$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: NAVqMyInoQL6zyd7scWJIzDFqi+Lrft7XKdRX5IyS4k= Subject key identifier: 82:48:14:2F:AF:4D:B0:86:46:3D:27:07:37:5C:F3:A3:D6:BB:67:31 Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 279FD1FF9AB2FBAADE6A42BC9561ACE009357FCA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 00:39:17 +0000 Manifest this update: Mon 13 Apr 2026 00:34:17 +0000 Manifest next update: Tue 14 Apr 2026 01:09:17 +0000 Files and hashes: 1: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 2: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: XvsqhGDwVRTTBIWoM2Nn0IeN4x+lnjpGlp8Ji0w3/Y8=) 3: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 01:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9f:d1:ff:9a:b2:fb:aa:de:6a:42:bc:95:61:ac:e0:09:35:7f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Apr 13 00:34:17 2026 GMT Not After : Apr 14 01:09:17 2026 GMT Subject: CN=8248142FAF4DB086463D2707375CF3A3D6BB6731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8f:18:dd:8d:c8:9f:7d:f8:41:88:f3:02:d0: 44:7b:c2:d5:c1:1e:c8:72:cc:a0:cf:5b:ed:32:75: 0f:4a:e1:6a:50:28:29:d9:bd:39:80:29:db:96:f0: a7:bd:23:ea:ba:21:07:13:7b:bd:36:87:69:8a:0a: 82:c6:d8:4f:c8:90:21:12:96:3e:f8:a9:cb:58:8e: 41:aa:08:11:dd:d9:a7:1a:79:be:f6:65:d9:55:0d: 65:5b:c7:e9:f8:27:8d:7a:32:3d:a3:e4:f8:b0:3d: 63:a3:e9:3e:b7:11:50:c7:63:34:48:8d:e7:89:9e: 44:13:eb:20:93:69:92:32:b1:0d:82:81:1d:7a:39: 7b:a5:51:f6:e6:4b:00:43:d1:90:f4:d2:71:5b:95: 92:84:f0:03:9b:91:23:d7:83:05:2a:c6:cd:f5:69: 27:f2:c9:70:41:30:e9:67:30:4e:11:98:f6:fe:43: 13:1a:09:5d:ce:8b:31:c6:d7:63:19:85:09:8d:aa: c4:7d:46:72:55:13:bf:7a:ea:f9:27:22:fd:e6:35: 3c:d9:3a:29:97:a6:65:b6:63:69:1e:70:b2:0b:56: 4e:94:7e:84:36:cb:b9:27:45:e5:5d:f6:2b:6d:49: 3e:41:67:ac:3b:cf:46:1a:5f:d3:50:cc:0e:58:a3: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:48:14:2F:AF:4D:B0:86:46:3D:27:07:37:5C:F3:A3:D6:BB:67:31 X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e9:d2:23:99:14:b9:16:7f:30:ea:62:3d:c8:1e:d3:2b:d7: 84:9b:42:a5:fd:70:c8:fd:f7:c7:3a:f2:be:a7:ed:50:f7:92: a6:ea:57:d0:43:7a:5a:26:81:7d:b3:2d:8e:cb:39:ab:7a:c2: ec:49:50:c6:ee:a0:e8:64:3e:b1:a7:bc:6e:e1:fc:97:1b:89: d4:82:f5:32:8d:dc:7b:1f:dd:7a:cf:95:9a:ac:a1:6e:cc:ff: c1:6a:b1:c2:3d:39:a7:58:ce:53:3c:65:95:ee:a1:80:73:13: d6:8d:1c:a0:2a:ad:0e:81:7e:44:2a:e0:31:15:8b:ca:94:50: a2:7b:15:43:a0:46:bb:b1:b5:2c:99:c1:69:f9:f7:ff:b9:6f: 8e:95:7f:29:be:6e:34:3e:f8:64:9b:2a:0b:92:7d:69:66:cd: a9:0a:d9:67:50:f5:d5:8c:d7:a9:23:89:0d:99:c1:41:0e:87: 7e:9d:c1:a5:4a:46:48:ac:ed:37:49:ea:14:9e:b2:46:b6:71: 64:28:42:50:0b:13:d3:48:7d:99:cb:63:6d:e3:5a:65:52:f2: 81:15:84:0a:4e:d0:db:76:22:fd:a8:bd:9e:55:52:c2:9e:b3: db:3c:ca:ce:4e:fe:23:62:81:f3:e9:38:f8:3c:18:ff:10:e0: 1c:1d:2c:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ5/R/5qy+6reakK8lWGs4Ak1f8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjA0MTMwMDM0MTdaFw0yNjA0MTQwMTA5MTdaMDMxMTAvBgNV BAMTKDgyNDgxNDJGQUY0REIwODY0NjNEMjcwNzM3NUNGM0EzRDZCQjY3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwjxjdjcifffhBiPMC0ER7wtXB HshyzKDPW+0ydQ9K4WpQKCnZvTmAKduW8Ke9I+q6IQcTe702h2mKCoLG2E/IkCES lj74qctYjkGqCBHd2acaeb72ZdlVDWVbx+n4J416Mj2j5PiwPWOj6T63EVDHYzRI jeeJnkQT6yCTaZIysQ2CgR16OXulUfbmSwBD0ZD00nFblZKE8AObkSPXgwUqxs31 aSfyyXBBMOlnME4RmPb+QxMaCV3OizHG12MZhQmNqsR9RnJVE7966vknIv3mNTzZ OimXpmW2Y2kecLILVk6UfoQ2y7knReVd9ittST5BZ6w7z0YaX9NQzA5YowpZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgkgUL69NsIZGPScHN1zzo9a7ZzEwHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+nSI5kUuRZ/ MOpiPcge0yvXhJtCpf1wyP33xzryvqftUPeSpupX0EN6WiaBfbMtjss5q3rC7ElQ xu6g6GQ+sae8buH8lxuJ1IL1Mo3cex/des+Vmqyhbsz/wWqxwj05p1jOUzxlle6h gHMT1o0coCqtDoF+RCrgMRWLypRQonsVQ6BGu7G1LJnBafn3/7lvjpV/Kb5uND74 ZJsqC5J9aWbNqQrZZ1D11YzXqSOJDZnBQQ6Hfp3BpUpGSKztN0nqFJ6yRrZxZChC UAsT00h9mctjbeNaZVLygRWECk7Q23Yi/ai9nlVSwp6z2zzKzk7+I2KB8+k4+DwY /xDgHB0s7A== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:44 2026 by rpki-client