$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json) Hash identifier: xBNfJhlp4i/GNuihqjB91cV/10LuajNLkf1deQ/LcH4= Subject key identifier: 57:38:9F:C0:20:2D:DA:36:2D:57:AF:37:18:BA:FC:02:0B:3A:79:64 Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Certificate serial: 2D656729E91E96CAF6333966DBAFD70CD571D264 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft Manifest number: 0D Signing time: Fri 17 Apr 2026 16:04:43 +0000 Manifest this update: Fri 17 Apr 2026 15:59:43 +0000 Manifest next update: Sat 18 Apr 2026 17:45:43 +0000 Files and hashes: 1: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: jeXzhUXMobPCrT4y7u6J4T4bI3fcduw9ooRG3QtBX3I=) 2: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=) 3: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:65:67:29:e9:1e:96:ca:f6:33:39:66:db:af:d7:0c:d5:71:d2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Validity Not Before: Apr 17 15:59:43 2026 GMT Not After : Apr 18 17:45:43 2026 GMT Subject: CN=57389FC0202DDA362D57AF3718BAFC020B3A7964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:cc:65:f9:c6:ad:c3:83:b7:7f:8b:6d:6b: fd:75:a3:90:a5:f5:ba:54:74:13:f2:e3:b3:14:b3: 43:e1:27:47:e8:a9:93:d9:36:6f:3a:e2:0c:a5:a8: 6e:79:c0:73:23:dc:20:65:02:19:36:4b:53:70:57: 9f:5f:8a:d2:9a:91:11:16:50:0f:ff:5a:e2:f8:74: 3a:81:1b:84:7c:9c:24:9d:2b:3d:a3:23:bb:61:c1: 10:b4:0d:4a:6a:dc:55:d7:16:8b:e0:91:aa:90:0c: de:0a:c4:3b:e3:06:e9:35:11:32:38:96:d4:41:d3: 7c:d7:3e:a4:5e:71:e1:01:ba:29:a3:be:ab:e5:33: 41:82:31:ec:c9:ed:95:e8:03:78:51:f5:4a:07:d6: c7:f5:93:16:f5:4c:0c:97:66:e1:23:b5:9a:83:9a: f2:12:b5:10:67:d3:40:7a:1c:59:89:ee:4c:d7:d7: 24:96:7b:66:7f:ce:ac:61:14:82:58:23:b5:4d:e1: 85:f4:f3:02:82:74:02:61:60:e9:f3:99:a7:53:ba: d6:06:69:b3:36:53:44:5f:fa:17:76:50:b3:49:d6: 63:09:7f:8f:13:ef:8a:25:b1:eb:67:70:4b:99:46: 50:a0:d2:34:90:76:ae:2b:e5:d4:14:75:36:42:e4: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:38:9F:C0:20:2D:DA:36:2D:57:AF:37:18:BA:FC:02:0B:3A:79:64 X509v3 Authority Key Identifier: keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c2:33:5b:68:e0:ce:48:fc:4e:5b:20:4f:88:66:42:ff:18: 4b:ed:84:54:8c:3c:a3:5f:1d:26:e6:99:6b:bf:55:6f:86:4a: 41:ab:4a:7a:17:72:2b:56:62:75:3e:98:85:7a:77:b0:89:56: 55:f0:23:70:1f:c0:e0:1b:ab:25:91:01:bf:4d:ce:29:b5:76: 1b:e2:2c:32:03:f4:53:11:73:e6:5b:35:3d:0a:4c:b5:c2:eb: b8:0b:4b:e0:24:d2:0f:8e:fa:91:21:ee:01:ca:10:9b:7b:7c: 2a:8d:26:10:47:57:37:2a:78:da:6e:3e:8e:da:ac:39:58:43: 0a:02:23:86:de:91:aa:e3:26:7f:73:20:b4:58:69:b6:3c:ca: f7:ef:63:7a:d5:d0:ab:ad:d9:f6:5c:53:15:79:b3:5c:d8:8b: 7d:01:9b:63:9d:c3:80:82:71:32:c4:f3:b8:0f:d6:f2:bd:f5: 01:37:b6:d3:81:4c:91:45:0a:9b:1f:6f:f1:cd:08:8a:e2:e0: 83:cd:90:fa:4c:9f:89:99:dd:47:6e:91:fd:d7:5f:90:7e:96: 0b:67:d9:81:28:b8:f4:8a:3d:0a:de:04:30:af:56:b5:78:9f: 5b:ae:89:ba:f6:4c:9b:61:2c:a9:62:63:b7:ad:2c:57:03:a5: 61:75:b6:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULWVnKekelsr2Mzlm26/XDNVx0mQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC NTNDNzBFMDAeFw0yNjA0MTcxNTU5NDNaFw0yNjA0MTgxNzQ1NDNaMDMxMTAvBgNV BAMTKDU3Mzg5RkMwMjAyRERBMzYyRDU3QUYzNzE4QkFGQzAyMEIzQTc5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHi8xl+catw4O3f4tta/11o5Cl 9bpUdBPy47MUs0PhJ0foqZPZNm864gylqG55wHMj3CBlAhk2S1NwV59fitKakREW UA//WuL4dDqBG4R8nCSdKz2jI7thwRC0DUpq3FXXFovgkaqQDN4KxDvjBuk1ETI4 ltRB03zXPqReceEBuimjvqvlM0GCMezJ7ZXoA3hR9UoH1sf1kxb1TAyXZuEjtZqD mvIStRBn00B6HFmJ7kzX1ySWe2Z/zqxhFIJYI7VN4YX08wKCdAJhYOnzmadTutYG abM2U0Rf+hd2ULNJ1mMJf48T74olsetncEuZRlCg0jSQdq4r5dQUdTZC5DWjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVzifwCAt2jYtV683GLr8Ags6eWQwHwYDVR0j BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MjYxNDYzNDA0NTQ0MDIvMC9GMjFCNjE3RjQ2RTVE RDc2MEFFNTZBMjFCNjg5MDE4NUI1M0M3MEUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcIzW2jgzkj8 TlsgT4hmQv8YS+2EVIw8o18dJuaZa79Vb4ZKQatKehdyK1ZidT6YhXp3sIlWVfAj cB/A4BurJZEBv03OKbV2G+IsMgP0UxFz5ls1PQpMtcLruAtL4CTSD476kSHuAcoQ m3t8Ko0mEEdXNyp42m4+jtqsOVhDCgIjht6RquMmf3MgtFhptjzK9+9jetXQq63Z 9lxTFXmzXNiLfQGbY53DgIJxMsTzuA/W8r31ATe204FMkUUKmx9v8c0IiuLgg82Q +kyfiZndR26R/ddfkH6WC2fZgSi49Io9Ct4EMK9WtXifW66JuvZMm2EsqWJjt60s VwOlYXW2MQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:25:50 2026 by rpki-client