$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: SBXXnY5uwxbvRK5aAChL+HMOoqTGgN7hNg5fvOjNzCc= Subject key identifier: A6:4D:57:C5:0C:A6:DE:A2:C9:CB:D8:9F:4C:38:8A:D5:94:3C:86:D3 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 68E34758B81299243938094963FE2C13A9FC7A49 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 07:24:17 +0000 Manifest this update: Mon 13 Apr 2026 07:19:17 +0000 Manifest next update: Tue 14 Apr 2026 07:26:17 +0000 Files and hashes: 1: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: z8SucFkkSU4CnPY6wqUfBHWMqvserssTJ7jNhAphWcc=) 2: 3130332e32302e34362e302f32342d3234203d3e203137343038.roa (hash: Cqxt0WZEcv/CrX8zUgyTIyMtPh2X566qKRuS9+MgsQI=) 3: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e3:47:58:b8:12:99:24:39:38:09:49:63:fe:2c:13:a9:fc:7a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Apr 13 07:19:17 2026 GMT Not After : Apr 14 07:26:17 2026 GMT Subject: CN=A64D57C50CA6DEA2C9CBD89F4C388AD5943C86D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:93:18:a5:ef:bc:69:bf:6e:33:f0:7e:9d: c8:34:9a:c5:60:c2:d7:56:f9:30:09:88:c1:aa:b6: 16:49:fa:e4:68:79:17:e6:27:31:7f:03:cf:9f:5f: c3:f0:21:10:bb:17:82:44:71:86:1c:61:cd:d9:95: b6:6c:86:9a:36:8f:4a:a2:99:b2:a1:bd:f7:cf:2c: 79:9c:64:39:a7:ce:af:8d:45:3c:11:bf:31:71:94: 61:0c:90:2d:6c:b5:4d:93:59:5d:1e:cf:9d:c9:1a: e6:40:27:13:9d:c7:6d:77:e7:13:61:60:88:46:cd: 1a:21:d9:13:bd:23:10:09:23:7c:e4:f7:85:af:40: 3b:94:50:d4:28:fa:ea:e0:32:f4:44:f9:18:fc:f3: 49:68:6f:64:3a:82:7b:02:b5:34:3f:fd:4e:2c:3d: f9:47:5e:ca:dc:d3:8c:d4:c4:3c:29:36:86:45:0a: 68:b7:dc:c5:2b:d6:02:a7:b7:82:8f:3a:58:9d:91: 85:40:3b:b8:a1:3e:29:0d:43:54:a8:29:e4:e6:2a: 39:17:5f:2b:2f:ba:4d:e8:4c:dd:65:c1:91:42:00: 24:be:38:2b:5f:6a:b6:4b:aa:e4:ae:2c:36:f9:68: 0f:3c:b9:f2:7d:8b:6a:ad:88:7d:bc:cd:6b:97:32: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:57:C5:0C:A6:DE:A2:C9:CB:D8:9F:4C:38:8A:D5:94:3C:86:D3 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ba:cc:37:9e:a3:fc:0b:39:05:6e:14:17:87:21:8e:7d:06: f9:a9:82:d9:82:dc:65:7e:cd:8d:58:fa:43:16:9a:de:9f:4e: 1a:ea:8e:50:80:51:ad:8a:0a:97:d1:ef:c7:b9:66:38:17:0c: 8a:2e:57:c0:57:cd:95:dc:8a:9b:9a:6e:fd:fb:e1:cd:2a:b9: e3:e6:51:95:20:27:bc:2e:58:b9:43:87:f0:b6:8e:43:5b:c9: c5:df:a1:61:db:1b:6b:9e:9f:e6:b7:79:ce:9e:86:43:ec:20: f5:a1:a4:fa:8f:a2:06:53:1d:f5:c5:5c:66:56:ec:07:66:02: dd:c0:42:e2:97:53:3e:e3:17:79:66:7b:f7:ec:b4:3c:cd:01: 89:e2:ec:04:2f:4c:13:06:eb:db:70:de:20:f7:e5:68:bb:79: db:4a:8a:31:8a:81:f0:7d:5d:53:1e:e5:3d:4c:95:14:c9:f6: 44:85:6f:17:e8:12:77:b3:29:ad:44:fb:61:8a:14:c2:15:2b: d4:9b:d9:94:b1:a0:be:33:ef:2f:b2:4c:01:1e:ba:bf:9a:f2: 01:c2:02:ee:e9:b2:0f:f8:89:4d:a6:ff:73:cd:68:44:2e:21: 61:32:0f:da:f2:70:00:16:c2:3b:3c:28:0c:14:a8:b4:f3:ee: c2:c9:8c:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaONHWLgSmSQ5OAlJY/4sE6n8ekkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjA0MTMwNzE5MTdaFw0yNjA0MTQwNzI2MTdaMDMxMTAvBgNV BAMTKEE2NEQ1N0M1MENBNkRFQTJDOUNCRDg5RjRDMzg4QUQ1OTQzQzg2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VJMYpe+8ab9uM/B+ncg0msVg wtdW+TAJiMGqthZJ+uRoeRfmJzF/A8+fX8PwIRC7F4JEcYYcYc3ZlbZshpo2j0qi mbKhvffPLHmcZDmnzq+NRTwRvzFxlGEMkC1stU2TWV0ez53JGuZAJxOdx2135xNh YIhGzRoh2RO9IxAJI3zk94WvQDuUUNQo+urgMvRE+Rj880lob2Q6gnsCtTQ//U4s PflHXsrc04zUxDwpNoZFCmi33MUr1gKnt4KPOlidkYVAO7ihPikNQ1SoKeTmKjkX Xysvuk3oTN1lwZFCACS+OCtfarZLquSuLDb5aA88ufJ9i2qtiH28zWuXMnV3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpk1XxQym3qLJy9ifTDiK1ZQ8htMwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7rMN56j/As5 BW4UF4chjn0G+amC2YLcZX7NjVj6Qxaa3p9OGuqOUIBRrYoKl9Hvx7lmOBcMii5X wFfNldyKm5pu/fvhzSq54+ZRlSAnvC5YuUOH8LaOQ1vJxd+hYdsba56f5rd5zp6G Q+wg9aGk+o+iBlMd9cVcZlbsB2YC3cBC4pdTPuMXeWZ79+y0PM0BieLsBC9MEwbr 23DeIPflaLt520qKMYqB8H1dUx7lPUyVFMn2RIVvF+gSd7MprUT7YYoUwhUr1JvZ lLGgvjPvL7JMAR66v5ryAcIC7umyD/iJTab/c81oRC4hYTIP2vJwABbCOzwoDBSo tPPuwsmMrA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:40 2026 by rpki-client