$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft File: 2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft (raw, json) Hash identifier: n0tU6qgDjn6rOE49V+UcqcZ/6s8P/UDK+GrMNyD7mtQ= Subject key identifier: FE:27:E0:F9:DF:8A:EE:1A:04:06:0C:AA:DE:26:D6:6C:87:48:B7:8D Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 729890DDA298F43FC5ECE8196C7FD5E1BFD627D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft Manifest number: 20 Signing time: Fri 17 Apr 2026 14:09:43 +0000 Manifest this update: Fri 17 Apr 2026 14:04:43 +0000 Manifest next update: Sat 18 Apr 2026 16:27:43 +0000 Files and hashes: 1: 2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl (hash: DZkD//v130atVse4aQ2Ku94iFb2yNm9Gkxn7JUB0Rp4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:98:90:dd:a2:98:f4:3f:c5:ec:e8:19:6c:7f:d5:e1:bf:d6:27:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 17 14:04:43 2026 GMT Not After : Apr 18 16:27:43 2026 GMT Subject: CN=FE27E0F9DF8AEE1A04060CAADE26D66C8748B78D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:fe:eb:f4:8e:8b:12:97:f4:88:eb:88:79: a6:dd:04:07:42:f2:ae:2f:eb:ef:e6:ec:1b:47:46: 8f:15:a9:10:a3:d4:5b:b0:7b:c4:92:d3:22:9b:d1: ca:76:71:02:b5:28:eb:8d:74:c3:32:87:ab:24:b2: 8b:b6:0c:3c:24:12:1e:f6:d0:e9:c8:33:e8:39:98: 4e:4c:45:c9:c5:03:0f:a1:33:d4:90:39:1f:84:11: e9:07:4a:6c:05:18:36:75:8d:39:38:e9:a5:81:f0: 50:fd:69:39:6d:81:70:53:de:93:58:04:7b:8e:0f: 63:66:96:92:d0:76:e7:fc:3d:1e:c8:a1:ee:9c:89: 10:57:23:80:7f:f0:71:f7:25:89:f0:50:00:11:5a: 13:82:f5:cc:1c:98:d2:e5:0f:6c:68:f2:6c:d6:c5: 4f:e0:54:09:af:5f:c2:d4:07:5d:3c:9f:b3:d4:02: 3d:84:e3:00:a4:f3:d8:cd:36:76:6a:f4:dd:49:7b: b8:cf:16:de:c8:97:31:d6:ad:7e:2b:9e:16:7d:6a: 23:a1:58:f6:1b:b8:55:13:68:c4:ae:48:8a:61:db: 26:c5:90:a7:07:3e:d5:a7:0f:72:03:85:bb:5f:29: fc:db:7f:76:4f:6a:a6:63:9a:26:6a:07:74:cf:97: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:27:E0:F9:DF:8A:EE:1A:04:06:0C:AA:DE:26:D6:6C:87:48:B7:8D X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6f:80:fc:0d:a5:b7:dc:94:1a:26:ee:7c:99:75:32:c8:23: dc:5a:06:15:5c:27:ef:e4:12:31:d6:be:fc:17:0b:36:7f:61: 3a:4e:3f:b9:c1:f0:35:4d:7b:80:34:30:7c:ff:b8:88:4f:e0: 67:1b:89:82:5a:5e:d5:00:89:65:51:96:b4:29:4b:9b:ef:d7: 86:42:d4:2b:ee:8e:91:00:34:4f:8b:8d:2e:cb:da:57:2b:9b: 98:61:bd:bf:f9:f9:e8:a7:9a:c7:c8:23:4f:81:35:cd:75:2b: cd:d3:81:09:5e:7f:da:52:7c:33:71:e3:46:49:9c:d9:f7:6e: 24:c8:b3:b6:40:84:98:ce:a7:1f:cd:cf:25:c4:71:cf:52:7a: 7b:1a:57:8d:ed:4c:8d:cc:2d:c5:f4:03:ea:66:56:ec:ba:2f: 17:7e:ec:ca:21:b5:e0:21:34:e1:83:35:e3:5f:2f:c3:ab:1b: 20:ab:3f:84:ba:e6:de:5f:e8:c6:ae:f2:6d:cc:95:e0:45:c9: 2d:26:16:82:67:01:53:dc:5d:d5:5a:80:fa:a3:2e:31:78:6c: 30:4e:2e:3f:ec:45:57:ac:15:07:a0:b8:82:86:2b:98:f3:68: 84:13:f9:c1:d6:45:e6:27:20:a2:b1:41:5e:a8:ac:ff:c7:a0: 2f:b7:37:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcpiQ3aKY9D/F7OgZbH/V4b/WJ9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MTcxNDA0NDNaFw0yNjA0MTgxNjI3NDNaMDMxMTAvBgNV BAMTKEZFMjdFMEY5REY4QUVFMUEwNDA2MENBQURFMjZENjZDODc0OEI3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnf7r9I6LEpf0iOuIeabdBAdC 8q4v6+/m7BtHRo8VqRCj1Fuwe8SS0yKb0cp2cQK1KOuNdMMyh6sksou2DDwkEh72 0OnIM+g5mE5MRcnFAw+hM9SQOR+EEekHSmwFGDZ1jTk46aWB8FD9aTltgXBT3pNY BHuOD2NmlpLQduf8PR7Ioe6ciRBXI4B/8HH3JYnwUAARWhOC9cwcmNLlD2xo8mzW xU/gVAmvX8LUB108n7PUAj2E4wCk89jNNnZq9N1Je7jPFt7IlzHWrX4rnhZ9aiOh WPYbuFUTaMSuSIph2ybFkKcHPtWnD3IDhbtfKfzbf3ZPaqZjmiZqB3TPlw0VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/ifg+d+K7hoEBgyq3ibWbIdIt40wHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODkwNjIxNDA5MjIyOTgzNzAvMC8yMjY1QzJFODFCQ0ND QzRFOTIyQUIxMUM1ODFBREUzMUJGMjdCMjAyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG+A/A2lt9yU GibufJl1Msgj3FoGFVwn7+QSMda+/BcLNn9hOk4/ucHwNU17gDQwfP+4iE/gZxuJ glpe1QCJZVGWtClLm+/XhkLUK+6OkQA0T4uNLsvaVyubmGG9v/n56Keax8gjT4E1 zXUrzdOBCV5/2lJ8M3HjRkmc2fduJMiztkCEmM6nH83PJcRxz1J6expXje1Mjcwt xfQD6mZW7LovF37syiG14CE04YM1418vw6sbIKs/hLrm3l/oxq7ybcyV4EXJLSYW gmcBU9xd1VqA+qMuMXhsME4uP+xFV6wVB6C4goYrmPNohBP5wdZF5icgorFBXqis /8egL7c3iA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:24:42 2026 by rpki-client