$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: orm6QtblSjdu2JpOyqSv35tyE/xqQHs5Qx81mE3gNGg= Subject key identifier: 12:50:1D:1E:3E:37:9C:39:78:72:F6:52:80:96:D8:59:D2:C3:55:46 Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 4B12F24FA98E42E9EB5776F16A978638FF89F239 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: 70 Signing time: Sun 12 Apr 2026 20:44:17 +0000 Manifest this update: Sun 12 Apr 2026 20:39:17 +0000 Manifest next update: Mon 13 Apr 2026 22:13:17 +0000 Files and hashes: 1: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) 2: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: AE6zS8oHPY0fVVTwssUtmdmu2iTMU9DyCVJEyhfPI2Y=) 3: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 22:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:12:f2:4f:a9:8e:42:e9:eb:57:76:f1:6a:97:86:38:ff:89:f2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Apr 12 20:39:17 2026 GMT Not After : Apr 13 22:13:17 2026 GMT Subject: CN=12501D1E3E379C397872F6528096D859D2C35546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:eb:e9:ba:64:ff:76:aa:b9:63:3a:f9:ab: 00:40:17:d1:97:86:9a:c2:d0:a1:22:fd:a7:f9:b0: 89:59:78:7a:e2:02:6c:91:3a:4f:59:0b:77:3e:64: 52:48:9b:f7:20:dc:81:77:f8:4c:42:74:57:ff:d6: 1e:a6:f1:f3:73:98:f8:01:8c:b7:07:e1:4c:fc:45: c8:ff:7c:00:a3:3e:64:02:9c:dd:42:62:0f:65:a3: 7b:4b:23:34:da:e4:cd:6a:37:e0:12:49:8a:e2:69: f2:81:3e:7c:f4:94:f2:37:8f:87:af:6b:09:51:3b: 26:f9:30:c3:53:5d:45:24:58:8b:fd:84:09:db:1d: b6:d0:03:92:50:63:b4:7e:df:ed:b9:17:3c:f8:d0: ed:7c:5f:01:41:8f:b5:dd:86:a2:f9:24:8b:00:fe: 90:9d:ad:78:f6:0a:91:70:49:60:f0:1e:8a:70:80: 37:29:90:72:d4:27:d4:e2:60:09:9e:68:6c:66:37: 9c:fa:b2:34:84:68:d8:4e:06:37:e9:b6:92:43:b6: 84:b1:56:f1:a3:c0:0c:43:7e:2a:4d:48:a1:fd:eb: 25:1c:59:04:54:63:a4:5a:95:35:9c:fe:51:10:5d: 51:05:c7:80:a7:4d:9d:30:5e:eb:93:10:11:01:e5: 26:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:50:1D:1E:3E:37:9C:39:78:72:F6:52:80:96:D8:59:D2:C3:55:46 X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f0:e1:d3:b6:e3:4e:d7:da:4a:3a:77:a7:1b:34:37:8a:4c: 98:82:a9:f8:18:2b:57:47:2f:ab:4d:1b:3c:d0:02:74:4a:19: d2:15:b1:10:c5:d4:b6:65:f0:99:ba:3b:6e:93:88:bb:84:89: 67:2f:d0:f1:a4:22:2e:d3:3d:9f:7b:45:f0:68:0d:49:9f:41: df:48:75:d8:40:4c:54:73:2c:51:7c:9f:f8:de:78:d5:b8:b9: a4:26:6c:23:79:16:af:fb:ec:45:b0:73:50:3d:13:ba:e4:0f: 26:90:cc:d9:ef:e0:93:55:77:36:cb:1f:1a:a3:5f:42:5a:f2: ea:29:d5:71:6e:87:e7:06:48:37:6d:0e:f4:75:cc:e6:18:52: f8:dd:d5:ec:06:b5:1d:17:37:c2:55:3a:83:4d:9a:89:7c:1f: 4d:e4:e3:9e:9f:69:f6:5c:35:4c:94:d6:70:9f:10:25:8d:19: f4:2d:a2:e6:64:8f:09:a8:8a:4d:3f:08:7b:79:6a:6e:18:eb: 68:48:8a:95:13:73:01:4c:c8:a4:f0:a3:24:79:1a:1a:19:c7: fc:be:8b:ad:e3:2b:4c:ca:74:c4:e4:3b:32:5b:2d:b7:a5:1e: e1:7d:c0:37:07:ca:09:1a:77:5c:e0:1a:ff:04:93:ce:22:48: 9c:9a:da:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSxLyT6mOQunrV3bxapeGOP+J8jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjA0MTIyMDM5MTdaFw0yNjA0MTMyMjEzMTdaMDMxMTAvBgNV BAMTKDEyNTAxRDFFM0UzNzlDMzk3ODcyRjY1MjgwOTZEODU5RDJDMzU1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeS+vpumT/dqq5Yzr5qwBAF9GX hprC0KEi/af5sIlZeHriAmyROk9ZC3c+ZFJIm/cg3IF3+ExCdFf/1h6m8fNzmPgB jLcH4Uz8Rcj/fACjPmQCnN1CYg9lo3tLIzTa5M1qN+ASSYriafKBPnz0lPI3j4ev awlROyb5MMNTXUUkWIv9hAnbHbbQA5JQY7R+3+25Fzz40O18XwFBj7XdhqL5JIsA /pCdrXj2CpFwSWDwHopwgDcpkHLUJ9TiYAmeaGxmN5z6sjSEaNhOBjfptpJDtoSx VvGjwAxDfipNSKH96yUcWQRUY6RalTWc/lEQXVEFx4CnTZ0wXuuTEBEB5SajAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUElAdHj43nDl4cvZSgJbYWdLDVUYwHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvDh07bjTtfa Sjp3pxs0N4pMmIKp+BgrV0cvq00bPNACdEoZ0hWxEMXUtmXwmbo7bpOIu4SJZy/Q 8aQiLtM9n3tF8GgNSZ9B30h12EBMVHMsUXyf+N541bi5pCZsI3kWr/vsRbBzUD0T uuQPJpDM2e/gk1V3NssfGqNfQlry6inVcW6H5wZIN20O9HXM5hhS+N3V7Aa1HRc3 wlU6g02aiXwfTeTjnp9p9lw1TJTWcJ8QJY0Z9C2i5mSPCaiKTT8Ie3lqbhjraEiK lRNzAUzIpPCjJHkaGhnH/L6LreMrTMp0xOQ7Mlstt6Ue4X3ANwfKCRp3XOAa/wST ziJInJrajg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:50 2026 by rpki-client