$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json) Hash identifier: 2glq9URqWCTPWa2bfVcLvS+aAg90NKFJSsXBRQdJRmQ= Subject key identifier: 9A:3F:F4:94:71:72:8F:7C:0E:EF:A8:89:C1:73:A3:69:EF:2F:D1:5A Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Certificate serial: 3F21AAD8B09DF715660198B3766BE88C6641F216 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft Manifest number: 0D Signing time: Fri 17 Apr 2026 19:44:48 +0000 Manifest this update: Fri 17 Apr 2026 19:39:48 +0000 Manifest next update: Sat 18 Apr 2026 23:01:48 +0000 Files and hashes: 1: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: oP/S2bqOJOTuO8VszMdIhKR1qN6J3ygXNuw0l/EiJnE=) 2: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:21:aa:d8:b0:9d:f7:15:66:01:98:b3:76:6b:e8:8c:66:41:f2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Validity Not Before: Apr 17 19:39:48 2026 GMT Not After : Apr 18 23:01:48 2026 GMT Subject: CN=9A3FF49471728F7C0EEFA889C173A369EF2FD15A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:e4:17:b3:6b:46:df:30:32:a0:27:bb:f0: db:1e:f2:98:f9:73:81:03:27:04:fd:82:86:f7:4a: 4d:21:8b:3c:ba:af:c5:ed:51:27:00:99:11:f5:34: b8:65:c4:a0:1b:9d:75:6d:a6:1e:94:86:52:fa:7e: c6:0f:a4:b4:fc:53:53:6d:cd:0b:b2:ba:67:64:28: ba:b5:e6:fe:71:59:ea:ae:0a:98:7a:74:cb:58:ec: ef:32:6c:d4:4a:fc:8b:38:88:40:46:20:6b:07:d2: 20:7d:df:79:ba:ab:f3:c7:d1:00:eb:46:f7:2d:b6: 2a:4b:a3:d2:6b:55:13:be:20:ff:b7:85:0b:f6:3a: 6b:3e:ff:d6:c9:86:27:99:f3:84:02:45:6b:2c:e4: 3c:69:17:ca:52:75:8b:e6:78:80:77:df:d9:cc:e2: d3:74:e0:b4:a6:b8:01:04:fc:7d:9f:36:20:6e:d3: ff:67:2c:4f:88:8c:b2:d2:14:fe:b8:6b:81:a6:da: 44:57:d3:10:b2:4d:d3:54:8f:58:76:57:63:c0:c1: 0d:9a:54:49:05:86:d7:cd:7e:85:0a:f6:d3:a3:dd: 6c:e1:55:3c:62:b7:fe:60:24:c9:65:db:8d:33:1b: 40:45:fc:03:98:0c:75:85:5a:b3:cd:f2:a5:ca:25: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3F:F4:94:71:72:8F:7C:0E:EF:A8:89:C1:73:A3:69:EF:2F:D1:5A X509v3 Authority Key Identifier: keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:8a:a1:f7:76:74:ad:7f:9d:0f:4e:93:06:d7:d0:92:92:e1: 50:82:f2:9d:dc:52:3a:e4:f6:ca:58:1a:3c:ea:a6:ab:20:ff: ed:a1:df:79:1b:55:e3:80:05:46:00:16:83:34:78:c9:2e:c7: 69:05:db:f1:02:fd:a5:e2:2e:33:d7:95:04:f9:24:5d:85:7d: da:db:1c:88:db:37:0c:a3:00:ad:46:af:64:7b:47:2d:c4:d7: 71:a5:84:fe:f8:3c:06:c4:d2:6b:41:2b:7a:72:aa:3f:d6:2f: ab:7f:84:70:70:85:be:cd:44:b3:98:cb:d9:b1:67:aa:81:40: 0a:ac:e7:10:4d:16:04:2d:de:ae:8f:07:c5:79:a9:89:f6:b0: 1d:91:1c:9f:3b:f6:1a:8f:89:09:3b:09:4f:fe:79:6a:78:6e: 92:40:02:33:66:69:70:15:29:b4:19:54:be:2e:3b:56:c3:5c: 2a:69:bf:0c:30:9c:1c:5a:00:5f:53:ce:95:fa:65:e5:ac:fb: 90:cc:ea:fa:1f:cc:e6:ae:32:0e:0a:2f:cd:63:08:2d:b6:ef: 79:28:fb:b3:cd:dd:96:78:58:2e:c1:9e:9b:6a:a1:ce:0d:8b: fd:5b:4c:f2:d0:cd:54:06:2f:38:17:57:97:ba:17:f1:59:88: 78:c8:f2:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPyGq2LCd9xVmAZizdmvojGZB8hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx OUM1RkNGNzAeFw0yNjA0MTcxOTM5NDhaFw0yNjA0MTgyMzAxNDhaMDMxMTAvBgNV BAMTKDlBM0ZGNDk0NzE3MjhGN0MwRUVGQTg4OUMxNzNBMzY5RUYyRkQxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqeQXs2tG3zAyoCe78Nse8pj5 c4EDJwT9gob3Sk0hizy6r8XtUScAmRH1NLhlxKAbnXVtph6UhlL6fsYPpLT8U1Nt zQuyumdkKLq15v5xWequCph6dMtY7O8ybNRK/Is4iEBGIGsH0iB933m6q/PH0QDr RvcttipLo9JrVRO+IP+3hQv2Oms+/9bJhieZ84QCRWss5DxpF8pSdYvmeIB339nM 4tN04LSmuAEE/H2fNiBu0/9nLE+IjLLSFP64a4Gm2kRX0xCyTdNUj1h2V2PAwQ2a VEkFhtfNfoUK9tOj3WzhVTxit/5gJMll240zG0BF/AOYDHWFWrPN8qXKJT8DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmj/0lHFyj3wO76iJwXOjae8v0VowHwYDVR0j BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4 QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4qh93Z0rX+d D06TBtfQkpLhUILyndxSOuT2ylgaPOqmqyD/7aHfeRtV44AFRgAWgzR4yS7HaQXb 8QL9peIuM9eVBPkkXYV92tsciNs3DKMArUavZHtHLcTXcaWE/vg8BsTSa0ErenKq P9Yvq3+EcHCFvs1Es5jL2bFnqoFACqznEE0WBC3ero8HxXmpifawHZEcnzv2Go+J CTsJT/55anhukkACM2ZpcBUptBlUvi47VsNcKmm/DDCcHFoAX1POlfpl5az7kMzq +h/M5q4yDgovzWMILbbveSj7s83dlnhYLsGem2qhzg2L/VtM8tDNVAYvOBdXl7oX 8VmIeMjy/w== -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:28 2026 by rpki-client