$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: ndcO0kk97p/8Z9eTaGfgw/HvLS+Zh09m/ncxdgdftaA= Subject key identifier: 1F:34:09:99:8E:5B:BF:26:BD:D6:F9:1A:D0:2D:FB:91:1D:20:B6:B7 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 6F8283D8EDD3ABEACAE4C5DA86F1FA074F3E61A6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 08:44:17 +0000 Manifest this update: Mon 13 Apr 2026 08:39:17 +0000 Manifest next update: Tue 14 Apr 2026 09:51:17 +0000 Files and hashes: 1: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: zwpGApIq4k571b9FnqPyILIStd5znw8fzox/hwfYwmw=) 2: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 3: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:82:83:d8:ed:d3:ab:ea:ca:e4:c5:da:86:f1:fa:07:4f:3e:61:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Apr 13 08:39:17 2026 GMT Not After : Apr 14 09:51:17 2026 GMT Subject: CN=1F3409998E5BBF26BDD6F91AD02DFB911D20B6B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:80:05:b5:b6:49:e5:f0:ec:f6:77:51:b3: 4d:ba:4b:83:a8:72:71:de:68:08:46:b9:39:be:4b: 5a:ae:6f:ad:ae:45:95:b9:23:33:e2:85:8d:5b:90: 9c:a1:ca:07:e4:04:df:10:31:e5:4e:8b:7c:b8:de: cc:4a:d4:cd:49:29:5d:c1:d9:51:f1:d6:1b:7b:a6: a7:26:49:4a:ff:23:ae:0f:a6:06:41:c7:ca:9b:18: 51:26:ab:0a:be:f0:40:b5:bf:24:f0:2d:73:9d:5c: 67:92:a5:aa:a4:dd:b8:be:9d:09:5e:52:41:ee:e2: b9:f9:f7:3f:8e:63:7d:54:b7:82:4a:8b:e1:db:10: c3:90:2c:60:26:a3:82:10:4c:07:e7:68:bd:08:11: 37:6c:a0:55:db:ea:3f:9b:4f:15:1f:d6:e0:3b:a8: 55:29:f5:9e:a0:3c:dd:9a:0d:ee:55:68:32:05:18: 40:99:04:f7:62:8f:ba:b9:c6:e4:f7:43:bb:f7:d1: c3:28:b9:ca:75:3a:90:fa:2c:8b:4a:15:c6:c0:47: db:22:c7:b5:3e:31:1f:d2:90:42:da:82:61:a7:c0: 42:3e:58:a5:59:47:85:cb:3c:9a:d6:ba:46:ed:38: 9d:a3:e6:8a:b5:f9:32:7d:eb:7d:4b:07:a4:e9:f7: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:34:09:99:8E:5B:BF:26:BD:D6:F9:1A:D0:2D:FB:91:1D:20:B6:B7 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:fb:02:d2:25:91:a8:90:eb:41:fa:e3:dd:f9:30:50:e3:40: e9:c0:5e:4c:b2:5a:24:1c:9c:c7:18:90:d7:64:9b:10:cc:20: ca:14:da:01:a0:85:93:14:95:eb:3e:b3:42:17:a3:5d:77:54: d0:e8:3a:98:55:56:45:06:13:65:20:9c:fb:a0:f2:48:4c:38: 67:58:9f:b9:73:5a:e4:2c:7d:1b:a7:7c:0f:85:53:e3:a4:39: 16:e8:07:9c:3e:40:b1:d7:a8:25:d9:8a:9a:4e:87:fd:f7:66: 56:77:99:ed:cd:cf:8f:10:c6:28:33:1f:15:d8:dd:81:ac:58: 67:e3:5b:a4:d2:7c:35:6a:46:90:f9:01:bf:76:20:2e:50:3e: 66:40:c1:55:a1:a1:67:08:1e:34:f0:ad:24:ad:a9:ae:bc:22: 2b:86:40:2f:fe:0b:c4:50:ad:f1:9e:ed:ff:b0:0d:8c:1c:54: 48:d3:a8:88:d5:0f:0f:af:18:68:b0:ae:0f:d0:f0:80:d5:d4: b9:07:28:41:1c:8c:a3:01:01:8d:d4:27:27:95:f6:0a:94:e2: a8:ab:04:44:5b:db:e2:89:dc:50:00:f2:fe:8f:83:59:c9:ef: a6:96:0a:f8:5b:a0:f7:de:7c:3b:ed:19:f5:4e:b0:20:30:3a: 67:2a:bf:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb4KD2O3Tq+rK5MXahvH6B08+YaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjA0MTMwODM5MTdaFw0yNjA0MTQwOTUxMTdaMDMxMTAvBgNV BAMTKDFGMzQwOTk5OEU1QkJGMjZCREQ2RjkxQUQwMkRGQjkxMUQyMEI2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQi4AFtbZJ5fDs9ndRs026S4Oo cnHeaAhGuTm+S1qub62uRZW5IzPihY1bkJyhygfkBN8QMeVOi3y43sxK1M1JKV3B 2VHx1ht7pqcmSUr/I64PpgZBx8qbGFEmqwq+8EC1vyTwLXOdXGeSpaqk3bi+nQle UkHu4rn59z+OY31Ut4JKi+HbEMOQLGAmo4IQTAfnaL0IETdsoFXb6j+bTxUf1uA7 qFUp9Z6gPN2aDe5VaDIFGECZBPdij7q5xuT3Q7v30cMoucp1OpD6LItKFcbAR9si x7U+MR/SkELagmGnwEI+WKVZR4XLPJrWukbtOJ2j5oq1+TJ9631LB6Tp9zHdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHzQJmY5bvya91vka0C37kR0gtrcwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxvsC0iWRqJDr Qfrj3fkwUONA6cBeTLJaJBycxxiQ12SbEMwgyhTaAaCFkxSV6z6zQhejXXdU0Og6 mFVWRQYTZSCc+6DySEw4Z1ifuXNa5Cx9G6d8D4VT46Q5FugHnD5AsdeoJdmKmk6H /fdmVneZ7c3PjxDGKDMfFdjdgaxYZ+NbpNJ8NWpGkPkBv3YgLlA+ZkDBVaGhZwge NPCtJK2prrwiK4ZAL/4LxFCt8Z7t/7ANjBxUSNOoiNUPD68YaLCuD9DwgNXUuQco QRyMowEBjdQnJ5X2CpTiqKsERFvb4oncUADy/o+DWcnvppYK+Fug9958O+0Z9U6w IDA6Zyq/yw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:58:21 2026 by rpki-client