$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json) Hash identifier: /769YRXTC+L7i5BwIiSc8aYaINxIeZOp3tDrjABEjaE= Subject key identifier: A5:E0:12:F8:F6:5D:0F:F2:E6:4B:62:62:45:7D:FB:4F:8D:74:08:25 Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Certificate serial: 100A253E039DBAE9F9BD69EC65C02A87839128C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 07:54:17 +0000 Manifest this update: Mon 13 Apr 2026 07:49:17 +0000 Manifest next update: Tue 14 Apr 2026 10:14:17 +0000 Files and hashes: 1: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=) 2: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: Pb2dFgG4lBxntJTLYMXirxjf6dejjzAmCYL9YijnEao=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0a:25:3e:03:9d:ba:e9:f9:bd:69:ec:65:c0:2a:87:83:91:28:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Validity Not Before: Apr 13 07:49:17 2026 GMT Not After : Apr 14 10:14:17 2026 GMT Subject: CN=A5E012F8F65D0FF2E64B6262457DFB4F8D740825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:b0:ae:2d:ae:b8:21:7a:9a:ba:43:b2:47: 18:d2:00:11:4c:7d:c6:a4:39:1b:dc:f2:a8:3b:66: 08:6b:9b:e8:ef:ff:50:14:be:b9:4a:cc:f8:c1:e3: 4a:da:1e:5b:31:e0:3d:3d:c1:0c:e2:be:10:47:ec: c4:80:42:16:df:7f:84:f9:d7:17:13:76:bd:19:0b: e0:d5:97:75:1e:cf:30:42:40:df:4d:5c:66:d7:19: c7:1e:bb:ce:e2:d2:e9:3d:88:71:41:06:9f:e6:3a: 4d:f5:75:b8:b6:65:bd:10:64:b9:c2:95:e4:40:b1: 6e:05:12:93:c3:22:dc:fa:d5:e5:84:25:a2:83:c5: 53:45:45:6b:a8:70:d6:79:40:d2:f6:15:c0:4a:4e: 2c:01:f8:bd:8e:ba:82:93:e9:9f:f8:12:b4:af:de: e6:2e:89:ab:03:bb:f3:77:2a:ff:ea:31:45:b8:3b: 8f:a9:59:4b:16:da:44:43:26:af:68:8f:f3:51:9a: cd:d3:fa:a4:6f:46:04:4d:74:be:31:c9:96:49:94: af:5b:00:62:53:ef:f8:2e:ed:73:99:68:56:d9:67: ce:82:c2:61:bb:04:56:9c:fe:ce:12:d1:29:6a:3b: 0e:c8:93:84:e3:5c:89:fd:a8:ea:c4:23:1a:56:35: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:12:F8:F6:5D:0F:F2:E6:4B:62:62:45:7D:FB:4F:8D:74:08:25 X509v3 Authority Key Identifier: keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ed:27:6c:a4:4f:db:9a:23:a0:a9:c5:c6:55:bd:06:70:57: cf:79:e7:b9:cd:05:dc:76:dc:f7:ab:4c:f5:99:b8:4f:8b:44: 07:da:58:c2:72:45:23:29:d1:fe:b3:b6:a6:74:71:e1:66:5a: 4a:e0:5b:6d:f2:b2:80:a9:2f:88:70:04:46:5c:0a:3b:c9:b1: a0:a8:14:56:82:c4:09:b6:5e:8d:f3:9f:b7:1a:42:ae:4e:36: 31:e9:db:3b:7b:49:fc:17:10:13:6f:29:ad:8d:37:26:f4:e1: c8:0e:ab:99:8a:e7:4d:68:d2:4c:99:c3:17:c8:79:df:29:f2: 6d:b9:b4:05:5d:c5:26:7c:2a:8a:e8:3b:c9:f4:01:b9:5e:97: 42:ec:00:18:09:ff:5d:7a:3f:99:7d:0d:ce:58:30:b8:25:98: ad:6f:45:0d:ce:3c:be:58:78:e6:57:a7:e8:5f:71:09:2b:4f: ca:56:cf:15:57:77:42:37:af:1f:14:fe:6e:da:5a:61:ae:74: 39:d2:bf:0c:fa:68:09:1b:71:57:03:a5:35:c6:cd:8e:7d:65: ff:99:f2:19:af:ad:6a:f8:1b:be:a4:cb:6c:f8:ec:80:45:be: 5b:71:86:87:79:42:38:5f:15:7a:f6:ab:32:ea:9e:de:ed:1d: 8e:bb:3f:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEAolPgOduun5vWnsZcAqh4ORKMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1 NjE4RjIwRjAeFw0yNjA0MTMwNzQ5MTdaFw0yNjA0MTQxMDE0MTdaMDMxMTAvBgNV BAMTKEE1RTAxMkY4RjY1RDBGRjJFNjRCNjI2MjQ1N0RGQjRGOEQ3NDA4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i7CuLa64IXqaukOyRxjSABFM fcakORvc8qg7Zghrm+jv/1AUvrlKzPjB40raHlsx4D09wQzivhBH7MSAQhbff4T5 1xcTdr0ZC+DVl3UezzBCQN9NXGbXGcceu87i0uk9iHFBBp/mOk31dbi2Zb0QZLnC leRAsW4FEpPDItz61eWEJaKDxVNFRWuocNZ5QNL2FcBKTiwB+L2OuoKT6Z/4ErSv 3uYuiasDu/N3Kv/qMUW4O4+pWUsW2kRDJq9oj/NRms3T+qRvRgRNdL4xyZZJlK9b AGJT7/gu7XOZaFbZZ86CwmG7BFac/s4S0SlqOw7Ik4TjXIn9qOrEIxpWNfGXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpeAS+PZdD/LmS2JiRX37T410CCUwHwYDVR0j BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+0nbKRP25oj oKnFxlW9BnBXz3nnuc0F3Hbc96tM9Zm4T4tEB9pYwnJFIynR/rO2pnRx4WZaSuBb bfKygKkviHAERlwKO8mxoKgUVoLECbZejfOftxpCrk42MenbO3tJ/BcQE28prY03 JvThyA6rmYrnTWjSTJnDF8h53ynybbm0BV3FJnwqiug7yfQBuV6XQuwAGAn/XXo/ mX0NzlgwuCWYrW9FDc48vlh45len6F9xCStPylbPFVd3QjevHxT+btpaYa50OdK/ DPpoCRtxVwOlNcbNjn1l/5nyGa+tavgbvqTLbPjsgEW+W3GGh3lCOF8VevarMuqe 3u0djrs/8Q== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:20 2026 by rpki-client