$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json) Hash identifier: 1wa4sokzVaDbCSGl/bZ9CknBqyciHFYi6TpUQ8iZeP4= Subject key identifier: F3:86:26:CB:85:2A:A4:46:41:E6:2B:BC:B7:90:B7:51:FD:27:77:9B Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Certificate serial: 280074B99FDFC3F5AD6ACA2B19AA695449158E0C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 20:34:17 +0000 Manifest this update: Sun 12 Apr 2026 20:29:17 +0000 Manifest next update: Mon 13 Apr 2026 21:59:17 +0000 Files and hashes: 1: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=) 2: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=) 3: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: S3dvlzLQKdBgj8zMXqTxKibUxj/dNkB0xky62YMgOGg=) 4: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 21:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:00:74:b9:9f:df:c3:f5:ad:6a:ca:2b:19:aa:69:54:49:15:8e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Validity Not Before: Apr 12 20:29:17 2026 GMT Not After : Apr 13 21:59:17 2026 GMT Subject: CN=F38626CB852AA44641E62BBCB790B751FD27779B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:5e:e5:dd:2a:c9:e7:a6:a1:22:88:a1:78: 82:38:87:1b:7b:19:aa:2d:cf:30:7b:70:15:7e:3b: dd:b8:ac:48:0d:99:f5:63:78:95:ca:c6:cd:26:79: 8e:e6:ff:57:df:4a:a2:b3:0d:bd:f8:25:42:82:a2: 4c:01:6b:a3:5e:8e:17:ee:c7:d9:26:6b:c9:c3:f6: 9b:36:6c:dc:a7:c8:b2:1f:10:62:52:a1:fc:2d:aa: 69:df:58:4b:78:e1:f3:ab:8e:33:79:f1:e8:ab:ae: fc:6a:16:06:0b:0f:0b:1a:0c:c8:73:bc:03:17:1e: a4:4c:80:fa:d1:54:74:03:9f:8e:e3:25:35:42:6b: da:5a:37:a0:c1:83:85:d9:dc:73:19:42:57:c7:d6: 1d:2f:3b:1b:45:b9:07:c8:9f:cb:df:d4:42:a8:6a: b2:7e:fa:25:d3:f0:cd:4a:ca:40:1d:a0:a6:8e:d9: cc:71:51:15:6a:0c:58:a5:14:c6:b3:1c:89:68:b9: e8:09:6c:1e:7d:75:70:2d:31:c7:6e:30:a5:1c:e8: 4a:06:ca:d2:87:46:38:09:31:58:b0:f0:4d:b4:41: 6d:1e:91:c5:0b:12:5a:1c:1c:23:26:f5:26:9a:b4: 7c:99:2d:73:da:0f:ee:f2:d6:cb:bc:9e:a8:ae:61: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:86:26:CB:85:2A:A4:46:41:E6:2B:BC:B7:90:B7:51:FD:27:77:9B X509v3 Authority Key Identifier: keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:77:f6:9c:88:40:b0:d4:6e:b2:91:7b:d4:21:a1:13:64:93: 6a:f0:23:29:42:43:e1:6e:16:03:67:bc:1c:95:ff:44:90:b2: ed:cd:4c:6f:65:6e:ba:87:b3:f3:18:af:ea:aa:62:8e:a5:b0: a4:c4:91:1d:0f:90:53:a9:26:0c:fb:50:3b:8b:2d:91:0b:07: 33:96:fd:bc:28:12:5c:6b:c3:b1:0f:8e:4a:ab:9c:28:3c:20: 33:aa:15:c2:49:25:84:d5:3e:34:74:6a:d4:dd:1b:36:8e:54: 47:bb:1a:67:af:e2:1b:1d:53:c7:7d:3c:29:5b:06:87:a0:87: f5:e7:29:47:a6:13:f3:94:d2:b8:67:44:0e:cf:2d:62:d2:2b: b2:14:46:39:3c:7e:8b:f2:06:c3:aa:18:a6:ee:48:c0:d1:0f: b8:b4:67:a4:da:a3:88:81:4f:19:c4:21:fc:32:b4:29:91:0a: be:12:6c:e7:ff:6c:52:97:0e:26:2e:a7:1b:70:2e:46:d6:8b: 21:7e:b8:fb:74:fd:26:68:ab:14:95:d5:e0:1f:17:bd:3a:3a: 6d:13:fa:29:2c:57:df:60:e5:5e:2d:5a:2f:e1:17:13:70:28: 27:52:24:45:33:75:85:33:46:c9:e8:35:a8:60:39:1c:ba:07: 8d:1e:69:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKAB0uZ/fw/WtasorGappVEkVjgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy MzQ0QkE2QzAeFw0yNjA0MTIyMDI5MTdaFw0yNjA0MTMyMTU5MTdaMDMxMTAvBgNV BAMTKEYzODYyNkNCODUyQUE0NDY0MUU2MkJCQ0I3OTBCNzUxRkQyNzc3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dV7l3SrJ56ahIoiheII4hxt7 GaotzzB7cBV+O924rEgNmfVjeJXKxs0meY7m/1ffSqKzDb34JUKCokwBa6Nejhfu x9kma8nD9ps2bNynyLIfEGJSofwtqmnfWEt44fOrjjN58eirrvxqFgYLDwsaDMhz vAMXHqRMgPrRVHQDn47jJTVCa9paN6DBg4XZ3HMZQlfH1h0vOxtFuQfIn8vf1EKo arJ++iXT8M1KykAdoKaO2cxxURVqDFilFMazHIlouegJbB59dXAtMcduMKUc6EoG ytKHRjgJMViw8E20QW0ekcULElocHCMm9SaatHyZLXPaD+7y1su8nqiuYdpnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU84Ymy4UqpEZB5iu8t5C3Uf0nd5swHwYDVR0j BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5 MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2 NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnf2nIhAsNRu spF71CGhE2STavAjKUJD4W4WA2e8HJX/RJCy7c1Mb2Vuuoez8xiv6qpijqWwpMSR HQ+QU6kmDPtQO4stkQsHM5b9vCgSXGvDsQ+OSqucKDwgM6oVwkklhNU+NHRq1N0b No5UR7saZ6/iGx1Tx308KVsGh6CH9ecpR6YT85TSuGdEDs8tYtIrshRGOTx+i/IG w6oYpu5IwNEPuLRnpNqjiIFPGcQh/DK0KZEKvhJs5/9sUpcOJi6nG3AuRtaLIX64 +3T9JmirFJXV4B8XvTo6bRP6KSxX32DlXi1aL+EXE3AoJ1IkRTN1hTNGyeg1qGA5 HLoHjR5pSA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:39 2026 by rpki-client