$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: /DDiuHLgiI4o1/cnVGOgIon4Wbybbu3IZxwZp28uEf0= Subject key identifier: DC:83:54:7B:8D:5C:D1:53:EB:0B:CB:AE:3A:59:7C:48:BA:76:1D:3F Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 2DB216B83387C0CB032089B436A0E80DF5565C3C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: 7C Signing time: Tue 21 Apr 2026 17:35:21 +0000 Manifest this update: Tue 21 Apr 2026 17:30:21 +0000 Manifest next update: Wed 22 Apr 2026 19:04:21 +0000 Files and hashes: 1: 3230332e3133302e35322e302f32342d3234203d3e203534393934.roa (hash: et7fLev1+45NO77skAOlV3NvfYmJj7KbgAsloiOQxpo=) 2: 3230332e3133302e36332e302f32342d3234203d3e203534393934.roa (hash: UBRqylYTLGDVfK3g4RFGUeCrUxzDzQEIc6ZZPYpaGWE=) 3: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: H5rAgZQ9SaOIwfTeIT0BbANWF0YqqkcSMAHoxpuBDTM=) 4: 3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa (hash: ktVeTgessk6xRjmQOhmm5CHyeA7OAmRW1PFH8DCbCvo=) 5: 3230332e3133302e35302e302f32342d3234203d3e203534393934.roa (hash: Ujrh8dXiv3ar3WusLzYw5/Zpebj94GN0ZVIqrzqX81U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b2:16:b8:33:87:c0:cb:03:20:89:b4:36:a0:e8:0d:f5:56:5c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Apr 21 17:30:21 2026 GMT Not After : Apr 22 19:04:21 2026 GMT Subject: CN=DC83547B8D5CD153EB0BCBAE3A597C48BA761D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:10:19:12:cc:51:85:0a:c1:14:20:1a:f1: cb:61:37:88:44:14:5d:df:69:29:37:d6:31:79:8c: 2e:71:b3:68:99:9a:e3:3a:80:f6:e2:74:de:9a:3c: 91:1e:6c:65:dc:22:b0:31:15:54:bc:2b:36:88:d1: 65:7d:d6:1f:c4:22:88:8a:a9:eb:55:06:09:64:10: c6:6f:23:37:4e:5c:d6:4c:f9:e3:a5:a7:01:8d:4d: 5c:c7:a6:c0:f2:76:0d:b4:0f:a8:73:08:40:03:df: 59:c4:13:c2:44:33:5e:31:f3:fe:e3:56:92:06:83: 82:cc:6c:30:e9:72:e8:57:9e:4b:4d:4f:eb:da:bc: 33:23:90:5a:40:e9:b1:d0:38:6c:0b:a6:01:f8:06: d9:6c:d4:6e:29:1d:8c:65:a1:86:38:57:ac:76:c9: 88:9b:ef:5c:f3:37:57:7c:5e:7a:4d:34:73:51:0d: 9d:a9:5a:0b:5b:3f:9d:95:bf:f9:dd:b0:34:df:69: db:ac:25:45:61:de:ab:2a:cf:d2:f0:40:d8:2f:88: 8c:5d:d3:62:d6:7b:70:be:be:48:e6:74:51:79:cb: ca:83:cb:75:5e:16:b9:d0:de:ef:38:23:ed:f4:d2: b1:45:29:d3:54:37:76:b4:4d:04:ac:a9:c9:93:b1: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:83:54:7B:8D:5C:D1:53:EB:0B:CB:AE:3A:59:7C:48:BA:76:1D:3F X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:e6:26:88:66:c5:6e:fd:c6:f6:12:15:2f:2f:6b:73:b3:83: 1a:2f:d5:ba:61:f8:e5:3b:85:94:6d:87:af:0e:e2:a3:46:d6: c0:c0:be:96:22:c4:c2:0c:6d:54:02:16:4b:08:56:48:4a:00: eb:83:21:ca:ca:cf:48:cf:d1:3c:90:eb:1f:61:81:c2:81:65: ed:8d:7c:21:c3:da:13:01:38:3d:ea:07:1e:a8:01:41:46:01: 46:34:44:1f:34:ad:ef:6b:4d:79:c0:13:d2:d2:80:eb:02:09: 79:98:5a:6f:21:7d:a8:e5:ef:6a:bb:0c:12:28:b7:a0:20:49: 7c:da:35:5a:85:02:95:72:61:33:76:71:f4:95:a1:69:13:b5: 7a:63:eb:e4:c5:89:d4:a3:76:d5:08:0d:d5:7a:6e:5e:a1:74: 06:af:e9:f6:89:3a:9a:19:53:4c:32:a1:b8:25:58:e0:0f:70: 88:c9:7b:18:16:44:85:78:73:1b:32:bb:0e:4d:29:1f:7a:7a: c2:c4:8c:e4:a1:e5:95:e5:93:41:6f:e1:66:98:bd:4c:40:08: 5f:ad:f3:80:1f:fc:84:f0:b1:2c:6d:57:15:87:ec:b6:7e:31: f7:f7:48:ca:02:35:16:b4:2a:14:5c:98:8f:63:55:fa:8b:ec: d0:36:33:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULbIWuDOHwMsDIIm0NqDoDfVWXDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjA0MjExNzMwMjFaFw0yNjA0MjIxOTA0MjFaMDMxMTAvBgNV BAMTKERDODM1NDdCOEQ1Q0QxNTNFQjBCQ0JBRTNBNTk3QzQ4QkE3NjFEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1BAZEsxRhQrBFCAa8cthN4hE FF3faSk31jF5jC5xs2iZmuM6gPbidN6aPJEebGXcIrAxFVS8KzaI0WV91h/EIoiK qetVBglkEMZvIzdOXNZM+eOlpwGNTVzHpsDydg20D6hzCEAD31nEE8JEM14x8/7j VpIGg4LMbDDpcuhXnktNT+vavDMjkFpA6bHQOGwLpgH4Btls1G4pHYxloYY4V6x2 yYib71zzN1d8XnpNNHNRDZ2pWgtbP52Vv/ndsDTfadusJUVh3qsqz9LwQNgviIxd 02LWe3C+vkjmdFF5y8qDy3VeFrnQ3u84I+300rFFKdNUN3a0TQSsqcmTsWTFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3INUe41c0VPrC8uuOll8SLp2HT8wHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuYmiGbFbv3G 9hIVLy9rc7ODGi/VumH45TuFlG2Hrw7io0bWwMC+liLEwgxtVAIWSwhWSEoA64Mh ysrPSM/RPJDrH2GBwoFl7Y18IcPaEwE4PeoHHqgBQUYBRjREHzSt72tNecAT0tKA 6wIJeZhabyF9qOXvarsMEii3oCBJfNo1WoUClXJhM3Zx9JWhaRO1emPr5MWJ1KN2 1QgN1XpuXqF0Bq/p9ok6mhlTTDKhuCVY4A9wiMl7GBZEhXhzGzK7Dk0pH3p6wsSM 5KHlleWTQW/hZpi9TEAIX63zgB/8hPCxLG1XFYfstn4x9/dIygI1FrQqFFyYj2NV +ovs0DYzzA== -----END CERTIFICATE-----Generated at Wed Apr 22 00:25:30 2026 by rpki-client