$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: kn6a4G2Uxv1XughzlvTEXpGRwZCFTQVKM45Y6SescfI= Subject key identifier: D3:5F:88:C8:4E:57:54:3B:9E:4F:7F:1A:BB:AD:F1:0D:26:02:F7:3F Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 665834AF88107C4EF4B50D27606E0084A469FFC1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: 16 Signing time: Fri 17 Apr 2026 21:44:48 +0000 Manifest this update: Fri 17 Apr 2026 21:39:48 +0000 Manifest next update: Sun 19 Apr 2026 00:25:48 +0000 Files and hashes: 1: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: ZMYvX0TMIWdxRoWvsMROZdNSZXNL3jMrSNM+uGzoa88=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:58:34:af:88:10:7c:4e:f4:b5:0d:27:60:6e:00:84:a4:69:ff:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Apr 17 21:39:48 2026 GMT Not After : Apr 19 00:25:48 2026 GMT Subject: CN=D35F88C84E57543B9E4F7F1ABBADF10D2602F73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:28:b2:8b:85:b4:c0:30:58:dc:ed:c9:98: 33:78:65:20:1d:4e:70:13:3c:b2:8c:65:e6:92:dc: cf:e6:3e:cf:68:7d:5b:ae:93:f7:10:fd:55:46:62: 13:f0:54:5d:d1:99:5f:06:a0:4a:21:e1:e2:7f:2d: 95:38:52:fa:0c:20:1f:98:54:10:53:b0:68:13:79: 3b:9a:c9:78:05:86:04:b4:92:1d:0d:18:17:41:cf: 7d:6e:c9:a2:f1:42:f8:e0:45:05:ce:1d:2b:0f:29: a6:6d:20:31:3f:8b:43:8d:c9:c2:2d:b0:c0:4e:ec: 1a:29:bc:b4:81:e8:40:79:cd:cf:79:0b:9a:33:5c: 78:ad:35:2e:36:90:72:2e:0c:ee:7a:16:26:97:e7: 22:09:85:a8:eb:3f:99:58:02:ea:ad:17:08:63:7b: fa:fb:7f:77:ff:16:4f:5f:37:41:17:e1:1d:86:36: fb:35:db:72:06:ce:f6:c7:e5:61:fe:a8:8a:a0:fd: 39:5a:67:fd:c9:9d:f1:cc:cf:eb:8d:3f:54:6a:46: e0:e7:04:4e:27:da:b0:07:94:80:0d:71:f8:46:2d: 27:b6:6d:26:b4:a9:c1:2e:d9:96:77:6f:f2:b7:28: 2c:c7:11:8c:09:a0:fb:fb:81:3d:da:cc:7f:72:9f: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5F:88:C8:4E:57:54:3B:9E:4F:7F:1A:BB:AD:F1:0D:26:02:F7:3F X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6c:67:40:1b:47:77:ba:27:7c:01:13:5d:a6:98:b1:d9:d6: d2:a8:bb:18:fa:04:bb:28:81:36:91:a4:c5:4b:5f:e9:dd:5b: e7:ac:e4:68:70:37:1e:cb:f3:39:4c:c7:82:a0:45:87:3c:8c: e1:35:09:8b:03:45:0f:c4:d3:a3:8d:e4:bd:26:64:c8:e9:b6: 9f:3e:8c:09:d3:5d:9e:a7:e1:f4:f3:80:82:51:00:6f:2d:0d: c1:6a:e2:80:b0:30:48:8e:e2:79:ef:e3:34:a8:c2:32:46:f6: d2:5b:21:9e:c8:b8:71:14:7d:fb:bc:b0:ea:51:51:0c:83:32: 2a:f0:ca:78:9f:da:c8:ff:e2:f7:6c:5e:e6:94:e2:6f:66:3a: 03:74:7d:1a:da:87:03:0e:8e:55:8b:77:6b:55:15:fc:ed:91: ad:75:22:00:6a:20:d6:12:3d:a5:23:a2:0f:11:99:8c:14:b3: 3e:b5:f1:cc:d0:01:e0:3f:d7:3b:85:16:e5:82:f4:ed:eb:8f: 48:56:a6:4e:70:2b:ab:b0:39:63:5c:20:26:c0:91:dd:52:47: ed:5c:73:10:99:2d:cb:cc:7c:30:f9:9e:24:2e:da:38:90:79: ee:a6:16:67:d2:e5:2f:44:3c:c4:ee:ab:7c:7f:5c:67:4f:87: f7:28:5b:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZlg0r4gQfE70tQ0nYG4AhKRp/8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA0MTcyMTM5NDhaFw0yNjA0MTkwMDI1NDhaMDMxMTAvBgNV BAMTKEQzNUY4OEM4NEU1NzU0M0I5RTRGN0YxQUJCQURGMTBEMjYwMkY3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLiiyi4W0wDBY3O3JmDN4ZSAd TnATPLKMZeaS3M/mPs9ofVuuk/cQ/VVGYhPwVF3RmV8GoEoh4eJ/LZU4UvoMIB+Y VBBTsGgTeTuayXgFhgS0kh0NGBdBz31uyaLxQvjgRQXOHSsPKaZtIDE/i0ONycIt sMBO7BopvLSB6EB5zc95C5ozXHitNS42kHIuDO56FiaX5yIJhajrP5lYAuqtFwhj e/r7f3f/Fk9fN0EX4R2GNvs123IGzvbH5WH+qIqg/TlaZ/3JnfHMz+uNP1RqRuDn BE4n2rAHlIANcfhGLSe2bSa0qcEu2ZZ3b/K3KCzHEYwJoPv7gT3azH9yn0A7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU01+IyE5XVDueT38au63xDSYC9z8wHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2xnQBtHd7on fAETXaaYsdnW0qi7GPoEuyiBNpGkxUtf6d1b56zkaHA3HsvzOUzHgqBFhzyM4TUJ iwNFD8TTo43kvSZkyOm2nz6MCdNdnqfh9POAglEAby0NwWrigLAwSI7iee/jNKjC Mkb20lshnsi4cRR9+7yw6lFRDIMyKvDKeJ/ayP/i92xe5pTib2Y6A3R9GtqHAw6O VYt3a1UV/O2RrXUiAGog1hI9pSOiDxGZjBSzPrXxzNAB4D/XO4UW5YL07euPSFam TnArq7A5Y1wgJsCR3VJH7VxzEJkty8x8MPmeJC7aOJB57qYWZ9LlL0Q8xO6rfH9c Z0+H9yhb5A== -----END CERTIFICATE-----Generated at Sat Apr 18 05:29:12 2026 by rpki-client