$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json) Hash identifier: FdWAwf7LFvuLxhwZth5fB/vrHGkBkjvHlHPdVZ/VF0Y= Subject key identifier: 2E:62:90:7E:7B:5F:E2:73:76:84:34:21:7B:26:95:DA:37:7D:BC:E4 Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Certificate serial: 6FAAE2604B319DA34FFB6E8B708F80C7BD66601C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 17:09:16 +0000 Manifest this update: Sun 12 Apr 2026 17:04:16 +0000 Manifest next update: Mon 13 Apr 2026 20:35:16 +0000 Files and hashes: 1: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QHP6i0URLcoEUo8SGK+7kXUZkIMj8cNOFacHv1WMPHU=) 2: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: I+VTvhEyC7P+yY/1QsYdt85JZj5nadvPe/jM07zE1n0=) 3: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: PnRTCZodwFvvxLNCVBWc71hkMeLqFF+kuYfdErpIm54=) 4: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=) 5: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=) 6: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=) 7: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: pBwER9sTJhTwYDQM7K5BzzFLDuRowL/EfrGMCdxJtro=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 20:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:aa:e2:60:4b:31:9d:a3:4f:fb:6e:8b:70:8f:80:c7:bd:66:60:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Validity Not Before: Apr 12 17:04:16 2026 GMT Not After : Apr 13 20:35:16 2026 GMT Subject: CN=2E62907E7B5FE273768434217B2695DA377DBCE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:44:70:a5:cb:e7:a4:e4:23:c6:13:fb:c2: 3a:5d:9a:f1:7f:66:fb:06:e9:a9:bc:ef:42:75:33: 41:9a:4a:79:e6:99:6d:53:8a:e6:3b:d4:07:d0:b6: cb:1f:33:c3:fa:ef:05:cb:d4:3e:3f:52:e1:f8:5b: 05:99:e7:25:c2:6c:45:54:54:35:4e:1f:22:7b:a0: 2c:11:c2:28:83:72:a4:9f:9f:4a:cd:90:29:73:b0: 09:e3:96:d1:d8:59:18:50:58:1a:e0:19:a7:ad:06: 8e:b5:4a:74:91:e4:0f:eb:5b:78:9d:d9:9d:d8:6c: ee:03:7b:96:6c:72:30:64:4e:24:37:76:31:05:f6: 4d:64:45:f1:01:a8:25:f5:16:97:81:16:a0:90:af: 6d:87:e7:dd:62:d7:9d:c7:f2:7d:34:8c:8c:7e:42: 03:87:37:4e:e5:2a:98:52:34:10:fb:50:96:93:8d: c0:67:86:4b:67:b0:af:8c:1b:50:25:e1:17:f5:f3: aa:6f:fc:6c:eb:23:05:8e:c0:a8:74:66:95:83:fc: 38:e6:3d:1d:92:b6:aa:88:2d:1b:b7:0e:8e:a0:3f: 9d:94:f9:49:3e:97:ef:07:07:8a:cb:8d:5e:1f:72: 44:d3:ec:3a:ba:a4:26:47:22:c2:b7:39:ad:f9:d5: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:62:90:7E:7B:5F:E2:73:76:84:34:21:7B:26:95:DA:37:7D:BC:E4 X509v3 Authority Key Identifier: keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ae:46:3e:06:93:9f:61:d6:8c:8f:eb:7e:0d:d4:ef:95:ac: 4e:1e:ce:2f:1a:47:68:6d:76:b7:14:98:6f:bd:39:8a:41:3b: 69:f1:6e:1f:83:4c:69:ae:d6:e9:8b:c5:1c:8a:35:93:75:32: 07:1e:e7:60:60:0a:16:13:35:91:ab:8f:0f:67:ff:28:02:96: 1e:7e:2e:ea:cd:44:20:41:39:a6:ec:4d:e3:0b:3e:a3:32:c3: 1d:59:03:60:00:0e:40:82:53:f5:35:4e:93:8d:a9:1e:35:4c: 8e:7c:67:f0:56:bc:dc:c5:1e:89:9e:8e:34:3a:d9:5f:33:63: 1f:a3:d0:82:06:25:f6:cd:29:60:8b:18:4c:07:85:be:23:83: 5f:00:07:f6:07:07:39:47:f5:33:68:ff:a8:2f:cc:7e:5b:6b: 58:5c:9e:f2:e5:04:15:2f:76:34:4d:4d:25:8b:1c:27:ba:63: 7e:65:a3:c8:e9:4b:81:30:9e:be:dd:80:f4:17:ae:1c:61:c0: 89:81:94:8e:da:03:cb:a8:c7:87:06:f9:74:30:89:39:04:f5: 3d:6d:5b:ca:8c:01:5b:59:15:35:22:35:b8:c7:8d:1e:d3:b9: c6:13:11:ff:0b:24:8a:a7:df:f3:dd:3e:16:73:95:5f:95:91: a0:dc:29:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb6riYEsxnaNP+26LcI+Ax71mYBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURF Njk3MDBCRjAeFw0yNjA0MTIxNzA0MTZaFw0yNjA0MTMyMDM1MTZaMDMxMTAvBgNV BAMTKDJFNjI5MDdFN0I1RkUyNzM3Njg0MzQyMTdCMjY5NURBMzc3REJDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcURwpcvnpOQjxhP7wjpdmvF/ ZvsG6am870J1M0GaSnnmmW1TiuY71AfQtssfM8P67wXL1D4/UuH4WwWZ5yXCbEVU VDVOHyJ7oCwRwiiDcqSfn0rNkClzsAnjltHYWRhQWBrgGaetBo61SnSR5A/rW3id 2Z3YbO4De5ZscjBkTiQ3djEF9k1kRfEBqCX1FpeBFqCQr22H591i153H8n00jIx+ QgOHN07lKphSNBD7UJaTjcBnhktnsK+MG1Al4Rf186pv/GzrIwWOwKh0ZpWD/Djm PR2StqqILRu3Do6gP52U+Uk+l+8HB4rLjV4fckTT7Dq6pCZHIsK3Oa351evzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULmKQfntf4nN2hDQheyaV2jd9vOQwHwYDVR0j BBgwFoAUCjesiOMD9LuDTBgLBvJQreaXAL8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzI2OTI1MC8wLzBBMzdBQzg4RTMwM0Y0QkI4MzRDMTgwQjA2RjI1 MEFERTY5NzAwQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzcyNjkyNTAvMC8wQTM3QUM4OEUzMDNG NEJCODM0QzE4MEIwNkYyNTBBREU2OTcwMEJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPq5GPgaTn2HW jI/rfg3U75WsTh7OLxpHaG12txSYb705ikE7afFuH4NMaa7W6YvFHIo1k3UyBx7n YGAKFhM1kauPD2f/KAKWHn4u6s1EIEE5puxN4ws+ozLDHVkDYAAOQIJT9TVOk42p HjVMjnxn8Fa83MUeiZ6ONDrZXzNjH6PQggYl9s0pYIsYTAeFviODXwAH9gcHOUf1 M2j/qC/MfltrWFye8uUEFS92NE1NJYscJ7pjfmWjyOlLgTCevt2A9BeuHGHAiYGU jtoDy6jHhwb5dDCJOQT1PW1byowBW1kVNSI1uMeNHtO5xhMR/wskiqff890+FnOV X5WRoNwppA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:49 2026 by rpki-client