$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: KM9X0YioO+KBuqD+gA3kLrd0foUvhWx1g28RYcbGVwo= Subject key identifier: 80:E3:72:2D:D4:39:8B:16:E4:AE:C7:23:27:62:3B:84:67:09:A9:33 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 1D0E80AD4BC8AA5A84AB6A61A07216EF2906B2B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 04:54:17 +0000 Manifest this update: Mon 13 Apr 2026 04:49:17 +0000 Manifest next update: Tue 14 Apr 2026 05:22:17 +0000 Files and hashes: 1: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) 2: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: Y5pMG5xOBl+gUqYcXlLRORytgDEtwtrNK/r4VssXEs8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 05:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0e:80:ad:4b:c8:aa:5a:84:ab:6a:61:a0:72:16:ef:29:06:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Apr 13 04:49:17 2026 GMT Not After : Apr 14 05:22:17 2026 GMT Subject: CN=80E3722DD4398B16E4AEC72327623B846709A933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7c:3e:86:f4:c0:1e:9b:ac:1b:97:f9:9f:3f: c6:5b:86:7c:59:73:4c:b3:ed:16:79:b6:33:d0:a8: 38:5f:3f:0f:ed:db:1d:b9:9e:50:c3:3e:96:d0:fc: 4b:91:07:cc:b6:30:76:78:31:06:2e:9e:79:57:db: 7f:98:74:e3:2d:f6:d1:41:e6:08:73:b7:14:05:7c: 1c:d4:a9:e6:a7:aa:3a:45:50:83:92:9b:28:5d:51: 64:c9:0e:44:08:67:97:7f:3a:9d:74:1c:56:81:b6: ab:09:7d:55:63:4a:c8:46:20:96:9c:65:0b:88:da: 39:c9:6a:d0:23:a5:f4:31:84:2a:71:49:1d:a9:63: 98:4e:7c:ae:e4:1b:83:5d:cb:5d:96:15:ef:3c:55: 06:59:c5:e2:03:13:ab:93:0e:61:7f:77:de:45:5c: ce:75:5a:27:a4:a7:40:ca:37:5f:e2:cd:21:11:c3: 77:42:23:81:a4:60:04:2b:37:39:5a:27:67:c5:e9: a6:88:8e:55:0c:6d:4f:81:a3:24:1e:4a:19:1e:3c: 5e:82:28:d4:d3:f3:41:7d:49:89:4a:45:5c:49:30: 6f:c0:73:8d:35:55:9b:75:4f:bd:15:a9:95:45:48: 73:b6:41:39:c7:df:b1:34:3a:e9:64:41:a6:db:20: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E3:72:2D:D4:39:8B:16:E4:AE:C7:23:27:62:3B:84:67:09:A9:33 X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:32:c4:12:cc:ce:01:3b:78:ce:be:e7:73:28:fd:7c:44:98: 7c:d8:67:c8:8a:7a:99:dd:8a:d5:36:69:c7:bc:1c:f9:4a:e8: 8f:96:18:22:79:78:f2:13:9d:6c:b7:ed:ae:83:3b:66:1f:98: ff:67:ee:12:ca:d1:bc:6f:1d:17:11:ca:d9:50:00:02:16:7a: 26:37:dd:cd:26:44:c3:9b:81:2b:29:7d:16:55:d2:58:c9:67: 56:f3:98:53:c1:ba:41:3e:66:af:82:6a:ea:94:fa:a9:57:70: ff:54:c1:0c:80:ab:4c:61:ff:74:9e:b2:23:35:c7:67:db:75: f1:97:12:2a:62:cd:46:7a:5e:03:95:0f:18:ee:c4:b5:60:d6: 4c:b3:5a:43:fd:c7:bc:f3:a5:3a:90:59:c6:bb:44:6b:ce:d4: 4e:02:b4:59:2a:95:cb:35:fd:d0:d4:cd:b4:ad:7f:92:53:d9: 00:f6:74:52:11:45:45:94:eb:75:a4:ec:83:99:f4:b5:7a:45: 4f:26:b4:af:c1:44:95:15:23:5d:91:f4:83:e3:79:49:98:a6: a4:e1:ee:1d:f3:db:35:e6:81:85:a9:c5:b3:ca:b7:c9:e6:d3: 48:9d:9d:71:55:c4:c6:58:4f:50:b7:6a:7b:d8:51:be:54:fc: b1:4b:ef:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHQ6ArUvIqlqEq2phoHIW7ykGsrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjA0MTMwNDQ5MTdaFw0yNjA0MTQwNTIyMTdaMDMxMTAvBgNV BAMTKDgwRTM3MjJERDQzOThCMTZFNEFFQzcyMzI3NjIzQjg0NjcwOUE5MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXfD6G9MAem6wbl/mfP8ZbhnxZ c0yz7RZ5tjPQqDhfPw/t2x25nlDDPpbQ/EuRB8y2MHZ4MQYunnlX23+YdOMt9tFB 5ghztxQFfBzUqeanqjpFUIOSmyhdUWTJDkQIZ5d/Op10HFaBtqsJfVVjSshGIJac ZQuI2jnJatAjpfQxhCpxSR2pY5hOfK7kG4Ndy12WFe88VQZZxeIDE6uTDmF/d95F XM51Wiekp0DKN1/izSERw3dCI4GkYAQrNzlaJ2fF6aaIjlUMbU+BoyQeShkePF6C KNTT80F9SYlKRVxJMG/Ac401VZt1T70VqZVFSHO2QTnH37E0OulkQabbIKUjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgONyLdQ5ixbkrscjJ2I7hGcJqTMwHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzLEEszOATt4 zr7ncyj9fESYfNhnyIp6md2K1TZpx7wc+Uroj5YYInl48hOdbLftroM7Zh+Y/2fu EsrRvG8dFxHK2VAAAhZ6JjfdzSZEw5uBKyl9FlXSWMlnVvOYU8G6QT5mr4Jq6pT6 qVdw/1TBDICrTGH/dJ6yIzXHZ9t18ZcSKmLNRnpeA5UPGO7EtWDWTLNaQ/3HvPOl OpBZxrtEa87UTgK0WSqVyzX90NTNtK1/klPZAPZ0UhFFRZTrdaTsg5n0tXpFTya0 r8FElRUjXZH0g+N5SZimpOHuHfPbNeaBhanFs8q3yebTSJ2dcVXExlhPULdqe9hR vlT8sUvvlA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:30:20 2026 by rpki-client