$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json) Hash identifier: I0rKg/XsgK/vk81kryIKVSabcqARI8Ugikv2bQaEJ9s= Subject key identifier: 08:0C:07:56:4E:78:29:B8:3F:D4:C2:A1:97:3E:E1:06:9A:0C:B1:1A Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Certificate serial: 5889CFD0DA4CF93F34C3DF3353CD32075AE294B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 21:49:17 +0000 Manifest this update: Sun 12 Apr 2026 21:44:17 +0000 Manifest next update: Tue 14 Apr 2026 00:05:17 +0000 Files and hashes: 1: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: k3Um7Zw0vfWpBwZ07/kcSqDJ3Z0XbJ9sxOM0670K5v0=) 2: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=) 3: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 00:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:89:cf:d0:da:4c:f9:3f:34:c3:df:33:53:cd:32:07:5a:e2:94:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Validity Not Before: Apr 12 21:44:17 2026 GMT Not After : Apr 14 00:05:17 2026 GMT Subject: CN=080C07564E7829B83FD4C2A1973EE1069A0CB11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:8c:02:ff:94:8f:1f:7a:2f:88:9c:cf:75: 12:d1:82:c5:42:21:2e:9f:e4:12:47:51:24:1d:b5: 44:ef:62:64:3e:43:bf:b0:38:98:67:c2:0a:ec:4a: 9b:eb:63:92:98:51:f7:a9:08:8f:49:55:07:aa:7c: 15:eb:49:4c:b0:d7:fd:85:29:08:53:8a:75:d2:02: 31:85:10:e9:cc:2b:49:9d:a6:92:4e:ad:62:fe:b7: 8c:87:e4:53:92:a8:8a:ac:8b:c0:b3:b4:3d:aa:89: d6:85:e9:be:6d:8c:a4:fd:db:14:ae:be:ba:21:19: 5b:55:1c:b7:de:53:74:05:ff:36:c2:be:78:6c:17: 6d:dd:80:22:08:b4:72:27:dd:13:e1:12:9a:99:67: 8d:05:a3:d4:80:fa:3a:dd:5d:b8:64:0d:a3:28:40: d2:5d:31:89:ed:d5:23:9d:f6:f5:0f:df:82:32:05: d7:b1:80:cc:2a:28:17:e7:7c:23:6c:4a:d8:58:44: 49:4e:99:3a:b2:e1:fc:fc:c0:72:c8:a2:99:09:f3: 2e:d9:cc:ac:8c:36:08:aa:6c:76:f4:f3:08:93:e4: 36:6f:04:28:cd:b8:4a:c0:39:ff:d6:d2:e9:82:53: 5f:7d:8b:5f:2c:f9:c7:d1:5c:e0:f5:43:9b:8b:16: a1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:07:56:4E:78:29:B8:3F:D4:C2:A1:97:3E:E1:06:9A:0C:B1:1A X509v3 Authority Key Identifier: keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cc:49:28:37:c1:00:8c:90:b4:d4:66:15:a8:16:8e:ab:d4: 56:23:b8:4b:57:76:88:e7:44:9a:89:b8:64:70:48:08:0c:d4: ed:07:e9:81:79:77:75:95:6c:a5:1e:4e:90:57:9c:52:21:db: 0c:43:54:de:87:e6:b1:8a:50:4c:8f:dc:02:78:c6:03:f8:4b: 1a:86:01:66:c3:49:94:e9:bc:96:85:f1:c1:94:15:0a:8a:bd: 6f:c9:e1:29:5f:04:35:3b:6c:20:2f:24:25:f7:04:69:55:ab: de:ad:30:88:dc:91:ac:c2:cb:69:88:ae:b9:74:79:ec:55:5c: e5:92:50:1b:48:7a:b9:cb:ef:46:8e:41:56:aa:f1:73:89:cb: 62:1a:6f:73:dd:f5:e3:96:60:52:43:1a:b9:71:9b:8f:8b:7c: 5a:53:98:43:15:01:15:e8:0c:43:b4:37:eb:b9:b1:d2:d9:f6: 0b:ac:d7:22:a5:29:a0:66:97:72:7d:eb:c5:65:bc:9e:3e:eb: dc:8f:7b:02:35:69:2d:d4:83:a7:e0:cd:98:2d:30:a1:02:c0: a4:e9:88:c3:b7:5f:38:cb:f2:6e:75:47:5c:7f:38:72:a5:53: 56:1c:92:d3:d5:e8:09:fb:20:67:cd:9c:f2:4a:8d:e7:22:7f: 4f:bd:38:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWInP0NpM+T80w98zU80yB1rilLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJF MTgwODVGOTAeFw0yNjA0MTIyMTQ0MTdaFw0yNjA0MTQwMDA1MTdaMDMxMTAvBgNV BAMTKDA4MEMwNzU2NEU3ODI5QjgzRkQ0QzJBMTk3M0VFMTA2OUEwQ0IxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPyYwC/5SPH3oviJzPdRLRgsVC IS6f5BJHUSQdtUTvYmQ+Q7+wOJhnwgrsSpvrY5KYUfepCI9JVQeqfBXrSUyw1/2F KQhTinXSAjGFEOnMK0mdppJOrWL+t4yH5FOSqIqsi8CztD2qidaF6b5tjKT92xSu vrohGVtVHLfeU3QF/zbCvnhsF23dgCIItHIn3RPhEpqZZ40Fo9SA+jrdXbhkDaMo QNJdMYnt1SOd9vUP34IyBdexgMwqKBfnfCNsSthYRElOmTqy4fz8wHLIopkJ8y7Z zKyMNgiqbHb08wiT5DZvBCjNuErAOf/W0umCU199i18s+cfRXOD1Q5uLFqFjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCAwHVk54Kbg/1MKhlz7hBpoMsRowHwYDVR0j BBgwFoAUpu9Oonqm3Trt5/gqvxGA2+GAhfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjE0MDAzNS8wL0E2RUY0RUEyN0FBNkREM0FFREU3RjgyQUJGMTE4 MERCRTE4MDg1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJFMTgwODVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIxNDAwMzUvMC9BNkVGNEVBMjdBQTZE RDNBRURFN0Y4MkFCRjExODBEQkUxODA4NUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8xJKDfBAIyQ tNRmFagWjqvUViO4S1d2iOdEmom4ZHBICAzU7QfpgXl3dZVspR5OkFecUiHbDENU 3ofmsYpQTI/cAnjGA/hLGoYBZsNJlOm8loXxwZQVCoq9b8nhKV8ENTtsIC8kJfcE aVWr3q0wiNyRrMLLaYiuuXR57FVc5ZJQG0h6ucvvRo5BVqrxc4nLYhpvc93145Zg UkMauXGbj4t8WlOYQxUBFegMQ7Q367mx0tn2C6zXIqUpoGaXcn3rxWW8nj7r3I97 AjVpLdSDp+DNmC0woQLApOmIw7dfOMvybnVHXH84cqVTVhyS09XoCfsgZ82c8kqN 5yJ/T704Ag== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:40 2026 by rpki-client