$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: kJReWstmgf+JRuupVc0eAvDykt3N8WqaIYkSUdlwJyY= Subject key identifier: AC:E8:94:B7:18:BA:EC:79:A1:AD:DA:E0:60:6C:CD:67:C5:A7:1D:29 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 04DE2C6FF84F72A1A208986A5F7AEFB14F84512E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 83 Signing time: Mon 27 Apr 2026 02:13:40 +0000 Manifest this update: Mon 27 Apr 2026 02:08:40 +0000 Manifest next update: Tue 28 Apr 2026 05:16:40 +0000 Files and hashes: 1: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: LI2o6CNMmRxgtxys3dy3UErb80Xl9E2Ivvev72FujrU=) 2: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 3: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 05:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:de:2c:6f:f8:4f:72:a1:a2:08:98:6a:5f:7a:ef:b1:4f:84:51:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Apr 27 02:08:40 2026 GMT Not After : Apr 28 05:16:40 2026 GMT Subject: CN=ACE894B718BAEC79A1ADDAE0606CCD67C5A71D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:51:fb:d2:7b:d2:9b:75:57:05:9e:9f:d5: e8:fb:f2:4b:e9:20:67:de:b1:0e:15:35:46:d1:db: 37:51:3d:6f:e3:d7:d3:4f:d1:e8:78:b2:d2:88:f6: 4d:63:af:ad:4d:bb:b9:da:75:ce:70:3d:02:ae:20: 23:60:66:e5:a7:2b:75:4d:08:98:47:9d:8c:fd:5e: bf:60:60:0a:f2:fa:69:b5:28:ff:97:7f:ba:63:15: 1e:61:3f:f3:9b:e8:90:60:ea:3a:ea:de:36:57:67: 0a:14:8f:72:6d:2c:5e:fd:5f:ee:63:03:f1:24:15: 3e:c2:9d:00:17:dc:ea:1a:c0:17:7d:26:d4:0b:5a: 01:e9:2e:f4:3c:8f:31:67:f1:7a:a4:09:73:20:e0: ac:3e:b6:76:bf:fb:1d:23:43:70:64:8c:ec:1b:c4: e4:40:11:53:a1:70:42:59:4c:1b:db:f2:08:d1:70: 5a:65:53:25:51:82:a4:81:e0:23:0f:d4:38:91:b8: 11:d9:d2:01:61:56:c5:67:8f:d4:a0:59:e3:0f:47: 2f:e5:b5:70:9b:a2:44:af:5b:b5:4c:01:74:08:33: 6b:70:7a:3d:bb:92:ae:2f:07:9a:23:74:c7:4a:89: eb:14:ea:a4:1f:fd:3f:ac:0a:51:8d:b4:c6:77:50: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E8:94:B7:18:BA:EC:79:A1:AD:DA:E0:60:6C:CD:67:C5:A7:1D:29 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ec:4b:48:41:84:1b:ab:87:0c:fa:03:36:4e:2e:4f:e6:9c: bd:1a:af:6e:22:c4:3b:8d:b4:6d:fe:92:5c:83:eb:f1:d5:21: 25:89:d7:da:90:90:cd:59:4f:3a:77:82:95:29:fc:2e:b3:e4: 79:88:48:6f:5b:b3:36:d3:a0:8a:3c:a3:cb:28:aa:c3:7e:f0: d0:a0:37:e7:37:f0:ef:05:73:75:89:92:76:ab:20:6e:bb:2a: 56:a6:de:92:6b:4c:80:f3:b2:d6:fa:42:f2:06:b7:1b:f6:44: 29:7e:0c:85:27:cd:47:d6:1d:df:23:e1:69:70:d4:a3:2b:a8: 94:13:04:d5:05:fc:0d:e4:e2:77:68:5a:c6:24:c7:a3:52:ca: f9:ee:05:b9:61:bc:c2:16:f7:49:97:a4:8c:05:20:7e:e4:66: fb:78:d4:39:e7:8d:c0:00:07:1d:c0:1a:7c:62:ec:39:a4:02: 58:66:9e:33:8e:b9:fa:9c:13:03:3b:f5:54:fc:63:a8:fa:0e: c6:dd:9c:0f:bc:10:26:66:9d:bf:48:d3:79:a4:fa:8d:7b:4e: 0d:dc:25:3a:e5:4d:fb:54:c4:5e:ee:59:86:b4:c5:fa:02:88: 45:4e:79:6e:8f:26:be:42:08:0b:aa:24:e1:5c:96:68:92:e2: 2e:93:3c:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBN4sb/hPcqGiCJhqX3rvsU+EUS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjA0MjcwMjA4NDBaFw0yNjA0MjgwNTE2NDBaMDMxMTAvBgNV BAMTKEFDRTg5NEI3MThCQUVDNzlBMUFEREFFMDYwNkNDRDY3QzVBNzFEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFVH70nvSm3VXBZ6f1ej78kvp IGfesQ4VNUbR2zdRPW/j19NP0eh4stKI9k1jr61Nu7nadc5wPQKuICNgZuWnK3VN CJhHnYz9Xr9gYAry+mm1KP+Xf7pjFR5hP/Ob6JBg6jrq3jZXZwoUj3JtLF79X+5j A/EkFT7CnQAX3OoawBd9JtQLWgHpLvQ8jzFn8XqkCXMg4Kw+tna/+x0jQ3BkjOwb xORAEVOhcEJZTBvb8gjRcFplUyVRgqSB4CMP1DiRuBHZ0gFhVsVnj9SgWeMPRy/l tXCbokSvW7VMAXQIM2twej27kq4vB5ojdMdKiesU6qQf/T+sClGNtMZ3UPSvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrOiUtxi67HmhrdrgYGzNZ8WnHSkwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOxLSEGEG6uH DPoDNk4uT+acvRqvbiLEO420bf6SXIPr8dUhJYnX2pCQzVlPOneClSn8LrPkeYhI b1uzNtOgijyjyyiqw37w0KA35zfw7wVzdYmSdqsgbrsqVqbekmtMgPOy1vpC8ga3 G/ZEKX4MhSfNR9Yd3yPhaXDUoyuolBME1QX8DeTid2haxiTHo1LK+e4FuWG8whb3 SZekjAUgfuRm+3jUOeeNwAAHHcAafGLsOaQCWGaeM465+pwTAzv1VPxjqPoOxt2c D7wQJmadv0jTeaT6jXtODdwlOuVN+1TEXu5ZhrTF+gKIRU55bo8mvkIIC6ok4VyW aJLiLpM8DQ== -----END CERTIFICATE-----Generated at Mon Apr 27 15:12:25 2026 by rpki-client