$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft File: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json) Hash identifier: lUfmvEjPWQLq5bSK6o/1EnB6gL/PWCZQwNnLCRQ3n8k= Subject key identifier: 38:67:0C:2F:5C:DC:1B:DD:2A:5F:86:A0:C0:42:0B:00:84:DA:69:D1 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 68B08F16DA46CBFAD21AFE3ED7FC516A1764721E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft Manifest number: 68 Signing time: Mon 06 Apr 2026 09:48:56 +0000 Manifest this update: Mon 06 Apr 2026 09:43:56 +0000 Manifest next update: Tue 07 Apr 2026 11:30:56 +0000 Files and hashes: 1: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=) 2: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=) 3: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=) 4: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (hash: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs=) 5: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=) 6: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=) 7: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: SNmjLpkI2lRO5vO3au02qblUbv6P3Ip+9Dv5Hj0817I=) 8: 3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa (hash: gwsYWrqcYK0ktFka8dQFWvrHKpCXna1yR/uwRK4K9H4=) 9: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=) 10: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=) 11: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=) 12: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=) 13: 3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa (hash: edMuLWIKpK7nnE5WfHg22oT2gpNprnepwqo5yESrIQg=) 14: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=) 15: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=) 16: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 06:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b0:8f:16:da:46:cb:fa:d2:1a:fe:3e:d7:fc:51:6a:17:64:72:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Apr 6 09:43:56 2026 GMT Not After : Apr 7 11:30:56 2026 GMT Subject: CN=38670C2F5CDC1BDD2A5F86A0C0420B0084DA69D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:c3:59:1d:37:e6:21:c4:23:c6:ca:0a:22: 15:dc:ca:65:e9:05:39:15:79:34:1b:9c:0f:98:6d: d5:9d:04:b7:56:b4:e5:a2:a8:84:4c:fd:c0:bd:af: e9:f6:b3:91:e9:23:81:a4:8d:ae:eb:9c:b2:4b:c4: dd:e9:49:cb:99:23:14:94:c8:05:cf:bc:cc:aa:6f: f5:b0:d9:b6:5e:b4:02:5d:3f:e1:cc:f2:0e:0b:39: 92:4c:b9:6d:f6:46:15:5d:0e:5b:9b:ad:8b:bd:46: bd:fa:d2:9f:57:7a:5a:39:57:39:23:45:64:7e:cd: 7b:3d:4e:3a:18:eb:fe:e1:35:2c:2b:ee:b0:41:14: d5:0c:d5:91:3b:02:30:89:8c:f2:a1:b6:98:30:55: c1:c5:8f:c2:56:b5:6a:43:f8:80:f6:c5:aa:82:27: c6:55:31:bb:25:da:63:70:b0:72:2c:89:3e:b0:ed: 25:e4:9a:f7:69:b3:e4:d0:56:ec:0b:7e:51:52:61: ee:d3:c0:7c:7b:2c:c6:af:af:d0:a5:16:bf:9c:1c: ee:ac:b2:83:09:18:83:2d:98:5e:4f:e3:b9:17:3c: b7:09:2f:de:4b:a5:9b:61:41:39:44:b6:a8:8c:2e: 3c:b0:65:2a:0f:0a:7a:9a:37:07:63:da:aa:48:65: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:67:0C:2F:5C:DC:1B:DD:2A:5F:86:A0:C0:42:0B:00:84:DA:69:D1 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:83:73:4d:8b:ae:d1:bc:51:37:a8:25:39:f5:ee:6c:17:18: 63:34:51:82:f8:58:3b:6a:33:1d:2f:b5:93:88:dd:92:ad:2f: 6c:5d:6e:bf:e5:a0:82:43:cd:e8:51:9e:05:86:eb:9e:8b:50: 5c:98:bb:f6:32:ad:49:2c:af:5c:7f:05:21:fe:16:5b:20:28: 98:6c:27:d4:0c:0c:32:a0:53:78:b4:8e:3e:9c:05:d5:3d:d1: 89:56:75:8e:0b:5b:d0:30:d3:cc:ad:09:a8:24:49:f5:49:10: 44:92:5e:2e:a7:1d:95:ec:e9:4f:77:eb:af:69:46:1e:c6:fa: ff:5b:1f:5f:5d:2a:58:b3:b1:75:32:f7:5a:03:95:c7:84:69: 08:67:f6:ef:85:f4:55:d4:ca:5c:28:02:51:86:89:ea:19:93: c7:66:06:72:3c:f2:15:30:c6:94:6a:f5:cc:d1:f9:73:40:40: 47:84:2c:e3:e2:25:a1:7e:a2:92:b9:db:4f:72:e3:62:53:36: 29:cb:98:99:6d:ff:c4:fb:4c:bd:cb:12:bd:32:f7:95:69:b1: e7:26:1a:0c:9c:d0:3c:47:84:08:3c:7a:2c:6e:a1:fa:cf:ad: 78:70:a9:87:57:de:ac:3b:6c:f6:55:48:fd:c0:69:a7:8c:a5: a7:14:b8:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaLCPFtpGy/rSGv4+1/xRahdkch4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjA0MDYwOTQzNTZaFw0yNjA0MDcxMTMwNTZaMDMxMTAvBgNV BAMTKDM4NjcwQzJGNUNEQzFCREQyQTVGODZBMEMwNDIwQjAwODREQTY5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9cNZHTfmIcQjxsoKIhXcymXp BTkVeTQbnA+YbdWdBLdWtOWiqIRM/cC9r+n2s5HpI4Gkja7rnLJLxN3pScuZIxSU yAXPvMyqb/Ww2bZetAJdP+HM8g4LOZJMuW32RhVdDlubrYu9Rr360p9Xelo5Vzkj RWR+zXs9TjoY6/7hNSwr7rBBFNUM1ZE7AjCJjPKhtpgwVcHFj8JWtWpD+ID2xaqC J8ZVMbsl2mNwsHIsiT6w7SXkmvdps+TQVuwLflFSYe7TwHx7LMavr9ClFr+cHO6s soMJGIMtmF5P47kXPLcJL95LpZthQTlEtqiMLjywZSoPCnqaNwdj2qpIZTeHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOGcML1zcG90qX4agwEILAITaadEwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC83MTk1MkIwRkY5QkNB N0NFNTQzNkIwREI1MDA5Q0EwOUY2MTBGM0MwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4NzTYuu0bxR N6glOfXubBcYYzRRgvhYO2ozHS+1k4jdkq0vbF1uv+WggkPN6FGeBYbrnotQXJi7 9jKtSSyvXH8FIf4WWyAomGwn1AwMMqBTeLSOPpwF1T3RiVZ1jgtb0DDTzK0JqCRJ 9UkQRJJeLqcdlezpT3frr2lGHsb6/1sfX10qWLOxdTL3WgOVx4RpCGf274X0VdTK XCgCUYaJ6hmTx2YGcjzyFTDGlGr1zNH5c0BAR4Qs4+IloX6ikrnbT3LjYlM2KcuY mW3/xPtMvcsSvTL3lWmx5yYaDJzQPEeECDx6LG6h+s+teHCph1ferDts9lVI/cBp p4ylpxS4KQ== -----END CERTIFICATE-----Generated at Mon Apr 6 14:12:16 2026 by rpki-client