$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: kvPFrr5qThjZNQdc7nrCH02IMD4/XN7BrnNnTIQtQCs= Subject key identifier: 98:B2:47:28:68:B3:96:5D:BB:86:EE:47:14:2A:A7:99:1F:A4:04:3B Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 13CE35E90A858AEEA7A415C099EFE6DAFBA6B437 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 05:49:17 +0000 Manifest this update: Mon 13 Apr 2026 05:44:17 +0000 Manifest next update: Tue 14 Apr 2026 09:34:17 +0000 Files and hashes: 1: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: mZe8MXRCg5l3K90CFIzBD2edaUq6bL6aMYBzQ5JlYMc=) 2: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) 3: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) 4: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ce:35:e9:0a:85:8a:ee:a7:a4:15:c0:99:ef:e6:da:fb:a6:b4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Apr 13 05:44:17 2026 GMT Not After : Apr 14 09:34:17 2026 GMT Subject: CN=98B2472868B3965DBB86EE47142AA7991FA4043B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:9e:76:97:ae:88:e1:bb:a6:83:77:a1:7f: 42:eb:48:54:2a:c1:c9:57:8c:4c:7c:ed:24:4b:0d: a5:99:2f:fc:24:b9:3a:90:e4:ff:53:a6:4d:47:97: 3d:89:b5:f6:f3:d4:fc:ed:51:9f:fa:66:c0:35:f9: d1:e1:ab:b4:f5:61:32:15:50:9d:ff:38:44:f2:86: 1a:bf:31:68:28:5d:1c:18:d0:08:cd:22:c1:10:5a: 32:e5:90:fa:e4:92:fd:11:35:e0:f1:5c:b1:34:38: c6:f8:98:ce:08:85:d3:11:11:b5:7f:39:c5:1d:83: 7d:ba:5b:10:32:18:97:74:20:9c:66:fc:fd:a9:40: 74:c6:ee:09:a6:34:95:cd:11:70:91:0e:f1:85:f9: 90:1d:42:51:a7:8e:ea:a3:a3:c1:4a:dd:ee:de:37: a5:38:00:76:2c:49:59:dc:4b:1e:8f:e5:e7:ad:1f: 2b:66:f5:44:6d:d1:dd:5c:b0:7a:20:f6:c6:01:ce: 2d:6a:0e:36:2a:13:71:96:1b:26:3d:54:4c:47:a9: d7:67:bf:45:6f:61:90:30:47:35:16:65:03:43:96: 30:95:f3:c6:1c:30:4e:ad:16:34:f4:5a:66:85:90: 41:ce:f9:a1:59:7a:36:c5:29:50:9d:8e:a3:c5:cd: eb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B2:47:28:68:B3:96:5D:BB:86:EE:47:14:2A:A7:99:1F:A4:04:3B X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:51:75:2d:2d:e3:5c:18:60:e7:41:c7:b9:f3:7f:d4:2a:59: ef:cc:a8:50:d5:4e:23:4b:3c:8a:ea:bd:f2:c2:6e:ba:3f:f6: 0d:74:59:0d:c4:79:b1:bb:47:e6:6d:ba:36:96:fb:d9:29:75: 99:d8:d6:7c:b3:ec:15:be:f5:01:60:44:73:34:45:2d:ba:fe: 9d:b6:05:43:57:98:e2:57:51:61:ce:94:f8:31:d7:14:45:62: f3:6d:46:fe:76:b4:43:84:82:56:93:cc:02:aa:ae:48:be:30: 4b:4b:3f:f4:6e:95:87:6d:44:f6:37:63:b6:c2:bd:eb:f4:5c: 47:c8:42:ab:9f:25:f6:06:37:63:ca:5f:41:11:29:9a:a3:e0: 26:48:08:18:c0:53:e9:74:c6:6a:34:7e:2e:ae:9b:3e:d9:97: fe:1a:cc:c0:e2:a2:37:33:f1:a3:a1:66:50:6d:61:0f:66:ff: 48:7b:c8:ef:db:4e:24:13:26:90:01:ae:a7:a7:43:92:52:cf: 4f:2c:a0:50:34:d7:db:9b:84:2d:ae:fd:ff:77:69:a9:a4:43: 3f:64:37:a4:3f:01:6a:17:3a:3e:e2:6e:0f:7c:e3:67:13:ae: d3:c3:56:d2:1e:7d:9e:a7:00:d6:b1:6d:1e:63:2e:5d:ef:bf: 67:79:ec:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE8416QqFiu6npBXAme/m2vumtDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjA0MTMwNTQ0MTdaFw0yNjA0MTQwOTM0MTdaMDMxMTAvBgNV BAMTKDk4QjI0NzI4NjhCMzk2NURCQjg2RUU0NzE0MkFBNzk5MUZBNDA0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqp52l66I4bumg3ehf0LrSFQq wclXjEx87SRLDaWZL/wkuTqQ5P9Tpk1Hlz2Jtfbz1PztUZ/6ZsA1+dHhq7T1YTIV UJ3/OETyhhq/MWgoXRwY0AjNIsEQWjLlkPrkkv0RNeDxXLE0OMb4mM4IhdMREbV/ OcUdg326WxAyGJd0IJxm/P2pQHTG7gmmNJXNEXCRDvGF+ZAdQlGnjuqjo8FK3e7e N6U4AHYsSVncSx6P5eetHytm9URt0d1csHog9sYBzi1qDjYqE3GWGyY9VExHqddn v0VvYZAwRzUWZQNDljCV88YcME6tFjT0WmaFkEHO+aFZejbFKVCdjqPFzeuxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmLJHKGizll27hu5HFCqnmR+kBDswHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVF1LS3jXBhg 50HHufN/1CpZ78yoUNVOI0s8iuq98sJuuj/2DXRZDcR5sbtH5m26Npb72Sl1mdjW fLPsFb71AWBEczRFLbr+nbYFQ1eY4ldRYc6U+DHXFEVi821G/na0Q4SCVpPMAqqu SL4wS0s/9G6Vh21E9jdjtsK96/RcR8hCq58l9gY3Y8pfQREpmqPgJkgIGMBT6XTG ajR+Lq6bPtmX/hrMwOKiNzPxo6FmUG1hD2b/SHvI79tOJBMmkAGup6dDklLPTyyg UDTX25uELa79/3dpqaRDP2Q3pD8Bahc6PuJuD3zjZxOu08NW0h59nqcA1rFtHmMu Xe+/Z3nsgA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:43 2026 by rpki-client