$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: hRrTg9oz5fltCoH22l7apRV27bh3l+M1dIJrsJVZOCQ= Subject key identifier: 7B:CB:E3:8D:8A:56:BC:D3:7F:15:A2:3D:89:C4:0D:0B:78:20:C0:72 Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 567830638EF5670110FA7C52D1908194C9CFD0D1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 20:24:17 +0000 Manifest this update: Sun 12 Apr 2026 20:19:17 +0000 Manifest next update: Mon 13 Apr 2026 22:43:17 +0000 Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) 2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: rt2zLYqBumxQ1SrOzGp9Jtd6HAyUxQO+W7/mCRh6u+E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 22:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:78:30:63:8e:f5:67:01:10:fa:7c:52:d1:90:81:94:c9:cf:d0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Apr 12 20:19:17 2026 GMT Not After : Apr 13 22:43:17 2026 GMT Subject: CN=7BCBE38D8A56BCD37F15A23D89C40D0B7820C072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:23:58:62:1c:f2:2f:fc:cc:ce:fd:18:2d:33: e7:13:6e:ae:ad:b8:40:3a:57:fd:92:b8:f1:7c:d8: d8:e0:4c:25:ab:70:a4:a6:15:63:c3:84:38:1c:a7: b0:42:67:9f:fc:83:36:9b:dd:0b:52:29:93:82:ea: f1:ff:f0:18:36:7a:99:10:5a:d9:64:1b:21:27:ff: d6:37:e8:05:ff:f0:6a:fc:75:a3:4d:97:44:a6:40: 89:99:5e:db:e5:5d:7c:86:da:05:28:b1:59:c7:fa: 98:d0:ad:bb:41:bf:c8:2e:76:d5:28:5c:f8:82:20: 04:1b:7f:11:1c:fd:65:42:5c:50:da:f4:99:3c:30: e4:1d:0b:0c:22:50:bb:70:b1:db:28:15:77:50:17: 35:b1:fc:82:89:63:f1:8c:46:37:6a:89:35:9d:7d: b4:44:8f:fb:28:b6:ad:ca:4b:f8:bd:5b:8c:f5:bb: b2:5f:97:e6:28:69:b3:2d:c1:31:bf:e1:c0:81:e0: 62:dd:46:d7:05:a6:ab:67:90:ec:07:19:22:46:05: 6d:64:63:ab:25:5f:83:58:22:ae:bd:04:e2:df:28: 54:e9:21:0a:d0:a5:e8:59:e8:79:a9:9c:46:2f:fa: 4f:23:e2:f7:3e:2d:43:fe:c1:c2:fc:d5:8d:72:3f: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CB:E3:8D:8A:56:BC:D3:7F:15:A2:3D:89:C4:0D:0B:78:20:C0:72 X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:93:41:e4:a3:6a:ea:de:9a:1d:66:a5:3e:44:36:06:32:f8: 89:8a:ce:a7:e0:eb:83:95:e2:21:84:52:90:20:bb:ee:dd:e3: 3c:25:37:73:40:8f:b9:1c:5b:c0:d1:b0:61:63:13:a6:bf:99: 66:70:f3:37:67:37:fc:c4:68:42:12:f6:f5:05:1d:0d:a7:7a: 4c:94:83:88:8c:55:15:83:6a:69:0a:d1:40:7e:c2:95:8e:88: d4:1e:47:4d:16:95:07:ab:64:c7:c5:79:34:e4:0a:d2:b3:47: 24:af:0c:d0:ef:a2:82:ea:c2:7a:19:24:15:4d:20:54:83:94: cc:e8:1c:78:8c:2d:2e:4c:a0:df:0a:c9:26:c8:6f:0d:63:d9: d6:4b:ba:d4:5d:70:c8:c8:0d:45:56:8e:7e:5d:10:e0:46:65: e4:64:24:91:dd:e9:26:6b:a9:e6:49:6f:33:69:25:42:56:4c: 83:96:56:fc:af:87:5b:a5:6d:0c:cf:16:82:3e:d2:61:40:00: fc:f3:be:73:25:0f:be:0a:d9:35:06:6e:89:4a:11:dc:48:f0: e7:d4:d0:ea:3c:ae:a9:e1:22:28:af:51:54:04:d8:e8:87:b0: b2:35:ef:8c:88:18:96:bd:2d:ba:bf:b8:d4:57:f7:04:f7:a3: 08:f1:5b:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVngwY471ZwEQ+nxS0ZCBlMnP0NEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjA0MTIyMDE5MTdaFw0yNjA0MTMyMjQzMTdaMDMxMTAvBgNV BAMTKDdCQ0JFMzhEOEE1NkJDRDM3RjE1QTIzRDg5QzQwRDBCNzgyMEMwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXI1hiHPIv/MzO/RgtM+cTbq6t uEA6V/2SuPF82NjgTCWrcKSmFWPDhDgcp7BCZ5/8gzab3QtSKZOC6vH/8Bg2epkQ WtlkGyEn/9Y36AX/8Gr8daNNl0SmQImZXtvlXXyG2gUosVnH+pjQrbtBv8gudtUo XPiCIAQbfxEc/WVCXFDa9Jk8MOQdCwwiULtwsdsoFXdQFzWx/IKJY/GMRjdqiTWd fbREj/sotq3KS/i9W4z1u7Jfl+YoabMtwTG/4cCB4GLdRtcFpqtnkOwHGSJGBW1k Y6slX4NYIq69BOLfKFTpIQrQpehZ6HmpnEYv+k8j4vc+LUP+wcL81Y1yP1MnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe8vjjYpWvNN/FaI9icQNC3ggwHIwHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJNB5KNq6t6a HWalPkQ2BjL4iYrOp+Drg5XiIYRSkCC77t3jPCU3c0CPuRxbwNGwYWMTpr+ZZnDz N2c3/MRoQhL29QUdDad6TJSDiIxVFYNqaQrRQH7ClY6I1B5HTRaVB6tkx8V5NOQK 0rNHJK8M0O+igurCehkkFU0gVIOUzOgceIwtLkyg3wrJJshvDWPZ1ku61F1wyMgN RVaOfl0Q4EZl5GQkkd3pJmup5klvM2klQlZMg5ZW/K+HW6VtDM8Wgj7SYUAA/PO+ cyUPvgrZNQZuiUoR3Ejw59TQ6jyuqeEiKK9RVATY6IewsjXvjIgYlr0tur+41Ff3 BPejCPFb8w== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:39 2026 by rpki-client