$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft (raw, json) Hash identifier: Gcz5igBgwdXH1erwrnzOgrzMQBjM4OhNmkYQyWLSD+0= Subject key identifier: 1F:75:29:D3:DA:18:D9:C0:33:59:BE:A9:94:CD:64:3C:EC:81:47:02 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 1F1A76C5DEE580D662E9E5EADA81964DB77AD193 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 01:24:17 +0000 Manifest this update: Mon 13 Apr 2026 01:19:17 +0000 Manifest next update: Tue 14 Apr 2026 04:54:17 +0000 Files and hashes: 1: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (hash: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c=) 2: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl (hash: i9KMli6YS4EWUmoDoB4rjYXxffvWehlxl4dY1JK20Oo=) 3: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (hash: B9+LIF0F2jOmyBOP5MaMAIvmuw1Q1Po92LV0UMNnbWk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1a:76:c5:de:e5:80:d6:62:e9:e5:ea:da:81:96:4d:b7:7a:d1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Apr 13 01:19:17 2026 GMT Not After : Apr 14 04:54:17 2026 GMT Subject: CN=1F7529D3DA18D9C03359BEA994CD643CEC814702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:4b:48:94:e2:2c:1b:27:3d:20:df:46:ff: f7:43:88:a6:02:66:05:46:c0:20:4c:5e:fe:f6:a9: 5a:2e:8d:f0:6c:c6:12:ab:25:12:d2:bd:d6:fe:5e: 1d:fc:5c:85:59:ff:4e:e0:02:e1:99:c4:b2:08:f5: c8:9a:cf:ae:29:ae:11:7d:aa:72:30:53:45:7c:83: 1f:31:4b:c0:b9:9e:e1:2a:dd:9f:99:2e:0f:a6:48: 36:91:d8:04:21:7a:76:7b:64:3e:6e:70:cc:46:61: c5:72:b5:61:42:82:3e:33:11:c9:a7:88:7b:b5:52: 46:1d:0b:b2:f2:8f:21:9e:11:a7:06:5b:91:cd:39: 34:d0:ea:8f:3e:66:c4:26:84:0c:ad:1d:c4:50:9f: 29:44:2c:82:f5:63:69:9e:1a:6d:06:39:b0:5c:95: 04:bc:9a:9f:a7:da:43:8b:f6:88:ad:80:44:55:53: 6a:80:29:0d:67:dd:16:19:7a:b5:ca:2e:da:a3:cb: b1:7f:46:3a:d1:93:a0:db:78:cc:15:c0:84:94:5d: be:94:f4:93:54:bb:24:b1:99:ca:ea:1f:3e:8a:9a: d5:39:a7:6d:01:00:98:51:1a:e0:68:0f:1e:e8:a3: 19:70:a1:8b:44:8c:d0:bd:e9:78:73:07:be:ca:e9: 3b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:75:29:D3:DA:18:D9:C0:33:59:BE:A9:94:CD:64:3C:EC:81:47:02 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:20:d2:70:6b:4b:ca:55:46:61:8f:90:8b:66:0b:95:32:41: f8:0c:79:f9:56:cc:a6:47:4a:d3:34:a5:e8:c2:f5:0e:a0:17: 20:c4:f2:e7:ef:35:81:d4:65:7c:ff:6c:d3:0e:8f:48:a7:e3: 8b:d3:39:9e:9a:6b:90:bc:1e:96:2a:55:e0:d6:19:97:5c:21: ec:cf:41:31:a5:e0:0a:f9:04:4f:18:99:77:3d:3d:fe:62:6a: f7:e1:3e:22:e8:81:f1:75:a9:c9:54:59:37:7a:13:07:11:92: 75:01:8a:7a:72:bc:37:01:f2:eb:95:e5:19:06:19:3d:6b:18: 4c:6b:07:87:26:12:28:87:22:b0:33:ad:82:02:6e:fd:74:38: 81:78:3c:c2:0e:7d:c0:da:bd:ae:0a:e4:86:09:92:7d:7e:88: c6:4c:d7:ca:73:4e:e6:ca:6b:de:f6:0e:80:b2:47:18:33:3a: cf:cd:d5:cf:a5:fc:9f:3b:ab:c1:67:91:2f:2e:00:ee:0a:f9: 82:67:4c:b3:71:06:e6:f5:6b:40:de:f8:d6:60:16:b0:dc:84: 97:0c:ec:1d:0c:2c:83:e0:5c:f4:05:f9:e3:13:94:b4:8c:47: ab:a4:74:3c:35:fa:73:dd:da:47:86:59:f8:c6:57:64:37:eb: cf:97:bd:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHxp2xd7lgNZi6eXq2oGWTbd60ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA0MTMwMTE5MTdaFw0yNjA0MTQwNDU0MTdaMDMxMTAvBgNV BAMTKDFGNzUyOUQzREExOEQ5QzAzMzU5QkVBOTk0Q0Q2NDNDRUM4MTQ3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFktIlOIsGyc9IN9G//dDiKYC ZgVGwCBMXv72qVoujfBsxhKrJRLSvdb+Xh38XIVZ/07gAuGZxLII9ciaz64prhF9 qnIwU0V8gx8xS8C5nuEq3Z+ZLg+mSDaR2AQhenZ7ZD5ucMxGYcVytWFCgj4zEcmn iHu1UkYdC7LyjyGeEacGW5HNOTTQ6o8+ZsQmhAytHcRQnylELIL1Y2meGm0GObBc lQS8mp+n2kOL9oitgERVU2qAKQ1n3RYZerXKLtqjy7F/RjrRk6DbeMwVwISUXb6U 9JNUuySxmcrqHz6KmtU5p20BAJhRGuBoDx7ooxlwoYtEjNC96XhzB77K6TvDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH3Up09oY2cAzWb6plM1kPOyBRwIwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC81REY4MDg2RDNFRkEx NzY0ODdBMUMzNzZCN0JDQ0YzRTgzQUIyMzM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCDScGtLylVG YY+Qi2YLlTJB+Ax5+VbMpkdK0zSl6ML1DqAXIMTy5+81gdRlfP9s0w6PSKfji9M5 npprkLwelipV4NYZl1wh7M9BMaXgCvkETxiZdz09/mJq9+E+IuiB8XWpyVRZN3oT BxGSdQGKenK8NwHy65XlGQYZPWsYTGsHhyYSKIcisDOtggJu/XQ4gXg8wg59wNq9 rgrkhgmSfX6IxkzXynNO5spr3vYOgLJHGDM6z83Vz6X8nzurwWeRLy4A7gr5gmdM s3EG5vVrQN741mAWsNyElwzsHQwsg+Bc9AX54xOUtIxHq6R0PDX6c93aR4ZZ+MZX ZDfrz5e9dw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:39 2026 by rpki-client