$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: hGbDIXTntoLQzhJwAyxubToM7ghXx0X+D3x2VAQ6U6k= Subject key identifier: 76:0C:31:74:62:1B:E8:05:D2:D0:6B:B3:C5:AA:F0:6C:78:26:C2:96 Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 502CB95ABB932AF72201A04C6DB47D6922972B23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: 65 Signing time: Mon 13 Apr 2026 00:34:17 +0000 Manifest this update: Mon 13 Apr 2026 00:29:17 +0000 Manifest next update: Tue 14 Apr 2026 04:00:17 +0000 Files and hashes: 1: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (hash: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=) 2: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: FmNKBuWaxDQuoZpmWqa3VbakpJDozx3dGMFTbRqpLmI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2c:b9:5a:bb:93:2a:f7:22:01:a0:4c:6d:b4:7d:69:22:97:2b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: Apr 13 00:29:17 2026 GMT Not After : Apr 14 04:00:17 2026 GMT Subject: CN=760C3174621BE805D2D06BB3C5AAF06C7826C296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:b8:af:4c:5a:bc:9c:ff:de:18:97:50:63: 9f:67:fe:06:ef:74:db:96:61:c8:bc:bc:8a:06:6c: e7:e9:1f:f1:84:8a:33:3d:9d:b5:66:4c:57:2f:08: 21:04:ad:d0:07:93:71:c2:c1:bc:26:97:cb:f2:bb: fd:ed:14:40:b5:ad:10:90:7e:35:4b:b4:12:b4:9f: 58:39:c8:41:9d:2a:04:b5:de:e6:16:b8:22:56:08: 57:63:dc:61:64:63:d6:f5:72:3c:b7:51:b2:44:30: 27:b3:c2:a1:15:8b:97:5f:76:8d:04:e4:22:b7:1f: 7b:4d:32:0f:3f:44:5a:56:4e:49:d0:08:a4:db:41: 1c:a3:c7:00:67:46:70:b6:29:29:75:c7:66:2c:42: ba:79:f6:54:be:d6:22:32:da:d8:1c:b6:06:72:42: 6c:9a:30:97:97:e6:19:93:f0:9d:cd:1c:5e:11:29: cd:b3:28:e0:f2:42:1d:1a:7a:3e:56:0d:2f:66:9c: 74:76:83:2c:06:a8:6c:f2:74:79:e1:3e:5d:72:66: 81:ab:e4:d4:46:42:29:50:ed:2a:70:0f:57:27:c1: 2f:f1:88:76:40:4f:e7:50:8d:09:30:f1:da:ba:ff: 9f:92:86:9f:5e:c9:32:68:80:cc:91:85:2a:c8:5e: 0f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0C:31:74:62:1B:E8:05:D2:D0:6B:B3:C5:AA:F0:6C:78:26:C2:96 X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:83:46:92:38:84:2f:b3:f6:fb:bf:c8:bc:60:52:00:1f:0e: 3f:cc:b0:d1:36:35:45:99:8b:cb:fa:ce:26:3a:7f:84:c4:90: 20:53:10:87:34:9b:e8:c4:26:d8:4e:f6:98:37:46:01:f5:f0: c9:44:3d:15:08:2e:00:d9:89:fa:a0:a4:61:e3:3f:b1:b5:89: 3c:67:ef:d1:d3:2b:d7:82:52:d6:38:51:ac:a7:24:db:a0:90: 9a:b3:90:b9:97:6c:27:9d:61:3c:ac:c2:51:62:63:41:8e:33: 63:d0:e1:d6:64:51:c3:70:15:c9:75:66:83:07:9a:5f:07:e4: 57:26:24:15:5f:25:82:ac:4e:aa:42:27:c6:74:be:29:79:cb: 0a:3a:a9:97:73:11:04:ae:ab:98:8b:71:47:2b:20:d0:fe:55: 72:78:24:6e:3a:be:13:b2:f6:a4:3e:6e:5f:6d:9c:68:7a:f0: 7b:b7:8f:22:ab:c4:1e:79:12:2c:5c:19:0b:90:57:14:93:60: 72:7a:a8:b9:eb:0d:29:16:b5:bb:2b:ca:5d:06:4d:06:2a:82: 62:81:95:fb:cf:11:b9:19:60:2b:b3:7e:db:a9:a7:4f:54:a1: 45:39:21:65:41:3b:73:e8:e2:5e:a8:8f:48:5c:e4:51:f2:a9: f2:e5:6f:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUCy5WruTKvciAaBMbbR9aSKXKyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjA0MTMwMDI5MTdaFw0yNjA0MTQwNDAwMTdaMDMxMTAvBgNV BAMTKDc2MEMzMTc0NjIxQkU4MDVEMkQwNkJCM0M1QUFGMDZDNzgyNkMyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWkrivTFq8nP/eGJdQY59n/gbv dNuWYci8vIoGbOfpH/GEijM9nbVmTFcvCCEErdAHk3HCwbwml8vyu/3tFEC1rRCQ fjVLtBK0n1g5yEGdKgS13uYWuCJWCFdj3GFkY9b1cjy3UbJEMCezwqEVi5dfdo0E 5CK3H3tNMg8/RFpWTknQCKTbQRyjxwBnRnC2KSl1x2YsQrp59lS+1iIy2tgctgZy QmyaMJeX5hmT8J3NHF4RKc2zKODyQh0aej5WDS9mnHR2gywGqGzydHnhPl1yZoGr 5NRGQilQ7SpwD1cnwS/xiHZAT+dQjQkw8dq6/5+Shp9eyTJogMyRhSrIXg+PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdgwxdGIb6AXS0GuzxarwbHgmwpYwHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4NGkjiEL7P2 +7/IvGBSAB8OP8yw0TY1RZmLy/rOJjp/hMSQIFMQhzSb6MQm2E72mDdGAfXwyUQ9 FQguANmJ+qCkYeM/sbWJPGfv0dMr14JS1jhRrKck26CQmrOQuZdsJ51hPKzCUWJj QY4zY9Dh1mRRw3AVyXVmgweaXwfkVyYkFV8lgqxOqkInxnS+KXnLCjqpl3MRBK6r mItxRysg0P5Vcngkbjq+E7L2pD5uX22caHrwe7ePIqvEHnkSLFwZC5BXFJNgcnqo uesNKRa1uyvKXQZNBiqCYoGV+88RuRlgK7N+26mnT1ShRTkhZUE7c+jiXqiPSFzk UfKp8uVvtQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:50 2026 by rpki-client