$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: SeAlsHVrvRDmuFomWUx0ThYs75dhI3NhkWHQq6aac9c= Subject key identifier: 42:6A:A1:8F:21:E6:64:30:D1:5A:A2:CE:4D:63:3E:1A:D8:15:DF:F9 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 741A33F3824571716305FA84F2756C39E6E5F0E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 89 Signing time: Mon 27 Apr 2026 19:18:50 +0000 Manifest this update: Mon 27 Apr 2026 19:13:50 +0000 Manifest next update: Tue 28 Apr 2026 21:24:50 +0000 Files and hashes: 1: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=) 2: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=) 3: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=) 4: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=) 5: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=) 6: 3130332e34342e3134362e302f32332d3233203d3e203535393931.roa (hash: j2GFTR5gTw63ofVwQLqxVpcVOasLh4PPhKjqt/os0Tg=) 7: 3130332e34342e3134342e302f32332d3233203d3e203535393931.roa (hash: nSlBjzmafR1xmFUMZ2t5GLKkINkqQJY7uv9U1IiEmD0=) 8: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: 9Q6sENaXf9uatD+BdeYvUrOCrVBRQfZFSB+Ac2Z3Fz0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:1a:33:f3:82:45:71:71:63:05:fa:84:f2:75:6c:39:e6:e5:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Apr 27 19:13:50 2026 GMT Not After : Apr 28 21:24:50 2026 GMT Subject: CN=426AA18F21E66430D15AA2CE4D633E1AD815DFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:8c:34:25:ee:c4:c5:21:87:b9:eb:cf:d2: 85:73:fe:c5:83:3c:a4:8c:a5:85:0f:e4:35:cb:f9: 8c:91:72:e1:62:64:fd:62:65:62:75:a0:ee:0d:de: 3c:4f:50:3e:69:de:69:e5:4c:4e:25:0a:73:58:31: 16:ee:dc:e2:2a:71:45:9f:01:12:27:3a:4d:89:ea: a7:43:7b:5e:33:1a:f5:35:e6:48:e3:d0:68:87:f7: 44:d2:69:74:d0:fa:9f:37:e9:22:76:55:e9:9b:d9: d5:e0:26:5d:c3:e1:6a:82:50:d5:8e:2e:5a:d4:d0: 4a:70:78:a8:c2:58:6e:38:ba:f4:90:6b:93:3d:54: 92:ca:40:b2:c0:e2:2d:2a:d1:5e:1c:24:63:1d:3f: f3:ac:2e:3c:2b:82:38:fd:37:7d:80:1f:70:6a:bc: 25:2e:c7:8a:88:88:39:a6:c0:10:0e:61:88:82:56: 76:d5:eb:69:76:80:ae:ca:ad:25:ad:6b:04:55:90: 7c:f7:48:6d:11:c4:cb:ec:b1:38:7a:b9:ab:a8:95: d7:d7:9d:20:05:22:ec:63:f3:f0:27:6b:af:39:27: b9:f1:c9:43:a2:38:87:2c:e9:ba:6b:87:14:9b:ab: 25:92:c8:ed:50:f8:4f:49:48:35:e7:11:cd:46:11: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6A:A1:8F:21:E6:64:30:D1:5A:A2:CE:4D:63:3E:1A:D8:15:DF:F9 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ea:30:89:26:ca:49:98:88:a7:96:af:98:8b:c9:02:e5:1c: 12:db:bb:f7:98:82:cb:72:b7:e4:68:df:7e:39:e3:a1:b2:57: a7:b0:bb:cc:ed:17:b5:11:6f:0d:44:22:9e:65:ef:ae:89:ed: d7:69:1f:60:1d:2f:79:a0:42:95:75:27:78:8d:06:a2:6a:3e: 3a:8a:17:3b:04:b9:e1:87:22:ee:92:6b:19:86:7c:26:3e:b3: 8f:59:44:ea:e0:28:0d:26:1d:ef:9f:bf:6c:6e:93:7b:0a:e6: db:80:88:c0:a8:a3:4e:56:e7:8a:e2:11:82:83:b6:19:cf:10: 6a:7d:b5:2a:02:d1:c1:ad:88:5e:19:ee:81:8e:b6:e0:db:d3: 60:0d:1c:f8:55:5c:6f:18:70:3f:bd:e4:d6:32:f3:3d:af:1f: a7:1c:62:1e:ab:4b:12:ce:4a:45:e6:20:98:f1:04:df:d3:7d: ad:86:4e:08:d4:da:f2:d5:c5:c3:db:6a:57:8d:24:ca:87:e9: e6:00:62:fb:9d:99:14:c3:97:ec:52:90:86:51:31:7d:3e:da: 53:22:0a:ff:29:c7:41:21:10:bc:32:3f:3a:01:3d:cd:c2:70: 6a:02:93:09:ba:1e:80:37:39:d4:3c:e0:01:01:a9:a1:f8:dc: 7a:c8:11:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdBoz84JFcXFjBfqE8nVsOebl8OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjA0MjcxOTEzNTBaFw0yNjA0MjgyMTI0NTBaMDMxMTAvBgNV BAMTKDQyNkFBMThGMjFFNjY0MzBEMTVBQTJDRTRENjMzRTFBRDgxNURGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE04w0Je7ExSGHuevP0oVz/sWD PKSMpYUP5DXL+YyRcuFiZP1iZWJ1oO4N3jxPUD5p3mnlTE4lCnNYMRbu3OIqcUWf ARInOk2J6qdDe14zGvU15kjj0GiH90TSaXTQ+p836SJ2Vemb2dXgJl3D4WqCUNWO LlrU0EpweKjCWG44uvSQa5M9VJLKQLLA4i0q0V4cJGMdP/OsLjwrgjj9N32AH3Bq vCUux4qIiDmmwBAOYYiCVnbV62l2gK7KrSWtawRVkHz3SG0RxMvssTh6uauoldfX nSAFIuxj8/Ana685J7nxyUOiOIcs6bprhxSbqyWSyO1Q+E9JSDXnEc1GEa2nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQmqhjyHmZDDRWqLOTWM+GtgV3/kwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeowiSbKSZiI p5avmIvJAuUcEtu795iCy3K35GjffjnjobJXp7C7zO0XtRFvDUQinmXvront12kf YB0veaBClXUneI0Gomo+OooXOwS54Yci7pJrGYZ8Jj6zj1lE6uAoDSYd75+/bG6T ewrm24CIwKijTlbniuIRgoO2Gc8Qan21KgLRwa2IXhnugY624NvTYA0c+FVcbxhw P73k1jLzPa8fpxxiHqtLEs5KReYgmPEE39N9rYZOCNTa8tXFw9tqV40kyofp5gBi +52ZFMOX7FKQhlExfT7aUyIK/ynHQSEQvDI/OgE9zcJwagKTCboegDc51DzgAQGp ofjcesgRMA== -----END CERTIFICATE-----Generated at Tue Apr 28 02:28:51 2026 by rpki-client