$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft File: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft (raw, json) Hash identifier: b9cC3okytTnooeslJSbwFfxTYgcUlUa3dA8ZIqxjfnQ= Subject key identifier: DC:63:52:0E:7F:D0:FB:60:07:EF:B6:7E:57:28:94:AB:F4:6D:AF:B5 Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Certificate serial: 5ACAEE6F5FA7CE8D669FF2599A45D17F311656F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft Manifest number: 85 Signing time: Mon 27 Apr 2026 13:08:47 +0000 Manifest this update: Mon 27 Apr 2026 13:03:47 +0000 Manifest next update: Tue 28 Apr 2026 13:17:47 +0000 Files and hashes: 1: 34332e3235352e3231322e302f32322d3232203d3e20313334373634.roa (hash: nvpX3+tQBlD7o4JRzeJzJ8SBqs6nbVPAwRAZ8Hg23Rs=) 2: 34332e3235352e3231322e302f32322d3232203d3e203536303430.roa (hash: VLiXiRL9m9UaxtL5IIpzNqXZ0El1YmwJlVWUpR3X+4M=) 3: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl (hash: DBF9e9Yy3KT67yPy+OT7XBz9Iepu106GcQNWOc9us6c=) 4: 3130332e3231302e3136302e302f32322d3232203d3e203633313939.roa (hash: B/mJbtPu0UVWmsBqfhu4FLdB1gzXkN1btMchb8wEDGA=) 5: 34332e3235352e3231322e302f32322d3232203d3e20313336393538.roa (hash: mP/WzKqlnEhqwDkLhudrruXO2O7e8o0TzyuISBE0WWA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ca:ee:6f:5f:a7:ce:8d:66:9f:f2:59:9a:45:d1:7f:31:16:56:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Validity Not Before: Apr 27 13:03:47 2026 GMT Not After : Apr 28 13:17:47 2026 GMT Subject: CN=DC63520E7FD0FB6007EFB67E572894ABF46DAFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b7:b1:75:d9:44:00:08:28:91:b4:79:4b:ab: a3:e4:49:79:7f:9f:4e:e8:b4:53:98:08:00:12:83: 0a:2a:1e:f6:0e:50:9f:f0:67:5e:29:8f:7f:93:e4: a2:9f:15:b0:e7:7c:92:a7:69:c9:88:ac:44:50:1e: e5:38:3f:5c:a0:84:f1:f9:f7:4d:6a:dd:92:81:e3: 69:9c:be:fe:85:89:ee:a5:5f:16:32:34:ef:6c:8f: bd:b1:f5:d8:d6:58:1c:59:a5:e4:b9:ef:71:9b:a8: 87:18:bc:1b:ba:90:b6:be:95:c2:22:93:67:24:a0: 42:78:96:0c:e5:ca:cc:57:b8:41:8f:f0:57:eb:29: 7e:79:8e:a1:c3:f6:fb:02:3b:50:2b:c0:86:56:65: 5d:c9:fe:0b:b7:00:26:96:59:26:71:b5:25:01:8f: f0:14:17:df:5b:2f:8d:a0:64:04:06:55:7c:c7:84: 6a:81:2e:a2:f2:03:4e:44:78:59:90:00:f8:a1:6c: 2e:32:88:6a:bd:3b:80:33:de:2e:69:df:bb:41:e5: 4d:f4:cd:84:3e:fe:15:d1:2d:e8:ed:27:d2:66:a9: 6c:ed:ea:8d:bb:98:56:85:8f:95:35:c4:58:25:80: bc:f9:00:66:69:cf:f2:94:e2:9b:e4:6a:d9:6a:c0: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:63:52:0E:7F:D0:FB:60:07:EF:B6:7E:57:28:94:AB:F4:6D:AF:B5 X509v3 Authority Key Identifier: keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:13:25:8f:7c:78:c1:0e:b4:92:80:48:8f:12:6f:1a:93:b3: cf:a8:3c:73:6d:bf:5f:f8:f1:3b:db:da:4d:36:e5:f4:1b:13: 2f:f0:4d:19:d5:8f:1f:83:ae:fa:c8:8d:11:c9:f6:4d:be:9c: 63:30:46:17:fc:23:84:bb:78:4f:d3:28:1c:4b:d9:d4:06:09: 96:30:09:99:05:c5:77:b8:17:0d:95:9c:71:f3:36:62:fa:15: 57:67:2c:cd:65:a4:ea:f2:c7:17:f0:59:cc:33:fa:35:77:5c: 9f:eb:d2:db:00:be:29:1d:d0:ac:bf:df:53:be:44:3c:ff:07: 2c:d4:eb:57:1a:9d:38:d0:cd:60:eb:2b:11:65:87:93:7d:12: 5d:43:f5:9c:87:87:b6:9a:29:59:c2:e1:09:1c:33:d1:c9:c5: be:39:0e:d7:97:0b:e0:5d:3c:34:64:d5:3f:63:b4:ab:a4:d0: 92:25:8c:69:20:e8:27:ff:75:55:09:dd:dd:db:0b:f1:c8:78: 25:45:3c:b4:b9:2f:96:00:e1:54:aa:88:ea:15:bd:0d:2d:d1: a8:9c:d7:0e:33:4e:40:1d:2a:fc:c9:20:9f:8b:32:d5:b4:89: e9:eb:cf:a6:7c:e4:ac:21:56:c1:05:81:22:ba:76:53:96:7c: 57:1f:07:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWsrub1+nzo1mn/JZmkXRfzEWVvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw NEZENjlERDAeFw0yNjA0MjcxMzAzNDdaFw0yNjA0MjgxMzE3NDdaMDMxMTAvBgNV BAMTKERDNjM1MjBFN0ZEMEZCNjAwN0VGQjY3RTU3Mjg5NEFCRjQ2REFGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmt7F12UQACCiRtHlLq6PkSXl/ n07otFOYCAASgwoqHvYOUJ/wZ14pj3+T5KKfFbDnfJKnacmIrERQHuU4P1yghPH5 901q3ZKB42mcvv6Fie6lXxYyNO9sj72x9djWWBxZpeS573GbqIcYvBu6kLa+lcIi k2ckoEJ4lgzlysxXuEGP8FfrKX55jqHD9vsCO1ArwIZWZV3J/gu3ACaWWSZxtSUB j/AUF99bL42gZAQGVXzHhGqBLqLyA05EeFmQAPihbC4yiGq9O4Az3i5p37tB5U30 zYQ+/hXRLejtJ9JmqWzt6o27mFaFj5U1xFglgLz5AGZpz/KU4pvkatlqwPu7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3GNSDn/Q+2AH77Z+VyiUq/Rtr7UwHwYDVR0j BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMC81MDQ3MDgzQjQ2MzdB M0YwMkRGOURFRUJBNjdCRUREQzA0RkQ2OURELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChMlj3x4wQ60 koBIjxJvGpOzz6g8c22/X/jxO9vaTTbl9BsTL/BNGdWPH4Ou+siNEcn2Tb6cYzBG F/wjhLt4T9MoHEvZ1AYJljAJmQXFd7gXDZWccfM2YvoVV2cszWWk6vLHF/BZzDP6 NXdcn+vS2wC+KR3QrL/fU75EPP8HLNTrVxqdONDNYOsrEWWHk30SXUP1nIeHtpop WcLhCRwz0cnFvjkO15cL4F08NGTVP2O0q6TQkiWMaSDoJ/91VQnd3dsL8ch4JUU8 tLkvlgDhVKqI6hW9DS3RqJzXDjNOQB0q/Mkgn4sy1bSJ6evPpnzkrCFWwQWBIrp2 U5Z8Vx8Hzg== -----END CERTIFICATE-----Generated at Mon Apr 27 15:11:29 2026 by rpki-client