$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: cFBeIqo7t6Zl1gn4Vw4mwrPhnQVynDcEIX0GiYaK/Ao= Subject key identifier: E6:D5:6C:7D:BA:1E:1D:F2:76:45:1D:8B:85:35:DD:49:65:D0:52:31 Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 54668724D8228F2FD6CD7018BF6DF34D0F885969 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 67 Signing time: Sun 05 Apr 2026 22:23:56 +0000 Manifest this update: Sun 05 Apr 2026 22:18:56 +0000 Manifest next update: Mon 06 Apr 2026 22:46:56 +0000 Files and hashes: 1: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) 2: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: ay37Kv499BEXQzFb5g9nzgupSGrsVszM532SNRAFaI4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:66:87:24:d8:22:8f:2f:d6:cd:70:18:bf:6d:f3:4d:0f:88:59:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Apr 5 22:18:56 2026 GMT Not After : Apr 6 22:46:56 2026 GMT Subject: CN=E6D56C7DBA1E1DF276451D8B8535DD4965D05231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:69:44:7c:b8:3c:5a:6a:f6:44:79:89:12: 2d:2d:68:89:75:4f:be:5f:51:ec:a8:f2:a6:de:d9: 9f:5e:87:5a:a1:a6:af:92:74:3a:83:66:da:52:08: 60:d2:77:60:a2:48:4e:48:89:16:b2:ac:f4:5b:b7: 0e:52:c9:e6:0a:30:f2:0c:c4:68:5a:40:b7:f0:1c: 0c:49:50:4a:64:14:3c:88:19:03:37:07:79:0e:63: 6c:44:63:d7:32:0f:92:f6:fd:1f:e1:40:cf:aa:6f: 1d:43:04:ef:a2:25:47:c7:b0:8b:e0:ab:cb:29:d6: 01:b0:ee:df:19:f8:79:a5:45:14:52:f7:f9:2f:ef: d4:e9:cd:32:37:39:7e:96:02:9d:e3:c5:3c:d5:b7: 2f:2a:ce:9a:3f:98:96:6d:84:14:5c:a2:2f:91:c6: 3c:4f:a2:f8:3d:d5:14:66:4c:03:43:4b:e2:83:82: 63:39:58:75:6f:89:fb:17:fa:85:e2:82:38:20:0d: e7:37:72:e2:04:a7:a9:e6:1c:80:eb:09:fa:6c:9f: 94:aa:02:25:45:21:4f:ec:ae:d8:e8:db:ac:87:bb: eb:87:ac:2f:6c:7f:90:b5:e4:5d:ab:50:0e:39:37: a2:96:d8:c0:34:9c:29:ae:d6:c3:c4:68:9e:f7:b5: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D5:6C:7D:BA:1E:1D:F2:76:45:1D:8B:85:35:DD:49:65:D0:52:31 X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ee:1a:73:54:e8:e3:e0:72:72:f5:0e:00:8b:45:0f:35:fb: b0:c0:7a:7f:17:d2:51:0e:3f:aa:41:4b:0f:be:a0:5f:91:80: 7a:aa:5d:99:20:0c:99:f5:63:2e:50:fe:ad:63:e8:e9:5f:80: 04:b3:55:99:09:2b:83:1b:6f:b7:2a:75:cd:cd:5a:f2:3c:be: d1:ea:cc:cc:d8:03:9f:d1:02:f6:bd:07:91:b6:63:c1:7d:8f: 4c:e4:bd:3c:22:1f:81:83:6f:76:bf:7a:22:23:c4:18:1f:a6: 0d:8d:50:6d:99:ee:8f:5e:b8:b4:00:54:0c:aa:53:4f:f8:61: c8:e7:16:aa:3d:7c:9a:90:0b:d6:96:48:7f:54:63:d3:ca:83: 97:f3:39:98:19:3b:be:3c:71:8d:f4:5d:08:b3:d6:9f:d9:05: 34:0c:3b:51:7f:21:92:c3:37:e2:bc:d3:7b:62:20:32:20:b4: 9e:20:8f:d0:33:45:bd:b8:83:26:81:6b:b6:65:94:11:97:4e: 45:16:59:dd:20:6f:d3:75:fb:55:ed:7b:9f:48:7e:e6:3d:65: e1:b3:da:68:27:63:61:4f:f8:e6:7d:97:ce:49:55:e5:f6:14: e6:7e:40:3a:cd:78:d6:10:a6:b5:e1:7b:b3:e3:84:8d:31:5d: 1e:79:ad:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVGaHJNgijy/WzXAYv23zTQ+IWWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjA0MDUyMjE4NTZaFw0yNjA0MDYyMjQ2NTZaMDMxMTAvBgNV BAMTKEU2RDU2QzdEQkExRTFERjI3NjQ1MUQ4Qjg1MzVERDQ5NjVEMDUyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0mlEfLg8Wmr2RHmJEi0taIl1 T75fUeyo8qbe2Z9eh1qhpq+SdDqDZtpSCGDSd2CiSE5IiRayrPRbtw5SyeYKMPIM xGhaQLfwHAxJUEpkFDyIGQM3B3kOY2xEY9cyD5L2/R/hQM+qbx1DBO+iJUfHsIvg q8sp1gGw7t8Z+HmlRRRS9/kv79TpzTI3OX6WAp3jxTzVty8qzpo/mJZthBRcoi+R xjxPovg91RRmTANDS+KDgmM5WHVvifsX+oXigjggDec3cuIEp6nmHIDrCfpsn5Sq AiVFIU/srtjo26yHu+uHrC9sf5C15F2rUA45N6KW2MA0nCmu1sPEaJ73tY/RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5tVsfboeHfJ2RR2LhTXdSWXQUjEwHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmu4ac1To4+By cvUOAItFDzX7sMB6fxfSUQ4/qkFLD76gX5GAeqpdmSAMmfVjLlD+rWPo6V+ABLNV mQkrgxtvtyp1zc1a8jy+0erMzNgDn9EC9r0HkbZjwX2PTOS9PCIfgYNvdr96IiPE GB+mDY1QbZnuj164tABUDKpTT/hhyOcWqj18mpAL1pZIf1Rj08qDl/M5mBk7vjxx jfRdCLPWn9kFNAw7UX8hksM34rzTe2IgMiC0niCP0DNFvbiDJoFrtmWUEZdORRZZ 3SBv03X7Ve17n0h+5j1l4bPaaCdjYU/45n2XzklV5fYU5n5AOs141hCmteF7s+OE jTFdHnmt4Q== -----END CERTIFICATE-----Generated at Mon Apr 6 13:40:37 2026 by rpki-client