$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json) Hash identifier: evoi0Ls2QuUQ3kRnVLxpRBt33iYFUM6HVTiQY0U3Gw4= Subject key identifier: B0:99:A1:93:7E:72:3B:17:6E:4E:AD:F5:C5:60:DA:A3:C7:BB:00:78 Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Certificate serial: 05127AF82BF9CD0C9E1240EEE19EAEF9F772F4B0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 01:54:17 +0000 Manifest this update: Mon 13 Apr 2026 01:49:17 +0000 Manifest next update: Tue 14 Apr 2026 04:54:17 +0000 Files and hashes: 1: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=) 2: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: Z45GV6a0XHrT+zhZ/QlXG0ZHrt2gYzHBLaH1VHDTQv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:12:7a:f8:2b:f9:cd:0c:9e:12:40:ee:e1:9e:ae:f9:f7:72:f4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Validity Not Before: Apr 13 01:49:17 2026 GMT Not After : Apr 14 04:54:17 2026 GMT Subject: CN=B099A1937E723B176E4EADF5C560DAA3C7BB0078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:d4:20:a2:e2:db:21:70:35:aa:27:05:2a: e5:cb:a3:02:80:04:28:f9:5e:4d:7c:65:7e:30:b8: b2:f5:a5:a7:18:3f:af:69:30:b5:90:4b:41:f0:84: 52:01:bf:0d:e9:13:87:02:50:1b:70:fd:39:3d:b4: 8b:47:65:8f:e6:03:ea:65:4c:c5:16:ad:94:76:54: 26:60:ec:6b:d6:4a:b9:7e:97:91:9e:8f:96:74:c9: c0:eb:61:50:9c:65:a3:10:05:ee:64:d4:b5:93:f6: d0:23:14:cb:d7:07:ec:0a:1d:d6:64:80:1b:14:07: 58:95:c7:f5:5c:6f:30:da:51:3f:d7:0d:ae:a3:93: 37:92:c3:0e:e8:54:96:2d:53:d6:7c:1c:44:9b:f7: 26:ce:59:d0:8e:d1:19:a2:70:bc:84:ad:58:e8:e0: 33:e4:e6:19:e1:af:00:61:0a:8f:21:bf:ba:3f:e1: a0:7c:4f:a6:af:c1:4a:9c:bc:a5:98:d3:6a:46:a0: ee:bc:20:c9:28:ee:3e:7f:74:6c:9b:ac:ac:46:3a: ea:a3:3d:46:7f:55:c0:df:c2:32:31:8e:45:da:18: 80:53:52:65:31:8e:75:61:61:fa:0f:59:e0:f1:06: ea:ca:03:d1:12:f3:bc:c1:7a:3c:96:a8:12:cd:80: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:99:A1:93:7E:72:3B:17:6E:4E:AD:F5:C5:60:DA:A3:C7:BB:00:78 X509v3 Authority Key Identifier: keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2c:a4:cc:38:fa:47:cd:54:3c:48:06:0e:17:a4:04:3c:15: a5:ec:30:e2:a9:a1:69:21:1f:b8:19:4b:34:27:66:a6:b0:8f: 26:7d:04:22:33:ef:fe:7c:93:81:91:8d:f9:9f:ba:a1:00:72: 1f:9d:d2:d8:0b:16:86:f5:a9:54:43:20:85:de:a5:d9:af:94: bd:78:93:a4:d1:dd:88:7e:ff:76:5a:44:da:98:9d:4b:5f:85: 91:31:8c:7b:23:13:bf:04:2a:7a:da:d4:88:42:75:3b:49:8a: 41:c3:7b:bd:75:a9:59:77:05:95:43:4f:9f:e4:34:a2:de:06: 6d:12:43:f5:6b:aa:22:6c:5b:2c:53:3b:f1:35:d8:a1:4b:63: 97:83:be:2a:48:a4:22:42:af:cc:56:9b:e6:8e:3f:cb:f9:b6: af:7f:59:43:67:5c:5b:a8:9a:ff:cf:a3:ec:a7:6a:f0:d6:0d: 87:c1:68:dd:36:d9:9e:6b:75:23:f0:69:20:33:8c:f1:8d:6b: 2b:bf:bc:e6:53:c5:72:86:c6:46:56:c1:f4:5a:70:4e:b0:d7: 13:9b:69:67:ab:d1:f0:e2:c7:e6:4c:75:d7:46:ce:ea:35:cc: 9a:5d:9b:38:7a:f5:24:48:cd:6f:3a:ca:52:ec:cf:99:c6:71: 8e:33:64:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBRJ6+Cv5zQyeEkDu4Z6u+fdy9LAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1 NUJGRjFGNTAeFw0yNjA0MTMwMTQ5MTdaFw0yNjA0MTQwNDU0MTdaMDMxMTAvBgNV BAMTKEIwOTlBMTkzN0U3MjNCMTc2RTRFQURGNUM1NjBEQUEzQzdCQjAwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8stQgouLbIXA1qicFKuXLowKA BCj5Xk18ZX4wuLL1pacYP69pMLWQS0HwhFIBvw3pE4cCUBtw/Tk9tItHZY/mA+pl TMUWrZR2VCZg7GvWSrl+l5Gej5Z0ycDrYVCcZaMQBe5k1LWT9tAjFMvXB+wKHdZk gBsUB1iVx/VcbzDaUT/XDa6jkzeSww7oVJYtU9Z8HESb9ybOWdCO0RmicLyErVjo 4DPk5hnhrwBhCo8hv7o/4aB8T6avwUqcvKWY02pGoO68IMko7j5/dGybrKxGOuqj PUZ/VcDfwjIxjkXaGIBTUmUxjnVhYfoPWeDxBurKA9ES87zBejyWqBLNgEc/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsJmhk35yOxduTq31xWDao8e7AHgwHwYDVR0j BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1 RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriykzDj6R81U PEgGDhekBDwVpeww4qmhaSEfuBlLNCdmprCPJn0EIjPv/nyTgZGN+Z+6oQByH53S 2AsWhvWpVEMghd6l2a+UvXiTpNHdiH7/dlpE2pidS1+FkTGMeyMTvwQqetrUiEJ1 O0mKQcN7vXWpWXcFlUNPn+Q0ot4GbRJD9WuqImxbLFM78TXYoUtjl4O+KkikIkKv zFab5o4/y/m2r39ZQ2dcW6ia/8+j7Kdq8NYNh8Fo3TbZnmt1I/BpIDOM8Y1rK7+8 5lPFcobGRlbB9FpwTrDXE5tpZ6vR8OLH5kx110bO6jXMml2bOHr1JEjNbzrKUuzP mcZxjjNkVg== -----END CERTIFICATE-----Generated at Mon Apr 13 13:58:15 2026 by rpki-client