$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft File: F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft (raw, json) Hash identifier: 7dInBUFYeI7z47L7zkSn369PIqKszYB5s6IKM+y/yhY= Subject key identifier: A4:35:27:61:AC:5C:D5:EE:AC:21:81:D3:50:29:7C:7B:A8:34:C7:93 Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Certificate serial: 44229DE35205F0C6AE3473C9472F6D89B8AC8FEB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft Manifest number: 15 Signing time: Fri 17 Apr 2026 09:44:42 +0000 Manifest this update: Fri 17 Apr 2026 09:39:42 +0000 Manifest next update: Sat 18 Apr 2026 12:09:42 +0000 Files and hashes: 1: F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl (hash: iDQZpshQEcHEcb1hbDO67NTigdTO7Df3SFZl4oW5Ul4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:9d:e3:52:05:f0:c6:ae:34:73:c9:47:2f:6d:89:b8:ac:8f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Validity Not Before: Apr 17 09:39:42 2026 GMT Not After : Apr 18 12:09:42 2026 GMT Subject: CN=A4352761AC5CD5EEAC2181D350297C7BA834C793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:5b:81:ca:c3:af:e4:bb:09:5e:27:b1:98: 07:3f:21:9d:19:a5:b1:07:d9:d4:e2:d0:b4:ed:7c: 2b:d9:c5:7e:af:f5:3e:5f:39:79:9c:d7:59:70:49: a6:ed:84:91:8a:a5:b5:0f:77:03:f4:1e:43:aa:ee: c4:32:93:9d:40:f1:6b:3e:f0:f5:42:8a:0b:e4:ea: db:eb:04:f4:65:ca:0f:76:38:e9:cf:e1:9a:13:52: 8f:f8:5b:00:33:1c:d4:5a:19:bf:d6:f9:92:fc:ff: c9:86:e7:cc:a9:ca:aa:58:67:0f:ad:81:ad:f4:27: 60:f4:87:1d:a1:bf:55:4c:83:38:6b:8e:32:2c:bb: 8f:05:d7:25:7c:74:d4:5a:fa:f1:6b:16:bf:33:72: 9e:c5:c4:dd:2d:1c:bc:45:a0:33:1f:60:9b:51:03: 36:95:b7:42:24:cb:fd:28:78:92:e9:35:69:02:6f: c4:28:c1:88:b2:83:b5:00:2c:ed:90:23:db:5c:ab: a8:a4:e3:b9:12:97:f2:d2:85:9f:93:a1:a0:0a:3f: 4f:84:2a:7f:f6:fb:9e:23:d2:93:f6:4c:ed:18:e6: 79:58:a3:63:6c:96:00:3c:68:68:02:4f:1e:11:be: dd:31:09:75:8a:19:aa:6f:8d:63:45:b4:47:f7:a3: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:35:27:61:AC:5C:D5:EE:AC:21:81:D3:50:29:7C:7B:A8:34:C7:93 X509v3 Authority Key Identifier: keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:25:e9:01:72:78:36:ce:83:ed:99:4a:ea:10:e7:be:a0:73: 47:b6:05:af:06:93:07:26:f5:2f:3d:ef:2b:4a:f8:a7:4a:41: fd:3a:08:af:99:2e:f5:52:6f:22:bc:96:dc:cf:99:3e:36:c7: 24:44:2c:7a:a1:64:2d:75:be:cf:93:49:ef:c2:d8:29:64:89: 93:79:f6:b2:b8:3d:61:d9:2d:6c:84:73:91:89:25:29:38:79: 9c:da:be:5c:45:ea:9c:76:88:ba:f4:01:66:cc:55:8e:c0:c2: 5b:2c:1a:58:cb:b7:dd:72:b6:a1:d9:fc:d2:10:61:76:de:7e: 6b:0b:59:9b:cc:c8:ee:bc:91:f6:95:b3:61:e6:8a:e7:c9:4d: 5f:5b:d4:e6:b7:d3:b7:e6:93:2f:e5:38:8a:82:da:73:4c:93: 84:5e:8b:aa:61:76:8e:fe:11:30:80:74:1b:d0:30:92:f4:7a: 07:93:54:6e:46:f9:ce:bf:21:9e:cd:09:a4:b0:60:72:a6:d8: 04:90:bd:81:d2:ea:ad:67:db:2d:da:3c:d7:3b:b6:6d:bd:ab: 9d:ae:82:8f:39:b4:b4:f0:1e:ef:5d:cb:85:07:46:5a:9e:d9: ba:0f:9f:5b:be:c1:8b:cf:ac:58:43:2f:b7:f9:72:c5:36:3a: dd:07:36:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURCKd41IF8MauNHPJRy9tibisj+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5 NTM1M0VDNjAeFw0yNjA0MTcwOTM5NDJaFw0yNjA0MTgxMjA5NDJaMDMxMTAvBgNV BAMTKEE0MzUyNzYxQUM1Q0Q1RUVBQzIxODFEMzUwMjk3QzdCQTgzNEM3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyI1uBysOv5LsJXiexmAc/IZ0Z pbEH2dTi0LTtfCvZxX6v9T5fOXmc11lwSabthJGKpbUPdwP0HkOq7sQyk51A8Ws+ 8PVCigvk6tvrBPRlyg92OOnP4ZoTUo/4WwAzHNRaGb/W+ZL8/8mG58ypyqpYZw+t ga30J2D0hx2hv1VMgzhrjjIsu48F1yV8dNRa+vFrFr8zcp7FxN0tHLxFoDMfYJtR AzaVt0Iky/0oeJLpNWkCb8QowYiyg7UALO2QI9tcq6ik47kSl/LShZ+ToaAKP0+E Kn/2+54j0pP2TO0Y5nlYo2NslgA8aGgCTx4Rvt0xCXWKGapvjWNFtEf3ozilAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpDUnYaxc1e6sIYHTUCl8e6g0x5MwHwYDVR0j BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0 NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTEwMDQ0ODIyNDA1MTMvMC9GMUQ1OTM1MEI4MDU5 MDRBNURERkMzRkRFQTFBNDYwRTk1MzUzRUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCXpAXJ4Ns6D 7ZlK6hDnvqBzR7YFrwaTByb1Lz3vK0r4p0pB/ToIr5ku9VJvIryW3M+ZPjbHJEQs eqFkLXW+z5NJ78LYKWSJk3n2srg9YdktbIRzkYklKTh5nNq+XEXqnHaIuvQBZsxV jsDCWywaWMu33XK2odn80hBhdt5+awtZm8zI7ryR9pWzYeaK58lNX1vU5rfTt+aT L+U4ioLac0yThF6LqmF2jv4RMIB0G9AwkvR6B5NUbkb5zr8hns0JpLBgcqbYBJC9 gdLqrWfbLdo81zu2bb2rna6Cjzm0tPAe713LhQdGWp7Zug+fW77Bi8+sWEMvt/ly xTY63Qc22Q== -----END CERTIFICATE-----Generated at Sat Apr 18 00:59:20 2026 by rpki-client