$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft File: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft (raw, json) Hash identifier: YW6PNQVSjol7+tUXTv6HmIDzksZjux1MoZ+ZDLT+dDg= Subject key identifier: 4D:41:F1:65:72:94:B9:66:1C:D0:5A:5F:E4:4F:7D:04:73:41:14:1E Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 28BFAE62CB77A2DD6DB0388DB1A37DE86827D921 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft Manifest number: 6E Signing time: Sun 12 Apr 2026 15:44:16 +0000 Manifest this update: Sun 12 Apr 2026 15:39:16 +0000 Manifest next update: Mon 13 Apr 2026 18:17:16 +0000 Files and hashes: 1: 3138322e38302e302e302f31362d3136203d3e203233373731.roa (hash: CF+z33Rj2YhsOOEndNKmnOpnjbWukgLJhVN5L0N0Tvc=) 2: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl (hash: AC+vlwtlzhdwQLib9soKalcz0dkIC3sFXKRMUEV/goU=) 3: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (hash: kUBqxH2ZZ4TmBOKzWUD0brYEgK2iHz2LdszFr0mSBx0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 18:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:bf:ae:62:cb:77:a2:dd:6d:b0:38:8d:b1:a3:7d:e8:68:27:d9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Apr 12 15:39:16 2026 GMT Not After : Apr 13 18:17:16 2026 GMT Subject: CN=4D41F1657294B9661CD05A5FE44F7D047341141E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:87:09:d8:e5:f7:39:0e:83:8a:17:2b:d1: 03:54:ed:30:f1:cd:3d:e9:f3:48:60:ef:62:80:b4: a0:b8:20:0a:a4:74:d2:28:a7:24:56:b6:b2:52:54: fa:4b:fd:69:46:d9:31:06:5e:c2:71:55:a9:8a:3c: 63:48:08:5a:c2:5c:26:2f:8e:2a:82:65:72:04:93: 3e:8f:e7:3e:2e:df:ea:23:9e:50:6f:41:e6:5d:e3: e5:b5:b9:9e:99:98:18:1b:0c:35:6e:86:5e:24:9f: 76:10:bb:8d:2e:2f:04:47:10:cc:fe:fd:8a:d6:d4: 58:97:08:42:7c:4f:d2:8f:09:ce:3e:42:a0:d8:12: f5:54:87:e7:9b:1b:de:f6:1a:b1:85:1e:08:5e:cb: c8:c1:a2:83:ea:0f:16:0e:1e:fa:61:31:9e:f4:0a: b6:94:50:af:26:fe:8c:74:c2:f2:ae:e7:90:82:52: a1:ab:34:dd:4a:8f:0b:a9:67:15:2a:b9:e8:36:3c: 3d:1a:58:8b:e6:63:58:f9:1b:82:fb:a7:26:4c:0d: 07:25:24:32:ff:99:2f:e2:fe:f2:fe:d8:1e:97:5b: 1a:1e:13:9d:fb:37:9d:21:8c:c2:85:8e:00:1e:db: 49:b1:eb:a6:ec:54:ae:9a:73:3f:2f:16:7a:7d:3c: c5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:F1:65:72:94:B9:66:1C:D0:5A:5F:E4:4F:7D:04:73:41:14:1E X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:00:87:74:a9:06:40:af:46:f3:a8:45:ce:66:a3:5c:5d:c6: 39:65:b6:3c:cf:b9:a8:41:89:ac:3e:38:0e:a6:51:58:3e:26: e7:4b:dc:26:89:b9:ad:29:cf:ef:33:ed:bc:03:a1:cc:6c:26: ad:ff:3f:50:da:e5:c4:19:3c:a0:f9:ff:6c:6c:84:b1:4f:1c: 11:00:e1:f8:99:3c:74:83:1f:8c:58:ce:9c:68:e6:b8:83:68: 2b:fd:e4:7c:49:53:73:85:e0:79:3f:d4:03:09:56:83:4f:b3: 83:5c:61:fd:b1:56:fa:16:cc:ae:0b:ee:db:36:3f:76:9d:f2: d1:fb:c1:da:09:41:f0:74:cf:59:b1:c6:dc:fa:c7:5d:ff:15: 45:08:90:08:d1:41:d0:18:1c:1f:37:95:cb:6d:18:83:be:32: fa:dd:ed:25:2c:a9:d5:cf:e7:86:a9:a0:92:b9:12:d0:05:73: 66:db:82:de:c9:58:aa:f6:91:99:96:76:08:b1:ec:b2:36:e3: 98:b8:31:4e:37:4b:2c:9d:76:33:ff:8f:95:41:88:8d:a4:cd: 35:88:79:ce:5a:b6:cb:75:d1:1e:1b:fe:bf:b9:c2:5c:c5:9d: e8:56:7a:66:68:9d:56:6f:74:e9:43:0b:d5:d2:cf:dd:dc:ed: 17:5f:2a:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKL+uYst3ot1tsDiNsaN96Ggn2SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjA0MTIxNTM5MTZaFw0yNjA0MTMxODE3MTZaMDMxMTAvBgNV BAMTKDRENDFGMTY1NzI5NEI5NjYxQ0QwNUE1RkU0NEY3RDA0NzM0MTE0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaTIcJ2OX3OQ6Dihcr0QNU7TDx zT3p80hg72KAtKC4IAqkdNIopyRWtrJSVPpL/WlG2TEGXsJxVamKPGNICFrCXCYv jiqCZXIEkz6P5z4u3+ojnlBvQeZd4+W1uZ6ZmBgbDDVuhl4kn3YQu40uLwRHEMz+ /YrW1FiXCEJ8T9KPCc4+QqDYEvVUh+ebG972GrGFHghey8jBooPqDxYOHvphMZ70 CraUUK8m/ox0wvKu55CCUqGrNN1KjwupZxUqueg2PD0aWIvmY1j5G4L7pyZMDQcl JDL/mS/i/vL+2B6XWxoeE537N50hjMKFjgAe20mx66bsVK6acz8vFnp9PMWvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTUHxZXKUuWYc0Fpf5E99BHNBFB4wHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMC9GQjdCNzk0RjEyMzcy NUZFODAwQTY0N0YzRjdFOEJFOTlCMUY1QjJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATACHdKkGQK9G 86hFzmajXF3GOWW2PM+5qEGJrD44DqZRWD4m50vcJom5rSnP7zPtvAOhzGwmrf8/ UNrlxBk8oPn/bGyEsU8cEQDh+Jk8dIMfjFjOnGjmuINoK/3kfElTc4XgeT/UAwlW g0+zg1xh/bFW+hbMrgvu2zY/dp3y0fvB2glB8HTPWbHG3PrHXf8VRQiQCNFB0Bgc HzeVy20Yg74y+t3tJSyp1c/nhqmgkrkS0AVzZtuC3slYqvaRmZZ2CLHssjbjmLgx TjdLLJ12M/+PlUGIjaTNNYh5zlq2y3XRHhv+v7nCXMWd6FZ6ZmidVm906UML1dLP 3dztF18qjA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:41 2026 by rpki-client