$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json) Hash identifier: mB/ueGUpADnj/2uhzIvpAiNIHQkJQtFv7wgOATbsJAk= Subject key identifier: C7:CB:4C:4D:DA:DB:19:F2:5D:75:25:6B:14:80:23:51:30:B2:76:9D Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Certificate serial: 65424C9197DCD2E9860AB381ACFA84C74C7D234D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft Manifest number: 2A Signing time: Wed 13 May 2026 02:00:51 +0000 Manifest this update: Wed 13 May 2026 01:55:51 +0000 Manifest next update: Thu 14 May 2026 04:11:51 +0000 Files and hashes: 1: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: 01DUflvl0U9ho1fFcReXsG+Uo+Ik1Y543sRtS6MQI3k=) 2: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=) 3: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:42:4c:91:97:dc:d2:e9:86:0a:b3:81:ac:fa:84:c7:4c:7d:23:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Validity Not Before: May 13 01:55:51 2026 GMT Not After : May 14 04:11:51 2026 GMT Subject: CN=C7CB4C4DDADB19F25D75256B1480235130B2769D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:98:60:58:0e:ad:dc:0f:82:35:47:59:03: ac:79:12:a7:87:4d:ab:b1:dd:d0:68:2a:41:47:60: 54:1f:6e:21:f2:fc:6f:ea:51:85:ad:e3:37:b2:3b: 02:1e:8b:70:26:52:87:4f:4d:e4:f4:09:8a:f9:3b: 7c:58:1a:06:ec:19:16:d0:f4:99:9c:8b:e7:87:7f: 77:13:be:c5:12:66:41:8b:69:64:f1:2c:83:e1:80: 60:64:87:d3:8d:2a:06:8b:76:6b:cd:6e:91:06:17: 24:1b:20:a7:44:ae:39:d5:83:d6:34:2f:c0:e0:78: b2:f1:3c:7c:c1:f6:93:5d:f6:58:f6:45:fd:45:9b: 52:3a:b1:c5:10:ad:7c:81:d5:e0:f9:87:34:2c:b4: d7:55:9e:eb:26:da:bb:28:25:24:94:49:31:7f:70: 55:ec:cf:d8:6e:34:fe:0c:51:3f:cc:4e:f7:b3:f3: 3e:64:68:62:32:5a:3e:94:0c:6c:67:7b:59:1e:52: c0:35:9b:fe:43:98:92:2a:3d:d6:d8:41:2e:ed:70: b6:20:f1:b6:79:e9:02:94:dd:be:26:9e:6d:23:39: 5d:46:7e:8c:e4:4d:13:f5:7f:db:fc:9c:c8:e8:d9: 1f:6c:d0:ac:97:6b:c8:ca:0f:53:03:82:ea:26:e8: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CB:4C:4D:DA:DB:19:F2:5D:75:25:6B:14:80:23:51:30:B2:76:9D X509v3 Authority Key Identifier: keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c7:21:8b:ba:ad:25:12:76:70:94:15:10:c2:83:c2:52:f0: c7:ee:d0:47:c3:b4:42:51:f2:e7:10:c4:c1:26:7b:e4:3a:7f: fc:33:8a:09:be:84:d0:e2:6e:be:5d:7a:b7:4b:87:fa:b6:77: b1:fd:d3:02:c9:59:4f:6b:8e:fa:dc:3d:f8:b2:e5:e3:76:7c: 68:33:ca:9a:b8:29:f3:04:ab:a7:9f:74:da:40:4e:46:02:cd: 94:0b:fb:a2:73:59:b1:19:e6:06:5c:2d:d1:cb:16:8d:a0:58: 4b:0b:2d:d0:dd:17:fd:ca:4a:d2:70:c9:02:75:45:20:bc:51: 5f:4d:d2:af:bf:0a:c4:41:ec:1a:d0:63:4b:1e:7d:a6:9e:3b: 02:22:c3:6a:f6:1a:0c:82:88:0d:21:f1:eb:8f:0f:ec:db:9f: 5b:e9:5d:66:6d:c1:6f:52:7e:9f:f5:ed:90:9b:39:d2:0b:1a: 4a:4d:f0:91:a3:50:09:6c:b8:01:1f:f2:46:09:1e:12:9b:5c: ee:86:3d:7e:4a:6d:f0:c7:16:42:15:25:ca:b6:18:1e:17:b6: 19:91:e3:bc:a6:46:27:dc:4b:8d:6a:14:d7:e2:7e:0b:b7:40: 6d:c2:1e:a6:78:dc:26:16:e4:1b:71:cd:31:1a:05:1c:87:90: e3:4d:b4:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZUJMkZfc0umGCrOBrPqEx0x9I00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBG RUIxRkZCMjAeFw0yNjA1MTMwMTU1NTFaFw0yNjA1MTQwNDExNTFaMDMxMTAvBgNV BAMTKEM3Q0I0QzREREFEQjE5RjI1RDc1MjU2QjE0ODAyMzUxMzBCMjc2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDphgWA6t3A+CNUdZA6x5EqeH Taux3dBoKkFHYFQfbiHy/G/qUYWt4zeyOwIei3AmUodPTeT0CYr5O3xYGgbsGRbQ 9Jmci+eHf3cTvsUSZkGLaWTxLIPhgGBkh9ONKgaLdmvNbpEGFyQbIKdErjnVg9Y0 L8DgeLLxPHzB9pNd9lj2Rf1Fm1I6scUQrXyB1eD5hzQstNdVnusm2rsoJSSUSTF/ cFXsz9huNP4MUT/MTvez8z5kaGIyWj6UDGxne1keUsA1m/5DmJIqPdbYQS7tcLYg 8bZ56QKU3b4mnm0jOV1GfozkTRP1f9v8nMjo2R9s0KyXa8jKD1MDguom6FedAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUx8tMTdrbGfJddSVrFIAjUTCydp0wHwYDVR0j BBgwFoAUeHFK7YcoHk9VpnxdQuj98P6x/7IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM3NDE2MjI2MTI3ODcyMy8wLzc4NzE0QUVEODcyODFFNEY1NUE2N0M1RDQyRThG REYwRkVCMUZGQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNzQxNjIyNjEyNzg3MjMvMC83ODcxNEFFRDg3Mjgx RTRGNTVBNjdDNUQ0MkU4RkRGMEZFQjFGRkIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMchi7qtJRJ2 cJQVEMKDwlLwx+7QR8O0QlHy5xDEwSZ75Dp//DOKCb6E0OJuvl16t0uH+rZ3sf3T AslZT2uO+tw9+LLl43Z8aDPKmrgp8wSrp5902kBORgLNlAv7onNZsRnmBlwt0csW jaBYSwst0N0X/cpK0nDJAnVFILxRX03Sr78KxEHsGtBjSx59pp47AiLDavYaDIKI DSHx648P7NufW+ldZm3Bb1J+n/XtkJs50gsaSk3wkaNQCWy4AR/yRgkeEptc7oY9 fkpt8McWQhUlyrYYHhe2GZHjvKZGJ9xLjWoU1+J+C7dAbcIepnjcJhbkG3HNMRoF HIeQ4020Ww== -----END CERTIFICATE-----Generated at Wed May 13 18:21:33 2026 by rpki-client