$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: cvbK8DOorBAeTQceNblrIsuJQ05TJ5w40gkCO0wNjS0= Subject key identifier: A2:A4:E1:A0:AF:9D:55:EA:D2:1F:D6:E8:D4:F4:17:7A:B4:89:89:A6 Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 4A958BA3C25160C59E779C2A81AB5874F50E60B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 75 Signing time: Mon 13 Apr 2026 05:43:29 +0000 Manifest this update: Mon 13 Apr 2026 05:38:29 +0000 Manifest next update: Tue 14 Apr 2026 06:26:29 +0000 Files and hashes: 1: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: xSrgqTpTL3hvD1PFHjqrzYgxlRvcVsueyUxSMgal7Vw=) 2: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) 3: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:95:8b:a3:c2:51:60:c5:9e:77:9c:2a:81:ab:58:74:f5:0e:60:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Apr 13 05:38:29 2026 GMT Not After : Apr 14 06:26:29 2026 GMT Subject: CN=A2A4E1A0AF9D55EAD21FD6E8D4F4177AB48989A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:4b:13:eb:6c:a1:08:52:f8:00:40:97:f1: 96:b0:48:ab:05:36:fe:f1:2e:bd:89:e3:69:ee:93: 3f:cd:fd:69:80:53:27:b0:85:b6:67:d2:6b:82:01: 71:2a:a4:a7:c6:5d:a1:85:c7:98:31:17:a6:27:55: 1b:2b:13:41:d3:d6:f6:ac:47:97:1c:f4:7d:f7:73: f8:8d:3b:01:c2:3e:0e:8e:31:a5:47:88:23:05:70: aa:4c:85:6d:fa:06:50:3b:f3:54:58:70:77:b0:df: 01:cb:8e:41:09:f7:77:db:43:d4:29:d6:b0:7a:21: 53:98:89:39:c8:e6:7d:70:17:0f:f2:0e:f6:4f:8b: b9:bb:1f:4a:b2:d5:0c:52:96:f2:e9:16:1c:c5:6d: 97:d8:e1:d1:e7:bd:0a:08:1e:2e:2f:e0:b6:f3:67: a1:6a:79:2e:3d:4c:f8:3e:99:b8:55:cd:4f:0b:ad: 00:10:65:4d:49:3b:75:06:e2:18:9d:46:34:44:4f: a1:77:05:a1:79:31:a0:5d:48:df:6e:1b:60:24:7c: 07:b7:0c:a9:8b:ec:12:f8:33:6b:1f:80:f1:ea:38: aa:2e:21:ea:8e:b6:35:a5:ec:94:fa:30:4b:e5:f8: d1:d5:69:f5:79:64:ad:24:5e:64:f7:69:d1:40:48: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:E1:A0:AF:9D:55:EA:D2:1F:D6:E8:D4:F4:17:7A:B4:89:89:A6 X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8f:42:32:03:c5:fd:11:d1:1a:ee:80:f4:87:9e:60:4d:cf: b1:fa:64:53:c0:f3:71:47:67:3f:f1:ef:5d:90:d9:23:35:d8: e4:b0:3d:82:4c:83:22:13:81:1e:53:83:01:7e:03:1e:04:40: 79:3e:0a:2c:bf:74:26:ea:74:9d:44:e2:28:e6:d1:0e:a6:5f: b2:ad:f1:57:a8:c7:da:ad:04:49:51:cb:42:e5:37:f5:c4:e7: 30:58:9b:2b:88:06:7c:45:31:ad:25:7d:a1:2e:b1:4b:af:c6: e0:83:91:f2:c4:f0:c7:80:88:b4:c0:29:6e:43:4a:62:d2:b6: ee:56:50:00:96:14:e9:f3:89:bd:f3:5c:f4:00:d4:73:3c:f3: e6:2b:16:9e:5a:f2:00:2d:d4:2c:1f:7f:ce:f3:3a:2b:76:4d: e8:e8:c3:b0:5f:43:73:e2:f6:14:a9:2a:7e:96:7f:ef:fe:9a: 07:a9:30:cc:ac:25:e5:e9:e2:f3:b5:43:41:ea:f6:ed:ea:2a: 5a:1e:89:d6:f8:41:d3:38:da:63:52:33:24:36:1d:d2:d1:f3: c5:73:4a:ed:9e:63:cb:0c:af:27:3e:64:b3:7e:77:f7:c3:eb: ee:c4:7a:48:0d:89:98:ac:a3:17:25:ac:fa:79:ee:05:1b:ab: 0d:6f:87:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSpWLo8JRYMWed5wqgatYdPUOYLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjA0MTMwNTM4MjlaFw0yNjA0MTQwNjI2MjlaMDMxMTAvBgNV BAMTKEEyQTRFMUEwQUY5RDU1RUFEMjFGRDZFOEQ0RjQxNzdBQjQ4OTg5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KksT62yhCFL4AECX8ZawSKsF Nv7xLr2J42nukz/N/WmAUyewhbZn0muCAXEqpKfGXaGFx5gxF6YnVRsrE0HT1vas R5cc9H33c/iNOwHCPg6OMaVHiCMFcKpMhW36BlA781RYcHew3wHLjkEJ93fbQ9Qp 1rB6IVOYiTnI5n1wFw/yDvZPi7m7H0qy1QxSlvLpFhzFbZfY4dHnvQoIHi4v4Lbz Z6FqeS49TPg+mbhVzU8LrQAQZU1JO3UG4hidRjRET6F3BaF5MaBdSN9uG2AkfAe3 DKmL7BL4M2sfgPHqOKouIeqOtjWl7JT6MEvl+NHVafV5ZK0kXmT3adFASJ3bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoqThoK+dVerSH9bo1PQXerSJiaYwHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI9CMgPF/RHR Gu6A9IeeYE3PsfpkU8DzcUdnP/HvXZDZIzXY5LA9gkyDIhOBHlODAX4DHgRAeT4K LL90Jup0nUTiKObRDqZfsq3xV6jH2q0ESVHLQuU39cTnMFibK4gGfEUxrSV9oS6x S6/G4IOR8sTwx4CItMApbkNKYtK27lZQAJYU6fOJvfNc9ADUczzz5isWnlryAC3U LB9/zvM6K3ZN6OjDsF9Dc+L2FKkqfpZ/7/6aB6kwzKwl5eni87VDQer27eoqWh6J 1vhB0zjaY1IzJDYd0tHzxXNK7Z5jywyvJz5ks35398Pr7sR6SA2JmKyjFyWs+nnu BRurDW+HOA== -----END CERTIFICATE-----Generated at Mon Apr 13 16:42:59 2026 by rpki-client