$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft File: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json) Hash identifier: I46LkNTHJVRAQHh2+5hJA+m0qz6IdkxTv0/UPd7rg/M= Subject key identifier: B3:2C:55:E1:82:86:47:B2:77:0C:A5:52:6A:CF:2F:AB:02:9C:9E:A2 Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 3ED1A727F7ABCF5D9401BE517EED4C8BB7AB25EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft Manifest number: 70 Signing time: Sun 12 Apr 2026 16:09:16 +0000 Manifest this update: Sun 12 Apr 2026 16:04:16 +0000 Manifest next update: Mon 13 Apr 2026 20:08:16 +0000 Files and hashes: 1: 3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa (hash: PGdlBkvIO8J6pjhNUuYTr3nEOg0TKMZhDugFcUldVRM=) 2: 3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa (hash: 0TeDafE41i2d4QLC5hOPZb7MUJrvUFIXOE/K9ScN3/I=) 3: 3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa (hash: 0lrHVMK2Zz6L13Vbn9041R65XWn4Q9Io4S10ZHxxpeE=) 4: 3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa (hash: LJLHnynahTuEBARxNRPN8UwyfsQaRWudvGF9ghrX2DQ=) 5: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: ovdsmY3qYm8Ik4Rm7hNc24HQ1j4fkE/UIPirfGwNqd8=) 6: 3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa (hash: y6H54bzWpbbgzpsGKzSFZwssxd2MOGR7qkMWJLAw/ls=) 7: 3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa (hash: XtA9p9+3iEqJl9oNL4XSEWEUSb6vE+lI29hPVM6jgl8=) 8: 3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa (hash: HDVqXdA4D8OhtaouQqSuZCb+F1lHRss6pFhHi0qkluk=) 9: 3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa (hash: c/V9C/LDSLsX3ipXcneziAHRUZXaaPLA6P0kk/Q1q+w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 20:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d1:a7:27:f7:ab:cf:5d:94:01:be:51:7e:ed:4c:8b:b7:ab:25:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Apr 12 16:04:16 2026 GMT Not After : Apr 13 20:08:16 2026 GMT Subject: CN=B32C55E1828647B2770CA5526ACF2FAB029C9EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:f2:d9:1a:c9:16:d2:fb:8a:2f:87:23:f8: 79:4b:ad:3e:d6:34:3b:32:14:76:47:04:1e:b8:ab: 23:36:79:c4:e5:97:03:55:7b:9a:ba:55:08:0c:1c: 99:7a:a1:69:d2:d6:f7:9c:2f:d0:f6:e6:da:83:71: 78:b8:9c:da:ca:f5:fa:7d:3c:c5:6f:f7:ab:c2:7e: 07:cb:39:07:2b:af:d4:5b:56:60:5c:bd:73:63:11: a3:af:f1:4b:db:a6:85:62:c3:9e:9a:15:0d:e2:a7: d4:23:68:5a:a7:42:52:23:b5:f4:b6:7b:40:d1:ae: e0:5a:8a:04:79:78:90:71:32:2f:14:fd:64:74:8f: 60:55:c6:b4:f9:b7:c4:af:c8:ba:ac:40:30:05:0a: 9b:6e:0f:59:d7:e3:3b:12:70:ea:46:33:56:9c:a4: c0:0a:af:94:97:9c:fb:f4:37:17:8e:b7:17:5d:c1: f8:b8:66:d4:3f:81:56:54:02:d5:af:79:eb:4f:00: 2f:61:a2:4d:2a:fe:36:b3:f0:14:69:24:72:0c:8f: 31:a3:d1:e1:89:35:a0:f7:cd:fc:16:4f:0a:fa:61: 7e:a2:c5:91:3a:d2:16:16:ee:81:94:42:11:a3:27: 58:e7:6e:5a:88:39:be:10:33:62:2a:d9:94:21:a9: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2C:55:E1:82:86:47:B2:77:0C:A5:52:6A:CF:2F:AB:02:9C:9E:A2 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4f:a3:32:cd:10:1a:f1:93:e5:88:08:1e:c0:98:41:da:e8: 07:6a:6a:24:12:ca:df:3e:61:83:91:94:78:fb:1c:56:13:3b: b8:c8:19:fe:31:e2:6c:04:56:0e:c7:35:86:0b:a5:b4:81:1f: 5e:28:d5:2f:20:10:12:72:fb:d2:23:70:70:a0:db:ab:d6:96: 4a:ad:08:b4:39:46:70:30:29:6c:9e:13:87:28:cc:2d:6c:d1: 80:e0:37:f7:76:14:52:5e:ca:0a:5e:84:66:f5:f0:0c:29:31: e8:e9:33:47:b6:b3:fb:24:f6:83:14:45:45:2c:a9:4d:49:bf: 89:cc:26:07:c3:9b:f0:ea:be:60:83:8a:49:e5:48:34:3a:36: ee:ea:06:c3:d1:16:26:e0:24:93:69:fc:2b:fb:14:d9:c6:8e: 32:d9:52:e8:a6:a4:df:f4:3a:88:3f:9f:ec:43:8a:4b:07:20: af:6b:1d:ea:e0:9f:f2:db:7b:3d:12:29:bc:cc:0b:18:d5:17: 71:70:5c:2c:ac:20:53:96:3b:ae:9c:0c:c2:b2:29:60:e4:04: da:7d:9e:8f:8c:93:5f:91:86:62:52:2b:47:0a:0e:f3:80:0c: cd:e6:14:5a:8d:08:87:b4:1f:71:34:54:9a:5b:d9:13:40:bb: 77:c0:f4:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPtGnJ/erz12UAb5Rfu1Mi7erJeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjA0MTIxNjA0MTZaFw0yNjA0MTMyMDA4MTZaMDMxMTAvBgNV BAMTKEIzMkM1NUUxODI4NjQ3QjI3NzBDQTU1MjZBQ0YyRkFCMDI5QzlFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ifLZGskW0vuKL4cj+HlLrT7W NDsyFHZHBB64qyM2ecTllwNVe5q6VQgMHJl6oWnS1vecL9D25tqDcXi4nNrK9fp9 PMVv96vCfgfLOQcrr9RbVmBcvXNjEaOv8UvbpoViw56aFQ3ip9QjaFqnQlIjtfS2 e0DRruBaigR5eJBxMi8U/WR0j2BVxrT5t8SvyLqsQDAFCptuD1nX4zsScOpGM1ac pMAKr5SXnPv0NxeOtxddwfi4ZtQ/gVZUAtWveetPAC9hok0q/jaz8BRpJHIMjzGj 0eGJNaD3zfwWTwr6YX6ixZE60hYW7oGUQhGjJ1jnblqIOb4QM2Iq2ZQhqVWbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsyxV4YKGR7J3DKVSas8vqwKcnqIwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8yMzM5OTIxMzYzRjcw MDNDM0RFQjQ3RUQ4NTM0QUZFMUY0ODJEOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0+jMs0QGvGT 5YgIHsCYQdroB2pqJBLK3z5hg5GUePscVhM7uMgZ/jHibARWDsc1hgultIEfXijV LyAQEnL70iNwcKDbq9aWSq0ItDlGcDApbJ4ThyjMLWzRgOA393YUUl7KCl6EZvXw DCkx6OkzR7az+yT2gxRFRSypTUm/icwmB8Ob8Oq+YIOKSeVINDo27uoGw9EWJuAk k2n8K/sU2caOMtlS6Kak3/Q6iD+f7EOKSwcgr2sd6uCf8tt7PRIpvMwLGNUXcXBc LKwgU5Y7rpwMwrIpYOQE2n2ej4yTX5GGYlIrRwoO84AMzeYUWo0Ih7QfcTRUmlvZ E0C7d8D0fw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:41 2026 by rpki-client