$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft File: C95DC06ABAF176962C0E90D36D939FA729AAC050.mft (raw, json) Hash identifier: 68gnQCoYFdyGFEP0LpptOuu/y6GfJCv5c04gIpZgwjU= Subject key identifier: 7C:D3:34:1A:B0:90:A8:6C:90:22:48:48:61:55:06:93:4F:10:2E:AF Authority key identifier: C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50 Certificate issuer: /CN=C95DC06ABAF176962C0E90D36D939FA729AAC050 Certificate serial: 4E7030F1663D4C819B1A79E8D65716958B346581 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft Manifest number: 43 Signing time: Fri 17 Apr 2026 10:34:43 +0000 Manifest this update: Fri 17 Apr 2026 10:29:43 +0000 Manifest next update: Sat 18 Apr 2026 12:01:43 +0000 Files and hashes: 1: 3134342e37392e3134382e302f32332d3234203d3e20313337373731.roa (hash: SAeCRFVxu1ERGhOcXkGGGkwcAEAXwuDqhIvQaUGtLYA=) 2: C95DC06ABAF176962C0E90D36D939FA729AAC050.crl (hash: ElX+5oWqYOF3p1R21N5qEwpV/gBZ7emlER7UJ6ohqX4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:70:30:f1:66:3d:4c:81:9b:1a:79:e8:d6:57:16:95:8b:34:65:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C95DC06ABAF176962C0E90D36D939FA729AAC050 Validity Not Before: Apr 17 10:29:43 2026 GMT Not After : Apr 18 12:01:43 2026 GMT Subject: CN=7CD3341AB090A86C90224848615506934F102EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f6:12:12:50:d7:f0:33:0f:85:a2:88:45:f6: ca:b4:78:b3:e1:00:cb:52:af:ba:d2:ac:02:41:3c: 08:05:8f:f6:96:a9:4a:70:b2:88:9b:80:6f:9b:8d: 43:28:73:cf:bf:9c:50:52:cd:9e:4b:84:a7:11:0b: a9:78:ff:d5:d3:cb:66:de:d7:76:84:e8:72:06:44: 05:e2:85:b9:7d:0e:12:73:ab:d3:8a:78:4e:94:0c: ce:d7:fa:cc:8c:85:68:26:32:26:0f:1a:5b:95:77: e0:b8:2a:98:41:e3:f4:4a:49:04:87:63:86:2f:84: ff:fc:1d:0e:e4:ed:8a:a0:cc:08:93:4b:9f:f6:93: 5b:9c:da:f8:10:26:6b:b5:43:0e:7f:b5:e2:34:5a: 78:89:9a:09:fd:0e:42:05:d4:99:43:93:a4:68:9c: 00:b3:ad:db:c9:e2:8a:65:0a:77:df:56:6a:ab:4a: b8:15:63:7f:9b:50:4b:fe:e3:03:da:77:4d:c2:52: ab:1f:8b:b1:d5:64:e1:1f:c6:a9:e9:f4:ec:6a:3f: 63:18:d6:58:ce:53:e8:8a:f1:e9:b0:cd:3f:07:5d: a8:25:6c:d4:8c:bf:22:42:e0:0b:ad:ae:a8:60:d0: 8d:13:27:4f:0b:f4:2e:75:2d:87:f6:f4:68:5f:ae: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D3:34:1A:B0:90:A8:6C:90:22:48:48:61:55:06:93:4F:10:2E:AF X509v3 Authority Key Identifier: keyid:C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:65:9b:59:51:9c:d6:fd:b3:b2:bb:18:f2:d0:57:69:0f:5a: 70:17:75:95:e9:a9:f5:1d:51:4e:04:29:d3:77:05:b3:f9:98: 85:5a:81:31:c9:4d:d2:94:62:c8:d3:fb:cc:1f:05:68:2f:70: 5a:13:fd:29:fb:26:a2:63:ef:85:c6:ae:31:ac:ab:d9:c2:fb: fd:5e:fe:fa:cf:f9:b8:76:13:d5:b3:b8:62:93:b2:27:60:5a: cd:b8:83:6a:a7:e0:b1:c8:15:f0:ba:a4:db:23:4e:96:94:60: 7c:e8:b1:9c:6f:b2:22:60:97:7c:29:1c:01:2a:bc:86:b2:e7: 24:fe:33:26:f5:a6:28:d4:9e:c4:25:15:33:73:f1:e5:d1:f9: 5f:29:1d:f4:02:cd:73:45:03:91:5c:04:4c:46:c6:fa:61:8a: be:ea:57:ee:af:69:c4:fe:bd:44:95:1c:89:0f:3c:95:b8:5e: 43:b2:8d:99:30:11:f3:d1:f3:b8:05:eb:10:77:ef:4a:77:64: 2b:9b:80:e6:04:27:41:5c:82:e9:b8:2f:5d:5f:02:e7:0c:23: c0:49:73:90:9f:30:24:93:c5:ba:16:53:a4:62:eb:c9:01:36: 9e:20:12:92:12:f5:00:c3:7b:b3:d6:7f:d0:3e:ec:30:37:59: d0:19:09:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTnAw8WY9TIGbGnno1lcWlYs0ZYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1REMwNkFCQUYxNzY5NjJDMEU5MEQzNkQ5MzlGQTcy OUFBQzA1MDAeFw0yNjA0MTcxMDI5NDNaFw0yNjA0MTgxMjAxNDNaMDMxMTAvBgNV BAMTKDdDRDMzNDFBQjA5MEE4NkM5MDIyNDg0ODYxNTUwNjkzNEYxMDJFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR9hISUNfwMw+FoohF9sq0eLPh AMtSr7rSrAJBPAgFj/aWqUpwsoibgG+bjUMoc8+/nFBSzZ5LhKcRC6l4/9XTy2be 13aE6HIGRAXihbl9DhJzq9OKeE6UDM7X+syMhWgmMiYPGluVd+C4KphB4/RKSQSH Y4YvhP/8HQ7k7YqgzAiTS5/2k1uc2vgQJmu1Qw5/teI0WniJmgn9DkIF1JlDk6Ro nACzrdvJ4oplCnffVmqrSrgVY3+bUEv+4wPad03CUqsfi7HVZOEfxqnp9OxqP2MY 1ljOU+iK8emwzT8HXaglbNSMvyJC4Autrqhg0I0TJ08L9C51LYf29GhfrseDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfNM0GrCQqGyQIkhIYVUGk08QLq8wHwYDVR0j BBgwFoAUyV3AarrxdpYsDpDTbZOfpymqwFAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8xL0M5NURDMDZBQkFGMTc2OTYyQzBFOTBEMzZEOTM5 RkE3MjlBQUMwNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzk1REMwNkFCQUYxNzY5NjJDMEU5MEQzNkQ5MzlGQTcyOUFBQzA1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMS9DOTVEQzA2QUJBRjE3 Njk2MkMwRTkwRDM2RDkzOUZBNzI5QUFDMDUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmWbWVGc1v2z srsY8tBXaQ9acBd1lemp9R1RTgQp03cFs/mYhVqBMclN0pRiyNP7zB8FaC9wWhP9 KfsmomPvhcauMayr2cL7/V7++s/5uHYT1bO4YpOyJ2BazbiDaqfgscgV8Lqk2yNO lpRgfOixnG+yImCXfCkcASq8hrLnJP4zJvWmKNSexCUVM3Px5dH5Xykd9ALNc0UD kVwETEbG+mGKvupX7q9pxP69RJUciQ88lbheQ7KNmTAR89HzuAXrEHfvSndkK5uA 5gQnQVyC6bgvXV8C5wwjwElzkJ8wJJPFuhZTpGLryQE2niASkhL1AMN7s9Z/0D7s MDdZ0BkJig== -----END CERTIFICATE-----Generated at Sat Apr 18 01:57:49 2026 by rpki-client