$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: Il2MsnLuibJOsB/WFyOrL3FdyvLKuBSK4JNNks66zHM= Subject key identifier: 3A:14:AE:33:C6:5F:5E:04:20:F8:0F:58:25:1E:94:04:63:E6:EB:0B Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 47FE38464159FBD274AA2CC47275DEA178E9D946 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 08:59:17 +0000 Manifest this update: Mon 13 Apr 2026 08:54:17 +0000 Manifest next update: Tue 14 Apr 2026 11:12:17 +0000 Files and hashes: 1: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 2: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: qT6QGLATw2MN3r0GKwP3DEjgwJgKOGw5Mba6iMvS/x0=) 3: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fe:38:46:41:59:fb:d2:74:aa:2c:c4:72:75:de:a1:78:e9:d9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Apr 13 08:54:17 2026 GMT Not After : Apr 14 11:12:17 2026 GMT Subject: CN=3A14AE33C65F5E0420F80F58251E940463E6EB0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:9d:c8:d6:61:0d:34:3d:df:af:ce:46:a1: e5:71:34:f6:ee:5d:ca:ed:de:8d:1a:62:fb:30:eb: 5b:67:42:7e:07:ff:e2:cc:64:d5:a6:c2:39:76:b7: 52:ac:a9:05:9c:bb:c4:47:2e:5f:a0:5e:9b:87:60: fb:b0:8f:b3:11:39:66:0e:c1:f2:48:85:06:50:d4: e2:d5:d3:2c:2b:52:03:80:fa:5d:03:4b:40:43:18: 27:1a:8c:f9:b6:1f:76:7c:e9:7d:f6:a1:b9:6a:59: 8a:74:59:13:cd:5d:b8:8f:c6:82:1e:43:15:e3:b8: 2a:ed:4e:88:c1:4c:e9:ae:91:27:5a:a0:51:ae:04: 6c:36:37:58:26:e6:98:96:a6:f3:86:8a:ad:f9:27: 5d:27:fc:42:ce:08:08:f8:ec:16:9b:02:a0:4b:93: 3e:ca:cd:e8:f5:6b:c0:28:34:aa:92:87:a8:d1:1c: b6:87:f0:1b:90:31:0d:08:61:14:61:c1:4a:f6:43: 74:73:1b:46:6f:ef:57:9d:96:2f:14:7e:ad:1f:e8: bb:da:b7:75:7c:c9:20:7f:d6:7c:60:74:04:e0:b9: 1a:dd:f6:d2:79:ab:c3:18:be:3f:b5:76:44:da:62: 40:0b:c1:a1:b0:fc:44:6b:2b:73:4b:28:15:d2:35: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:14:AE:33:C6:5F:5E:04:20:F8:0F:58:25:1E:94:04:63:E6:EB:0B X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e6:36:c6:c8:99:0d:c4:5e:c2:6b:da:68:fa:68:d9:bd:76: 4c:91:56:e6:02:43:4a:be:8c:08:a8:aa:cf:c6:e3:5c:06:e3: 54:dc:9c:aa:e7:5e:f1:5e:12:31:67:6f:cf:3b:a7:4c:31:2c: d5:e1:91:ef:df:fe:14:32:22:b9:85:a9:4f:a4:bc:e3:34:a8: bd:a0:eb:07:d2:7d:91:bb:59:66:97:e5:2c:31:ac:dd:9a:02: 53:84:96:be:6a:75:2f:e9:5f:3e:55:fc:21:0c:cb:5c:b5:7e: 89:49:1b:43:d1:c7:45:42:0e:b3:91:ff:33:c9:48:c3:f4:bc: 07:3d:e6:90:b0:91:71:71:07:ab:7e:3a:6e:63:b9:b2:fe:f3: 71:ba:fa:fa:51:40:20:c9:aa:02:f2:bf:73:3a:0e:cd:87:79: 92:b9:8d:3a:27:9e:9c:a8:1a:fd:0e:fa:aa:0f:f5:cf:d3:96: ee:4a:bb:61:95:b4:16:20:d2:0c:99:f9:76:57:23:e4:e1:98: 5c:d5:2f:7f:c2:08:d9:2d:b8:bc:30:03:65:2c:fd:c1:f6:84: a2:90:1c:ef:0c:79:c5:04:68:31:f6:0a:45:6d:99:56:22:ce: 79:c5:13:98:05:ea:4b:29:3b:7e:40:f9:91:c0:04:c9:3b:22: fc:9a:cb:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR/44RkFZ+9J0qizEcnXeoXjp2UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjA0MTMwODU0MTdaFw0yNjA0MTQxMTEyMTdaMDMxMTAvBgNV BAMTKDNBMTRBRTMzQzY1RjVFMDQyMEY4MEY1ODI1MUU5NDA0NjNFNkVCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCZ3I1mENND3fr85GoeVxNPbu Xcrt3o0aYvsw61tnQn4H/+LMZNWmwjl2t1KsqQWcu8RHLl+gXpuHYPuwj7MROWYO wfJIhQZQ1OLV0ywrUgOA+l0DS0BDGCcajPm2H3Z86X32oblqWYp0WRPNXbiPxoIe QxXjuCrtTojBTOmukSdaoFGuBGw2N1gm5piWpvOGiq35J10n/ELOCAj47BabAqBL kz7Kzej1a8AoNKqSh6jRHLaH8BuQMQ0IYRRhwUr2Q3RzG0Zv71edli8Ufq0f6Lva t3V8ySB/1nxgdATguRrd9tJ5q8MYvj+1dkTaYkALwaGw/ERrK3NLKBXSNbsPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOhSuM8ZfXgQg+A9YJR6UBGPm6wswHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieY2xsiZDcRe wmvaaPpo2b12TJFW5gJDSr6MCKiqz8bjXAbjVNycqude8V4SMWdvzzunTDEs1eGR 79/+FDIiuYWpT6S84zSovaDrB9J9kbtZZpflLDGs3ZoCU4SWvmp1L+lfPlX8IQzL XLV+iUkbQ9HHRUIOs5H/M8lIw/S8Bz3mkLCRcXEHq346bmO5sv7zcbr6+lFAIMmq AvK/czoOzYd5krmNOieenKga/Q76qg/1z9OW7kq7YZW0FiDSDJn5dlcj5OGYXNUv f8II2S24vDADZSz9wfaEopAc7wx5xQRoMfYKRW2ZViLOecUTmAXqSyk7fkD5kcAE yTsi/JrLLQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:39 2026 by rpki-client