$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft File: 1332FF90625961F264C4C1697510C8D39E9865D7.mft (raw, json) Hash identifier: tKveBh+oFKpD/8NNa52ADwRizp4coUuUX+PDsL/iMRI= Subject key identifier: BC:0F:DA:A4:03:88:AC:6E:7E:B0:44:59:63:B7:89:CB:46:EF:80:4D Authority key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 Certificate issuer: /CN=1332FF90625961F264C4C1697510C8D39E9865D7 Certificate serial: 5D7FB831039F79611BCC60AA7A6895F81401EEA4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft Manifest number: 05 Signing time: Sun 12 Apr 2026 17:39:16 +0000 Manifest this update: Sun 12 Apr 2026 17:34:16 +0000 Manifest next update: Mon 13 Apr 2026 20:50:16 +0000 Files and hashes: 1: 3130332e3132322e34382e302f32322d3232203d3e20313337373838.roa (hash: SbHyx5JcXCPgWqbXvh1lU44U3Nytrtx2FQt2UAWIA9Q=) 2: 3130332e3131372e3232302e302f32322d3232203d3e20313337373838.roa (hash: +BUcGZOQFiD6PT+iLY28PJeBHvjqy0X2J6YfTJqs3Lc=) 3: 1332FF90625961F264C4C1697510C8D39E9865D7.crl (hash: mRMgVMZ9Awe7FUUG0IYvfd3KX2NlhPi6pogQoZZrJEQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 20:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7f:b8:31:03:9f:79:61:1b:cc:60:aa:7a:68:95:f8:14:01:ee:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1332FF90625961F264C4C1697510C8D39E9865D7 Validity Not Before: Apr 12 17:34:16 2026 GMT Not After : Apr 13 20:50:16 2026 GMT Subject: CN=BC0FDAA40388AC6E7EB0445963B789CB46EF804D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:52:80:a2:83:59:15:99:dd:e9:fe:d6:e0: 48:17:18:8d:1a:5c:5e:3b:d1:48:74:74:bf:67:5a: 08:04:1b:16:62:21:ce:3f:85:ee:1a:ec:19:a6:24: 9e:7b:d9:00:ab:3b:7b:21:24:40:5b:24:94:68:4b: 6d:d5:6d:12:02:cb:d5:b4:ba:ff:67:22:47:8e:b5: ad:10:dc:ad:9b:da:c8:48:fc:e5:6b:b0:f7:0e:73: 14:f6:9a:11:e5:bb:87:54:01:cc:66:99:c7:dc:0f: ae:54:bc:11:51:5f:a1:13:f6:ee:5d:d0:86:89:a7: cc:ab:56:30:cf:6d:c7:ef:5c:35:15:70:b8:ca:6a: 7b:8f:3b:f0:42:17:b7:0e:ea:b8:13:c1:6b:e9:b1: cf:17:33:50:bb:9b:26:81:e7:78:69:43:3c:eb:be: 0d:a7:2e:62:5f:27:6c:bd:88:93:45:f0:1b:d2:be: 42:31:25:2c:25:04:ee:3b:13:52:e2:63:8c:56:4b: b1:68:2e:1a:ba:ad:81:b8:76:d0:15:9d:e8:d4:b6: 97:0c:7e:60:97:96:d5:8e:66:c7:c9:c9:d6:db:fb: 14:ee:52:0b:c8:ea:db:01:40:90:2e:23:04:49:34: b8:1b:6c:13:10:89:5e:39:4b:76:81:3b:e8:c1:b8: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0F:DA:A4:03:88:AC:6E:7E:B0:44:59:63:B7:89:CB:46:EF:80:4D X509v3 Authority Key Identifier: keyid:13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:86:c3:85:11:00:18:06:29:b1:e6:8e:e7:58:68:68:95:69: a7:3f:1d:47:1c:a3:8d:ce:4a:52:81:52:fb:23:b7:aa:a9:68: fb:82:7e:52:e0:5c:8c:e0:24:b6:6e:82:16:c3:66:09:41:53: 00:2e:51:6e:f1:d1:2b:87:05:75:30:65:61:2f:70:69:d1:16: f6:8d:9c:ff:97:c0:9b:b1:e0:8f:6b:46:97:5e:da:41:12:6d: 8d:e1:70:8b:b8:5e:8f:b0:f7:d5:64:10:0b:16:e1:09:92:28: 39:36:cb:40:a0:52:e9:f0:8a:d9:0f:fd:56:7e:57:e5:4d:5d: 68:1b:fc:55:dd:c6:9c:e4:95:97:0c:51:ec:ba:0c:a6:1f:75: e5:88:21:94:1e:c6:de:bc:58:46:88:95:d6:33:12:34:08:a9: 8a:12:91:17:ec:97:71:98:29:e6:7d:19:1c:c7:c5:68:7e:53: 90:97:61:1c:e0:55:fd:e5:c7:3f:fe:91:33:7a:0b:e6:21:87: d1:e7:bd:ca:f1:ca:73:ba:81:5f:39:27:c0:30:d8:25:72:f3: 0a:22:dc:ea:73:14:df:d7:17:83:aa:6d:92:b4:10:b9:c4:03: 47:8d:4c:1c:53:95:09:f4:bc:fc:b6:8c:e3:22:30:4b:53:d5: 63:00:8c:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXX+4MQOfeWEbzGCqemiV+BQB7qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5 RTk4NjVENzAeFw0yNjA0MTIxNzM0MTZaFw0yNjA0MTMyMDUwMTZaMDMxMTAvBgNV BAMTKEJDMEZEQUE0MDM4OEFDNkU3RUIwNDQ1OTYzQjc4OUNCNDZFRjgwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZklKAooNZFZnd6f7W4EgXGI0a XF470Uh0dL9nWggEGxZiIc4/he4a7BmmJJ572QCrO3shJEBbJJRoS23VbRICy9W0 uv9nIkeOta0Q3K2b2shI/OVrsPcOcxT2mhHlu4dUAcxmmcfcD65UvBFRX6ET9u5d 0IaJp8yrVjDPbcfvXDUVcLjKanuPO/BCF7cO6rgTwWvpsc8XM1C7myaB53hpQzzr vg2nLmJfJ2y9iJNF8BvSvkIxJSwlBO47E1LiY4xWS7FoLhq6rYG4dtAVnejUtpcM fmCXltWOZsfJydbb+xTuUgvI6tsBQJAuIwRJNLgbbBMQiV45S3aBO+jBuK9fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvA/apAOIrG5+sERZY7eJy0bvgE0wHwYDVR0j BBgwFoAUEzL/kGJZYfJkxMFpdRDI056YZdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDkxMzU2MzUwMTI2NDg5OS8wLzEzMzJGRjkwNjI1OTYxRjI2NEM0QzE2OTc1MTBD OEQzOUU5ODY1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5RTk4NjVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ5MTM1NjM1MDEyNjQ4OTkvMC8xMzMyRkY5MDYyNTk2 MUYyNjRDNEMxNjk3NTEwQzhEMzlFOTg2NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4bDhREAGAYp seaO51hoaJVppz8dRxyjjc5KUoFS+yO3qqlo+4J+UuBcjOAktm6CFsNmCUFTAC5R bvHRK4cFdTBlYS9wadEW9o2c/5fAm7Hgj2tGl17aQRJtjeFwi7hej7D31WQQCxbh CZIoOTbLQKBS6fCK2Q/9Vn5X5U1daBv8Vd3GnOSVlwxR7LoMph915YghlB7G3rxY RoiV1jMSNAipihKRF+yXcZgp5n0ZHMfFaH5TkJdhHOBV/eXHP/6RM3oL5iGH0ee9 yvHKc7qBXzknwDDYJXLzCiLc6nMU39cXg6ptkrQQucQDR41MHFOVCfS8/LaM4yIw S1PVYwCMxA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:05:13 2026 by rpki-client