$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft File: 9B5519650F0653145F5D42879890BE1251C8F463.mft (raw, json) Hash identifier: 1Qx3TG7mneAFHc33g3B1xxUxXZHyEXs3PlIiAjL06go= Subject key identifier: 42:C5:E1:35:88:69:B4:A5:53:FF:32:8B:B3:BE:41:02:83:D0:0D:AA Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63 Certificate issuer: /CN=9B5519650F0653145F5D42879890BE1251C8F463 Certificate serial: 54D788D7F0C25BAA500FAAAE8E076C1FB05C9F71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft Manifest number: 1C Signing time: Fri 17 Apr 2026 16:14:43 +0000 Manifest this update: Fri 17 Apr 2026 16:09:43 +0000 Manifest next update: Sat 18 Apr 2026 18:50:43 +0000 Files and hashes: 1: 9B5519650F0653145F5D42879890BE1251C8F463.crl (hash: WoahFAEgPAXzwmKOJJGEcY/ZRpBNSeZqnrQO+K1FD1g=) 2: 3130332e3136362e35332e302f32342d3234203d3e20313532333230.roa (hash: Gf1xZTaiFs2sYarVKh+0+XtExjMUBVsVOE19dnVKZUs=) 3: 3130332e3136362e35322e302f32342d3234203d3e20313532333230.roa (hash: E7QlYHDSttb4N2W5AMGTOJwqynTI9lm4x0smn+C1yF4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d7:88:d7:f0:c2:5b:aa:50:0f:aa:ae:8e:07:6c:1f:b0:5c:9f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463 Validity Not Before: Apr 17 16:09:43 2026 GMT Not After : Apr 18 18:50:43 2026 GMT Subject: CN=42C5E1358869B4A553FF328BB3BE410283D00DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:73:46:2b:b4:d1:39:e4:e1:99:2f:aa:7b: 9a:30:f3:ab:b7:82:48:47:54:a8:3b:9c:3e:18:33: 39:b3:99:6a:11:f1:f6:95:48:fa:24:3a:b7:6a:f5: 84:8f:db:39:62:ff:ff:3b:46:b3:9d:d7:9d:b7:95: cb:93:6a:f1:f5:4f:3b:75:9d:53:34:3c:87:d3:b7: 4c:d4:e5:58:05:f9:a3:ad:38:fe:66:9a:ca:38:9a: 85:57:c3:87:1f:c0:38:5b:5d:34:a2:20:46:1f:e7: 57:3d:f4:a3:5b:71:a8:45:d9:86:cc:70:01:9b:c2: 36:59:80:6c:7a:d0:5d:53:e5:27:66:58:1f:59:89: 1f:ef:49:0c:bd:d5:60:a0:ad:be:a4:8b:66:8f:e7: 63:2a:ce:18:bd:f5:8f:8e:fc:1e:45:ab:4d:75:1e: 9d:b2:c9:42:21:d4:14:e9:b8:fc:80:5c:fb:da:6f: a5:ec:bb:42:c9:4f:36:9e:0b:12:3d:29:fa:02:ce: 65:ea:d2:bc:7c:f0:ca:29:39:f8:df:b2:60:48:c9: dd:01:97:a9:22:84:70:c1:13:e3:98:74:4b:b3:b8: d7:54:cd:a2:46:41:f6:71:71:14:75:59:b0:73:30: f3:c6:d0:9e:24:2e:6c:04:ff:84:2b:7c:24:b6:e8: a5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C5:E1:35:88:69:B4:A5:53:FF:32:8B:B3:BE:41:02:83:D0:0D:AA X509v3 Authority Key Identifier: keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:67:44:7a:0e:5c:38:aa:cc:ca:b4:a8:12:e0:41:03:72:1a: b7:1b:7a:90:bb:75:e9:6e:d4:1a:e8:11:23:87:5e:a6:25:9e: b5:e4:6d:2b:ed:64:b9:9d:dd:0a:73:e4:0f:bf:72:e8:61:0d: cd:39:3a:6e:8a:0d:2b:70:e5:a8:9b:9c:0c:3f:92:ae:1c:cb: 5b:3a:8e:f0:81:b3:3a:5e:89:f7:ba:26:26:19:cd:2c:20:c6: db:54:eb:75:16:23:15:27:1a:9e:04:c9:7e:49:1a:c6:c7:e0: 6e:61:14:57:7d:5e:ce:84:62:5a:17:45:6b:fd:ca:af:6f:75: 38:19:1b:20:e3:f0:6b:52:3c:64:b4:b1:99:e2:23:b5:bb:a4: 62:c6:2a:17:c9:17:5c:0b:37:32:aa:5b:f1:bd:a9:fe:b1:73: 2a:a6:d3:6e:be:bc:11:6e:ac:31:ea:40:9d:eb:c8:25:5b:21: 3b:35:8d:36:fb:66:5d:18:e6:be:e9:fd:fe:45:37:00:1b:54: 3b:5e:30:bf:ec:23:99:40:86:39:52:f7:de:16:5d:9c:2f:44: a8:d6:f0:74:83:c1:92:10:3f:c2:d0:cb:df:c2:39:7b:13:95: aa:64:f5:0d:9e:8e:58:0e:cc:21:f3:fb:e8:dc:5f:98:6a:25: d7:ed:0a:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVNeI1/DCW6pQD6qujgdsH7Bcn3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NTE5NjUwRjA2NTMxNDVGNUQ0Mjg3OTg5MEJFMTI1 MUM4RjQ2MzAeFw0yNjA0MTcxNjA5NDNaFw0yNjA0MTgxODUwNDNaMDMxMTAvBgNV BAMTKDQyQzVFMTM1ODg2OUI0QTU1M0ZGMzI4QkIzQkU0MTAyODNEMDBEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/63NGK7TROeThmS+qe5ow86u3 gkhHVKg7nD4YMzmzmWoR8faVSPokOrdq9YSP2zli//87RrOd1523lcuTavH1Tzt1 nVM0PIfTt0zU5VgF+aOtOP5mmso4moVXw4cfwDhbXTSiIEYf51c99KNbcahF2YbM cAGbwjZZgGx60F1T5SdmWB9ZiR/vSQy91WCgrb6ki2aP52Mqzhi99Y+O/B5Fq011 Hp2yyUIh1BTpuPyAXPvab6Xsu0LJTzaeCxI9KfoCzmXq0rx88MopOfjfsmBIyd0B l6kihHDBE+OYdEuzuNdUzaJGQfZxcRR1WbBzMPPG0J4kLmwE/4QrfCS26KVPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQsXhNYhptKVT/zKLs75BAoPQDaowHwYDVR0j BBgwFoAUm1UZZQ8GUxRfXUKHmJC+ElHI9GMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTM2Mjk4Njk2ODIxOTY0OS8wLzlCNTUxOTY1MEYwNjUzMTQ1RjVENDI4Nzk4OTBC RTEyNTFDOEY0NjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NTE5NjUwRjA2NTMxNDVGNUQ0Mjg3OTg5MEJFMTI1MUM4RjQ2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTEzNjI5ODY5NjgyMTk2NDkvMC85QjU1MTk2NTBGMDY1 MzE0NUY1RDQyODc5ODkwQkUxMjUxQzhGNDYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2dEeg5cOKrM yrSoEuBBA3Iatxt6kLt16W7UGugRI4depiWeteRtK+1kuZ3dCnPkD79y6GENzTk6 booNK3DlqJucDD+SrhzLWzqO8IGzOl6J97omJhnNLCDG21TrdRYjFScangTJfkka xsfgbmEUV31ezoRiWhdFa/3Kr291OBkbIOPwa1I8ZLSxmeIjtbukYsYqF8kXXAs3 Mqpb8b2p/rFzKqbTbr68EW6sMepAnevIJVshOzWNNvtmXRjmvun9/kU3ABtUO14w v+wjmUCGOVL33hZdnC9EqNbwdIPBkhA/wtDL38I5exOVqmT1DZ6OWA7MIfP76Nxf mGol1+0KDA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:20 2026 by rpki-client