfvGNFi1DS49XD2e12OTQcf9JleUWYZWG2Y VjEepJc+vEl9GJiyilAX/rKMPWWN6+rzmDjbrkS0pSXdPMOZAug49hApf/yxw+rj J94L5FvOywnGFu9Yop7zfGzaJ7CqRVqgsEmsa15l20yBGmBVHxIERiIbGzNRRV2c s0+qPlxLVA== -----END CERTIFICATE-----Generated at Mon Apr 6 01:17:00 2026 by rpki-client