$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: dBN2Qtuzq578DtutH/nFAJ2IJjRxTEVD1fWS8ShqUXI= Subject key identifier: E7:E2:B5:17:4E:DE:44:AB:78:F7:65:81:F0:55:F3:A6:9A:CD:97:ED Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 0B4B8C277F8BDBD3B62A0AA3A4766259FA0D5070 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: 74 Signing time: Sun 12 Apr 2026 18:49:16 +0000 Manifest this update: Sun 12 Apr 2026 18:44:16 +0000 Manifest next update: Mon 13 Apr 2026 20:58:16 +0000 Files and hashes: 1: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) 2: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 3: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: QoQ67aXBEkMjGzS8s6d32z9g2e5eoO6+LrGgiMsPCv4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 20:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4b:8c:27:7f:8b:db:d3:b6:2a:0a:a3:a4:76:62:59:fa:0d:50:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Apr 12 18:44:16 2026 GMT Not After : Apr 13 20:58:16 2026 GMT Subject: CN=E7E2B5174EDE44AB78F76581F055F3A69ACD97ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:d1:45:50:df:ed:52:c7:96:b9:df:da:8b: ff:5a:2f:d4:f7:71:36:00:96:e0:2d:1f:ff:ee:d1: 4c:20:ee:48:24:d3:9c:7c:31:d1:26:b0:7d:39:6b: 3e:e3:a0:b3:3e:8b:1c:7e:23:f4:93:05:88:39:74: ef:38:9b:70:b8:59:60:0b:7b:63:9b:c1:dc:f1:53: 3c:75:9d:4f:9e:00:ba:1d:48:00:69:f3:54:d3:09: 2e:4f:b3:eb:cd:b3:af:7f:bd:bf:f7:22:6d:66:fb: b1:2a:b9:c9:53:64:99:02:25:f1:25:28:d5:42:7a: ba:aa:9a:11:a2:ba:bd:1f:ee:c3:84:0b:9a:e8:3f: 27:c7:c7:40:60:86:dc:d0:b3:b7:ec:37:d8:03:92: 73:be:ae:67:dc:fb:4f:db:77:75:8a:05:c1:97:87: 3a:ad:fe:ee:60:1e:12:50:35:3f:aa:dc:52:6e:5e: 88:cf:1c:84:3d:33:39:d4:22:9e:de:34:ca:79:25: 6b:f6:b4:b1:46:82:4f:e8:8b:4b:a8:41:a1:dd:b9: fc:d0:29:7e:b8:5a:48:4c:3f:00:e3:a6:a4:df:f1: 44:dc:9a:74:8b:7a:fd:2d:ad:47:00:dc:fd:9e:9c: cb:65:99:ea:8c:1d:69:c9:f9:67:e5:2d:c9:d7:e8: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E2:B5:17:4E:DE:44:AB:78:F7:65:81:F0:55:F3:A6:9A:CD:97:ED X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6a:0b:21:83:b6:7e:3a:5d:51:f9:28:c2:99:9b:e9:6c:b9: 60:1b:14:b9:5b:8c:06:64:1c:64:86:72:59:c7:6a:74:53:a7: fa:38:f5:e0:e6:82:e1:f6:5f:f1:03:ea:5e:c2:e8:63:9b:e1: 34:ee:3b:00:ba:f3:21:ee:4c:02:8c:f1:b5:b8:ec:b7:b4:37: 9b:12:09:bd:2a:f5:0a:aa:55:8a:cf:6e:5b:37:e4:ac:79:4a: e1:0c:d3:0c:34:ee:c2:7b:6b:0b:c8:2c:b5:ae:b2:fa:9d:eb: bc:f0:85:88:43:ae:6c:15:00:27:c3:10:99:6e:52:92:f5:f1: a8:bc:85:6c:73:c9:08:05:00:df:de:e3:e1:0c:e1:66:5f:3b: e1:9a:8e:a4:23:61:be:d9:84:18:2f:72:8e:dd:2c:6c:c1:13: 8b:fa:52:76:3d:e4:fa:a3:2e:2c:f9:ef:73:fd:c7:cd:4c:95: 94:47:34:cd:c8:53:d7:6e:bf:c7:25:a8:ce:53:a6:66:57:98: 4b:58:37:37:a9:38:6c:5e:58:19:5b:03:04:2a:78:ce:b2:14: 13:54:c1:4f:09:29:20:eb:7b:87:32:02:56:66:71:d8:a7:fc: d4:08:52:e9:6c:65:41:d2:04:f8:6a:64:d2:6d:9c:eb:cc:cf: de:ab:37:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC0uMJ3+L29O2KgqjpHZiWfoNUHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjA0MTIxODQ0MTZaFw0yNjA0MTMyMDU4MTZaMDMxMTAvBgNV BAMTKEU3RTJCNTE3NEVERTQ0QUI3OEY3NjU4MUYwNTVGM0E2OUFDRDk3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFNFFUN/tUseWud/ai/9aL9T3 cTYAluAtH//u0Uwg7kgk05x8MdEmsH05az7joLM+ixx+I/STBYg5dO84m3C4WWAL e2ObwdzxUzx1nU+eALodSABp81TTCS5Ps+vNs69/vb/3Im1m+7EquclTZJkCJfEl KNVCerqqmhGiur0f7sOEC5roPyfHx0BghtzQs7fsN9gDknO+rmfc+0/bd3WKBcGX hzqt/u5gHhJQNT+q3FJuXojPHIQ9MznUIp7eNMp5JWv2tLFGgk/oi0uoQaHdufzQ KX64WkhMPwDjpqTf8UTcmnSLev0trUcA3P2enMtlmeqMHWnJ+WflLcnX6DSVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5+K1F07eRKt492WB8FXzpprNl+0wHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimoLIYO2fjpd Ufkowpmb6Wy5YBsUuVuMBmQcZIZyWcdqdFOn+jj14OaC4fZf8QPqXsLoY5vhNO47 ALrzIe5MAozxtbjst7Q3mxIJvSr1CqpVis9uWzfkrHlK4QzTDDTuwntrC8gsta6y +p3rvPCFiEOubBUAJ8MQmW5SkvXxqLyFbHPJCAUA397j4QzhZl874ZqOpCNhvtmE GC9yjt0sbMETi/pSdj3k+qMuLPnvc/3HzUyVlEc0zchT126/xyWozlOmZleYS1g3 N6k4bF5YGVsDBCp4zrIUE1TBTwkpIOt7hzICVmZx2Kf81AhS6WxlQdIE+Gpk0m2c 68zP3qs3pg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:50 2026 by rpki-client