$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: XE2JlKtJ4+UAEjthl+tD5GqhZcUUnkVHexZRJxRKIk4= Subject key identifier: EF:71:56:4F:4B:EE:E4:33:94:21:24:F9:90:25:C3:A3:D2:D1:F8:E4 Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 61778B654672A511AAB0EDA44746A35A7799B542 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: 65 Signing time: Sun 05 Apr 2026 07:53:56 +0000 Manifest this update: Sun 05 Apr 2026 07:48:56 +0000 Manifest next update: Mon 06 Apr 2026 11:21:56 +0000 Files and hashes: 1: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: BMs7zTFxp8tw7hREsYEwXH785xoXAv7HkYck6f0iJ1w=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) 3: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 4: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 11:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:77:8b:65:46:72:a5:11:aa:b0:ed:a4:47:46:a3:5a:77:99:b5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Apr 5 07:48:56 2026 GMT Not After : Apr 6 11:21:56 2026 GMT Subject: CN=EF71564F4BEEE433942124F99025C3A3D2D1F8E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:11:87:f4:f9:2c:d7:0b:48:14:4c:5d:85: 40:fd:fe:64:fe:6a:a8:52:4d:79:39:c0:09:8b:ce: ca:cf:6a:71:d8:d3:8d:7b:71:d1:1a:25:f3:42:94: 5d:84:13:63:ce:ae:7f:57:5a:c8:e7:52:0d:69:99: f0:70:94:12:69:aa:83:15:51:ef:b3:34:3b:3b:50: 7e:fe:42:92:e9:52:24:af:85:0a:58:61:18:39:0d: 44:82:6a:d6:10:91:a4:d5:84:d2:c9:d4:6d:de:42: 3c:c8:9c:03:4d:58:1d:18:57:ac:bb:d5:27:cd:85: 47:fd:d8:de:32:bd:48:67:db:ae:70:f1:54:2d:dc: 17:49:aa:d6:2c:49:25:c1:d2:b9:ee:7a:61:46:7b: 50:68:4b:af:62:a3:c0:19:90:99:82:5d:fe:2a:13: da:35:fd:07:aa:9e:59:6a:49:55:aa:de:d3:11:c3: bc:d0:00:5a:b2:7f:fb:e0:e3:cc:d5:e0:3f:f4:f9: 0b:fa:89:d2:36:84:a9:c7:2d:4f:c8:a1:4d:a2:7a: 50:4c:23:22:6d:83:21:81:a1:2b:92:59:62:60:a6: 60:e6:56:64:a4:a2:bb:17:02:3e:bf:00:01:87:0a: 5b:ad:98:54:10:87:b2:61:fb:33:f2:b9:95:0f:d5: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:71:56:4F:4B:EE:E4:33:94:21:24:F9:90:25:C3:A3:D2:D1:F8:E4 X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:bc:f6:3c:ee:6c:5c:72:27:3a:15:77:c4:a2:a7:db:7d:bf: c7:66:54:7b:2c:ea:b9:a3:d0:b0:8a:ed:1a:a6:2b:90:58:2f: a1:b2:33:af:24:eb:7e:cc:6f:e8:2b:61:f0:b1:e2:c2:15:a5: 13:8b:38:80:39:dd:74:8d:76:d8:62:f4:e9:a9:f5:18:a6:1c: 12:cc:e2:d3:b5:2f:60:f1:b3:e2:8b:11:b1:cb:8a:7f:1c:a5: b5:0f:d1:27:9c:8d:4b:33:2e:5e:0e:54:76:94:45:a2:00:92: 50:b6:90:56:74:37:14:28:1e:a7:46:c8:c0:41:40:87:c2:08: 21:3a:96:3a:4e:85:94:1c:d6:be:4c:d6:fd:06:20:a5:28:2d: ae:67:bc:e8:27:94:6a:0b:21:17:4d:bc:a4:1a:45:be:31:a2: 6a:e2:ad:e8:b5:14:1d:af:5a:83:81:68:83:7b:88:c8:7f:b5: 58:a4:d7:50:cc:e0:32:e9:1e:7c:4b:72:23:e3:a5:b5:41:74: 00:04:e1:ca:d7:97:91:7e:c2:fd:3c:9f:c6:fb:2f:c6:6a:38: e4:bc:ec:7f:9b:9c:ae:15:68:c6:f4:20:72:2c:f3:d5:eb:71: cb:3e:dd:9f:4a:96:04:c1:11:52:8f:6a:01:d6:09:17:26:55: e0:b2:18:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYXeLZUZypRGqsO2kR0ajWneZtUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjA0MDUwNzQ4NTZaFw0yNjA0MDYxMTIxNTZaMDMxMTAvBgNV BAMTKEVGNzE1NjRGNEJFRUU0MzM5NDIxMjRGOTkwMjVDM0EzRDJEMUY4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbEBGH9Pks1wtIFExdhUD9/mT+ aqhSTXk5wAmLzsrPanHY0417cdEaJfNClF2EE2POrn9XWsjnUg1pmfBwlBJpqoMV Ue+zNDs7UH7+QpLpUiSvhQpYYRg5DUSCatYQkaTVhNLJ1G3eQjzInANNWB0YV6y7 1SfNhUf92N4yvUhn265w8VQt3BdJqtYsSSXB0rnuemFGe1BoS69io8AZkJmCXf4q E9o1/QeqnllqSVWq3tMRw7zQAFqyf/vg48zV4D/0+Qv6idI2hKnHLU/IoU2ielBM IyJtgyGBoSuSWWJgpmDmVmSkorsXAj6/AAGHClutmFQQh7Jh+zPyuZUP1cIFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU73FWT0vu5DOUIST5kCXDo9LR+OQwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLz2PO5sXHIn OhV3xKKn232/x2ZUeyzquaPQsIrtGqYrkFgvobIzryTrfsxv6Cth8LHiwhWlE4s4 gDnddI122GL06an1GKYcEszi07UvYPGz4osRscuKfxyltQ/RJ5yNSzMuXg5UdpRF ogCSULaQVnQ3FCgep0bIwEFAh8IIITqWOk6FlBzWvkzW/QYgpSgtrme86CeUagsh F028pBpFvjGiauKt6LUUHa9ag4Fog3uIyH+1WKTXUMzgMukefEtyI+OltUF0AATh yteXkX7C/Tyfxvsvxmo45Lzsf5ucrhVoxvQgcizz1etxyz7dn0qWBMERUo9qAdYJ FyZV4LIYtw== -----END CERTIFICATE-----Generated at Mon Apr 6 01:17:00 2026 by rpki-client