$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft File: 78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft (raw, json) Hash identifier: d0gSJPuE76G0WdynUBygWSHFswCgfu46rKt7WN0CM6o= Subject key identifier: 52:1B:42:34:50:C9:F6:18:F0:4B:73:98:7B:50:C5:CD:9D:73:5F:FF Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE Certificate issuer: /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Certificate serial: 05B396940C43DF1310440098969D5349D905147D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft Manifest number: 17 Signing time: Wed 13 May 2026 17:46:06 +0000 Manifest this update: Wed 13 May 2026 17:41:06 +0000 Manifest next update: Thu 14 May 2026 18:55:06 +0000 Files and hashes: 1: 78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl (hash: iBHyemUN8tAWaSkUHrmtUXcFPt4Eqk6Or/Npupk4DqI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b3:96:94:0c:43:df:13:10:44:00:98:96:9d:53:49:d9:05:14:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE Validity Not Before: May 13 17:41:06 2026 GMT Not After : May 14 18:55:06 2026 GMT Subject: CN=521B423450C9F618F04B73987B50C5CD9D735FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:2c:bf:ce:aa:d6:5c:02:7f:63:ec:b4:da: f6:ac:3f:19:a6:61:e9:87:7c:ea:eb:4e:be:f8:cf: 08:87:17:f3:2b:90:82:ea:32:d1:3b:11:d6:63:ee: e3:96:6a:5e:66:7e:a8:63:28:32:5f:08:76:9a:0c: 9a:2a:24:07:14:c0:24:4f:87:a8:88:38:55:db:ee: fc:16:42:41:a5:11:70:6e:ed:99:50:ad:da:e9:2c: 52:65:20:b1:75:84:70:cf:13:42:b3:6a:76:4f:2f: c5:3c:ab:ad:0f:c8:69:1a:0e:76:45:23:5c:73:c3: 56:00:8e:32:7d:ce:6c:e7:2d:eb:13:6c:49:23:d5: 50:36:2c:4e:92:71:56:1b:9c:8e:fe:5c:74:66:25: 43:28:5b:a5:cc:11:b7:c3:4d:38:8a:35:bf:a3:87: eb:37:01:c2:21:f6:b6:88:c6:e8:08:40:9b:d4:71: c1:17:15:6c:31:46:78:f5:22:3c:ac:46:40:25:12: 3d:12:33:1f:39:4e:04:f9:9c:e9:66:3a:3a:b0:9f: 79:3b:f4:17:75:90:06:ef:8f:59:ce:78:57:55:96: be:b0:d4:61:55:ab:76:f4:f0:a2:f8:ce:70:5b:c3: a8:ed:e2:73:44:1c:f9:69:0d:a9:cf:05:16:94:5f: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1B:42:34:50:C9:F6:18:F0:4B:73:98:7B:50:C5:CD:9D:73:5F:FF X509v3 Authority Key Identifier: keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:b7:05:e0:33:7b:3e:28:b2:56:d6:16:17:34:68:5f:a7:e9: 70:a4:c0:46:75:e0:f8:f7:24:5a:1a:87:2d:df:d9:d5:07:9b: e5:53:64:6e:e2:14:70:a7:ac:de:ad:27:be:f8:80:87:4d:03: e2:2d:3e:76:3d:8c:90:17:b2:12:ba:37:72:31:01:fe:4a:d4: 82:6f:9a:8f:f4:5b:05:ba:fe:52:b6:ce:18:28:3a:1a:d1:db: 83:e7:6e:82:51:30:ff:8f:26:76:66:a4:f0:ef:14:56:fe:e9: ec:f5:93:c1:4c:7b:ef:a4:47:60:72:a1:c9:59:fd:d2:ff:51: d4:88:a8:81:a4:4d:73:c8:48:06:d5:b5:e6:25:d2:b1:69:9b: 5c:c2:19:9a:9e:54:dc:9d:6d:1a:ff:65:17:1b:97:81:c3:22: 3a:f7:64:59:a1:41:16:51:d8:b7:3d:39:32:b3:8c:8c:a7:2d: cb:50:11:f0:5b:24:d6:80:8d:fb:1b:34:05:e3:65:06:c1:a0: a8:7a:fa:dd:e5:e9:37:02:73:57:2c:e7:18:db:9f:4c:ea:86: 73:3b:a0:e8:ea:10:58:bd:8a:cc:98:23:c0:02:09:1b:b2:30: a0:dd:d5:54:5c:33:1f:30:e8:cc:c6:4a:a4:6a:27:97:b4:6c: 7d:b3:99:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBbOWlAxD3xMQRACYlp1TSdkFFH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4 NEZFQkFBRTAeFw0yNjA1MTMxNzQxMDZaFw0yNjA1MTQxODU1MDZaMDMxMTAvBgNV BAMTKDUyMUI0MjM0NTBDOUY2MThGMDRCNzM5ODdCNTBDNUNEOUQ3MzVGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNGiy/zqrWXAJ/Y+y02vasPxmm YemHfOrrTr74zwiHF/MrkILqMtE7EdZj7uOWal5mfqhjKDJfCHaaDJoqJAcUwCRP h6iIOFXb7vwWQkGlEXBu7ZlQrdrpLFJlILF1hHDPE0KzanZPL8U8q60PyGkaDnZF I1xzw1YAjjJ9zmznLesTbEkj1VA2LE6ScVYbnI7+XHRmJUMoW6XMEbfDTTiKNb+j h+s3AcIh9raIxugIQJvUccEXFWwxRnj1IjysRkAlEj0SMx85TgT5nOlmOjqwn3k7 9Bd1kAbvj1nOeFdVlr6w1GFVq3b08KL4znBbw6jt4nNEHPlpDanPBRaUX0v7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUhtCNFDJ9hjwS3OYe1DFzZ1zX/8wHwYDVR0j BBgwFoAUeKFpXHaNCbbKfhl4MI5UvoT+uq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk1NTAwNzQ5NjIyNDc3MC8wLzc4QTE2OTVDNzY4RDA5QjZDQTdFMTk3ODMwOEU1 NEJFODRGRUJBQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NTUwMDc0OTYyMjQ3NzAvMC83OEExNjk1Qzc2OEQw OUI2Q0E3RTE5NzgzMDhFNTRCRTg0RkVCQUFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbcF4DN7Piiy VtYWFzRoX6fpcKTARnXg+PckWhqHLd/Z1Qeb5VNkbuIUcKes3q0nvviAh00D4i0+ dj2MkBeyEro3cjEB/krUgm+aj/RbBbr+UrbOGCg6GtHbg+duglEw/48mdmak8O8U Vv7p7PWTwUx776RHYHKhyVn90v9R1IiogaRNc8hIBtW15iXSsWmbXMIZmp5U3J1t Gv9lFxuXgcMiOvdkWaFBFlHYtz05MrOMjKcty1AR8Fsk1oCN+xs0BeNlBsGgqHr6 3eXpNwJzVyznGNufTOqGczug6OoQWL2KzJgjwAIJG7IwoN3VVFwzHzDozMZKpGon l7RsfbOZcQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:31 2026 by rpki-client