$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: Co2uKQx16ZwTQ8NQLbGbfcFDUpnomSuCXErwrIp+Zrg= Subject key identifier: BC:B8:B0:4B:6E:44:84:57:81:2F:C3:FE:68:F7:C8:6E:0F:12:B5:7B Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 36CD0825DFF78F3E68831A6F5B99D94F92DF3EEF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: 0D Signing time: Thu 16 Apr 2026 07:04:30 +0000 Manifest this update: Thu 16 Apr 2026 06:59:30 +0000 Manifest next update: Fri 17 Apr 2026 08:43:30 +0000 Files and hashes: 1: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) 2: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) 3: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: PGrc7Q/G8HOXdvBamt7GDMwlT7t/WA0/Hiuu65DmaPU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 08:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:cd:08:25:df:f7:8f:3e:68:83:1a:6f:5b:99:d9:4f:92:df:3e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Apr 16 06:59:30 2026 GMT Not After : Apr 17 08:43:30 2026 GMT Subject: CN=BCB8B04B6E448457812FC3FE68F7C86E0F12B57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:3d:7f:10:b9:88:ca:bc:fb:dd:73:fe:f6: 6b:9e:da:e7:5a:de:f8:03:8e:9b:2d:8d:70:9d:1f: aa:6c:3e:f9:83:af:c1:29:4c:db:74:55:a1:3c:03: 1c:50:39:8e:5b:9d:94:d8:5f:e6:c9:de:84:58:eb: 40:7d:97:06:80:c3:0e:e9:01:45:27:78:94:a7:fe: 4d:9c:f2:55:5d:f0:10:97:83:92:ff:35:75:31:94: c6:c7:31:38:a9:bc:80:31:61:d0:30:9b:9d:66:2e: 57:56:a6:33:5d:1d:ea:d6:5f:e2:c2:5c:26:4e:f9: ff:bc:97:ed:71:db:0a:7a:31:4a:f8:39:ba:41:89: e2:8d:66:68:5c:e2:15:18:97:44:76:ca:ed:0f:50: ba:72:46:c3:b4:1e:67:9a:4a:83:86:50:e9:ef:e3: e0:7e:57:15:91:71:43:de:65:2d:25:37:64:ce:a3: 1d:55:84:84:18:28:44:ed:7a:98:7f:75:15:3f:e1: e8:67:6a:9c:37:d8:cd:c6:87:a6:5f:92:f7:7c:98: ae:17:f5:88:07:b5:3d:42:6b:ef:93:8f:53:d4:e9: ce:e1:cd:5c:9c:a5:3f:33:16:89:e4:8c:da:c5:b0: 26:00:a0:f8:73:70:63:09:11:37:55:fd:69:76:9a: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:B0:4B:6E:44:84:57:81:2F:C3:FE:68:F7:C8:6E:0F:12:B5:7B X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:27:62:68:a9:e5:ea:6d:8e:00:85:ba:a2:ce:66:a4:7b:b4: d3:10:d6:7c:95:0c:cd:b5:02:8a:e3:d5:c1:ef:66:9e:6d:e5: e9:7e:61:f3:92:bc:7c:63:7e:ff:de:f7:6e:55:42:df:f0:37: c4:5c:27:65:9c:8c:1c:82:97:a9:70:04:39:dc:51:39:a9:1f: 73:a2:4a:5d:b1:8a:49:e7:9d:44:9f:e4:ae:43:4d:99:c7:ca: 01:cb:d9:72:32:85:24:19:eb:c0:48:ea:80:2c:d0:d1:aa:aa: 13:a6:8f:54:ba:86:d4:49:1f:33:ba:9b:59:d5:f1:46:77:7d: bc:68:08:7f:70:9a:10:42:f4:66:35:ca:6e:1d:fe:ad:49:85: 93:0a:47:c3:eb:62:c9:3d:05:89:1f:08:5c:b2:31:cf:48:62: 39:70:82:95:73:7f:5b:ec:85:95:c8:26:96:0c:58:c6:b4:65: bb:dc:f0:c4:34:95:ad:6a:d1:0d:4e:9f:e3:03:09:13:44:37: 66:db:d8:1e:df:f1:ca:ad:ea:c6:68:ea:12:be:a5:99:54:7b: fd:ff:33:21:51:31:91:71:27:39:b9:ce:16:3a:44:18:ba:7d: 7c:4d:c2:8f:5c:73:40:90:e4:b3:67:8f:ff:4e:09:5f:b6:6b: a8:fa:32:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNs0IJd/3jz5ogxpvW5nZT5LfPu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA0MTYwNjU5MzBaFw0yNjA0MTcwODQzMzBaMDMxMTAvBgNV BAMTKEJDQjhCMDRCNkU0NDg0NTc4MTJGQzNGRTY4RjdDODZFMEYxMkI1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoD1/ELmIyrz73XP+9mue2uda 3vgDjpstjXCdH6psPvmDr8EpTNt0VaE8AxxQOY5bnZTYX+bJ3oRY60B9lwaAww7p AUUneJSn/k2c8lVd8BCXg5L/NXUxlMbHMTipvIAxYdAwm51mLldWpjNdHerWX+LC XCZO+f+8l+1x2wp6MUr4ObpBieKNZmhc4hUYl0R2yu0PULpyRsO0HmeaSoOGUOnv 4+B+VxWRcUPeZS0lN2TOox1VhIQYKETteph/dRU/4ehnapw32M3Gh6Zfkvd8mK4X 9YgHtT1Ca++Tj1PU6c7hzVycpT8zFonkjNrFsCYAoPhzcGMJETdV/Wl2mkL1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvLiwS25EhFeBL8P+aPfIbg8StXswHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKidiaKnl6m2O AIW6os5mpHu00xDWfJUMzbUCiuPVwe9mnm3l6X5h85K8fGN+/973blVC3/A3xFwn ZZyMHIKXqXAEOdxROakfc6JKXbGKSeedRJ/krkNNmcfKAcvZcjKFJBnrwEjqgCzQ 0aqqE6aPVLqG1EkfM7qbWdXxRnd9vGgIf3CaEEL0ZjXKbh3+rUmFkwpHw+tiyT0F iR8IXLIxz0hiOXCClXN/W+yFlcgmlgxYxrRlu9zwxDSVrWrRDU6f4wMJE0Q3ZtvY Ht/xyq3qxmjqEr6lmVR7/f8zIVExkXEnObnOFjpEGLp9fE3Cj1xzQJDks2eP/04J X7ZrqPoysA== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:04 2026 by rpki-client