$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: W2oLi0o6iawpTeHnv7kNpTX3iq8ghDj4vf15/FztsQs= Subject key identifier: 0D:41:81:42:63:5A:0D:40:8D:16:1E:F1:23:FB:44:D3:CE:37:AF:1A Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 33E10A3350700520E2CB7F7288C754B9D0604AF2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 13:19:17 +0000 Manifest this update: Mon 13 Apr 2026 13:14:17 +0000 Manifest next update: Tue 14 Apr 2026 15:02:17 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: lIrQ6YIS7WVXgTPKrLdMex5UDM20omsqEo7EuL8dtRA=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e1:0a:33:50:70:05:20:e2:cb:7f:72:88:c7:54:b9:d0:60:4a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Apr 13 13:14:17 2026 GMT Not After : Apr 14 15:02:17 2026 GMT Subject: CN=0D418142635A0D408D161EF123FB44D3CE37AF1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:72:3b:3c:6a:cb:90:5e:f5:c9:61:5b:53: 91:3e:cb:73:49:bd:06:a8:a4:79:75:40:53:88:df: bb:88:e5:f9:18:b4:e7:39:ad:4f:aa:7d:56:02:59: f4:87:fa:9c:fa:9e:fd:a2:11:a1:ee:ae:14:91:ee: ed:c8:fb:fe:d6:54:9b:d7:6d:cb:e8:9e:60:dc:d6: 09:f7:13:6a:c0:15:e6:1b:fe:41:61:d8:28:ff:6c: da:a9:e0:63:ea:ed:3b:a9:d0:d6:a2:97:37:cb:f8: b4:c9:6e:7a:36:8b:48:89:02:cb:8d:8c:d1:e9:07: 24:d4:2b:39:7b:7e:17:a9:ac:d6:dd:db:ba:10:e8: 9c:25:1a:fd:11:70:d6:2e:a9:98:f8:09:25:14:63: 7a:d3:07:59:7b:e9:8c:2a:aa:85:c7:5c:f8:dd:fc: 17:cb:d0:7f:70:60:c3:06:cc:3e:97:c4:88:c9:25: b4:0c:6c:17:65:66:14:31:b6:a5:7f:b1:ef:fe:03: 35:6e:12:32:59:ad:09:33:c9:2f:00:d9:c7:ff:6c: fd:05:16:54:6a:a0:ec:6f:72:f3:3a:18:6f:31:5e: ea:28:99:f7:a5:67:be:cc:71:0e:e4:b9:b0:3e:b7: eb:3c:a4:a4:ce:d7:27:54:a6:dc:fa:1d:07:0d:54: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:41:81:42:63:5A:0D:40:8D:16:1E:F1:23:FB:44:D3:CE:37:AF:1A X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:30:a0:9e:18:e9:16:f1:b4:20:aa:f3:c5:d1:ce:38:47:8b: 52:49:aa:3c:9c:9f:65:bd:e1:4f:53:d4:c3:fe:0e:34:ed:44: 90:3d:f4:39:55:95:8e:0a:fe:8a:62:3b:50:34:11:c0:64:e7: 79:06:b4:d2:f8:6d:be:7f:d2:24:79:c4:d7:63:f1:2b:2c:d6: d1:3d:ef:f4:bc:3b:b4:75:32:70:87:66:b6:8f:34:6c:9d:c0: d5:c4:95:1d:19:89:ba:3c:40:e5:67:9b:ad:21:72:fe:ed:e2: c4:13:f9:f8:ff:0a:70:e8:d3:ab:7e:a5:f8:de:24:74:aa:97: 13:62:df:3e:2e:39:69:08:b0:ec:e2:5a:06:96:ff:c2:2f:0f: fd:08:fb:2d:fb:48:eb:33:bc:e1:47:6e:aa:24:0d:e2:d1:6d: 8d:d4:b1:10:9b:50:91:60:69:cb:f9:09:19:90:4d:5a:43:6f: ac:6f:4d:bd:0a:79:c0:bb:55:da:59:d6:5d:77:19:16:88:b8: 5a:eb:b7:40:be:d2:71:a1:a9:74:e1:98:74:6b:04:b8:87:af: 6d:5d:47:80:88:fd:b9:97:49:dd:1c:b3:1c:22:da:7b:9e:7b: 18:56:78:f1:dc:97:a8:29:b5:36:2d:ef:b5:0a:0c:3c:2a:5a: 0c:33:2a:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM+EKM1BwBSDiy39yiMdUudBgSvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjA0MTMxMzE0MTdaFw0yNjA0MTQxNTAyMTdaMDMxMTAvBgNV BAMTKDBENDE4MTQyNjM1QTBENDA4RDE2MUVGMTIzRkI0NEQzQ0UzN0FGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBHI7PGrLkF71yWFbU5E+y3NJ vQaopHl1QFOI37uI5fkYtOc5rU+qfVYCWfSH+pz6nv2iEaHurhSR7u3I+/7WVJvX bcvonmDc1gn3E2rAFeYb/kFh2Cj/bNqp4GPq7Tup0NailzfL+LTJbno2i0iJAsuN jNHpByTUKzl7fheprNbd27oQ6JwlGv0RcNYuqZj4CSUUY3rTB1l76YwqqoXHXPjd /BfL0H9wYMMGzD6XxIjJJbQMbBdlZhQxtqV/se/+AzVuEjJZrQkzyS8A2cf/bP0F FlRqoOxvcvM6GG8xXuoomfelZ77McQ7kubA+t+s8pKTO1ydUptz6HQcNVEyjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDUGBQmNaDUCNFh7xI/tE0843rxowHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDCgnhjpFvG0 IKrzxdHOOEeLUkmqPJyfZb3hT1PUw/4ONO1EkD30OVWVjgr+imI7UDQRwGTneQa0 0vhtvn/SJHnE12PxKyzW0T3v9Lw7tHUycIdmto80bJ3A1cSVHRmJujxA5WebrSFy /u3ixBP5+P8KcOjTq36l+N4kdKqXE2LfPi45aQiw7OJaBpb/wi8P/Qj7LftI6zO8 4UduqiQN4tFtjdSxEJtQkWBpy/kJGZBNWkNvrG9NvQp5wLtV2lnWXXcZFoi4Wuu3 QL7ScaGpdOGYdGsEuIevbV1HgIj9uZdJ3RyzHCLae557GFZ48dyXqCm1Ni3vtQoM PCpaDDMqdQ== -----END CERTIFICATE-----Generated at Mon Apr 13 19:12:39 2026 by rpki-client