$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: NacS3cz4A/fLC4bVqTRu+MkCGxlf44sabiWIYUF2h7s= Subject key identifier: 4D:BC:82:1B:55:72:30:B9:5B:09:88:57:64:F2:4F:E0:D4:B5:6F:86 Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 3550C6F2C46A018660FEAF13EE7BA4F8C934E355 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 08:54:42 +0000 Manifest this update: Fri 17 Apr 2026 08:49:42 +0000 Manifest next update: Sat 18 Apr 2026 10:59:42 +0000 Files and hashes: 1: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 2: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: mHb1DiqUi7EwuKiFmpNxkfbx6lcJb3dmqamgNFQGBeo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:50:c6:f2:c4:6a:01:86:60:fe:af:13:ee:7b:a4:f8:c9:34:e3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Apr 17 08:49:42 2026 GMT Not After : Apr 18 10:59:42 2026 GMT Subject: CN=4DBC821B557230B95B09885764F24FE0D4B56F86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:d6:00:fc:6e:a4:6d:5f:e8:f6:4f:ee:a9: 53:5c:70:75:49:da:9a:a2:63:c6:5f:ac:41:83:a9: 7f:54:cc:0e:78:bb:a1:97:58:92:d1:56:f9:a6:4d: 54:d7:db:67:63:d3:3b:7e:da:7c:e0:49:6d:93:76: da:1c:78:87:97:7b:ce:c0:2b:1e:39:9e:5e:4d:3b: 19:57:48:46:9b:15:99:e0:58:27:3b:36:c3:67:39: 70:5d:ef:00:b1:91:38:c7:ee:df:f2:5b:aa:aa:8f: 8f:73:99:85:aa:cb:82:1c:13:7f:37:7d:1c:56:38: a1:a4:40:51:a8:60:19:a1:46:be:45:99:bb:e6:9a: 5b:14:f6:f5:6e:24:d7:1c:c8:29:78:d5:49:6e:71: c7:29:45:7c:fd:10:55:83:19:7f:63:7c:ee:9f:61: 74:cd:be:c4:02:1d:45:a6:2e:4b:bd:4b:0a:31:5b: bb:96:f7:21:d0:d6:e5:46:bf:3f:b0:78:03:84:93: 7e:d9:60:3e:40:93:69:e1:68:b2:b2:fb:6e:98:d7: 96:29:c0:c1:ec:bf:72:12:71:b5:15:23:ca:45:da: f7:83:5a:76:40:05:7e:e2:47:d1:d4:6c:18:4b:b0: 24:61:20:45:a4:66:6d:4b:98:e4:ee:14:96:2a:cb: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BC:82:1B:55:72:30:B9:5B:09:88:57:64:F2:4F:E0:D4:B5:6F:86 X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:62:a4:a7:2f:b0:62:a9:bf:46:c8:82:40:c5:e3:dc:03:55: 1b:a1:d8:82:d9:21:b3:61:af:aa:e9:d4:24:a7:fe:40:0c:bc: 3c:0d:6f:96:96:3d:29:02:70:e5:4b:ec:09:08:c1:1f:52:8e: 09:43:b2:c7:58:69:29:32:57:d5:d2:54:4e:bf:a5:29:0f:44: 9e:f9:30:67:61:72:c4:58:cd:6c:74:3a:18:79:50:84:a7:e9: 87:39:eb:30:d8:7a:9c:05:cf:a0:0e:06:aa:2c:5e:3f:ee:d6: b9:c5:7a:d8:00:f6:c2:bf:d0:72:c7:20:d2:61:ed:a9:4c:8e: d3:2f:ca:2f:6d:81:f5:bf:bf:2b:e8:a4:ef:a9:50:06:14:71: 3c:02:63:59:06:12:6c:4f:73:ff:7e:72:e5:19:3d:4a:17:73: 92:f7:c0:c7:8e:1a:26:be:dd:57:30:60:78:02:dd:54:7e:f4: 83:a3:4f:73:69:cd:39:73:1b:85:45:fa:3a:78:05:db:77:40: 01:6d:6b:eb:99:9e:04:77:14:0e:fb:84:6f:88:ce:01:9d:05: c5:69:ad:c5:8e:bf:0f:e7:3c:fa:15:03:5c:9f:12:62:91:a0: ff:40:7e:87:03:9b:43:be:2f:59:d2:cb:29:02:18:7b:28:04: 4e:a0:e4:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNVDG8sRqAYZg/q8T7nuk+Mk041UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA0MTcwODQ5NDJaFw0yNjA0MTgxMDU5NDJaMDMxMTAvBgNV BAMTKDREQkM4MjFCNTU3MjMwQjk1QjA5ODg1NzY0RjI0RkUwRDRCNTZGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnNYA/G6kbV/o9k/uqVNccHVJ 2pqiY8ZfrEGDqX9UzA54u6GXWJLRVvmmTVTX22dj0zt+2nzgSW2TdtoceIeXe87A Kx45nl5NOxlXSEabFZngWCc7NsNnOXBd7wCxkTjH7t/yW6qqj49zmYWqy4IcE383 fRxWOKGkQFGoYBmhRr5FmbvmmlsU9vVuJNccyCl41UlucccpRXz9EFWDGX9jfO6f YXTNvsQCHUWmLku9SwoxW7uW9yHQ1uVGvz+weAOEk37ZYD5Ak2nhaLKy+26Y15Yp wMHsv3IScbUVI8pF2veDWnZABX7iR9HUbBhLsCRhIEWkZm1LmOTuFJYqy/p5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTbyCG1VyMLlbCYhXZPJP4NS1b4YwHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2Kkpy+wYqm/ RsiCQMXj3ANVG6HYgtkhs2GvqunUJKf+QAy8PA1vlpY9KQJw5UvsCQjBH1KOCUOy x1hpKTJX1dJUTr+lKQ9EnvkwZ2FyxFjNbHQ6GHlQhKfphznrMNh6nAXPoA4Gqixe P+7WucV62AD2wr/Qcscg0mHtqUyO0y/KL22B9b+/K+ik76lQBhRxPAJjWQYSbE9z /35y5Rk9ShdzkvfAx44aJr7dVzBgeALdVH70g6NPc2nNOXMbhUX6OngF23dAAW1r 65meBHcUDvuEb4jOAZ0FxWmtxY6/D+c8+hUDXJ8SYpGg/0B+hwObQ74vWdLLKQIY eygETqDknw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:11:49 2026 by rpki-client