$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json) Hash identifier: Kp70oqWGsBJlUsn2kGDrDKfpR98vQ+EtfhscrQ0zhnE= Subject key identifier: A6:57:0C:97:02:73:F8:A9:51:5A:15:C0:DF:83:D7:D1:36:45:2D:3B Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 119576E5464DE2AB93ACF1B97CBF26A09A6773F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 08:09:17 +0000 Manifest this update: Mon 13 Apr 2026 08:04:17 +0000 Manifest next update: Tue 14 Apr 2026 08:56:17 +0000 Files and hashes: 1: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=) 2: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: V1flUwodkdnYTslTvZDIPbWN7rm5t5QijGc3KOHMXg0=) 3: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=) 4: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=) 5: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=) 6: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=) 7: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:95:76:e5:46:4d:e2:ab:93:ac:f1:b9:7c:bf:26:a0:9a:67:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: Apr 13 08:04:17 2026 GMT Not After : Apr 14 08:56:17 2026 GMT Subject: CN=A6570C970273F8A9515A15C0DF83D7D136452D3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:01:32:4d:fd:ff:40:f2:5c:28:9d:70:91: 71:78:08:e4:50:c5:d8:c0:17:e7:9f:86:35:49:8b: 0c:ec:37:ba:6e:b0:a9:f3:cf:9f:b0:42:24:89:14: 37:e4:b1:24:68:e8:71:ee:3c:38:8d:e2:35:59:3f: 96:b5:fe:23:4a:49:fd:a5:15:89:72:8c:52:4b:3c: 31:aa:cc:ea:e3:a9:37:d6:6b:98:19:20:a7:10:bf: 93:f5:91:49:bb:24:5e:58:f0:3c:b8:7c:7a:70:6a: 56:80:03:8c:40:3f:de:e0:21:01:2f:f8:6b:b2:45: 94:64:52:2e:96:02:19:a2:a6:11:ba:14:45:d4:5a: 68:56:f9:43:88:9e:f2:37:a6:b9:ca:2b:28:a9:6d: 7f:95:bf:46:dc:cc:c4:43:39:c1:5d:ca:0f:b2:08: 67:ed:48:d0:41:d8:fd:1d:cf:09:6c:c6:b0:21:61: f1:1b:25:56:11:a6:1b:04:40:38:d5:5b:aa:30:cb: 41:8b:48:b8:e0:cc:f2:5b:39:96:df:4f:4b:c6:52: 71:ba:b1:39:aa:52:c8:8f:09:d1:99:52:12:5c:c0: 5b:a2:81:2f:3e:d2:37:bf:5a:97:8c:ed:c7:b8:df: 81:5e:5c:64:60:ed:97:92:94:24:51:9a:a0:14:e3: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:0C:97:02:73:F8:A9:51:5A:15:C0:DF:83:D7:D1:36:45:2D:3B X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8d:1e:49:14:5c:1d:cb:6f:25:5e:55:30:02:c0:76:7e:02: 6b:1e:2f:58:a4:ee:52:90:25:aa:4f:0d:62:d3:31:05:4f:0a: 20:e3:1e:16:00:6d:fb:61:b6:ba:39:03:20:71:f7:1c:aa:8f: 60:c8:b7:a7:70:1a:76:62:66:45:2b:1e:99:b8:d1:5f:f8:5d: 55:2f:29:07:c7:fa:85:84:35:ad:0d:0f:75:d4:7c:c7:d7:8f: 28:d9:5f:ca:8f:a5:35:1e:d7:59:98:6c:9c:f8:6e:2c:91:74: 0e:af:22:c2:f8:08:36:26:9b:77:12:69:c1:f7:57:a6:5a:ce: b4:36:f7:d5:e6:7c:1c:35:0e:61:5f:9e:58:8b:de:7e:ac:21: 5b:a9:6a:28:e8:42:c3:fa:54:ac:b1:3a:4d:05:4d:c3:e8:66: 23:c7:5b:44:44:77:36:f5:8e:ea:98:b3:1b:1f:29:79:39:d4: 09:dc:81:0a:3c:f5:7b:2a:4c:c9:cf:8f:ee:e1:8a:4e:80:a5: 27:88:32:66:05:ee:3e:6b:70:da:62:94:15:ce:51:6e:2f:da: 32:29:c9:ec:f9:96:fa:6e:f4:12:16:47:c3:9a:f8:d1:42:a6: 6a:c4:16:5e:cb:b0:33:1b:fd:65:ce:dd:bc:cf:a5:25:8a:e5: 82:22:9b:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEZV25UZN4quTrPG5fL8moJpnc/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjA0MTMwODA0MTdaFw0yNjA0MTQwODU2MTdaMDMxMTAvBgNV BAMTKEE2NTcwQzk3MDI3M0Y4QTk1MTVBMTVDMERGODNEN0QxMzY0NTJEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4wEyTf3/QPJcKJ1wkXF4CORQ xdjAF+efhjVJiwzsN7pusKnzz5+wQiSJFDfksSRo6HHuPDiN4jVZP5a1/iNKSf2l FYlyjFJLPDGqzOrjqTfWa5gZIKcQv5P1kUm7JF5Y8Dy4fHpwalaAA4xAP97gIQEv +GuyRZRkUi6WAhmiphG6FEXUWmhW+UOInvI3prnKKyipbX+Vv0bczMRDOcFdyg+y CGftSNBB2P0dzwlsxrAhYfEbJVYRphsEQDjVW6owy0GLSLjgzPJbOZbfT0vGUnG6 sTmqUsiPCdGZUhJcwFuigS8+0je/WpeM7ce434FeXGRg7ZeSlCRRmqAU43khAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUplcMlwJz+KlRWhXA34PX0TZFLTswHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0NjU4NTgvMC9BNTlGQjU1RjhCM0U0 MDY5NDI3ODc4QkQ1QkE3RkY0MUExNjkxQjVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHI0eSRRcHctv JV5VMALAdn4Cax4vWKTuUpAlqk8NYtMxBU8KIOMeFgBt+2G2ujkDIHH3HKqPYMi3 p3AadmJmRSsembjRX/hdVS8pB8f6hYQ1rQ0PddR8x9ePKNlfyo+lNR7XWZhsnPhu LJF0Dq8iwvgINiabdxJpwfdXplrOtDb31eZ8HDUOYV+eWIvefqwhW6lqKOhCw/pU rLE6TQVNw+hmI8dbRER3NvWO6pizGx8peTnUCdyBCjz1eypMyc+P7uGKToClJ4gy ZgXuPmtw2mKUFc5Rbi/aMinJ7PmW+m70EhZHw5r40UKmasQWXsuwMxv9Zc7dvM+l JYrlgiKbow== -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:43 2026 by rpki-client