$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft File: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft (raw, json) Hash identifier: eNQAehlx8sHR3O0QNKzyIj+sN5SANmoXYowuxuaMSGc= Subject key identifier: B9:C4:7E:CE:0F:CD:B0:10:6F:87:1F:F1:A5:C6:CD:AD:D0:13:7C:3C Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 5FF26E05339F7DA22339D26EF4BE3C1665883825 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft Manifest number: 66 Signing time: Sun 05 Apr 2026 22:28:56 +0000 Manifest this update: Sun 05 Apr 2026 22:23:56 +0000 Manifest next update: Mon 06 Apr 2026 22:58:56 +0000 Files and hashes: 1: 3130332e3231392e38362e302f32332d3234203d3e20313532333230.roa (hash: y9Nb3BhAesAhC0Yz2nuugVvW5UakXURGQvAzLngRYos=) 2: 3130332e3231392e38352e302f32342d3234203d3e20313532333230.roa (hash: m2V99zSF93yuAoBUSJ81tqRCkxDUa+Q9dv+b/3LsrzA=) 3: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl (hash: TbYR3/C6wZuqkwz2GtZlIoJfafMvqtEdxCG2FBLsRJ4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 22:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f2:6e:05:33:9f:7d:a2:23:39:d2:6e:f4:be:3c:16:65:88:38:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 5 22:23:56 2026 GMT Not After : Apr 6 22:58:56 2026 GMT Subject: CN=B9C47ECE0FCDB0106F871FF1A5C6CDADD0137C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:5c:4a:e3:2d:30:d8:1d:66:31:8b:b4:ea: 6e:97:01:e5:07:4c:56:29:ed:dd:ed:90:85:b5:df: ba:85:3b:48:33:18:5f:f7:fd:93:00:57:83:18:2a: 1f:07:22:63:fa:ca:d9:76:02:06:54:99:a3:9f:6e: f3:19:8d:98:55:e8:a0:eb:26:13:31:85:ae:1a:d2: c3:95:58:e5:09:da:60:27:8f:22:74:d4:d5:fb:9f: 49:42:3e:73:7d:a7:f8:2c:fc:65:45:05:4f:da:b2: 77:02:3b:19:69:84:9a:96:25:f2:ea:d9:c9:44:68: 1e:22:d4:da:d1:9f:b4:51:7b:44:0d:4e:e9:cf:47: 55:85:3c:7e:a9:ba:7d:e1:f6:22:7c:2b:1e:97:c7: 8b:94:6c:5c:70:e0:ef:9d:c6:cc:9e:7c:05:90:91: 98:f0:4a:e6:26:96:d9:0b:2f:07:ab:f1:79:65:7e: 07:ba:2b:87:a8:8f:13:0a:31:96:dc:a0:c8:02:8c: 1e:3e:06:1c:cd:86:b7:8b:53:b8:cf:c3:03:f7:6c: af:18:3a:a7:f7:60:87:72:34:66:39:34:ad:cf:78: 72:10:82:d2:80:a8:43:1d:26:fd:10:4a:3d:aa:3d: 87:26:df:fc:6c:4a:a6:6f:1d:f2:fd:fa:80:03:b8: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C4:7E:CE:0F:CD:B0:10:6F:87:1F:F1:A5:C6:CD:AD:D0:13:7C:3C X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:24:ad:83:10:09:2f:ae:3e:e3:f2:64:90:66:c3:3a:87:cc: 30:22:5b:c3:b3:57:0d:7b:a2:20:d2:e4:b5:51:a5:57:11:d0: c8:3c:f6:ca:81:12:7b:64:c9:a4:c4:b0:a9:ad:c3:cc:c1:0a: b1:4b:60:71:73:e9:6e:e4:d8:f5:54:96:42:93:20:68:46:92: 65:5a:4a:b6:94:1b:0a:a2:46:59:7f:71:14:e7:0c:f9:c6:81: 62:b8:01:f5:c0:1f:8a:e5:45:75:8c:b9:61:bb:a5:39:d4:8c: 84:b3:5f:c5:fa:22:67:c3:33:24:b9:91:9f:5c:89:f5:5f:ce: 72:98:9e:7c:34:d2:88:f7:0c:3a:42:8d:94:e1:b8:fe:a5:91: d6:a7:64:d7:c8:ba:6e:74:c8:5b:5c:87:e1:1a:dc:95:ff:bd: d5:b7:49:bd:69:5e:4d:76:e6:83:ce:44:d2:94:ef:d1:29:ec: 41:86:00:ca:16:41:1e:47:27:17:c3:2b:5c:c1:6a:4d:42:5b: 1c:a7:f5:53:28:18:ef:ae:0b:08:69:f6:bb:4d:20:54:d9:e1: 34:fa:7f:bf:41:5b:95:25:5e:2f:23:2b:f4:ed:83:85:d4:1c: aa:82:8a:dd:de:28:6c:de:a1:6a:f7:f3:5c:f5:c7:9e:79:bd: ac:84:19:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX/JuBTOffaIjOdJu9L48FmWIOCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MDUyMjIzNTZaFw0yNjA0MDYyMjU4NTZaMDMxMTAvBgNV BAMTKEI5QzQ3RUNFMEZDREIwMTA2Rjg3MUZGMUE1QzZDREFERDAxMzdDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSr1xK4y0w2B1mMYu06m6XAeUH TFYp7d3tkIW137qFO0gzGF/3/ZMAV4MYKh8HImP6ytl2AgZUmaOfbvMZjZhV6KDr JhMxha4a0sOVWOUJ2mAnjyJ01NX7n0lCPnN9p/gs/GVFBU/asncCOxlphJqWJfLq 2clEaB4i1NrRn7RRe0QNTunPR1WFPH6pun3h9iJ8Kx6Xx4uUbFxw4O+dxsyefAWQ kZjwSuYmltkLLwer8Xllfge6K4eojxMKMZbcoMgCjB4+BhzNhreLU7jPwwP3bK8Y Oqf3YIdyNGY5NK3PeHIQgtKAqEMdJv0QSj2qPYcm3/xsSqZvHfL9+oADuDgRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUucR+zg/NsBBvhx/xpcbNrdATfDwwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zRDAxQ0Q2OTI4RERF OEQyNkFDOTYyNjVGMUY5MDRDNzJGMUExMkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSStgxAJL64+ 4/JkkGbDOofMMCJbw7NXDXuiINLktVGlVxHQyDz2yoESe2TJpMSwqa3DzMEKsUtg cXPpbuTY9VSWQpMgaEaSZVpKtpQbCqJGWX9xFOcM+caBYrgB9cAfiuVFdYy5Ybul OdSMhLNfxfoiZ8MzJLmRn1yJ9V/OcpiefDTSiPcMOkKNlOG4/qWR1qdk18i6bnTI W1yH4Rrclf+91bdJvWleTXbmg85E0pTv0SnsQYYAyhZBHkcnF8MrXMFqTUJbHKf1 UygY764LCGn2u00gVNnhNPp/v0FblSVeLyMr9O2DhdQcqoKK3d4obN6havfzXPXH nnm9rIQZzg== -----END CERTIFICATE-----Generated at Mon Apr 6 14:15:10 2026 by rpki-client