$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: zmZj3AZFo9M6tdyVKoQ7rWNDj42pk+yeJCo7yRdM15E= Subject key identifier: 3A:86:5F:85:C4:15:01:09:95:B7:05:A4:23:90:33:8B:58:B5:84:E2 Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 6F12264D62CAE501A5B73008007245700B9004F3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 01:44:17 +0000 Manifest this update: Mon 13 Apr 2026 01:39:17 +0000 Manifest next update: Tue 14 Apr 2026 02:49:17 +0000 Files and hashes: 1: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: Zf2J4qVnvteNNbRQx8Aq70kEISIic41dzsnrYP8hsKg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:12:26:4d:62:ca:e5:01:a5:b7:30:08:00:72:45:70:0b:90:04:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: Apr 13 01:39:17 2026 GMT Not After : Apr 14 02:49:17 2026 GMT Subject: CN=3A865F85C415010995B705A42390338B58B584E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:43:59:8b:ec:a6:0b:e1:24:c9:23:73:b9: e0:4c:eb:84:79:9d:ab:f8:d9:71:31:79:64:17:04: 55:7e:c5:e8:f8:c2:d3:31:a9:85:c6:6a:fc:66:96: 3a:f7:30:5c:de:05:a2:e3:2a:b5:07:99:77:be:5a: 74:70:eb:75:b2:b4:87:6b:01:2d:b1:c8:90:89:87: ff:60:01:47:95:4f:70:bc:a1:e2:ae:8a:97:e3:8f: 1a:92:18:a0:01:2d:39:83:2c:29:f1:a7:3a:c6:7f: 6d:c1:37:d7:cc:b5:ca:ba:35:1e:b4:a6:0c:f1:33: dc:88:32:bf:48:dd:c4:db:ef:e7:03:1b:c1:68:d0: 0d:40:14:20:69:b2:a5:59:b1:13:ea:e2:dd:f4:4f: 7a:74:39:5b:23:91:38:3a:53:d4:6b:66:c7:d1:58: 9e:6e:ac:92:85:41:77:a6:71:74:99:69:0e:14:20: 78:fa:aa:28:3b:a0:16:f1:f7:cf:6d:eb:28:78:a9: fa:7f:59:2f:db:15:d0:84:97:4d:47:59:e3:4c:e9: 84:0c:e9:4f:33:6f:46:11:dd:e2:9a:38:b4:e9:0f: 41:a1:c8:aa:0e:27:36:36:3c:6f:ee:f2:29:c8:77: c6:f8:2b:d9:c6:a1:be:37:7e:63:19:7c:ed:c5:30: 88:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:5F:85:C4:15:01:09:95:B7:05:A4:23:90:33:8B:58:B5:84:E2 X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b4:03:ec:33:70:33:a7:8c:9b:db:53:c5:98:4d:ae:bb:82: b4:67:97:08:8e:60:63:76:0b:8d:bd:00:ae:15:4f:9b:1e:3d: 40:a0:48:1f:34:aa:da:b1:1e:97:41:fb:eb:79:cc:22:13:fb: 30:b7:84:fa:4c:e8:4f:fe:73:7d:b2:23:1d:e4:31:da:55:87: 10:df:a8:3e:64:af:49:72:d9:00:21:c7:38:d2:86:df:4e:c9: 3c:c2:81:3e:eb:fa:89:e5:80:56:79:e1:3d:81:f7:9d:e9:3e: 5a:9e:4d:59:05:45:35:0b:97:aa:81:45:4b:f5:fb:2c:a5:e7: 46:9b:63:f5:59:b2:16:0b:df:01:3c:77:17:65:c6:f4:9f:d6: 63:6b:54:9d:3f:63:e2:20:5e:1d:94:d2:8d:6b:db:04:8a:dc: 52:d1:96:08:6a:eb:c6:96:7f:5f:2c:a8:6f:9c:cd:d9:4f:72: c2:f1:84:1b:e3:d6:b3:0e:9e:5e:dd:2f:13:73:5c:af:93:58: 1d:43:d8:dc:63:dc:d7:de:48:b2:8c:bd:12:db:af:35:60:5f: 35:9c:9d:d6:5a:e3:88:88:fa:7e:74:83:9c:dd:00:4d:df:23: 4e:19:51:dd:70:c2:2f:2b:12:1c:ea:55:bb:be:9d:9f:be:f0: bf:66:38:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbxImTWLK5QGltzAIAHJFcAuQBPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjA0MTMwMTM5MTdaFw0yNjA0MTQwMjQ5MTdaMDMxMTAvBgNV BAMTKDNBODY1Rjg1QzQxNTAxMDk5NUI3MDVBNDIzOTAzMzhCNThCNTg0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyx0NZi+ymC+EkySNzueBM64R5 nav42XExeWQXBFV+xej4wtMxqYXGavxmljr3MFzeBaLjKrUHmXe+WnRw63WytIdr AS2xyJCJh/9gAUeVT3C8oeKuipfjjxqSGKABLTmDLCnxpzrGf23BN9fMtcq6NR60 pgzxM9yIMr9I3cTb7+cDG8Fo0A1AFCBpsqVZsRPq4t30T3p0OVsjkTg6U9RrZsfR WJ5urJKFQXemcXSZaQ4UIHj6qig7oBbx989t6yh4qfp/WS/bFdCEl01HWeNM6YQM 6U8zb0YR3eKaOLTpD0GhyKoOJzY2PG/u8inId8b4K9nGob43fmMZfO3FMIjzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOoZfhcQVAQmVtwWkI5Azi1i1hOIwHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibQD7DNwM6eM m9tTxZhNrruCtGeXCI5gY3YLjb0ArhVPmx49QKBIHzSq2rEel0H763nMIhP7MLeE +kzoT/5zfbIjHeQx2lWHEN+oPmSvSXLZACHHONKG307JPMKBPuv6ieWAVnnhPYH3 nek+Wp5NWQVFNQuXqoFFS/X7LKXnRptj9VmyFgvfATx3F2XG9J/WY2tUnT9j4iBe HZTSjWvbBIrcUtGWCGrrxpZ/Xyyob5zN2U9ywvGEG+PWsw6eXt0vE3Ncr5NYHUPY 3GPc195Isoy9EtuvNWBfNZyd1lrjiIj6fnSDnN0ATd8jThlR3XDCLysSHOpVu76d n77wv2Y41Q== -----END CERTIFICATE-----Generated at Mon Apr 13 12:30:12 2026 by rpki-client