$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft (raw, json) Hash identifier: VD3f5UfniQIyGmP5bo4Js7cX3zw1y/MVJXJEa9Dm/1Q= Subject key identifier: 6C:40:D0:AA:D5:C3:F4:4A:5E:5D:99:70:0D:9D:A4:D0:1D:B2:27:4D Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 60AB52DF7B5B4AD10BD3E30DA902544A4D0DB01A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 22:29:17 +0000 Manifest this update: Sun 12 Apr 2026 22:24:17 +0000 Manifest next update: Tue 14 Apr 2026 02:19:17 +0000 Files and hashes: 1: 32372e302e3133332e302f32342d3234203d3e20313338393135.roa (hash: yjVaS9fU/BmpI0d1y40icFKgvmXLnvrVPGA9lnAYovg=) 2: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl (hash: Q1lfMBTaALa2dJcXTtilGFvcA4oPA+ghv75e3GxtDjw=) 3: 3130332e32372e342e302f32342d3234203d3e203538383534.roa (hash: qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ab:52:df:7b:5b:4a:d1:0b:d3:e3:0d:a9:02:54:4a:4d:0d:b0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: Apr 12 22:24:17 2026 GMT Not After : Apr 14 02:19:17 2026 GMT Subject: CN=6C40D0AAD5C3F44A5E5D99700D9DA4D01DB2274D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:95:61:6b:94:dc:91:00:fe:7b:4d:93:89: a2:78:54:a8:6c:33:66:90:f8:f0:0c:f0:f5:da:4d: 0e:7d:42:9f:69:bb:a0:09:10:3e:1e:38:96:9a:b7: 76:5b:54:e3:f3:29:38:4b:c1:99:64:eb:4a:8d:ef: a7:43:c7:5b:67:66:c2:4f:49:31:d4:5b:80:14:60: 59:21:f6:38:15:d6:d1:12:89:46:3f:1d:6c:0a:77: 38:94:dc:3b:17:26:13:f0:89:ce:9f:84:b8:1a:bd: 83:3d:3e:58:0a:91:c4:a4:ef:42:59:28:3b:00:36: 58:a3:0d:cb:b2:bd:c9:3d:9e:52:b3:c7:69:df:58: a3:60:65:c5:3c:96:10:c5:a8:85:19:39:0b:9b:37: 87:4f:cd:35:5c:d7:8f:46:1c:aa:1c:57:27:a2:6b: 4c:d2:fc:04:d7:33:82:c4:88:7b:4c:bc:40:21:1c: a3:ed:2e:6a:7f:32:da:d9:58:1e:f6:6b:77:8d:31: 64:a0:e3:43:9a:f1:f5:34:b7:d9:01:93:8a:0a:6e: 94:59:fd:18:dd:1a:27:17:de:f3:24:00:b1:95:d8: 81:2b:c7:76:6e:29:87:67:fc:b9:ef:1e:af:08:bb: f3:55:95:e8:35:d1:19:9a:66:d2:5d:a9:d1:dd:c7: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:D0:AA:D5:C3:F4:4A:5E:5D:99:70:0D:9D:A4:D0:1D:B2:27:4D X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:94:4b:6a:a1:50:62:e7:a5:c5:01:32:b1:ab:4e:a4:31:27: 3f:b8:9b:f0:47:44:6c:f0:6b:ff:0f:78:c8:c6:96:70:93:b4: 15:25:7a:87:09:be:ba:39:aa:b7:aa:fa:eb:84:c0:42:8e:b5: 71:8b:78:bb:76:d2:1c:3b:31:24:bc:10:c2:91:83:61:f3:dd: 28:ed:49:1f:1d:c2:58:9b:c3:e3:26:21:a3:9d:3a:b5:b7:ae: ea:75:42:fc:d4:91:8b:8e:25:7a:13:24:9f:86:63:cc:e0:b2: c2:05:c0:66:46:c5:bc:53:5c:00:45:88:60:7e:24:36:30:f6: 69:6c:cf:ab:97:95:ab:73:93:b1:28:80:06:5a:5e:0e:cb:1f: c1:97:f7:81:2d:d7:e1:fc:66:0a:de:40:f4:31:eb:07:48:1e: 19:ca:ff:c0:a4:c0:75:b2:8f:d9:a6:3d:5b:32:b0:6c:a7:cf: 58:0d:3f:14:0f:ef:ad:9d:1d:e8:ae:60:27:b5:82:f1:2f:4b: c5:8f:64:5f:48:4a:1c:e8:7e:4b:95:5e:68:cf:8b:39:8c:2b: 4b:3d:26:ff:93:07:e0:1e:eb:65:af:4b:80:2e:9b:3b:27:de: 30:2c:9d:75:8f:74:d6:0a:cc:ab:69:df:8e:92:71:78:d8:75: a8:ed:63:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYKtS33tbStEL0+MNqQJUSk0NsBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA0MTIyMjI0MTdaFw0yNjA0MTQwMjE5MTdaMDMxMTAvBgNV BAMTKDZDNDBEMEFBRDVDM0Y0NEE1RTVEOTk3MDBEOURBNEQwMURCMjI3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5pVha5TckQD+e02TiaJ4VKhs M2aQ+PAM8PXaTQ59Qp9pu6AJED4eOJaat3ZbVOPzKThLwZlk60qN76dDx1tnZsJP STHUW4AUYFkh9jgV1tESiUY/HWwKdziU3DsXJhPwic6fhLgavYM9PlgKkcSk70JZ KDsANlijDcuyvck9nlKzx2nfWKNgZcU8lhDFqIUZOQubN4dPzTVc149GHKocVyei a0zS/ATXM4LEiHtMvEAhHKPtLmp/MtrZWB72a3eNMWSg40Oa8fU0t9kBk4oKbpRZ /RjdGicX3vMkALGV2IErx3ZuKYdn/LnvHq8Iu/NVleg10RmaZtJdqdHdx6tHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbEDQqtXD9EpeXZlwDZ2k0B2yJ00wHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC9FQzlFMUM4NDBDODcw NUU3NTRDMkUzRkYzMkE0NEZCOUQ3ODEwMUQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5RLaqFQYuel xQEysatOpDEnP7ib8EdEbPBr/w94yMaWcJO0FSV6hwm+ujmqt6r664TAQo61cYt4 u3bSHDsxJLwQwpGDYfPdKO1JHx3CWJvD4yYho506tbeu6nVC/NSRi44lehMkn4Zj zOCywgXAZkbFvFNcAEWIYH4kNjD2aWzPq5eVq3OTsSiABlpeDssfwZf3gS3X4fxm Ct5A9DHrB0geGcr/wKTAdbKP2aY9WzKwbKfPWA0/FA/vrZ0d6K5gJ7WC8S9LxY9k X0hKHOh+S5VeaM+LOYwrSz0m/5MH4B7rZa9LgC6bOyfeMCyddY901grMq2nfjpJx eNh1qO1jFA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:45:48 2026 by rpki-client