$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft File: 373B103C68D9B84455801815E437C49839794406.mft (raw, json) Hash identifier: 3LtCqBFyGKxUjHc/RXk9imWzyCyjMB7veps3yRZQ7K8= Subject key identifier: ED:5B:4E:71:13:E3:92:BF:91:01:2F:92:8D:42:4F:DD:45:15:04:89 Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406 Certificate serial: 52440228C22CF2D8139B48A5B04C2F4D5F5B76B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft Manifest number: 70 Signing time: Sun 12 Apr 2026 23:34:17 +0000 Manifest this update: Sun 12 Apr 2026 23:29:17 +0000 Manifest next update: Mon 13 Apr 2026 23:55:17 +0000 Files and hashes: 1: 373B103C68D9B84455801815E437C49839794406.crl (hash: b19WzK7RnFRjJ77Z9TyxF5dYE3CqqpJ9F/oVJEoWI9U=) 2: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=) 3: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=) 4: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 23:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:44:02:28:c2:2c:f2:d8:13:9b:48:a5:b0:4c:2f:4d:5f:5b:76:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373B103C68D9B84455801815E437C49839794406 Validity Not Before: Apr 12 23:29:17 2026 GMT Not After : Apr 13 23:55:17 2026 GMT Subject: CN=ED5B4E7113E392BF91012F928D424FDD45150489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:dc:7e:fb:5d:05:e0:3a:26:37:37:51:06: 6d:91:0b:82:4c:0f:e1:86:d1:fa:88:aa:d2:ef:52: 3d:2d:25:6c:f2:c2:ce:6a:fb:3b:fb:39:2e:c5:8d: b1:d1:4e:33:22:61:b6:12:8b:5b:5a:e0:fb:3c:37: e0:69:05:1f:9a:8e:5e:91:63:cc:b6:b4:a7:d8:65: 8a:40:ed:a6:6e:1a:b2:41:16:4a:a9:36:d9:e3:07: 40:89:da:71:48:68:b7:61:d8:74:b3:a8:a5:5f:16: e5:cd:84:b6:3d:a0:08:00:a2:6f:2f:35:c0:e4:0b: 45:14:b5:d3:18:eb:68:6e:5f:52:69:35:b2:1f:22: bd:a7:9a:13:7c:66:8c:9b:54:1c:6c:78:4b:2d:ee: 80:01:df:f8:58:7a:af:85:67:43:d8:2e:67:54:c4: 56:96:36:f9:29:bd:2d:d8:15:7b:17:83:c5:dd:ec: f7:47:74:2f:f8:d4:86:ba:0d:da:c6:84:2e:80:e9: fa:39:81:47:0e:15:4b:ab:53:2a:2c:c2:ac:da:f8: cd:23:72:9e:e0:3c:ef:e6:c7:2f:91:a7:33:ca:cc: b9:ed:89:be:c6:82:42:d1:36:40:a3:b6:a5:a7:53: 03:12:6e:ab:dc:d6:88:cb:8b:be:b8:65:e2:d0:40: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5B:4E:71:13:E3:92:BF:91:01:2F:92:8D:42:4F:DD:45:15:04:89 X509v3 Authority Key Identifier: keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8e:c5:33:88:59:51:45:6f:ec:dd:82:f4:79:46:7d:55:e3: 7b:da:dd:55:5a:f5:8c:3d:b7:0e:78:e3:b7:ee:7e:4b:fb:8e: c1:bf:ba:7e:6c:aa:12:75:68:d9:8d:f6:e4:f3:af:3e:88:bb: a8:a6:71:8b:86:f6:1f:e3:3e:9b:f7:a5:4b:72:fb:34:92:2e: 16:b7:a7:21:55:e4:5b:1a:72:e8:d2:50:06:f6:e2:a9:99:06: 97:e7:f8:9c:bd:9c:24:aa:6d:b2:02:06:4b:db:8c:66:1a:4a: 72:b4:95:13:b9:10:69:0e:76:20:4a:ae:4f:48:d5:b2:14:85: e7:28:c8:42:a2:59:60:2d:9a:47:64:d0:12:8c:0e:1b:36:9f: 67:ce:79:11:35:94:ca:2f:a1:c5:fc:0a:1e:61:64:a6:cb:19: db:a8:86:2a:1f:30:27:b3:c7:97:15:a4:de:fe:a2:ef:22:8e: 5d:78:d5:37:e6:0a:66:dd:a9:2b:26:ae:16:2f:15:ff:64:30: 84:3d:04:8d:8c:00:8b:5a:31:fd:8c:3c:aa:14:81:73:f6:77: 56:21:9c:4b:b3:03:07:72:d4:ba:8c:16:2c:21:29:83:b6:7a: 3f:c8:31:ee:61:f5:94:7c:18:5d:ff:d6:e0:6d:bf:13:bd:20: d6:ea:a1:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUkQCKMIs8tgTm0ilsEwvTV9bdrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz OTc5NDQwNjAeFw0yNjA0MTIyMzI5MTdaFw0yNjA0MTMyMzU1MTdaMDMxMTAvBgNV BAMTKEVENUI0RTcxMTNFMzkyQkY5MTAxMkY5MjhENDI0RkRENDUxNTA0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgytx++10F4DomNzdRBm2RC4JM D+GG0fqIqtLvUj0tJWzyws5q+zv7OS7FjbHRTjMiYbYSi1ta4Ps8N+BpBR+ajl6R Y8y2tKfYZYpA7aZuGrJBFkqpNtnjB0CJ2nFIaLdh2HSzqKVfFuXNhLY9oAgAom8v NcDkC0UUtdMY62huX1JpNbIfIr2nmhN8ZoybVBxseEst7oAB3/hYeq+FZ0PYLmdU xFaWNvkpvS3YFXsXg8Xd7PdHdC/41Ia6DdrGhC6A6fo5gUcOFUurUyoswqza+M0j cp7gPO/mxy+RpzPKzLntib7GgkLRNkCjtqWnUwMSbqvc1ojLi764ZeLQQJGVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7VtOcRPjkr+RAS+SjUJP3UUVBIkwHwYDVR0j BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0NjgyMjcvMC8zNzNCMTAzQzY4RDlC ODQ0NTU4MDE4MTVFNDM3QzQ5ODM5Nzk0NDA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY7FM4hZUUVv 7N2C9HlGfVXje9rdVVr1jD23Dnjjt+5+S/uOwb+6fmyqEnVo2Y325POvPoi7qKZx i4b2H+M+m/elS3L7NJIuFrenIVXkWxpy6NJQBvbiqZkGl+f4nL2cJKptsgIGS9uM ZhpKcrSVE7kQaQ52IEquT0jVshSF5yjIQqJZYC2aR2TQEowOGzafZ855ETWUyi+h xfwKHmFkpssZ26iGKh8wJ7PHlxWk3v6i7yKOXXjVN+YKZt2pKyauFi8V/2QwhD0E jYwAi1ox/Yw8qhSBc/Z3ViGcS7MDB3LUuowWLCEpg7Z6P8gx7mH1lHwYXf/W4G2/ E70g1uqh1A== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:51 2026 by rpki-client