$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: +gHXFl/53q4L7I3dRLdoULSsopfJpVoCocJR52npn3I= Subject key identifier: 37:A8:3A:42:60:C0:87:28:C7:E1:9D:CA:0F:47:E6:AA:C7:8A:51:29 Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 146095361CA81A1662D1C9EC3168DFEBE7403CA1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: 1E Signing time: Thu 16 Apr 2026 08:09:51 +0000 Manifest this update: Thu 16 Apr 2026 08:04:51 +0000 Manifest next update: Fri 17 Apr 2026 10:26:51 +0000 Files and hashes: 1: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: a4GHfEbwjh6LCChmyHaY5QQ+krkyAEkptPZxTyUA1vI=) 2: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=) 3: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=) 4: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 10:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:60:95:36:1c:a8:1a:16:62:d1:c9:ec:31:68:df:eb:e7:40:3c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: Apr 16 08:04:51 2026 GMT Not After : Apr 17 10:26:51 2026 GMT Subject: CN=37A83A4260C08728C7E19DCA0F47E6AAC78A5129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:26:ae:42:c2:6c:d7:e6:8b:1f:05:c2:42: 42:0b:d1:67:d8:0b:73:46:52:10:51:84:06:24:de: 52:28:06:5a:80:f2:bf:4c:40:89:a4:86:dd:7f:1a: da:3b:16:c8:fa:1e:c8:dd:33:8c:44:f9:ca:ee:c4: af:5a:6f:51:78:36:fe:f2:e1:c9:51:52:60:a8:48: 52:ee:de:16:01:0f:f9:0c:af:62:14:f9:0a:ec:14: ac:59:d8:dd:b6:44:4b:1b:66:fb:90:15:10:0c:ec: 7a:43:14:ea:21:f1:1b:85:60:5c:d5:4d:a6:ef:9b: 1b:37:4f:69:1c:1d:c6:11:35:61:26:89:85:77:1e: d8:92:4d:01:d2:a2:ab:ba:db:93:13:f0:8b:f1:d0: ce:cd:ba:13:5c:16:28:d9:9c:0a:dd:cb:d3:61:4c: 77:f1:bc:38:57:be:06:1d:cf:da:d7:7a:58:ce:48: 12:db:12:f4:34:6f:28:24:fc:c3:14:29:42:b7:70: 1f:db:6f:13:af:3a:39:29:b8:ca:0d:5d:c7:cc:a8: d5:09:03:26:0b:d9:10:3f:c4:79:f6:4e:cf:42:bd: 6d:2f:25:e9:d2:5f:75:62:cd:c7:f1:70:38:7a:04: 85:ae:87:e0:56:4e:5a:27:6a:11:33:5d:ba:48:42: d2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A8:3A:42:60:C0:87:28:C7:E1:9D:CA:0F:47:E6:AA:C7:8A:51:29 X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:24:5a:f4:cd:ef:75:2d:5f:5b:d6:94:42:46:c0:5b:9f:12: df:86:f2:dc:99:6c:8b:54:5a:14:49:a9:64:67:83:50:37:74: 02:65:95:59:43:6e:77:42:3f:bc:a8:7a:46:59:32:63:6d:5d: 3b:4d:8a:55:75:8e:0d:fa:29:5a:c3:99:75:57:0a:dd:84:39: df:79:97:74:90:3d:68:f9:c7:76:62:72:8f:bb:5d:10:3b:20: d0:25:6b:19:32:7e:69:a7:49:dd:61:1f:7f:62:b3:ca:fa:80: 69:e4:f3:55:62:07:d9:1f:d2:05:22:57:c5:ef:61:fb:5b:ae: 13:0c:15:93:e0:3f:4c:bb:71:fc:ba:ed:72:89:50:83:a0:93: 08:82:79:9c:a4:a0:2b:30:9b:00:45:57:90:86:60:1a:4c:1e: fe:62:c8:19:d9:57:14:34:60:07:7c:23:ae:2f:32:f8:55:43: 59:a3:21:ae:dd:db:02:ed:26:ca:ba:75:5f:4d:4b:cf:e9:bc: 8b:cc:94:92:60:1b:d2:ea:37:34:ff:bd:da:39:ca:e4:17:a4: 9d:94:0b:08:81:ae:1f:3f:29:a9:a5:a8:aa:3d:77:78:1a:da: 38:34:bd:fe:12:00:ce:f3:2d:70:4e:23:1b:37:bb:7e:e6:a0: 11:bd:0c:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFGCVNhyoGhZi0cnsMWjf6+dAPKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjA0MTYwODA0NTFaFw0yNjA0MTcxMDI2NTFaMDMxMTAvBgNV BAMTKDM3QTgzQTQyNjBDMDg3MjhDN0UxOURDQTBGNDdFNkFBQzc4QTUxMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6SauQsJs1+aLHwXCQkIL0WfY C3NGUhBRhAYk3lIoBlqA8r9MQImkht1/Gto7Fsj6HsjdM4xE+cruxK9ab1F4Nv7y 4clRUmCoSFLu3hYBD/kMr2IU+QrsFKxZ2N22REsbZvuQFRAM7HpDFOoh8RuFYFzV Tabvmxs3T2kcHcYRNWEmiYV3HtiSTQHSoqu625MT8Ivx0M7NuhNcFijZnArdy9Nh THfxvDhXvgYdz9rXeljOSBLbEvQ0bygk/MMUKUK3cB/bbxOvOjkpuMoNXcfMqNUJ AyYL2RA/xHn2Ts9CvW0vJenSX3VizcfxcDh6BIWuh+BWTlonahEzXbpIQtL5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN6g6QmDAhyjH4Z3KD0fmqseKUSkwHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCRa9M3vdS1f W9aUQkbAW58S34by3Jlsi1RaFEmpZGeDUDd0AmWVWUNud0I/vKh6RlkyY21dO02K VXWODfopWsOZdVcK3YQ533mXdJA9aPnHdmJyj7tdEDsg0CVrGTJ+aadJ3WEff2Kz yvqAaeTzVWIH2R/SBSJXxe9h+1uuEwwVk+A/TLtx/LrtcolQg6CTCIJ5nKSgKzCb AEVXkIZgGkwe/mLIGdlXFDRgB3wjri8y+FVDWaMhrt3bAu0myrp1X01Lz+m8i8yU kmAb0uo3NP+92jnK5BeknZQLCIGuHz8pqaWoqj13eBraODS9/hIAzvMtcE4jGze7 fuagEb0MQw== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:55 2026 by rpki-client