$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: dslDCvhuHZihfNUECFYB+MdnD2HwVSPRT6yGKrKO/J4= Subject key identifier: FE:BF:C5:85:5F:06:6A:34:00:23:57:12:6E:73:D7:89:43:ED:42:FC Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 1E0AE82BC37F391866A89603DD66ACCC7E8044FC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: 45 Signing time: Sun 19 Apr 2026 02:19:58 +0000 Manifest this update: Sun 19 Apr 2026 02:14:58 +0000 Manifest next update: Mon 20 Apr 2026 03:43:58 +0000 Files and hashes: 1: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) 2: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: S+ab1TZ9sgA7yLEoqf/20VV9C10uIJmZTk3tj5HUl38=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0a:e8:2b:c3:7f:39:18:66:a8:96:03:dd:66:ac:cc:7e:80:44:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: Apr 19 02:14:58 2026 GMT Not After : Apr 20 03:43:58 2026 GMT Subject: CN=FEBFC5855F066A34002357126E73D78943ED42FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:df:a0:ba:45:4d:22:d1:4e:6c:9f:61:9c: fa:9e:28:25:7b:3f:b3:e6:a7:7e:1b:53:b2:66:61: 2c:2a:a9:6e:89:00:83:1b:1b:5c:91:d2:00:18:06: 17:70:38:dd:22:ba:f8:4d:ec:36:1d:45:d2:70:a2: 47:ae:d5:0f:72:c0:c2:08:ae:d2:37:a9:6e:c5:7a: 93:21:a6:6b:e3:e7:e7:99:a1:b7:db:90:a0:88:26: 5b:aa:b5:94:36:be:08:cb:5a:0a:54:02:55:4b:37: 60:9a:c0:04:aa:4f:3a:bf:53:db:a0:52:6f:71:09: c0:88:15:78:99:03:27:17:6a:a0:e8:f2:58:36:75: cf:33:5f:bf:a6:6b:aa:8a:61:4e:51:26:63:42:20: 2f:61:59:ee:18:01:8f:11:49:a0:f3:4f:ab:9a:44: b0:db:b2:11:49:04:5f:9e:e8:35:0e:45:ae:41:90: ed:0b:27:fe:8c:e8:f6:18:af:16:a3:9f:da:30:1f: f3:4f:e1:87:c2:7d:af:aa:4d:c4:11:0a:94:da:47: 07:0d:11:7f:7c:c1:99:86:1c:5e:1a:a1:d2:b2:90: 8d:26:8c:95:46:d4:a6:15:18:d4:59:fb:28:91:e0: b6:c9:c9:c5:65:bd:1b:02:d6:78:63:f2:b7:dc:dc: dd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BF:C5:85:5F:06:6A:34:00:23:57:12:6E:73:D7:89:43:ED:42:FC X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e5:a2:05:6f:b2:04:1e:21:d7:53:85:fe:d8:9e:70:33:88: 73:b9:56:99:af:17:40:a6:91:16:92:9f:7e:f4:84:0a:b0:15: 6d:4f:aa:ee:45:5d:85:2c:ff:f6:8d:a2:73:0d:b2:50:b1:88: f7:13:94:89:38:ce:80:f0:07:95:64:64:5b:f8:ec:c6:11:1e: 59:45:4c:a4:2b:94:97:04:7f:39:b3:d7:03:2c:3a:88:5c:f1: cc:56:13:41:b8:12:d8:cd:db:3f:b1:f6:a7:99:b3:ad:09:52: 6d:05:7a:a4:ee:3c:00:af:44:eb:15:91:74:ac:07:37:49:89: 1a:ab:de:f9:05:b3:49:30:da:9d:8f:fe:11:74:b4:99:88:c4: 55:b1:46:19:78:02:59:ef:1e:7d:4d:19:b5:86:dc:98:7e:93: 0f:93:3f:8e:4d:16:53:49:9f:f4:c9:9e:6a:23:5d:d6:30:6e: 5f:97:06:2c:6e:86:1c:21:4d:16:11:a9:1c:51:17:12:a8:4b: a0:50:44:65:4a:cf:8f:9d:4f:ed:6b:87:86:e5:ac:ac:d1:81: 1c:59:54:92:4b:e2:f8:e1:7f:14:57:ba:fd:bf:79:25:e6:51: 61:90:90:3f:fc:32:8f:b4:b8:09:e8:51:52:b8:0d:07:86:49: ab:fd:52:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHgroK8N/ORhmqJYD3WaszH6ARPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjA0MTkwMjE0NThaFw0yNjA0MjAwMzQzNThaMDMxMTAvBgNV BAMTKEZFQkZDNTg1NUYwNjZBMzQwMDIzNTcxMjZFNzNENzg5NDNFRDQyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMN+gukVNItFObJ9hnPqeKCV7 P7Pmp34bU7JmYSwqqW6JAIMbG1yR0gAYBhdwON0iuvhN7DYdRdJwokeu1Q9ywMII rtI3qW7FepMhpmvj5+eZobfbkKCIJluqtZQ2vgjLWgpUAlVLN2CawASqTzq/U9ug Um9xCcCIFXiZAycXaqDo8lg2dc8zX7+ma6qKYU5RJmNCIC9hWe4YAY8RSaDzT6ua RLDbshFJBF+e6DUORa5BkO0LJ/6M6PYYrxajn9owH/NP4YfCfa+qTcQRCpTaRwcN EX98wZmGHF4aodKykI0mjJVG1KYVGNRZ+yiR4LbJycVlvRsC1nhj8rfc3N03AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/r/FhV8GajQAI1cSbnPXiUPtQvwwHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeWiBW+yBB4h 11OF/tiecDOIc7lWma8XQKaRFpKffvSECrAVbU+q7kVdhSz/9o2icw2yULGI9xOU iTjOgPAHlWRkW/jsxhEeWUVMpCuUlwR/ObPXAyw6iFzxzFYTQbgS2M3bP7H2p5mz rQlSbQV6pO48AK9E6xWRdKwHN0mJGqve+QWzSTDanY/+EXS0mYjEVbFGGXgCWe8e fU0ZtYbcmH6TD5M/jk0WU0mf9MmeaiNd1jBuX5cGLG6GHCFNFhGpHFEXEqhLoFBE ZUrPj51P7WuHhuWsrNGBHFlUkkvi+OF/FFe6/b95JeZRYZCQP/wyj7S4CehRUrgN B4ZJq/1Sog== -----END CERTIFICATE-----Generated at Sun Apr 19 07:32:56 2026 by rpki-client