$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft File: F329F518724FAC695E33F5C78532CBF56BF4243D.mft (raw, json) Hash identifier: 3yawNXhk965v/OQG/xeheIFyIGlMd4lPYVGFit3iqAI= Subject key identifier: CA:84:8F:4A:49:98:2A:8F:71:5A:0D:6E:02:7B:3B:DE:70:B5:64:AC Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 44830794163CDAA587A194B0653A6EFE9E376EE0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft Manifest number: 72 Signing time: Mon 13 Apr 2026 05:29:17 +0000 Manifest this update: Mon 13 Apr 2026 05:24:17 +0000 Manifest next update: Tue 14 Apr 2026 08:31:17 +0000 Files and hashes: 1: 35392e3130372e36342e302f31382d3234203d3e20313334373733.roa (hash: 0zY22v6zj7Va/jjar+sQq7kCtTDD22I+jvz/eJrNkW8=) 2: F329F518724FAC695E33F5C78532CBF56BF4243D.crl (hash: WrK9gqYYqkiU0R6YTj6Ulz62+Sp+pA4NPW9eopZOE3A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:83:07:94:16:3c:da:a5:87:a1:94:b0:65:3a:6e:fe:9e:37:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Apr 13 05:24:17 2026 GMT Not After : Apr 14 08:31:17 2026 GMT Subject: CN=CA848F4A49982A8F715A0D6E027B3BDE70B564AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:0a:ce:b3:be:6f:14:e7:26:f1:18:ec:f6: 6b:92:b4:11:74:c5:c5:ca:5d:56:29:6f:c3:e9:5d: 59:1f:87:5c:32:d1:a0:9f:74:6c:66:2a:8c:c8:f8: cb:75:d9:8a:f1:b9:b3:f0:be:5a:be:28:83:4a:c4: 67:94:f2:ea:f2:fb:d6:61:12:19:cb:39:58:ef:c0: 38:8e:2c:df:d3:38:9a:c2:57:4c:27:25:a0:17:ed: bf:56:1b:ab:2a:d5:cb:b9:f5:29:40:a2:f1:bf:a8: e8:21:f0:43:3d:84:d8:6e:74:4e:4f:14:0d:67:34: cd:a3:8c:a4:fb:6c:54:be:d0:19:59:08:51:8c:5b: 15:a9:9b:d6:b0:45:1a:e8:23:42:4e:c0:3b:0a:f4: a4:95:58:95:41:21:5e:4f:a6:7a:98:0b:20:ca:61: c2:ca:6f:90:fb:70:c8:b6:e9:d6:03:9d:09:93:f7: 28:31:67:19:73:e1:f2:bf:2d:1b:ff:b6:99:31:89: 3a:18:5f:68:3c:a4:ba:7d:47:48:80:dc:0a:8c:3a: df:37:3d:36:96:6a:5c:72:32:1e:db:0d:ca:2b:fe: 5c:93:7e:ac:cb:3d:1b:29:35:12:2f:40:b1:2a:ef: 04:4d:d1:a9:e5:4d:ab:3e:1f:62:6b:12:59:fb:33: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:84:8F:4A:49:98:2A:8F:71:5A:0D:6E:02:7B:3B:DE:70:B5:64:AC X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0e:68:c5:fe:50:94:d0:1e:bf:2c:52:93:e2:01:10:50:4d: 1e:bd:bc:86:c1:ba:9c:b6:a8:42:90:39:17:28:22:53:9e:03: 30:0c:05:28:cb:92:09:1c:2d:06:5f:84:f9:86:ea:5c:a5:fa: 56:ab:3b:10:40:e9:41:25:93:80:9e:ed:a6:f2:1a:4d:19:13: f0:45:4d:0b:6d:b6:15:3b:ab:15:e5:df:9c:bb:d7:13:fc:c9: a7:1c:d7:d7:21:a1:fd:a1:e2:2b:ee:32:5d:2f:92:ff:1c:ce: f3:a7:12:ec:b6:03:ca:2f:67:4f:84:81:31:ac:36:3e:4a:ea: ca:6d:b1:54:7d:7e:f7:2d:f8:83:a5:89:8e:f4:7f:6c:d8:f3: 85:c0:b8:95:a3:94:4f:77:25:62:1c:f0:d3:cc:f9:45:75:2c: 44:41:dc:64:27:3d:53:47:74:fd:57:6b:55:6e:a8:c2:1e:19: e5:80:7d:4a:89:76:70:99:e9:c0:ea:b7:08:bb:61:5d:e0:0e: 78:01:d1:9b:58:b1:90:5a:41:e2:e5:de:c3:7d:58:bb:f1:ed: 10:a3:6b:02:6e:80:f3:97:a5:f0:f4:59:14:1b:64:8d:74:fb: 88:22:96:9a:ce:d8:69:5f:c4:76:f7:d7:3f:94:fb:65:a3:ed: 00:7b:58:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURIMHlBY82qWHoZSwZTpu/p43buAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA0MTMwNTI0MTdaFw0yNjA0MTQwODMxMTdaMDMxMTAvBgNV BAMTKENBODQ4RjRBNDk5ODJBOEY3MTVBMEQ2RTAyN0IzQkRFNzBCNTY0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjTgrOs75vFOcm8Rjs9muStBF0 xcXKXVYpb8PpXVkfh1wy0aCfdGxmKozI+Mt12YrxubPwvlq+KINKxGeU8ury+9Zh EhnLOVjvwDiOLN/TOJrCV0wnJaAX7b9WG6sq1cu59SlAovG/qOgh8EM9hNhudE5P FA1nNM2jjKT7bFS+0BlZCFGMWxWpm9awRRroI0JOwDsK9KSVWJVBIV5PpnqYCyDK YcLKb5D7cMi26dYDnQmT9ygxZxlz4fK/LRv/tpkxiToYX2g8pLp9R0iA3AqMOt83 PTaWalxyMh7bDcor/lyTfqzLPRspNRIvQLEq7wRN0anlTas+H2JrEln7M43PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyoSPSkmYKo9xWg1uAns73nC1ZKwwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC9GMzI5RjUxODcyNEZB QzY5NUUzM0Y1Qzc4NTMyQ0JGNTZCRjQyNDNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA5oxf5QlNAe vyxSk+IBEFBNHr28hsG6nLaoQpA5FygiU54DMAwFKMuSCRwtBl+E+YbqXKX6Vqs7 EEDpQSWTgJ7tpvIaTRkT8EVNC222FTurFeXfnLvXE/zJpxzX1yGh/aHiK+4yXS+S /xzO86cS7LYDyi9nT4SBMaw2Pkrqym2xVH1+9y34g6WJjvR/bNjzhcC4laOUT3cl Yhzw08z5RXUsREHcZCc9U0d0/VdrVW6owh4Z5YB9Sol2cJnpwOq3CLthXeAOeAHR m1ixkFpB4uXew31Yu/HtEKNrAm6A85el8PRZFBtkjXT7iCKWms7YaV/EdvfXP5T7 ZaPtAHtYww== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:51 2026 by rpki-client