$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: IN0hKwjjUGpkUBct/j8lZobjL7GpGukohghTNiMNXiA= Subject key identifier: F7:3E:74:9E:93:C4:22:39:FE:73:51:AE:87:EA:6E:2F:73:65:13:A2 Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 17DAA0A3203B381D493ADD434DFB5729C393F2B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: 6B Signing time: Fri 17 Apr 2026 17:39:44 +0000 Manifest this update: Fri 17 Apr 2026 17:34:44 +0000 Manifest next update: Sat 18 Apr 2026 18:21:44 +0000 Files and hashes: 1: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: ZLucia+f0cLWVqKNXsz0QUCVAAoObVlnN1P60ZE0JhQ=) 2: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (hash: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:da:a0:a3:20:3b:38:1d:49:3a:dd:43:4d:fb:57:29:c3:93:f2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: Apr 17 17:34:44 2026 GMT Not After : Apr 18 18:21:44 2026 GMT Subject: CN=F73E749E93C42239FE7351AE87EA6E2F736513A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:48:a0:49:36:8a:4b:f8:84:7a:2d:d2:d0:c9: 34:49:1a:aa:00:4e:ce:87:2b:86:3f:c0:bc:db:b8: 37:89:fa:8b:26:7d:54:5b:2a:33:c3:20:fa:35:45: 2d:64:cd:4a:4d:53:fa:91:5f:5d:95:79:92:d9:91: 3b:f7:c2:89:72:85:90:0c:0f:63:7e:81:42:e9:f4: 89:5e:9e:77:95:33:73:9a:b3:fd:ef:44:8a:fb:fe: f4:8d:41:8b:fc:fb:7d:a4:99:a6:e9:05:a8:5c:5c: 12:70:55:fc:e9:59:04:50:fd:28:c5:50:0d:c3:e8: 9e:da:51:bb:ac:b1:12:b4:a9:75:a3:c3:b3:ad:4a: 35:17:fe:5a:b7:7d:e9:a9:54:16:ca:c9:b8:c3:32: 02:03:2f:34:5c:51:84:c2:07:f6:67:7e:dd:19:55: 61:fa:6b:9f:12:b1:44:2e:fa:bd:f8:31:97:b7:19: 93:4f:bd:a0:99:bd:44:b9:31:42:28:46:65:40:e3: 7a:53:8a:2a:52:04:1b:ad:1c:74:76:54:b7:68:52: d0:72:9d:24:c3:b3:df:b1:1a:d4:26:aa:9b:93:f9: 13:69:d7:32:3f:ad:ab:95:ef:be:b5:6a:84:3f:a5: b7:20:f7:60:45:cf:37:d1:ea:df:78:51:93:d2:37: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3E:74:9E:93:C4:22:39:FE:73:51:AE:87:EA:6E:2F:73:65:13:A2 X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f6:f7:68:0a:ec:b5:9d:a2:77:01:64:8d:43:4a:c2:59:74: 64:be:0c:4d:7e:7c:2b:81:96:45:3d:8b:88:23:bd:3e:fe:d6: 4d:c4:3a:32:a9:7c:18:90:8d:01:ef:f1:e4:9a:2b:46:58:2a: cf:7f:5d:7b:af:6f:70:09:f9:02:f0:90:0d:dd:57:5e:aa:82: fe:cd:07:23:88:26:b9:f5:d1:10:af:b3:ff:a1:d1:c1:05:d1: eb:99:ea:16:98:23:71:9d:75:d6:27:9d:10:38:21:a7:50:cb: b5:4c:ec:09:f9:a8:3e:bb:ee:a2:47:07:67:e2:50:29:77:e9: b5:14:ef:2a:1c:1b:57:2f:f0:68:0a:70:08:c0:2b:29:75:f5: d1:bc:d6:33:d7:54:cd:00:df:fe:13:3d:02:04:bc:ef:62:93: ec:54:de:27:a5:47:30:3f:94:56:0b:c6:f3:75:1f:e6:b8:19: fc:43:12:07:09:01:99:90:79:f7:13:40:22:9e:16:22:2f:1d: a0:df:93:d5:af:2f:4a:f5:5f:dd:c4:1b:37:86:8c:67:c5:77: 6e:eb:6e:2d:62:bf:eb:b7:06:24:2f:c7:dc:27:11:6b:1f:e1: d4:a3:b4:c3:bc:3b:2b:b5:86:e0:2e:6c:0e:49:b0:fc:ce:38: 6b:21:33:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF9qgoyA7OB1JOt1DTftXKcOT8rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjA0MTcxNzM0NDRaFw0yNjA0MTgxODIxNDRaMDMxMTAvBgNV BAMTKEY3M0U3NDlFOTNDNDIyMzlGRTczNTFBRTg3RUE2RTJGNzM2NTEzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtSKBJNopL+IR6LdLQyTRJGqoA Ts6HK4Y/wLzbuDeJ+osmfVRbKjPDIPo1RS1kzUpNU/qRX12VeZLZkTv3wolyhZAM D2N+gULp9IlenneVM3Oas/3vRIr7/vSNQYv8+32kmabpBahcXBJwVfzpWQRQ/SjF UA3D6J7aUbussRK0qXWjw7OtSjUX/lq3fempVBbKybjDMgIDLzRcUYTCB/Znft0Z VWH6a58SsUQu+r34MZe3GZNPvaCZvUS5MUIoRmVA43pTiipSBButHHR2VLdoUtBy nSTDs9+xGtQmqpuT+RNp1zI/rauV7761aoQ/pbcg92BFzzfR6t94UZPSNxGLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9z50npPEIjn+c1Guh+puL3NlE6IwHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfb3aArstZ2i dwFkjUNKwll0ZL4MTX58K4GWRT2LiCO9Pv7WTcQ6Mql8GJCNAe/x5JorRlgqz39d e69vcAn5AvCQDd1XXqqC/s0HI4gmufXREK+z/6HRwQXR65nqFpgjcZ111iedEDgh p1DLtUzsCfmoPrvuokcHZ+JQKXfptRTvKhwbVy/waApwCMArKXX10bzWM9dUzQDf /hM9AgS872KT7FTeJ6VHMD+UVgvG83Uf5rgZ/EMSBwkBmZB59xNAIp4WIi8doN+T 1a8vSvVf3cQbN4aMZ8V3butuLWK/67cGJC/H3CcRax/h1KO0w7w7K7WG4C5sDkmw /M44ayEzIw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:02:39 2026 by rpki-client