$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: ncFy6nHeBbnVyCW9iRC3rxE6jIa2gQc62J9qu1hBiPc= Subject key identifier: 65:CE:E0:D4:9B:AC:65:58:1C:FC:12:BC:BC:DC:2C:D4:BA:A4:0C:86 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 565AD57E400F807DA33FD0A985DEB6CC8AA54965 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 6F Signing time: Sun 12 Apr 2026 16:14:16 +0000 Manifest this update: Sun 12 Apr 2026 16:09:16 +0000 Manifest next update: Mon 13 Apr 2026 17:02:16 +0000 Files and hashes: 1: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) 2: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: VBLSHEUaaZEatQH47yVlyq5bHJsAjpMKQNL2lJ47GSo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 17:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5a:d5:7e:40:0f:80:7d:a3:3f:d0:a9:85:de:b6:cc:8a:a5:49:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Apr 12 16:09:16 2026 GMT Not After : Apr 13 17:02:16 2026 GMT Subject: CN=65CEE0D49BAC65581CFC12BCBCDC2CD4BAA40C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:a7:32:c1:90:53:55:b7:90:e1:e0:0f:ee: a3:ba:b7:7f:b7:56:bf:f0:a0:7d:2b:46:03:94:6a: ff:ef:8f:81:5e:eb:ed:4b:d7:7d:a6:a4:88:48:24: c7:94:6b:72:1d:70:2d:ba:79:c6:ee:38:a9:e5:2a: f5:61:55:fb:42:44:96:c2:71:c0:25:fe:e8:0b:75: 13:f9:57:b0:0d:5f:af:60:6c:a4:32:af:85:4d:43: cb:c0:09:ca:4b:d1:b2:bb:c8:af:ea:77:a7:62:bf: 3e:99:e8:8f:f9:be:ef:3b:f0:a1:b5:f3:45:be:88: 2e:b4:f8:2c:80:dd:b4:f2:2b:2d:aa:e5:f5:90:df: 5c:34:a9:38:62:d4:81:c8:a8:84:50:5c:49:41:9d: ea:e5:a0:46:b5:70:38:c2:ab:14:f5:42:ac:cb:b2: f2:40:4b:a0:56:40:af:dc:31:0d:06:09:33:5d:f6: e9:99:6b:b3:e3:3a:07:bc:87:cf:2a:ed:e4:79:f1: 48:91:01:6b:4f:d3:53:2c:ba:6a:a2:ad:29:79:7d: bf:ce:03:b8:e1:d8:a2:f1:46:f4:de:a6:8d:de:27: db:3f:34:34:0c:f6:2c:54:41:55:a6:23:51:bb:e2: d0:79:c7:eb:90:72:f4:86:b9:56:68:e6:ae:0d:58: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CE:E0:D4:9B:AC:65:58:1C:FC:12:BC:BC:DC:2C:D4:BA:A4:0C:86 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5c:b2:c4:d1:93:6c:97:33:43:f8:1a:b8:f0:c5:49:32:f2: cb:95:f0:3a:c6:34:f2:3f:9a:29:b9:e3:6f:a7:41:8d:6b:ea: ae:36:eb:15:7f:bf:1b:c9:15:8c:c1:62:63:f9:43:44:e5:34: e5:e0:07:a0:12:5e:89:6a:e2:f2:81:7c:06:4e:0e:35:b7:7e: f8:8e:3e:a5:b2:3f:ce:c6:7d:e6:68:26:ff:d6:05:db:53:65: 6f:9a:60:0b:d8:74:da:ab:fe:cf:b5:3d:64:a2:03:34:d1:21: d3:6b:5d:22:8d:2c:ff:58:d6:e7:5b:41:15:a0:b1:20:bb:d5: 11:a5:95:51:c3:a0:4b:c9:df:a2:61:8c:37:f2:ee:c5:06:c7: df:75:77:c6:fe:8b:7f:8a:d2:49:4d:53:61:e6:2e:d4:6f:58: 90:da:86:5e:e1:bd:85:8f:73:4e:a3:5b:2a:d8:a2:1e:05:c5: 4d:92:ac:5a:70:82:e1:e5:d7:53:b5:9d:46:25:06:35:a8:67: a0:2f:8d:b6:f2:e4:91:35:34:c5:fb:af:f1:93:43:35:b1:e2: 41:2d:13:57:ca:53:d8:f2:87:b5:1a:3a:b8:91:90:50:9f:a1: 4f:b5:c7:66:d2:53:75:76:af:89:85:99:2b:9c:5b:ab:21:d1: 04:83:4a:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVlrVfkAPgH2jP9Cphd62zIqlSWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjA0MTIxNjA5MTZaFw0yNjA0MTMxNzAyMTZaMDMxMTAvBgNV BAMTKDY1Q0VFMEQ0OUJBQzY1NTgxQ0ZDMTJCQ0JDREMyQ0Q0QkFBNDBDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgKcywZBTVbeQ4eAP7qO6t3+3 Vr/woH0rRgOUav/vj4Fe6+1L132mpIhIJMeUa3IdcC26ecbuOKnlKvVhVftCRJbC ccAl/ugLdRP5V7ANX69gbKQyr4VNQ8vACcpL0bK7yK/qd6divz6Z6I/5vu878KG1 80W+iC60+CyA3bTyKy2q5fWQ31w0qThi1IHIqIRQXElBnerloEa1cDjCqxT1QqzL svJAS6BWQK/cMQ0GCTNd9umZa7PjOge8h88q7eR58UiRAWtP01MsumqirSl5fb/O A7jh2KLxRvTepo3eJ9s/NDQM9ixUQVWmI1G74tB5x+uQcvSGuVZo5q4NWMVfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZc7g1JusZVgc/BK8vNws1LqkDIYwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplyyxNGTbJcz Q/gauPDFSTLyy5XwOsY08j+aKbnjb6dBjWvqrjbrFX+/G8kVjMFiY/lDROU05eAH oBJeiWri8oF8Bk4ONbd++I4+pbI/zsZ95mgm/9YF21Nlb5pgC9h02qv+z7U9ZKID NNEh02tdIo0s/1jW51tBFaCxILvVEaWVUcOgS8nfomGMN/LuxQbH33V3xv6Lf4rS SU1TYeYu1G9YkNqGXuG9hY9zTqNbKtiiHgXFTZKsWnCC4eXXU7WdRiUGNahnoC+N tvLkkTU0xfuv8ZNDNbHiQS0TV8pT2PKHtRo6uJGQUJ+hT7XHZtJTdXaviYWZK5xb qyHRBINKbg== -----END CERTIFICATE-----Generated at Mon Apr 13 08:08:26 2026 by rpki-client