$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json) Hash identifier: ylQMEy2gX3/x6pegO1jPg8elo7cskI9QT4Y5etbHjeE= Subject key identifier: 58:49:0B:93:40:C5:1B:52:68:7F:13:BF:C6:05:1D:64:64:CA:0F:6B Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Certificate serial: 1E88F2EEBA0DEE7DBC2F0915E1272E7BCBD50AD3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 07:14:17 +0000 Manifest this update: Mon 13 Apr 2026 07:09:17 +0000 Manifest next update: Tue 14 Apr 2026 10:54:17 +0000 Files and hashes: 1: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=) 2: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=) 3: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: G0z8t2M+2Vv7QDrb+gd1hTCC/kjJghfX/C/nNe8XPq0=) 4: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:88:f2:ee:ba:0d:ee:7d:bc:2f:09:15:e1:27:2e:7b:cb:d5:0a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Validity Not Before: Apr 13 07:09:17 2026 GMT Not After : Apr 14 10:54:17 2026 GMT Subject: CN=58490B9340C51B52687F13BFC6051D6464CA0F6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:37:10:bb:b9:02:c2:60:5e:f4:91:71:09: e2:07:05:81:64:08:6a:76:87:79:f5:10:f0:83:6a: 39:27:6a:a8:5a:5b:65:8b:1a:45:a7:16:41:d9:67: f0:5e:fd:97:13:e0:35:3c:e7:57:ab:e5:aa:86:61: 6e:b6:d3:d4:c8:49:6e:f4:a5:05:3a:af:7a:83:66: 47:f0:8d:f4:93:cd:4f:87:2b:fb:4f:c5:1d:dc:9d: 0d:d5:a4:be:5f:6f:b6:99:6c:0a:04:74:e5:e8:66: d3:42:f9:71:c5:91:73:bb:1a:55:6b:d4:85:f4:70: c3:c8:c4:cd:a9:e6:e0:5b:f0:15:40:cc:57:65:8d: d5:e9:2b:09:01:58:26:2c:a3:75:68:fc:50:a1:16: 83:e8:51:7e:75:25:20:b4:35:be:b1:e8:d4:c2:58: 7e:2c:98:84:b1:23:0c:90:ac:ca:ed:bd:6b:24:44: 1b:71:61:4a:04:b1:f5:a8:04:24:9e:49:9b:36:72: 62:a7:0c:9e:d0:57:82:d1:92:b4:5f:9e:ef:3d:a6: 1e:66:0b:cc:2a:bc:37:e2:a5:b7:9e:76:25:5d:02: 83:e1:41:c9:bb:a7:9a:90:60:67:71:11:c1:bc:1b: 63:b1:96:fb:8f:57:73:e3:1b:1b:3c:ab:e4:a0:9b: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:49:0B:93:40:C5:1B:52:68:7F:13:BF:C6:05:1D:64:64:CA:0F:6B X509v3 Authority Key Identifier: keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ea:00:05:6c:92:cb:27:09:32:36:5c:8d:16:80:3b:b8:aa: 09:ac:90:00:35:2c:9a:67:11:3f:fd:4c:0b:ab:fb:de:19:11: 7f:91:2e:4a:59:59:b1:14:80:9a:9d:dd:fa:e4:65:26:bc:a4: 41:e1:d7:08:b9:05:b3:23:0b:a7:f1:03:b2:f8:51:8b:bf:17: f2:0b:d6:8c:1a:47:61:4b:c5:67:4f:3c:9b:ac:e0:79:45:ad: 75:e1:09:03:15:16:69:5c:73:36:a8:ce:95:fd:33:30:91:68: 05:b4:ab:e2:38:28:b5:81:01:5b:34:29:a3:0d:a2:5c:e8:28: d2:31:66:d8:56:31:55:9c:de:10:1e:02:56:1b:f7:83:4d:d6: 28:4e:7f:8d:9e:a4:2c:42:46:2d:fd:96:3f:4d:6b:e7:0f:91: a6:68:c8:fc:c4:1c:03:4a:69:50:53:bf:e4:0d:e0:4e:d7:bd: f9:83:18:26:26:c3:32:d4:12:99:98:40:49:15:fc:91:61:1d: a7:cc:42:1f:4e:9d:06:bb:5e:c6:2b:67:80:48:0f:fa:bf:89: c0:d4:25:f8:06:b2:5a:1a:ba:47:85:07:2b:32:0b:da:70:72: 69:f0:6c:9e:f6:c2:04:60:ce:63:ef:ce:0a:69:d8:b6:4a:2f: 44:fc:fe:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHojy7roN7n28LwkV4Scue8vVCtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC NERBQjhGNTAeFw0yNjA0MTMwNzA5MTdaFw0yNjA0MTQxMDU0MTdaMDMxMTAvBgNV BAMTKDU4NDkwQjkzNDBDNTFCNTI2ODdGMTNCRkM2MDUxRDY0NjRDQTBGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fDcQu7kCwmBe9JFxCeIHBYFk CGp2h3n1EPCDajknaqhaW2WLGkWnFkHZZ/Be/ZcT4DU851er5aqGYW6209TISW70 pQU6r3qDZkfwjfSTzU+HK/tPxR3cnQ3VpL5fb7aZbAoEdOXoZtNC+XHFkXO7GlVr 1IX0cMPIxM2p5uBb8BVAzFdljdXpKwkBWCYso3Vo/FChFoPoUX51JSC0Nb6x6NTC WH4smISxIwyQrMrtvWskRBtxYUoEsfWoBCSeSZs2cmKnDJ7QV4LRkrRfnu89ph5m C8wqvDfipbeediVdAoPhQcm7p5qQYGdxEcG8G2OxlvuPV3PjGxs8q+SgmyuFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWEkLk0DFG1JofxO/xgUdZGTKD2swHwYDVR0j BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteoABWySyycJ MjZcjRaAO7iqCayQADUsmmcRP/1MC6v73hkRf5EuSllZsRSAmp3d+uRlJrykQeHX CLkFsyMLp/EDsvhRi78X8gvWjBpHYUvFZ088m6zgeUWtdeEJAxUWaVxzNqjOlf0z MJFoBbSr4jgotYEBWzQpow2iXOgo0jFm2FYxVZzeEB4CVhv3g03WKE5/jZ6kLEJG Lf2WP01r5w+RpmjI/MQcA0ppUFO/5A3gTte9+YMYJibDMtQSmZhASRX8kWEdp8xC H06dBrtexitngEgP+r+JwNQl+AayWhq6R4UHKzIL2nByafBsnvbCBGDOY+/OCmnY tkovRPz+zg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:42 2026 by rpki-client