$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: C3MxYQ3O3PaYvtfsD06T7A9rlXUtlXmAX8Yi/q7Ud6Y= Subject key identifier: 05:DE:21:0D:31:51:40:07:74:5D:3A:E4:4A:89:24:8B:5B:DE:D8:F6 Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 5B5CEA71BA6BF7E92CA57DF3568AB6DC74AD7054 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: 09 Signing time: Mon 13 Apr 2026 04:39:17 +0000 Manifest this update: Mon 13 Apr 2026 04:34:17 +0000 Manifest next update: Tue 14 Apr 2026 05:39:17 +0000 Files and hashes: 1: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: +eRo9280RcsjtouHqVaoCU6R1CagMpojmJYxhOMw2WM=) 2: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 3: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 05:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5c:ea:71:ba:6b:f7:e9:2c:a5:7d:f3:56:8a:b6:dc:74:ad:70:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Apr 13 04:34:17 2026 GMT Not After : Apr 14 05:39:17 2026 GMT Subject: CN=05DE210D31514007745D3AE44A89248B5BDED8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cd:a7:37:a4:90:74:7c:f2:70:ea:e3:72:77: c2:d8:5d:dc:e3:03:df:82:26:fc:81:a1:13:6c:fb: c1:d1:1d:97:2d:9d:a1:19:0b:ab:fb:0e:f0:0e:1e: 6c:df:4c:b8:89:a9:64:cd:84:0c:ab:54:cd:66:7b: d6:b3:92:eb:fc:6e:97:36:a4:ba:93:1a:23:3f:8d: 78:18:f0:3e:7a:27:74:7f:15:3d:27:df:89:55:25: f4:f6:14:1f:d0:a3:8f:49:08:5c:bb:f0:67:35:ec: 3b:2f:7f:1e:05:b3:05:09:7b:c4:63:34:ef:ed:1b: 0d:f9:17:48:38:f7:f7:2a:f6:0a:77:95:6a:ec:6d: 9f:e7:e2:8c:79:28:f1:00:9b:d5:7e:e2:60:60:d7: c0:fb:d5:f7:5e:06:ee:9c:80:a6:3f:8c:1c:7e:69: 70:73:01:1c:3c:da:f8:ee:9d:5b:66:d7:94:ba:7b: 52:7c:81:9b:1d:6d:a5:fc:fe:db:c9:84:62:57:20: f9:aa:75:da:60:73:55:59:c5:e2:ee:f3:a7:d7:72: 19:37:15:34:3e:da:a9:1c:3d:0f:b9:18:87:38:1e: ab:31:ce:1b:d0:dd:40:e6:c7:f5:70:9a:1b:df:4b: e8:bc:9e:32:9e:03:f5:af:9c:ba:88:b5:dc:57:75: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:21:0D:31:51:40:07:74:5D:3A:E4:4A:89:24:8B:5B:DE:D8:F6 X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:cf:24:b1:dd:21:0a:6d:a0:5d:f5:86:aa:b5:25:35:25:ef: 48:0b:1f:02:f4:27:46:2f:1d:8e:86:a7:02:01:3e:ce:19:a5: 95:59:20:c9:0c:b7:c7:33:dc:20:00:d2:89:56:b5:6b:cc:1a: 4f:aa:c2:ea:dc:36:bb:08:33:73:90:34:38:71:e9:eb:e7:48: c5:df:46:4c:9e:01:00:4d:00:89:d8:56:dd:91:19:e5:ea:51: 1e:c5:3f:fc:35:d3:a4:4b:05:36:3c:75:34:44:f9:66:24:e8: f8:56:22:6e:dd:cd:aa:5c:79:27:9d:8a:9d:fb:e2:38:31:c7: b1:da:e6:f6:5c:89:29:0d:b8:54:7c:0e:17:75:8f:60:92:d7: 3b:31:85:8f:8f:95:16:78:c5:de:1e:82:86:c2:aa:ff:bb:c5: 38:6e:57:93:51:1f:77:80:ed:1e:a8:a2:f2:c3:20:33:1d:9b: 06:89:38:01:f2:d8:e5:2d:45:2a:7b:34:b1:8c:a5:6e:bd:5e: a7:35:1b:5d:7e:ae:d3:d3:98:c0:4d:da:10:45:9e:ca:a2:75: ec:87:27:0f:32:07:34:f8:2b:4c:5f:97:2e:f4:4e:a7:13:fc: fd:5a:6f:e0:6f:af:0d:df:12:e6:65:94:82:0f:3f:c9:b8:cf: f6:09:5f:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW1zqcbpr9+kspX3zVoq23HStcFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjA0MTMwNDM0MTdaFw0yNjA0MTQwNTM5MTdaMDMxMTAvBgNV BAMTKDA1REUyMTBEMzE1MTQwMDc3NDVEM0FFNDRBODkyNDhCNUJERUQ4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzzac3pJB0fPJw6uNyd8LYXdzj A9+CJvyBoRNs+8HRHZctnaEZC6v7DvAOHmzfTLiJqWTNhAyrVM1me9azkuv8bpc2 pLqTGiM/jXgY8D56J3R/FT0n34lVJfT2FB/Qo49JCFy78Gc17Dsvfx4FswUJe8Rj NO/tGw35F0g49/cq9gp3lWrsbZ/n4ox5KPEAm9V+4mBg18D71fdeBu6cgKY/jBx+ aXBzARw82vjunVtm15S6e1J8gZsdbaX8/tvJhGJXIPmqddpgc1VZxeLu86fXchk3 FTQ+2qkcPQ+5GIc4HqsxzhvQ3UDmx/VwmhvfS+i8njKeA/WvnLqItdxXdb0hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBd4hDTFRQAd0XTrkSokki1ve2PYwHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN88ksd0hCm2g XfWGqrUlNSXvSAsfAvQnRi8djoanAgE+zhmllVkgyQy3xzPcIADSiVa1a8waT6rC 6tw2uwgzc5A0OHHp6+dIxd9GTJ4BAE0AidhW3ZEZ5epRHsU//DXTpEsFNjx1NET5 ZiTo+FYibt3Nqlx5J52KnfviODHHsdrm9lyJKQ24VHwOF3WPYJLXOzGFj4+VFnjF 3h6ChsKq/7vFOG5Xk1Efd4DtHqii8sMgMx2bBok4AfLY5S1FKns0sYylbr1epzUb XX6u09OYwE3aEEWeyqJ17IcnDzIHNPgrTF+XLvROpxP8/Vpv4G+vDd8S5mWUgg8/ ybjP9glfCg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:01:45 2026 by rpki-client