$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json) Hash identifier: glSV+nBXECTeuMWzJ2k0+jL5ZuXdYo8nAFLWdTKD4ZE= Subject key identifier: BE:72:AC:EB:71:E3:1A:08:08:F9:96:FC:1F:70:21:FC:55:09:D0:84 Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Certificate serial: 13F3C656A0E09EFF9C6354E7F91F4B26B6E55165 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft Manifest number: 70 Signing time: Sun 12 Apr 2026 17:24:16 +0000 Manifest this update: Sun 12 Apr 2026 17:19:16 +0000 Manifest next update: Mon 13 Apr 2026 20:20:16 +0000 Files and hashes: 1: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=) 2: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=) 3: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=) 4: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=) 5: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: Zkf1wknD/MBdhuGiIQiXcWBKYx69erQ1X28aWuBFLAc=) 6: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=) 7: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 20:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f3:c6:56:a0:e0:9e:ff:9c:63:54:e7:f9:1f:4b:26:b6:e5:51:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Validity Not Before: Apr 12 17:19:16 2026 GMT Not After : Apr 13 20:20:16 2026 GMT Subject: CN=BE72ACEB71E31A0808F996FC1F7021FC5509D084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:85:df:cc:c1:68:de:44:de:7a:ba:5b:cb:49: 0c:21:04:bf:03:9f:79:c2:1a:af:08:23:46:38:d0: 5e:a3:4e:1b:20:54:e7:a6:f7:9c:11:46:ec:02:d6: 33:58:3b:c1:a2:7a:39:36:2c:8e:49:77:11:3a:11: 19:6b:d6:86:b9:08:4c:d0:54:81:1f:25:01:f5:b3: 52:43:32:ba:2f:13:37:9f:cc:d9:63:cc:76:3f:d1: 08:fd:fe:47:c8:02:cc:b7:6a:14:62:0e:23:a0:44: e4:b9:30:c4:2c:ed:2d:2d:e7:5f:31:59:86:e4:f2: 9d:46:b2:f3:15:55:87:7e:3b:de:13:56:59:d1:93: 7a:5d:63:a0:48:a5:31:13:97:9b:e1:23:b9:29:62: 68:4e:4d:fa:c8:d1:75:bc:0f:47:cf:83:ee:5d:72: e7:cb:41:a1:2e:90:22:de:27:a3:bb:07:1f:cb:9d: d0:fb:3a:12:55:4e:4e:e8:aa:52:c6:2d:4f:e0:ce: 4b:38:92:fb:74:43:ea:7c:7e:d8:94:f3:03:bc:cd: ea:c9:c7:45:9c:e0:0f:95:4f:57:9c:07:3c:28:2f: a0:40:b1:f5:af:9f:16:0e:c6:c6:41:97:86:2d:67: a2:fb:f2:f0:47:1b:36:86:f6:aa:c6:23:9c:d6:32: 0e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:AC:EB:71:E3:1A:08:08:F9:96:FC:1F:70:21:FC:55:09:D0:84 X509v3 Authority Key Identifier: keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:85:98:18:8d:a2:df:0a:89:3c:36:ad:ab:71:72:aa:18:ca: 8c:01:f4:9e:05:61:42:7b:b3:62:be:a8:7a:a8:b6:3a:6a:e6: 7e:81:24:81:61:4f:88:8a:10:ae:01:4a:04:ab:97:6a:ac:e7: d7:93:60:68:56:73:0b:51:34:82:4a:8e:6c:64:d2:3a:6e:87: cd:d0:81:88:06:a3:e2:98:eb:ac:75:ce:a0:3e:b2:4e:3a:e0: b2:f8:31:05:86:b4:c3:f8:41:c3:ae:ad:a2:c4:bf:6b:41:d2: 33:fa:44:49:c5:ea:7f:73:af:86:18:88:40:7e:81:a6:b0:82: 78:2e:e2:6d:0f:d3:70:50:0e:94:3d:eb:4c:c6:90:ce:1d:ec: 1c:a5:84:1e:e5:af:88:31:c5:c6:37:92:dc:30:f7:cb:9a:fd: 0c:ee:dc:e2:2b:04:74:1c:f1:68:c4:ad:e4:f6:b9:c5:03:fc: 0d:2b:84:7f:ff:1b:68:95:27:27:33:07:2a:d7:40:96:93:8d: c0:14:ea:76:59:ae:1a:c9:b0:57:25:93:40:3c:f0:06:81:1c: cd:51:9b:e4:83:21:66:64:f4:4c:ca:b1:ec:31:a5:a8:fd:89: 84:02:52:2e:8e:ff:93:4c:49:b6:73:4c:67:2b:fb:b7:78:ec: ab:28:55:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE/PGVqDgnv+cY1Tn+R9LJrblUWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw N0YxRDhCMDAeFw0yNjA0MTIxNzE5MTZaFw0yNjA0MTMyMDIwMTZaMDMxMTAvBgNV BAMTKEJFNzJBQ0VCNzFFMzFBMDgwOEY5OTZGQzFGNzAyMUZDNTUwOUQwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrhd/MwWjeRN56ulvLSQwhBL8D n3nCGq8II0Y40F6jThsgVOem95wRRuwC1jNYO8Giejk2LI5JdxE6ERlr1oa5CEzQ VIEfJQH1s1JDMrovEzefzNljzHY/0Qj9/kfIAsy3ahRiDiOgROS5MMQs7S0t518x WYbk8p1GsvMVVYd+O94TVlnRk3pdY6BIpTETl5vhI7kpYmhOTfrI0XW8D0fPg+5d cufLQaEukCLeJ6O7Bx/LndD7OhJVTk7oqlLGLU/gzks4kvt0Q+p8ftiU8wO8zerJ x0Wc4A+VT1ecBzwoL6BAsfWvnxYOxsZBl4YtZ6L78vBHGzaG9qrGI5zWMg4tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvnKs63HjGggI+Zb8H3Ah/FUJ0IQwHwYDVR0j BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0 Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4WYGI2i3wqJ PDatq3FyqhjKjAH0ngVhQnuzYr6oeqi2OmrmfoEkgWFPiIoQrgFKBKuXaqzn15Ng aFZzC1E0gkqObGTSOm6HzdCBiAaj4pjrrHXOoD6yTjrgsvgxBYa0w/hBw66tosS/ a0HSM/pEScXqf3OvhhiIQH6BprCCeC7ibQ/TcFAOlD3rTMaQzh3sHKWEHuWviDHF xjeS3DD3y5r9DO7c4isEdBzxaMSt5Pa5xQP8DSuEf/8baJUnJzMHKtdAlpONwBTq dlmuGsmwVyWTQDzwBoEczVGb5IMhZmT0TMqx7DGlqP2JhAJSLo7/k0xJtnNMZyv7 t3jsqyhVqw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:43 2026 by rpki-client