$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft File: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json) Hash identifier: QEZjMZ9QhHDKVREmkX7Kpe8q7/U9wOC/UEAMNs1auqk= Subject key identifier: C8:57:EF:0D:C2:D0:C7:7D:1B:25:C9:04:EC:DB:7A:CF:86:FC:94:20 Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Certificate serial: 7B0004140A0B2B0848F763C6142BE758121B079D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft Manifest number: 0D Signing time: Sat 18 Apr 2026 06:44:52 +0000 Manifest this update: Sat 18 Apr 2026 06:39:52 +0000 Manifest next update: Sun 19 Apr 2026 10:06:52 +0000 Files and hashes: 1: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: SDSuq32u9TgmwIUQF3TaAQ1mWZmdj0irhR5fLd6ln+g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:00:04:14:0a:0b:2b:08:48:f7:63:c6:14:2b:e7:58:12:1b:07:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Validity Not Before: Apr 18 06:39:52 2026 GMT Not After : Apr 19 10:06:52 2026 GMT Subject: CN=C857EF0DC2D0C77D1B25C904ECDB7ACF86FC9420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:f9:42:27:fb:ac:f7:4b:ce:9a:a5:17:40: 9f:35:5b:7c:32:9b:13:36:5a:66:52:36:f2:80:4c: 79:fa:56:7a:6d:fe:cb:b9:a9:5e:ff:fc:36:8d:9a: e7:e7:4f:07:2d:a8:14:16:ba:20:e6:87:3c:a8:fe: 98:57:30:96:76:6e:f8:ec:e5:56:60:fe:f1:45:09: 52:91:e9:43:ff:46:20:d3:66:67:e9:6c:c4:1f:f8: a1:97:bc:58:de:7f:bf:3e:1a:01:58:4c:a1:12:f1: 3f:b7:9d:0f:dd:a4:e0:4c:4b:e3:d8:f3:44:3e:7e: 0e:a1:3e:5d:ac:2e:d1:61:78:4c:dd:d8:e4:95:03: dd:cd:16:f1:40:41:b5:d8:66:b0:80:34:9f:66:8a: 65:ee:c0:5e:d4:43:91:c2:79:7b:94:e7:21:ee:3c: 5c:9b:b0:16:86:ab:4a:d0:87:ed:bc:7e:a2:4a:80: 0f:b6:a4:d6:36:57:22:b0:5e:fc:72:11:1f:db:42: 77:62:e2:f4:8d:c7:aa:c5:41:52:cb:ed:af:c7:52: ac:c9:a5:36:80:69:39:c9:d9:0c:ee:93:3a:07:43: a4:ae:f5:41:43:60:48:c4:3d:bb:45:fe:d2:1f:47: 79:01:71:3a:29:8d:45:06:e6:d4:40:15:3c:c8:1b: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:57:EF:0D:C2:D0:C7:7D:1B:25:C9:04:EC:DB:7A:CF:86:FC:94:20 X509v3 Authority Key Identifier: keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6a:41:b5:fa:e3:88:8f:6d:0f:e2:c3:29:d9:a6:ce:0e:ad: 2b:bc:a0:00:5d:02:99:d8:05:aa:d8:fc:1f:4a:2f:4f:1e:7e: 9e:96:2d:e0:8e:11:30:fa:0a:c3:2d:ba:f9:26:d1:c1:b2:51: 9d:28:20:7f:4b:d4:0c:77:f2:ec:71:49:00:42:93:65:77:77: 49:bb:52:c0:b8:c0:b7:89:c8:1a:ee:40:86:35:b2:4d:74:7d: 77:93:2d:4b:b8:0b:05:4f:e5:fc:d9:c3:ee:78:d6:e7:81:ba: fd:ee:b8:ff:26:db:66:ea:69:54:0e:30:de:ee:93:5c:9c:d7: 57:bd:1d:a6:d1:01:40:f9:11:9a:56:86:04:b3:ab:f7:40:2e: 9e:e5:8e:12:15:47:26:5d:fa:3c:dc:4e:3a:93:61:78:7d:8d: 79:59:15:fd:d5:e7:3a:cb:78:be:dd:59:4d:3a:db:a6:cc:e1: cc:1c:8b:7d:03:d2:0b:93:a2:86:9c:8e:21:9b:f9:85:cf:99: 54:23:93:0d:f5:74:ae:38:a5:22:09:b3:29:40:41:fb:cb:7d: c5:c3:07:5d:0b:32:bf:ec:b5:b2:56:49:63:dd:f5:ee:64:8c: 50:54:4a:a1:02:b7:42:96:c9:b8:7c:6e:cd:00:38:2b:be:f4: 5c:26:37:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUewAEFAoLKwhI92PGFCvnWBIbB50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZG NTRFREM0RTAeFw0yNjA0MTgwNjM5NTJaFw0yNjA0MTkxMDA2NTJaMDMxMTAvBgNV BAMTKEM4NTdFRjBEQzJEMEM3N0QxQjI1QzkwNEVDREI3QUNGODZGQzk0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4vlCJ/us90vOmqUXQJ81W3wy mxM2WmZSNvKATHn6Vnpt/su5qV7//DaNmufnTwctqBQWuiDmhzyo/phXMJZ2bvjs 5VZg/vFFCVKR6UP/RiDTZmfpbMQf+KGXvFjef78+GgFYTKES8T+3nQ/dpOBMS+PY 80Q+fg6hPl2sLtFheEzd2OSVA93NFvFAQbXYZrCANJ9mimXuwF7UQ5HCeXuU5yHu PFybsBaGq0rQh+28fqJKgA+2pNY2VyKwXvxyER/bQndi4vSNx6rFQVLL7a/HUqzJ pTaAaTnJ2QzukzoHQ6Su9UFDYEjEPbtF/tIfR3kBcTopjUUG5tRAFTzIGwjRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyFfvDcLQx30bJckE7Nt6z4b8lCAwHwYDVR0j BBgwFoAUYBqaijtQWl7iKDJD96vnpvVO3E4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ5ODg2MzYwMDg5Mzk1NC8wLzYwMUE5QThBM0I1MDVBNUVFMjI4MzI0M0Y3QUJF N0E2RjU0RURDNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZGNTRFREM0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0OTg4NjM2MDA4OTM5NTQvMC82MDFBOUE4QTNCNTA1 QTVFRTIyODMyNDNGN0FCRTdBNkY1NEVEQzRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWpBtfrjiI9t D+LDKdmmzg6tK7ygAF0CmdgFqtj8H0ovTx5+npYt4I4RMPoKwy26+SbRwbJRnSgg f0vUDHfy7HFJAEKTZXd3SbtSwLjAt4nIGu5AhjWyTXR9d5MtS7gLBU/l/NnD7njW 54G6/e64/ybbZuppVA4w3u6TXJzXV70dptEBQPkRmlaGBLOr90AunuWOEhVHJl36 PNxOOpNheH2NeVkV/dXnOst4vt1ZTTrbpszhzByLfQPSC5OihpyOIZv5hc+ZVCOT DfV0rjilIgmzKUBB+8t9xcMHXQsyv+y1slZJY9317mSMUFRKoQK3QpbJuHxuzQA4 K770XCY3ww== -----END CERTIFICATE-----Generated at Sat Apr 18 08:51:09 2026 by rpki-client