$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft (raw, json) Hash identifier: 3iKhvqp/o/VTTlq9JjzsZqxd2dwCvo2Bbv3zdz0Vunk= Subject key identifier: BF:B6:A0:B6:35:E8:09:3E:50:93:E6:F6:53:2E:FA:8A:E8:3D:41:16 Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 031740D77CEE13BF5D73409BC64F1F725B09AA38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 01:09:17 +0000 Manifest this update: Mon 13 Apr 2026 01:04:17 +0000 Manifest next update: Tue 14 Apr 2026 01:12:17 +0000 Files and hashes: 1: 3232322e3132362e3133382e302f32342d3234203d3e2037343638.roa (hash: 5j4qtob+syiOeOjHQA6tru1Q5Emv8og7jhAu9x8oqcM=) 2: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl (hash: 3CCDTunRTADW6eSu7HYZTuLmAKItUZP6Hqczj9E7KSo=) 3: 3232322e3132362e3133382e302f32342d3234203d3e203337393635.roa (hash: PEiq15CzWq7YVz5yjYQ9845wTwEywGiN4bqFOhOBuiA=) 4: 323430313a326130303a3a2f33322d3438203d3e2037343638.roa (hash: A8NZ0UY8B3O3+sohjguWnNXSf3IoWdVu8cAaIcwGSx4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 01:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:17:40:d7:7c:ee:13:bf:5d:73:40:9b:c6:4f:1f:72:5b:09:aa:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Apr 13 01:04:17 2026 GMT Not After : Apr 14 01:12:17 2026 GMT Subject: CN=BFB6A0B635E8093E5093E6F6532EFA8AE83D4116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:f2:fe:44:a2:6d:65:6a:90:fc:e1:ce:04: eb:2f:1c:54:03:95:d1:a2:16:56:4b:1a:30:96:bf: df:f1:64:84:ba:4b:94:a9:27:c7:c6:85:b7:4b:0f: 41:3b:2b:30:3f:f2:b0:7f:c9:ee:dc:01:df:2c:99: 7a:69:f0:16:f3:1e:34:0c:ae:15:9a:52:1f:2b:99: d0:20:1b:e9:5f:7a:37:bb:ce:e0:b8:4e:c6:ff:3a: 0c:b9:c9:87:dc:02:ee:e1:94:1d:f1:9c:1e:46:3d: be:b6:06:4d:74:03:d0:ec:83:d2:0d:c3:d3:66:af: b2:70:34:66:9b:b3:d6:43:a2:d1:79:26:3f:29:5b: 60:d1:f8:cd:37:c9:80:07:2e:8c:4f:bf:cd:23:84: b1:9c:67:a9:27:31:40:01:bd:ea:24:0a:32:b1:54: ec:85:69:b9:3f:73:5c:c3:de:45:0b:8b:d0:fe:94: 70:ea:da:55:e5:a3:a6:27:bf:c7:97:28:b4:a7:81: 39:20:f9:ff:1d:3f:24:b1:07:49:b5:93:b7:63:f1: 14:77:8c:b0:dc:ea:d7:15:ca:48:de:f7:08:59:75: a7:56:c0:ad:cb:67:b7:71:f1:92:f0:ac:22:c1:87: ee:3e:00:e5:44:14:1c:3e:26:f5:c1:78:01:d2:b8: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B6:A0:B6:35:E8:09:3E:50:93:E6:F6:53:2E:FA:8A:E8:3D:41:16 X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:72:39:a5:47:91:d8:57:87:30:68:af:e4:e2:a7:1e:06:cd: 49:43:a0:e2:a0:91:8c:75:c5:56:d3:0c:ed:59:11:34:e8:9e: c7:25:d9:f0:fb:e8:86:e2:63:8e:a9:f9:ba:d7:2d:52:12:2f: 2d:48:70:30:4e:b3:ee:04:d5:37:6c:df:16:f5:51:52:6e:21: e9:3b:26:07:3e:23:ca:f9:fb:e5:99:3d:05:0e:52:76:4a:2d: 87:f0:61:cf:c8:48:c1:4c:de:d6:10:07:25:bf:cf:db:af:c5: 9d:1b:61:3d:ac:85:50:45:61:52:e1:94:04:b7:f3:2f:e7:4a: 2e:81:3e:c0:8b:96:c2:4a:a0:8f:4d:49:e1:4d:5f:52:3f:a0: 2b:fa:f0:00:bd:96:06:20:a8:3c:86:fb:c4:76:40:4a:c1:56: 9a:d2:45:91:10:cd:61:0e:35:ba:83:82:4e:91:06:27:c4:68: 2d:87:e6:2e:4b:09:5d:b5:3d:bc:42:c1:53:7c:c5:b8:7e:5c: 55:45:83:08:c9:4d:8b:f6:ca:81:be:1a:aa:d0:e8:da:9d:5a: 61:5a:9a:ac:da:44:4c:a6:a8:1c:ab:f5:8d:71:84:39:4e:b7: 41:1c:82:32:b4:a2:73:f2:0c:2c:a3:8a:c5:2a:45:56:7d:c1: 9e:d6:b5:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAxdA13zuE79dc0Cbxk8fclsJqjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjA0MTMwMTA0MTdaFw0yNjA0MTQwMTEyMTdaMDMxMTAvBgNV BAMTKEJGQjZBMEI2MzVFODA5M0U1MDkzRTZGNjUzMkVGQThBRTgzRDQxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfA/L+RKJtZWqQ/OHOBOsvHFQD ldGiFlZLGjCWv9/xZIS6S5SpJ8fGhbdLD0E7KzA/8rB/ye7cAd8smXpp8BbzHjQM rhWaUh8rmdAgG+lfeje7zuC4Tsb/Ogy5yYfcAu7hlB3xnB5GPb62Bk10A9Dsg9IN w9Nmr7JwNGabs9ZDotF5Jj8pW2DR+M03yYAHLoxPv80jhLGcZ6knMUABveokCjKx VOyFabk/c1zD3kULi9D+lHDq2lXlo6Ynv8eXKLSngTkg+f8dPySxB0m1k7dj8RR3 jLDc6tcVykje9whZdadWwK3LZ7dx8ZLwrCLBh+4+AOVEFBw+JvXBeAHSuHsnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv7agtjXoCT5Qk+b2Uy76iug9QRYwHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMC9BNTE0MDhFOTcwMTBC REI0NDE0NjI4MUI4QTc4QkNGQTRFMEU0QzVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXI5pUeR2FeH MGiv5OKnHgbNSUOg4qCRjHXFVtMM7VkRNOiexyXZ8PvohuJjjqn5utctUhIvLUhw ME6z7gTVN2zfFvVRUm4h6TsmBz4jyvn75Zk9BQ5Sdkoth/Bhz8hIwUze1hAHJb/P 26/FnRthPayFUEVhUuGUBLfzL+dKLoE+wIuWwkqgj01J4U1fUj+gK/rwAL2WBiCo PIb7xHZASsFWmtJFkRDNYQ41uoOCTpEGJ8RoLYfmLksJXbU9vELBU3zFuH5cVUWD CMlNi/bKgb4aqtDo2p1aYVqarNpETKaoHKv1jXGEOU63QRyCMrSic/IMLKOKxSpF Vn3Bnta1Ug== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:22 2026 by rpki-client