$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft File: EDAEF642B728F950499E8F90EDC704EB965E54A5.mft (raw, json) Hash identifier: 1x09G8k6S+LKANxO2Z0dbpmK5yFTAGMlzhEfVtucaG8= Subject key identifier: 37:AB:DB:EA:E9:D0:02:CF:6F:60:CB:47:B8:B5:26:32:85:BF:F4:3D Authority key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 Certificate issuer: /CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Certificate serial: 40CED69580C66DB3E0F95DF8BD089B4704837344 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft Manifest number: 72 Signing time: Fri 17 Apr 2026 11:14:43 +0000 Manifest this update: Fri 17 Apr 2026 11:09:43 +0000 Manifest next update: Sat 18 Apr 2026 14:09:43 +0000 Files and hashes: 1: EDAEF642B728F950499E8F90EDC704EB965E54A5.crl (hash: ZVcMk7G9jTeXCu0FHP78tD0SIo1Y/Um3U3ihIoB04gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ce:d6:95:80:c6:6d:b3:e0:f9:5d:f8:bd:08:9b:47:04:83:73:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Validity Not Before: Apr 17 11:09:43 2026 GMT Not After : Apr 18 14:09:43 2026 GMT Subject: CN=37ABDBEAE9D002CF6F60CB47B8B5263285BFF43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:dd:43:05:9c:0b:85:40:7f:c1:61:bb:93: 9c:d8:c3:29:5e:60:aa:fc:b5:69:03:ac:9d:cb:60: 07:71:0e:90:2a:9a:25:eb:08:52:06:65:a2:b6:e2: c4:a5:c7:48:d4:5a:6b:f6:51:5b:19:e0:90:e1:48: d2:d6:4b:d8:1f:0b:c1:a4:cb:b4:90:a6:d5:19:f8: a5:88:81:41:56:bd:d6:8d:ca:ca:09:c4:e5:ef:ab: 9e:8a:4a:2f:53:d6:08:0a:9a:e6:42:74:27:00:ec: c7:e6:3f:80:00:09:9e:c0:da:7a:34:c6:3d:63:b7: b2:8e:b6:22:cf:df:6f:3a:6d:56:24:ac:3d:88:1f: 5b:45:ef:e6:16:89:77:de:c8:59:57:3e:30:94:f7: 36:3b:e1:e9:7d:da:cf:b3:df:ff:06:c3:f6:81:07: 45:d0:e3:af:ac:4c:12:0e:10:b7:9e:2a:dd:44:a9: c2:f9:41:d8:c2:80:2c:c2:cb:30:54:32:65:6a:4c: c0:0f:d8:3d:bf:46:3b:c6:17:04:09:91:9e:4b:ed: 16:8a:41:a4:fd:be:9a:7e:20:48:17:5f:85:e4:08: 5d:50:9b:c5:dc:0f:c4:07:65:c2:8c:ad:56:35:28: 73:fa:ee:9b:be:5a:28:85:31:60:95:98:68:52:2a: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AB:DB:EA:E9:D0:02:CF:6F:60:CB:47:B8:B5:26:32:85:BF:F4:3D X509v3 Authority Key Identifier: keyid:ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e5:11:bf:80:04:d8:9b:5d:27:dd:9c:a9:14:ce:ca:d0:8a: 23:11:1c:cb:34:28:58:78:da:54:8e:61:cb:c2:08:11:a2:d0: 39:f5:c6:8d:d4:0f:99:f4:71:d6:d3:91:bb:b5:dc:b6:ff:40: f2:1d:77:10:10:89:f6:2a:35:fb:03:46:1d:05:83:88:50:12: fd:49:a0:ca:19:08:7a:3a:34:f7:33:fb:a2:86:99:4e:0f:ec: d3:37:d5:67:20:55:fe:5c:22:67:24:a2:28:d3:81:7f:51:c9: b4:1c:f6:28:ca:7e:8a:f4:05:d0:fb:3a:38:33:6f:32:aa:f8: eb:c9:ee:71:c2:68:ff:0b:8b:96:e4:f4:db:6a:0b:cd:75:30: dc:4e:ab:85:51:f5:b1:a8:59:3a:3f:d1:40:cf:f1:5b:76:e5: 7f:03:b3:66:b3:8e:c0:10:39:94:54:e4:6d:7a:93:d8:10:e7: 6f:7e:3f:5b:68:e3:01:c1:70:d3:e7:c5:b0:78:76:8a:cf:57: bc:19:07:a5:ed:c5:9c:0b:7c:59:43:1e:8d:b1:95:08:d9:ec: 8a:40:e9:44:94:71:5b:fd:32:5f:b2:1f:d7:e0:ef:fc:ee:d8: b4:59:44:cd:f2:3c:ca:e4:68:17:19:b3:8d:58:61:6f:ce:7d: 40:dc:c0:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQM7WlYDGbbPg+V34vQibRwSDc0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5 NjVFNTRBNTAeFw0yNjA0MTcxMTA5NDNaFw0yNjA0MTgxNDA5NDNaMDMxMTAvBgNV BAMTKDM3QUJEQkVBRTlEMDAyQ0Y2RjYwQ0I0N0I4QjUyNjMyODVCRkY0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1d1DBZwLhUB/wWG7k5zYwyle YKr8tWkDrJ3LYAdxDpAqmiXrCFIGZaK24sSlx0jUWmv2UVsZ4JDhSNLWS9gfC8Gk y7SQptUZ+KWIgUFWvdaNysoJxOXvq56KSi9T1ggKmuZCdCcA7MfmP4AACZ7A2no0 xj1jt7KOtiLP3286bVYkrD2IH1tF7+YWiXfeyFlXPjCU9zY74el92s+z3/8Gw/aB B0XQ46+sTBIOELeeKt1EqcL5QdjCgCzCyzBUMmVqTMAP2D2/RjvGFwQJkZ5L7RaK QaT9vpp+IEgXX4XkCF1Qm8XcD8QHZcKMrVY1KHP67pu+WiiFMWCVmGhSKq9JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN6vb6unQAs9vYMtHuLUmMoW/9D0wHwYDVR0j BBgwFoAU7a72Qrco+VBJno+Q7ccE65ZeVKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NjczNzU3NjAwMzUwMjA4MS8wL0VEQUVGNjQyQjcyOEY5NTA0OTlFOEY5MEVEQzcw NEVCOTY1RTU0QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5NjVFNTRBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjY3Mzc1NzYwMDM1MDIwODEvMC9FREFFRjY0MkI3MjhG OTUwNDk5RThGOTBFREM3MDRFQjk2NUU1NEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuURv4AE2Jtd J92cqRTOytCKIxEcyzQoWHjaVI5hy8IIEaLQOfXGjdQPmfRx1tORu7Xctv9A8h13 EBCJ9io1+wNGHQWDiFAS/UmgyhkIejo09zP7ooaZTg/s0zfVZyBV/lwiZySiKNOB f1HJtBz2KMp+ivQF0Ps6ODNvMqr468nuccJo/wuLluT022oLzXUw3E6rhVH1sahZ Oj/RQM/xW3blfwOzZrOOwBA5lFTkbXqT2BDnb34/W2jjAcFw0+fFsHh2is9XvBkH pe3FnAt8WUMejbGVCNnsikDpRJRxW/0yX7If1+Dv/O7YtFlEzfI8yuRoFxmzjVhh b859QNzA6g== -----END CERTIFICATE-----Generated at Fri Apr 17 22:44:33 2026 by rpki-client