$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft File: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json) Hash identifier: qZVyxEZ0k9KAouDVe6GFKsU8r6Mw0qgFI6fzkvyXSk8= Subject key identifier: 00:3B:EF:AC:B3:74:27:2A:17:5D:AB:F1:6D:15:5E:0D:C3:D4:2E:7F Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E Certificate issuer: /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Certificate serial: 4F4F9859DF6AAB90A88020C53B63202C5FD16810 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft Manifest number: 17 Signing time: Fri 17 Apr 2026 18:39:47 +0000 Manifest this update: Fri 17 Apr 2026 18:34:47 +0000 Manifest next update: Sat 18 Apr 2026 18:42:47 +0000 Files and hashes: 1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: mDD/s4UoaqW5J83WpOt+GVMKwZjCLFK23akscPYjg8A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4f:98:59:df:6a:ab:90:a8:80:20:c5:3b:63:20:2c:5f:d1:68:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Validity Not Before: Apr 17 18:34:47 2026 GMT Not After : Apr 18 18:42:47 2026 GMT Subject: CN=003BEFACB374272A175DABF16D155E0DC3D42E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:1a:8a:16:c1:71:06:cc:fc:c6:1a:5b:32: 05:36:23:cf:af:29:86:da:86:56:b6:4d:f7:4c:58: cf:92:34:ce:20:e4:b1:ae:61:cf:d7:48:31:ea:37: df:75:a0:bd:1f:5a:64:fa:2d:e5:dc:6a:33:9d:0b: 3d:88:19:03:17:20:87:4d:93:2f:49:b9:2c:53:fd: 72:91:a8:1a:fa:be:7a:88:87:07:89:de:3d:e2:0a: 71:ae:db:26:58:56:c8:5e:a4:aa:2c:b4:e6:70:ff: 8f:71:d5:e1:44:17:a9:38:ea:86:03:40:44:47:1f: 60:03:31:70:6d:2d:a1:35:26:8a:e2:0a:73:9e:f6: 75:76:88:a5:d4:65:bb:a3:2c:1d:f1:17:40:37:b5: c0:bf:ac:5a:9b:38:28:f7:7a:ef:14:95:c9:a8:e5: af:90:4a:bd:32:e9:4f:2e:09:32:40:bf:3a:9a:22: f4:cb:49:1a:95:cd:62:be:50:46:f1:0a:18:e3:f7: a8:35:c3:8f:f5:de:0b:5a:47:5e:8f:59:3d:24:c5: aa:f1:e9:85:ac:b7:e0:5e:09:0d:df:0c:27:d5:0a: 6e:4e:fa:93:71:9f:72:16:be:9a:53:42:a9:65:45: 6e:3a:d1:8e:25:fc:6c:78:7c:25:10:e3:29:fc:e7: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:EF:AC:B3:74:27:2A:17:5D:AB:F1:6D:15:5E:0D:C3:D4:2E:7F X509v3 Authority Key Identifier: keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6c:b4:15:39:8c:4d:a7:60:2d:f8:a7:fc:52:48:54:52:26: 82:ba:ee:b8:1a:25:b1:8f:62:18:fb:d5:a9:e6:96:10:d3:48: 67:53:76:d8:e7:2a:f7:6f:be:59:43:a2:50:39:b0:91:7b:16: 68:18:8f:23:5c:20:54:c9:c5:e9:b5:85:7f:be:a0:0e:33:a2: 72:3e:d6:48:c1:49:c7:b9:54:17:2c:e5:54:63:5b:33:7a:4b: 80:45:fa:d1:37:e4:6e:c5:32:53:aa:14:30:99:24:fa:ea:6d: ad:34:20:20:5e:0d:8c:94:13:8d:7a:a9:05:43:38:62:32:37: 5d:81:65:cd:67:aa:5e:b3:97:49:8d:fa:52:14:a1:50:d6:04: 02:89:86:af:a0:41:b2:74:b4:05:05:52:4b:32:94:72:0f:48: d1:bd:95:7f:6f:1f:21:de:58:cf:31:e6:37:3a:22:be:36:51: 4f:b9:e3:5c:07:37:02:29:65:64:ed:d3:95:26:75:d0:b1:a9: 06:b9:7c:89:6d:4d:45:65:9d:47:28:98:18:f1:1f:1d:c1:b0: f7:fb:00:9e:35:49:f9:7a:ca:19:98:02:81:6c:c2:b6:d8:b6: e4:51:02:c1:f3:92:64:34:2f:64:d4:a6:04:f5:34:13:25:9e: f3:1d:0a:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT0+YWd9qq5CogCDFO2MgLF/RaBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2 QzM4QzE0RTAeFw0yNjA0MTcxODM0NDdaFw0yNjA0MTgxODQyNDdaMDMxMTAvBgNV BAMTKDAwM0JFRkFDQjM3NDI3MkExNzVEQUJGMTZEMTU1RTBEQzNENDJFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlRqKFsFxBsz8xhpbMgU2I8+v KYbahla2TfdMWM+SNM4g5LGuYc/XSDHqN991oL0fWmT6LeXcajOdCz2IGQMXIIdN ky9JuSxT/XKRqBr6vnqIhweJ3j3iCnGu2yZYVshepKostOZw/49x1eFEF6k46oYD QERHH2ADMXBtLaE1JoriCnOe9nV2iKXUZbujLB3xF0A3tcC/rFqbOCj3eu8Ulcmo 5a+QSr0y6U8uCTJAvzqaIvTLSRqVzWK+UEbxChjj96g1w4/13gtaR16PWT0kxarx 6YWst+BeCQ3fDCfVCm5O+pNxn3IWvppTQqllRW460Y4l/Gx4fCUQ4yn85zWtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUADvvrLN0JyoXXavxbRVeDcPULn8wHwYDVR0j BBgwFoAUjGL79IdXuIqBsrRws6nmtGw4wU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTU1ODY3MDYwMjMzODMwNy8wLzhDNjJGQkY0ODc1N0I4OEE4MUIyQjQ3MEIzQTlF NkI0NkMzOEMxNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2QzM4QzE0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE1NTg2NzA2MDIzMzgzMDcvMC84QzYyRkJGNDg3NTdC ODhBODFCMkI0NzBCM0E5RTZCNDZDMzhDMTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimy0FTmMTadg Lfin/FJIVFImgrruuBolsY9iGPvVqeaWENNIZ1N22Ocq92++WUOiUDmwkXsWaBiP I1wgVMnF6bWFf76gDjOicj7WSMFJx7lUFyzlVGNbM3pLgEX60TfkbsUyU6oUMJkk +uptrTQgIF4NjJQTjXqpBUM4YjI3XYFlzWeqXrOXSY36UhShUNYEAomGr6BBsnS0 BQVSSzKUcg9I0b2Vf28fId5YzzHmNzoivjZRT7njXAc3AillZO3TlSZ10LGpBrl8 iW1NRWWdRyiYGPEfHcGw9/sAnjVJ+XrKGZgCgWzCtti25FECwfOSZDQvZNSmBPU0 EyWe8x0Kig== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:21 2026 by rpki-client