$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: OOeIkXPwuEJJiyHEx81hFOHuT7jGBpejzn8xwBeR+FA= Subject key identifier: 24:45:64:16:CA:58:93:71:95:60:23:83:CB:0E:FD:D5:08:B3:70:A3 Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 4A9C25A438D0832EE48FDF74953DFC9014DB0145 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 7B Signing time: Fri 17 Apr 2026 18:44:47 +0000 Manifest this update: Fri 17 Apr 2026 18:39:47 +0000 Manifest next update: Sat 18 Apr 2026 22:04:47 +0000 Files and hashes: 1: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: d+hzDC5w4oy44NbQUA93uGcKxvsuF3EnETrnXKNgEzo=) 2: 3136302e31392e38322e302f32332d3234203d3e203338323833.roa (hash: uwVYVks/xTAEcgTWVLPUPEgFx+cQ8xL5tjrGi2b+lGk=) 3: 3136302e31392e38322e302f32332d3234203d3e20313531323631.roa (hash: d3hw9Kkd1z2X8O3PCfixaWEIu7Mp2WJccRXQIWj+IVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9c:25:a4:38:d0:83:2e:e4:8f:df:74:95:3d:fc:90:14:db:01:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Apr 17 18:39:47 2026 GMT Not After : Apr 18 22:04:47 2026 GMT Subject: CN=24456416CA58937195602383CB0EFDD508B370A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:72:bf:6f:83:c3:ab:75:db:4e:b9:92:cb: ff:db:86:c4:0a:3a:8f:db:36:9f:59:ff:60:2a:24: b5:ba:3a:85:0c:87:02:cc:9a:ce:b5:a0:56:cb:ea: af:e1:29:d6:31:8b:57:51:cc:32:ae:70:a4:05:ea: ec:05:c4:68:32:6c:bf:89:f3:bb:7f:97:d1:3a:cc: af:ad:43:4c:d3:4d:b9:c5:a3:4c:71:bc:29:d7:6f: fb:24:e6:58:1a:8c:11:fe:d0:c5:5d:ac:50:e5:d9: ea:ff:84:d6:88:37:46:e8:47:cf:57:2e:aa:85:3f: ad:ba:8d:fa:3f:13:f5:2f:86:1c:4c:f3:4c:2a:58: 1f:ed:de:c7:c4:7e:d2:67:32:5b:0e:26:0c:8e:3f: a7:87:e4:18:55:eb:1c:eb:42:68:d4:a1:4f:0f:ab: e3:57:18:e7:95:84:85:db:ba:40:cb:3e:5d:46:7b: 47:a9:38:4f:f3:18:f3:5b:28:0c:86:2d:61:d2:f5: 76:a8:a3:52:fa:ae:c7:a9:d7:2a:cf:67:d2:ba:84: ec:e1:ca:d7:a9:01:84:c1:9b:43:8b:fd:58:30:12: 83:67:fb:63:8c:53:0d:02:aa:c4:a3:17:7f:e1:63: cd:50:c4:7e:01:e4:a3:06:ff:a0:8f:1d:4a:a1:3e: 37:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:45:64:16:CA:58:93:71:95:60:23:83:CB:0E:FD:D5:08:B3:70:A3 X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0b:2a:f1:d6:8b:9b:b2:7c:d3:5e:e4:ac:ec:6d:8b:62:8a: 1e:00:bc:f6:b6:7b:38:7c:2f:29:3b:69:22:01:44:41:4b:c0: fa:32:6c:e2:e0:5f:31:62:de:0f:cd:78:44:e0:68:a8:3a:62: 1f:23:74:62:67:20:f8:60:5b:b0:bc:48:30:7a:2d:ef:96:5d: 55:0d:31:81:90:44:c5:12:b8:73:8e:bc:a6:08:88:90:b0:a7: 82:97:31:92:8d:22:ab:5c:40:87:d6:3e:f9:ac:ee:9c:93:42: ed:c5:c5:a9:99:38:f8:62:a4:34:87:cf:04:c0:7a:68:10:83: 9d:2c:ea:c6:a0:b2:32:b3:bb:f7:3b:75:86:f3:42:cf:1e:ef: af:6c:88:64:5f:8d:93:2d:51:e8:dd:13:e1:67:f6:43:df:9c: 63:57:51:77:14:41:1f:76:dc:ae:33:a0:71:38:09:68:5f:f8: bc:95:f3:2a:a0:96:c4:7e:99:73:b8:f0:16:c3:f2:8d:89:93: 24:bb:a8:82:57:48:48:77:ff:dd:79:66:82:36:00:f5:61:24: ed:a5:4c:bf:e2:13:36:e5:9a:75:b8:f8:0a:d0:9d:d6:a9:f8: 02:23:1f:52:30:e3:b3:92:89:d2:f7:29:45:fe:de:d4:61:06: 36:92:ae:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSpwlpDjQgy7kj990lT38kBTbAUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjA0MTcxODM5NDdaFw0yNjA0MTgyMjA0NDdaMDMxMTAvBgNV BAMTKDI0NDU2NDE2Q0E1ODkzNzE5NTYwMjM4M0NCMEVGREQ1MDhCMzcwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxe3K/b4PDq3XbTrmSy//bhsQK Oo/bNp9Z/2AqJLW6OoUMhwLMms61oFbL6q/hKdYxi1dRzDKucKQF6uwFxGgybL+J 87t/l9E6zK+tQ0zTTbnFo0xxvCnXb/sk5lgajBH+0MVdrFDl2er/hNaIN0boR89X LqqFP626jfo/E/UvhhxM80wqWB/t3sfEftJnMlsOJgyOP6eH5BhV6xzrQmjUoU8P q+NXGOeVhIXbukDLPl1Ge0epOE/zGPNbKAyGLWHS9Xaoo1L6rsep1yrPZ9K6hOzh ytepAYTBm0OL/VgwEoNn+2OMUw0CqsSjF3/hY81QxH4B5KMG/6CPHUqhPjd9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJEVkFspYk3GVYCODyw791QizcKMwHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwsq8daLm7J8 017krOxti2KKHgC89rZ7OHwvKTtpIgFEQUvA+jJs4uBfMWLeD814ROBoqDpiHyN0 Ymcg+GBbsLxIMHot75ZdVQ0xgZBExRK4c468pgiIkLCngpcxko0iq1xAh9Y++azu nJNC7cXFqZk4+GKkNIfPBMB6aBCDnSzqxqCyMrO79zt1hvNCzx7vr2yIZF+Nky1R 6N0T4Wf2Q9+cY1dRdxRBH3bcrjOgcTgJaF/4vJXzKqCWxH6Zc7jwFsPyjYmTJLuo gldISHf/3XlmgjYA9WEk7aVMv+ITNuWadbj4CtCd1qn4AiMfUjDjs5KJ0vcpRf7e 1GEGNpKueQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:01:43 2026 by rpki-client