$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: 1QVVar4m2Ul8mVYuG2jhCzaCapUo1aG7SEnkCPjjbhk= Subject key identifier: B2:4F:B3:BA:B4:94:C1:2E:D4:95:5B:88:24:A0:BC:9F:65:4A:15:9B Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 15AD17671BC7041EE08039D87CA185FF527AE8F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 78 Signing time: Fri 17 Apr 2026 18:44:47 +0000 Manifest this update: Fri 17 Apr 2026 18:39:47 +0000 Manifest next update: Sat 18 Apr 2026 20:19:47 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: IxCVQh5y9NfcXeMF9y8I1n5jO0HKlo0CORrbDAQqT4w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ad:17:67:1b:c7:04:1e:e0:80:39:d8:7c:a1:85:ff:52:7a:e8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Apr 17 18:39:47 2026 GMT Not After : Apr 18 20:19:47 2026 GMT Subject: CN=B24FB3BAB494C12ED4955B8824A0BC9F654A159B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:ce:23:fe:72:66:c2:57:b6:c9:81:96:62: 71:7c:d2:dd:95:f5:00:b0:db:60:77:30:dc:c8:03: 3a:a4:e5:8a:88:89:84:f9:54:bf:76:1f:25:94:b3: 9a:e5:0e:c7:f8:73:f1:08:66:49:5f:7e:ff:76:2e: 87:a1:ec:9c:d4:4e:97:88:6e:8b:82:e5:c3:e6:5e: bb:59:34:ed:04:59:1d:cf:02:8c:50:74:8f:72:f9: 49:a8:64:f8:8f:a0:ad:3b:76:ca:d4:78:d3:d2:c7: e9:a6:c0:81:e2:39:2f:40:96:d8:55:ca:96:8c:37: ca:d0:ef:51:fb:80:1e:3c:d0:b4:d1:fc:a2:40:58: c9:79:b0:7a:2c:a1:e7:53:f5:27:1e:23:34:9b:f2: c9:91:ce:c1:45:7b:0e:ec:0b:0d:f8:5b:5a:21:14: b2:04:86:1d:f8:12:c0:a4:66:24:25:57:05:3f:9e: 1c:1f:c8:c8:dc:34:34:9a:0d:b3:4a:b4:7a:55:c2: b8:71:7d:4d:20:bd:79:0b:7b:97:8f:47:43:3e:71: 23:b3:5f:62:4e:3f:f8:e8:a3:4f:a3:ad:12:e9:f2: 7d:c4:a4:c1:70:96:da:fc:49:41:0e:60:25:d1:88: 07:d9:e4:fd:9d:ad:fa:ab:e9:ab:3e:20:f1:a0:74: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:B3:BA:B4:94:C1:2E:D4:95:5B:88:24:A0:BC:9F:65:4A:15:9B X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:37:58:c3:8b:6c:9b:af:c7:05:85:d1:ab:15:42:38:34:6f: 1e:7c:ad:c6:ad:2d:c8:c8:7a:1a:b1:84:37:0d:38:f2:cb:92: a5:68:d8:da:d5:f1:1e:a4:b0:86:1b:f5:16:63:4e:48:25:19: b3:ce:b5:88:3f:36:ad:4d:a2:4e:7d:a3:86:78:e8:5d:9a:a5: 29:f0:f7:75:19:61:25:f8:77:7e:c2:eb:21:fc:5d:1f:8e:5f: 5f:64:3d:71:53:af:90:9a:8d:ad:ae:fc:23:56:ee:12:6f:5a: fb:b3:fe:73:1d:5b:3c:4e:37:e6:07:39:f8:9b:f7:9a:cc:9d: 93:51:8e:3d:0e:2b:e6:c1:97:7f:8b:08:29:80:48:62:1c:81: f4:7d:27:5c:9d:d5:ca:3b:14:6b:49:41:88:d8:02:c3:53:08: b8:fd:90:57:e7:17:39:74:03:86:e4:fb:47:62:1a:26:5b:3a: c6:c2:18:40:9d:d9:d1:ac:3a:0e:89:aa:21:3f:c7:d1:e4:b0: 40:a7:eb:80:30:70:65:7f:54:00:bb:48:ff:fc:c4:e8:cb:56: 20:b4:29:9f:1c:50:41:59:04:0a:e9:f9:f2:a1:01:d0:7c:5f: 27:20:7e:1e:c7:b8:68:5b:38:1c:31:8f:6b:cf:6f:8d:a0:2f: cc:07:bc:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFa0XZxvHBB7ggDnYfKGF/1J66PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjA0MTcxODM5NDdaFw0yNjA0MTgyMDE5NDdaMDMxMTAvBgNV BAMTKEIyNEZCM0JBQjQ5NEMxMkVENDk1NUI4ODI0QTBCQzlGNjU0QTE1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfWs4j/nJmwle2yYGWYnF80t2V 9QCw22B3MNzIAzqk5YqIiYT5VL92HyWUs5rlDsf4c/EIZklffv92Loeh7JzUTpeI bouC5cPmXrtZNO0EWR3PAoxQdI9y+UmoZPiPoK07dsrUeNPSx+mmwIHiOS9AlthV ypaMN8rQ71H7gB480LTR/KJAWMl5sHosoedT9SceIzSb8smRzsFFew7sCw34W1oh FLIEhh34EsCkZiQlVwU/nhwfyMjcNDSaDbNKtHpVwrhxfU0gvXkLe5ePR0M+cSOz X2JOP/joo0+jrRLp8n3EpMFwltr8SUEOYCXRiAfZ5P2drfqr6as+IPGgdPptAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsk+zurSUwS7UlVuIJKC8n2VKFZswHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwzdYw4tsm6/H BYXRqxVCODRvHnytxq0tyMh6GrGENw048suSpWjY2tXxHqSwhhv1FmNOSCUZs861 iD82rU2iTn2jhnjoXZqlKfD3dRlhJfh3fsLrIfxdH45fX2Q9cVOvkJqNra78I1bu Em9a+7P+cx1bPE435gc5+Jv3msydk1GOPQ4r5sGXf4sIKYBIYhyB9H0nXJ3VyjsU a0lBiNgCw1MIuP2QV+cXOXQDhuT7R2IaJls6xsIYQJ3Z0aw6DomqIT/H0eSwQKfr gDBwZX9UALtI//zE6MtWILQpnxxQQVkECun58qEB0HxfJyB+Hse4aFs4HDGPa89v jaAvzAe84w== -----END CERTIFICATE-----Generated at Sat Apr 18 02:07:50 2026 by rpki-client