$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json) Hash identifier: tvBS+5bvQ311iD9x/vEc+vBWb6I8iCYqqipANhTG6Jk= Subject key identifier: 7B:FE:AE:C3:A8:9E:B5:C7:E7:ED:33:23:FE:C2:04:EF:95:29:30:73 Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Certificate serial: 2DD6828C5740B684DE3CDB7BED3A9B5D97449C4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft Manifest number: 20 Signing time: Tue 05 May 2026 18:51:33 +0000 Manifest this update: Tue 05 May 2026 18:46:33 +0000 Manifest next update: Wed 06 May 2026 20:07:33 +0000 Files and hashes: 1: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: CWGBIic5JfnCqOEYY+KXQk/GwTtru1VIvHW7V5znepE=) 2: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=) 3: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 16:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d6:82:8c:57:40:b6:84:de:3c:db:7b:ed:3a:9b:5d:97:44:9c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Validity Not Before: May 5 18:46:33 2026 GMT Not After : May 6 20:07:33 2026 GMT Subject: CN=7BFEAEC3A89EB5C7E7ED3323FEC204EF95293073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:9f:08:1f:e5:97:04:d3:0d:53:ba:47:bc: 9b:10:e5:38:c4:a1:32:2f:62:7f:50:1b:d1:90:22: 44:52:b0:36:6f:ae:f4:a2:62:cd:30:a2:72:9e:24: ca:34:1c:23:fe:a9:4d:fe:86:d0:bd:fe:cb:89:be: 58:10:5d:41:b6:81:8f:7e:59:c1:93:80:6d:fa:83: 67:aa:5a:cc:05:7a:f2:b0:15:7c:67:72:d3:b6:2d: 85:92:a5:57:e1:98:64:94:a7:99:fd:c8:00:94:be: 1b:63:fb:b3:45:e9:27:c0:e2:1e:bc:c0:59:af:26: 80:7b:9d:b9:ea:b0:03:1c:fe:d5:a8:3f:09:47:0f: b9:c2:c4:63:3c:f4:e6:43:3d:e8:39:3b:61:47:7c: 57:3c:76:22:86:80:a2:78:03:59:b4:b1:2c:4e:9e: f9:da:fa:04:9f:ec:63:16:79:24:5f:59:57:15:cc: 96:6e:0f:c9:59:e8:e8:86:4c:6e:77:77:06:e1:af: 86:7c:82:dd:86:d5:a2:9e:e4:03:5e:bc:b2:6f:d0: 41:4a:40:86:4b:f0:de:2b:25:ff:53:5b:62:34:4e: e9:48:f7:f3:b3:08:d7:a2:92:f6:4f:24:4b:c3:1d: fa:de:d7:27:13:e0:5e:f3:65:9a:6a:c6:e2:a4:82: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FE:AE:C3:A8:9E:B5:C7:E7:ED:33:23:FE:C2:04:EF:95:29:30:73 X509v3 Authority Key Identifier: keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a2:7c:c6:85:7a:37:20:0a:f8:7c:dc:ce:ae:92:f0:e3:85: 98:01:ad:41:63:e7:4f:5c:1c:e2:1e:89:98:41:e0:47:44:53: 5e:2e:c0:fc:87:5e:d2:44:16:40:b1:5a:1b:3f:87:c3:c6:e0: f0:bf:4f:19:15:b6:e8:3c:1b:ec:ac:f8:b4:d1:05:97:bd:e9: 1a:11:7a:e5:07:52:09:4a:d9:53:e7:63:1f:cd:b1:53:29:48: 0d:d7:d9:5a:31:c2:df:b2:6d:1b:90:e1:2c:03:25:66:bf:58: 74:7d:b2:49:fc:20:11:9a:01:4e:a6:5d:26:14:6d:17:13:36: 8e:c7:fc:94:2b:24:b5:20:16:c6:5c:b1:8d:c4:a4:bb:0d:30: e6:af:52:71:95:a6:e6:d7:15:6c:60:4c:02:89:dd:eb:2c:84: 0b:2a:c4:1e:57:17:1f:a6:09:e7:86:6f:a8:7f:cf:22:40:7e: f2:44:01:d4:46:7b:dc:20:3a:7c:43:a8:1e:4f:d5:2c:d5:fe: be:16:60:1c:95:86:aa:58:2c:47:7c:30:08:09:02:9e:36:de: c5:78:04:dd:e5:45:bc:5f:2c:1f:95:da:40:e4:8e:73:1b:4c: 98:5c:89:ef:e0:55:d5:c2:d4:af:a0:e2:ed:52:fc:be:6c:15: de:2c:b7:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULdaCjFdAtoTePNt77TqbXZdEnEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBG RUIxRkZCMjAeFw0yNjA1MDUxODQ2MzNaFw0yNjA1MDYyMDA3MzNaMDMxMTAvBgNV BAMTKDdCRkVBRUMzQTg5RUI1QzdFN0VEMzMyM0ZFQzIwNEVGOTUyOTMwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEp8IH+WXBNMNU7pHvJsQ5TjE oTIvYn9QG9GQIkRSsDZvrvSiYs0wonKeJMo0HCP+qU3+htC9/suJvlgQXUG2gY9+ WcGTgG36g2eqWswFevKwFXxnctO2LYWSpVfhmGSUp5n9yACUvhtj+7NF6SfA4h68 wFmvJoB7nbnqsAMc/tWoPwlHD7nCxGM89OZDPeg5O2FHfFc8diKGgKJ4A1m0sSxO nvna+gSf7GMWeSRfWVcVzJZuD8lZ6OiGTG53dwbhr4Z8gt2G1aKe5ANevLJv0EFK QIZL8N4rJf9TW2I0TulI9/OzCNeikvZPJEvDHfre1ycT4F7zZZpqxuKkgh4XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe/6uw6ietcfn7TMj/sIE75UpMHMwHwYDVR0j BBgwFoAUeHFK7YcoHk9VpnxdQuj98P6x/7IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM3NDE2MjI2MTI3ODcyMy8wLzc4NzE0QUVEODcyODFFNEY1NUE2N0M1RDQyRThG REYwRkVCMUZGQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNzQxNjIyNjEyNzg3MjMvMC83ODcxNEFFRDg3Mjgx RTRGNTVBNjdDNUQ0MkU4RkRGMEZFQjFGRkIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqJ8xoV6NyAK +Hzczq6S8OOFmAGtQWPnT1wc4h6JmEHgR0RTXi7A/Ide0kQWQLFaGz+Hw8bg8L9P GRW26Dwb7Kz4tNEFl73pGhF65QdSCUrZU+djH82xUylIDdfZWjHC37JtG5DhLAMl Zr9YdH2ySfwgEZoBTqZdJhRtFxM2jsf8lCsktSAWxlyxjcSkuw0w5q9ScZWm5tcV bGBMAond6yyECyrEHlcXH6YJ54ZvqH/PIkB+8kQB1EZ73CA6fEOoHk/VLNX+vhZg HJWGqlgsR3wwCAkCnjbexXgE3eVFvF8sH5XaQOSOcxtMmFyJ7+BV1cLUr6Di7VL8 vmwV3iy3iQ== -----END CERTIFICATE-----Generated at Wed May 6 06:19:25 2026 by rpki-client