$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: CX5u1hS7TptMYEBTkA3lgF/O4Xvyuy3HlRB/POEUllQ= Subject key identifier: E1:2F:76:B1:C4:F0:E7:90:20:6F:4B:D7:F5:3F:58:B0:07:DF:77:08 Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 2D364824102043A6D969A9D00E2FCBD71C2BE14D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: 88 Signing time: Fri 17 Apr 2026 04:19:39 +0000 Manifest this update: Fri 17 Apr 2026 04:14:39 +0000 Manifest next update: Sat 18 Apr 2026 05:14:39 +0000 Files and hashes: 1: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: 2zTPHirW7/VAymUQOzz/mjF/4g7xdG9nFNTCo+gpxeg=) 2: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:36:48:24:10:20:43:a6:d9:69:a9:d0:0e:2f:cb:d7:1c:2b:e1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: Apr 17 04:14:39 2026 GMT Not After : Apr 18 05:14:39 2026 GMT Subject: CN=E12F76B1C4F0E790206F4BD7F53F58B007DF7708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:d0:41:3f:16:08:df:37:ec:3a:04:35:86: 86:91:a4:25:45:ed:2d:d6:b4:eb:7d:d9:28:cd:f1: 87:4d:c6:f6:02:0f:42:06:87:a3:13:e0:6c:fd:fc: 58:82:d9:6e:2b:b2:13:8d:90:ca:f1:30:e6:19:9c: 5d:4c:e8:bc:ec:0e:61:f6:11:3a:bb:6e:a2:fd:c5: 3d:42:cf:d7:99:0c:7f:41:7f:d9:6a:09:8a:79:f8: 21:f6:be:7c:ff:d1:53:8d:ae:ad:27:00:2f:8d:e2: 4a:ff:c0:fa:1f:70:01:28:a4:1d:2b:ab:75:5c:2b: ca:7a:ec:c2:14:de:a5:c9:79:22:0a:3a:0a:14:6b: 30:0e:8f:30:8d:89:05:96:f3:2a:85:18:47:12:c4: 76:7c:2f:03:f8:91:1d:5b:64:ef:30:1e:26:49:cc: 38:e5:fc:9b:04:0a:55:3f:e1:58:b1:14:fd:3c:50: e1:71:ed:50:f6:a5:bc:db:28:ff:50:29:03:c7:7f: a7:1e:5f:7a:7b:9c:91:e6:38:55:19:f8:a6:d9:45: a6:93:fc:c3:6e:9c:80:1e:f2:29:e4:aa:b2:a3:31: 10:a6:78:4a:3b:e0:5e:01:16:94:61:1c:6e:88:e5: 22:ca:a2:d1:20:99:20:d7:bb:dd:12:d9:37:81:66: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2F:76:B1:C4:F0:E7:90:20:6F:4B:D7:F5:3F:58:B0:07:DF:77:08 X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:09:7c:4e:8f:9f:76:cf:92:79:93:e3:52:44:cf:8f:52:d6: f8:96:7c:ed:a5:ef:1e:e8:01:50:de:8a:82:6e:49:7e:61:05: b5:6e:f1:c9:b3:c3:27:05:39:02:9c:54:3d:a0:3a:62:ae:c8: 95:19:de:b3:cd:80:ec:ce:b8:58:9a:b7:cc:d9:24:74:05:be: 41:57:23:46:67:9e:a5:8f:94:17:b6:59:c0:69:51:3e:38:71: 84:69:a5:cf:20:53:ed:42:0d:bc:9c:95:f4:a2:50:86:69:d6: f0:04:d5:bb:54:b1:8f:27:dd:11:43:77:db:4a:cf:1b:34:3d: 44:aa:ba:c6:1a:e4:b7:f1:c1:d7:95:12:45:2d:e9:5e:0b:15: 12:f6:93:f3:60:d0:6c:93:22:72:d2:6f:a8:34:bc:47:a2:21: a7:a1:12:16:ea:18:dd:74:99:89:02:fe:a6:51:fa:90:3e:11: 61:0a:8b:ed:2d:f3:a1:64:45:fd:43:48:42:88:49:66:0f:54: b8:12:dd:81:67:1b:88:6c:1f:d5:de:bb:a5:f0:74:2c:0c:42: ad:5e:b3:1d:ed:3d:b1:f6:b3:27:f1:41:7e:8d:9f:2b:4e:d5: 75:33:bf:a3:49:d4:71:d5:1f:ef:2e:04:45:70:32:a7:e1:2e: 59:51:f8:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULTZIJBAgQ6bZaanQDi/L1xwr4U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjA0MTcwNDE0MzlaFw0yNjA0MTgwNTE0MzlaMDMxMTAvBgNV BAMTKEUxMkY3NkIxQzRGMEU3OTAyMDZGNEJEN0Y1M0Y1OEIwMDdERjc3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZz9BBPxYI3zfsOgQ1hoaRpCVF 7S3WtOt92SjN8YdNxvYCD0IGh6MT4Gz9/FiC2W4rshONkMrxMOYZnF1M6LzsDmH2 ETq7bqL9xT1Cz9eZDH9Bf9lqCYp5+CH2vnz/0VONrq0nAC+N4kr/wPofcAEopB0r q3VcK8p67MIU3qXJeSIKOgoUazAOjzCNiQWW8yqFGEcSxHZ8LwP4kR1bZO8wHiZJ zDjl/JsEClU/4VixFP08UOFx7VD2pbzbKP9QKQPHf6ceX3p7nJHmOFUZ+KbZRaaT /MNunIAe8inkqrKjMRCmeEo74F4BFpRhHG6I5SLKotEgmSDXu90S2TeBZtvHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4S92scTw55Agb0vX9T9YsAffdwgwHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegl8To+fds+S eZPjUkTPj1LW+JZ87aXvHugBUN6Kgm5JfmEFtW7xybPDJwU5ApxUPaA6Yq7IlRne s82A7M64WJq3zNkkdAW+QVcjRmeepY+UF7ZZwGlRPjhxhGmlzyBT7UINvJyV9KJQ hmnW8ATVu1SxjyfdEUN320rPGzQ9RKq6xhrkt/HB15USRS3pXgsVEvaT82DQbJMi ctJvqDS8R6Ihp6ESFuoY3XSZiQL+plH6kD4RYQqL7S3zoWRF/UNIQohJZg9UuBLd gWcbiGwf1d67pfB0LAxCrV6zHe09sfazJ/FBfo2fK07VdTO/o0nUcdUf7y4ERXAy p+EuWVH4CA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:04:17 2026 by rpki-client