$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: 4Yqa/d8FgWhTnV8EXQQBctQ9AVWnUoWPNEqRfDT60SA= Subject key identifier: 04:A9:69:B5:9B:8B:F1:78:39:29:16:B5:CC:E4:ED:92:7D:B3:6A:A1 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 3876A7633760F6ADE4C51B15C05A7866E23A33F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 07:34:17 +0000 Manifest this update: Mon 13 Apr 2026 07:29:17 +0000 Manifest next update: Tue 14 Apr 2026 11:06:17 +0000 Files and hashes: 1: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 2: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 3: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 4: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 5: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: Ew9vD+T5ayy2PYidXh/eVp2wdLtzpRC4yplntsQhB1c=) 6: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:76:a7:63:37:60:f6:ad:e4:c5:1b:15:c0:5a:78:66:e2:3a:33:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Apr 13 07:29:17 2026 GMT Not After : Apr 14 11:06:17 2026 GMT Subject: CN=04A969B59B8BF178392916B5CCE4ED927DB36AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:13:79:41:72:ae:eb:64:82:40:c0:8a:f4: 7c:f1:1c:6e:74:0c:2b:7b:35:48:68:ad:2e:3e:71: 33:bc:63:11:28:26:52:64:8d:de:96:e9:39:e4:0c: c0:ca:d2:c6:cf:ef:ce:a4:f3:13:78:37:b8:33:0e: 01:98:4d:09:f7:29:d5:a8:d6:a0:dc:73:57:cf:98: 21:c9:d2:72:cb:b0:39:30:92:c9:a4:33:d1:66:14: 6e:c6:c2:92:ce:5b:1b:5a:0d:f3:cf:49:cd:e0:dc: ae:82:0d:4f:30:8c:2a:9a:fe:38:85:7e:cc:11:c1: e7:cb:ad:cb:49:b4:c2:49:ee:fa:f9:33:14:ee:46: 2e:e2:7d:65:72:9c:0d:75:a4:18:40:b7:f7:b2:e7: 21:a9:d1:be:29:e3:d5:7d:0b:17:29:ac:05:2e:56: c0:72:1f:d4:2a:f7:4f:bc:f5:06:d3:26:b8:48:d3: 00:31:a7:23:f6:e0:37:c6:08:13:7d:bd:05:26:65: 49:25:1a:45:20:33:b8:7b:1a:92:57:0c:85:ad:8f: c8:e7:5e:50:5a:2b:62:8b:d2:05:7b:fc:07:de:9b: 4a:d5:f9:1e:e6:e3:bd:8e:03:71:a8:57:49:33:7e: 0c:95:4c:b3:74:5a:de:7a:d5:f9:6a:5b:5d:96:96: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A9:69:B5:9B:8B:F1:78:39:29:16:B5:CC:E4:ED:92:7D:B3:6A:A1 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:83:11:a0:7a:39:ee:93:b3:5c:3b:ac:4c:31:76:2c:70:d2: d0:ed:d6:f6:41:b9:6b:bd:ba:12:31:81:e6:86:a8:eb:2f:36: 24:0b:1d:10:98:cf:18:e8:39:08:49:44:a0:af:6f:1c:0c:47: 78:2c:aa:e1:6c:7d:da:d0:fe:01:9b:32:65:a4:b0:d8:ca:0b: f1:65:c7:83:7e:05:d7:97:75:64:c0:ff:45:2b:d5:bc:4f:06: 17:d6:51:97:c9:90:22:c3:d9:df:4a:3b:72:5d:7a:d7:53:6a: 58:3a:12:59:a1:8e:47:ce:91:72:aa:6c:4e:76:ee:7e:1b:5a: 07:1a:92:07:09:85:95:44:07:4f:e3:62:b6:99:62:0a:ee:0f: 3e:53:61:e5:29:7b:d8:63:5e:e2:ed:3d:be:f2:31:ca:d5:1a: 73:46:e9:f8:be:54:cf:0c:52:5d:3b:78:f7:c7:99:9a:42:7a: f1:ab:8c:4f:0e:d4:c9:2a:72:cb:cd:62:c6:e3:f3:b8:5b:b8: 65:aa:6f:c8:ce:a0:7d:29:24:7f:2c:88:2f:0b:fa:29:59:62: 30:5c:74:e1:6f:2a:01:60:74:4b:1b:ef:77:d6:2b:b0:85:2e: a5:b4:1f:7b:53:5b:41:e9:b6:cc:a7:72:aa:c7:53:57:f9:a1: a6:54:41:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOHanYzdg9q3kxRsVwFp4ZuI6M/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjA0MTMwNzI5MTdaFw0yNjA0MTQxMTA2MTdaMDMxMTAvBgNV BAMTKDA0QTk2OUI1OUI4QkYxNzgzOTI5MTZCNUNDRTRFRDkyN0RCMzZBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrRN5QXKu62SCQMCK9HzxHG50 DCt7NUhorS4+cTO8YxEoJlJkjd6W6TnkDMDK0sbP786k8xN4N7gzDgGYTQn3KdWo 1qDcc1fPmCHJ0nLLsDkwksmkM9FmFG7GwpLOWxtaDfPPSc3g3K6CDU8wjCqa/jiF fswRwefLrctJtMJJ7vr5MxTuRi7ifWVynA11pBhAt/ey5yGp0b4p49V9CxcprAUu VsByH9Qq90+89QbTJrhI0wAxpyP24DfGCBN9vQUmZUklGkUgM7h7GpJXDIWtj8jn XlBaK2KL0gV7/Afem0rV+R7m472OA3GoV0kzfgyVTLN0Wt561flqW12WlljfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBKlptZuL8Xg5KRa1zOTtkn2zaqEwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIMRoHo57pOz XDusTDF2LHDS0O3W9kG5a726EjGB5oao6y82JAsdEJjPGOg5CElEoK9vHAxHeCyq 4Wx92tD+AZsyZaSw2MoL8WXHg34F15d1ZMD/RSvVvE8GF9ZRl8mQIsPZ30o7cl16 11NqWDoSWaGOR86RcqpsTnbufhtaBxqSBwmFlUQHT+NitpliCu4PPlNh5Sl72GNe 4u09vvIxytUac0bp+L5UzwxSXTt498eZmkJ68auMTw7UySpyy81ixuPzuFu4Zapv yM6gfSkkfyyILwv6KVliMFx04W8qAWB0Sxvvd9YrsIUupbQfe1NbQem2zKdyqsdT V/mhplRB8w== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:18 2026 by rpki-client