$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft File: F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json) Hash identifier: g449R+IqSjx1ri5spRhJO2YeBt+UNcReQ4gTPS6PSrs= Subject key identifier: 33:DD:81:1C:20:33:8C:10:6E:10:23:0F:55:03:CA:1D:E8:96:23:75 Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5 Certificate issuer: /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5 Certificate serial: 69F338B376944487C950889CD0AB653A7D665C9E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft Manifest number: 15 Signing time: Fri 17 Apr 2026 03:59:39 +0000 Manifest this update: Fri 17 Apr 2026 03:54:39 +0000 Manifest next update: Sat 18 Apr 2026 05:54:39 +0000 Files and hashes: 1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: p6VRK+qC4tysbm7NcXfYuiQT85pOVWJV4jcoGUe3/jI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f3:38:b3:76:94:44:87:c9:50:88:9c:d0:ab:65:3a:7d:66:5c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5 Validity Not Before: Apr 17 03:54:39 2026 GMT Not After : Apr 18 05:54:39 2026 GMT Subject: CN=33DD811C20338C106E10230F5503CA1DE8962375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:42:1e:46:80:65:5a:7c:a0:5f:ae:9d:b8: 6b:2f:23:f9:aa:f2:9d:56:e3:ec:55:52:9f:ef:e3: 12:8c:f8:b1:a4:50:45:b2:aa:ce:71:78:51:6d:56: 71:af:5d:67:8a:df:c2:2e:83:b5:0d:8a:1e:4f:a2: 2f:1e:25:4d:a5:66:0b:f8:5a:82:54:d8:7a:00:f9: 1c:b6:e6:cf:b2:a6:50:c7:ec:e6:c3:62:29:8c:94: 0e:7d:38:2f:5f:06:6a:00:4a:dc:ae:11:5c:52:14: a9:42:13:32:d2:b8:dd:ac:ff:0a:78:a8:c0:d8:62: 9b:67:43:3e:5a:fc:4a:8f:ba:36:5e:bb:83:48:a2: 88:97:dd:38:31:b4:9c:4f:0e:9c:d9:7b:b3:2c:ee: e8:31:5c:0d:82:a1:aa:98:af:6a:b5:bc:ab:48:7b: 8f:d8:6e:60:73:85:4c:a9:3c:ad:df:96:b6:46:92: 5a:47:ab:c8:27:66:d3:b6:7e:81:d7:83:be:d8:0e: a0:e3:f8:ee:d4:60:8b:bb:c0:aa:73:6d:ce:3b:a2: bf:e2:3b:11:7d:64:d4:5a:7f:a0:58:a8:08:dd:4d: 6a:ec:22:1b:5d:14:6e:95:5d:14:4e:de:4d:6a:2e: 64:74:99:af:92:c5:ff:aa:5f:ab:f5:c7:85:e7:db: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:81:1C:20:33:8C:10:6E:10:23:0F:55:03:CA:1D:E8:96:23:75 X509v3 Authority Key Identifier: keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:e7:68:26:7d:b8:f7:7f:b1:c9:34:4e:ce:a6:d4:f7:97:5b: 7b:e8:42:23:ba:a7:8a:76:dd:fb:02:92:c2:9f:5d:b4:42:09: 3a:cf:9d:35:ca:2d:08:a2:8f:c7:67:30:1c:56:54:af:cc:45: d7:4f:e3:d3:97:0f:b3:b7:06:ed:42:91:61:28:8a:49:91:50: 46:9b:ec:bb:d3:b3:3f:f9:ac:1c:76:b5:f4:df:ba:f9:2e:dd: f0:2f:da:07:1a:cf:b8:1f:ef:2a:23:23:e9:f5:fe:5c:15:58: 96:e0:aa:95:ef:67:7e:9c:48:af:e3:e6:d0:8d:17:f1:98:9f: a3:26:09:fe:0f:44:c2:2e:38:6b:42:0e:1a:8f:8a:91:f1:98: 18:d7:2a:66:e4:2b:44:40:47:c6:15:bd:6c:18:86:77:05:cd: 4f:25:da:5b:21:94:ec:ca:14:c4:05:33:84:20:2a:ef:af:7f: 98:3d:3d:32:fa:e4:ee:1e:90:11:12:15:bb:c2:87:69:8a:8a: 70:3e:ba:cc:0d:90:4c:b0:07:93:42:fd:66:c1:0e:c0:7d:a7: 27:f3:df:c4:18:c0:6a:66:96:b3:f2:de:e4:9d:23:88:2f:a3: 85:70:af:e1:6c:40:56:7f:e7:5e:79:59:9a:7a:e7:32:f3:55: ad:d4:13:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUafM4s3aURIfJUIic0KtlOn1mXJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlE ODZFMjhBNTAeFw0yNjA0MTcwMzU0MzlaFw0yNjA0MTgwNTU0MzlaMDMxMTAvBgNV BAMTKDMzREQ4MTFDMjAzMzhDMTA2RTEwMjMwRjU1MDNDQTFERTg5NjIzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3UIeRoBlWnygX66duGsvI/mq 8p1W4+xVUp/v4xKM+LGkUEWyqs5xeFFtVnGvXWeK38Iug7UNih5Poi8eJU2lZgv4 WoJU2HoA+Ry25s+yplDH7ObDYimMlA59OC9fBmoAStyuEVxSFKlCEzLSuN2s/wp4 qMDYYptnQz5a/EqPujZeu4NIooiX3TgxtJxPDpzZe7Ms7ugxXA2CoaqYr2q1vKtI e4/YbmBzhUypPK3flrZGklpHq8gnZtO2foHXg77YDqDj+O7UYIu7wKpzbc47or/i OxF9ZNRaf6BYqAjdTWrsIhtdFG6VXRRO3k1qLmR0ma+Sxf+qX6v1x4Xn27YDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM92BHCAzjBBuECMPVQPKHeiWI3UwHwYDVR0j BBgwFoAU8xgpf34rHJSEmku2ehDwKdhuKKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjE3NDk3Ny8wL0YzMTgyOTdGN0UyQjFDOTQ4NDlBNEJCNjdBMTBG MDI5RDg2RTI4QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlEODZFMjhBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTEwMDQ0ODIxNzQ5NzcvMC9GMzE4Mjk3RjdFMkIx Qzk0ODQ5QTRCQjY3QTEwRjAyOUQ4NkUyOEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyOdoJn2493+x yTROzqbU95dbe+hCI7qninbd+wKSwp9dtEIJOs+dNcotCKKPx2cwHFZUr8xF10/j 05cPs7cG7UKRYSiKSZFQRpvsu9OzP/msHHa19N+6+S7d8C/aBxrPuB/vKiMj6fX+ XBVYluCqle9nfpxIr+Pm0I0X8ZifoyYJ/g9Ewi44a0IOGo+KkfGYGNcqZuQrREBH xhW9bBiGdwXNTyXaWyGU7MoUxAUzhCAq769/mD09Mvrk7h6QERIVu8KHaYqKcD66 zA2QTLAHk0L9ZsEOwH2nJ/PfxBjAamaWs/Le5J0jiC+jhXCv4WxAVn/nXnlZmnrn MvNVrdQToQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:18 2026 by rpki-client