$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft File: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft (raw, json) Hash identifier: kO+TriR31QmRRH4dyh37h2nwDhZvSUNQFmkLI0Pgud8= Subject key identifier: 2E:5D:FA:E9:39:F3:E5:C9:73:7E:B2:84:22:15:58:7F:A3:11:74:93 Authority key identifier: D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 Certificate issuer: /CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Certificate serial: 6639226DBDE016FA7B9ECAF7E2812A4D07151EB3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft Manifest number: 0B Signing time: Fri 17 Apr 2026 15:24:43 +0000 Manifest this update: Fri 17 Apr 2026 15:19:43 +0000 Manifest next update: Sat 18 Apr 2026 18:14:43 +0000 Files and hashes: 1: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl (hash: 4DD3qSHkJcEA2Zx+lgSZ3MFHcNjJOybMN3LJyTkdxRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:39:22:6d:bd:e0:16:fa:7b:9e:ca:f7:e2:81:2a:4d:07:15:1e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Validity Not Before: Apr 17 15:19:43 2026 GMT Not After : Apr 18 18:14:43 2026 GMT Subject: CN=2E5DFAE939F3E5C9737EB2842215587FA3117493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:29:11:49:c4:fa:37:fb:25:e7:36:5c:65: 74:7d:74:5e:62:ae:2e:e8:5d:3e:af:21:59:78:e0: 41:d1:b8:08:68:3b:08:53:c3:c4:cf:8b:e1:b8:7b: f3:c1:09:ba:68:b2:bf:6e:ad:5d:38:36:67:15:32: 96:37:fe:ac:39:ed:57:d8:9d:4d:30:b3:4b:b4:a1: d1:02:64:e8:9c:d7:8a:2f:91:c2:50:0b:24:67:f2: 1c:7d:b5:db:6e:e0:a5:57:b0:3e:bd:8a:fa:f8:41: 14:75:d6:20:49:64:ce:ac:44:97:6d:56:0e:99:8f: 80:7a:15:e5:1e:46:39:6d:4d:57:4c:fd:41:5f:8a: 9a:0b:df:89:cc:d4:e8:57:89:07:b5:08:25:44:f0: bb:af:9a:5d:64:01:17:e7:b1:57:7a:4c:a6:1c:c5: e7:da:4c:a8:37:fe:cd:f8:73:a5:ed:3a:dd:fa:c5: 29:f0:6b:1e:b1:5c:b4:4a:dc:9c:1c:59:fd:ee:60: f5:2c:e0:35:2a:3c:69:af:62:25:2d:3f:5c:cf:0d: 96:de:e3:2d:88:9c:00:ba:f1:c5:aa:2a:af:95:40: f5:0b:09:f4:f9:66:5c:d9:29:65:72:43:b3:de:a2: 53:b7:c1:b9:94:09:70:e6:96:a5:06:84:21:63:75: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5D:FA:E9:39:F3:E5:C9:73:7E:B2:84:22:15:58:7F:A3:11:74:93 X509v3 Authority Key Identifier: keyid:D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4d:79:e8:ee:63:f1:8c:5b:f2:24:72:65:0c:71:22:31:aa: 68:64:45:c7:fa:db:0f:a0:12:3c:60:da:11:31:4f:d1:a3:51: f2:1f:f2:46:11:b8:81:15:da:f3:c7:91:3f:f7:24:14:88:a5: e5:4a:b8:6e:92:43:91:c8:68:97:ac:2c:16:3d:66:02:f2:a7: a0:bb:7d:22:59:c2:9b:ea:16:2a:3e:61:55:96:b8:93:63:2e: 3a:de:6a:38:d7:d0:c0:18:95:67:60:c2:3d:f1:a3:ce:d1:f7: 75:7c:bb:e0:d9:40:cc:a1:d4:a3:78:49:1e:1c:88:47:07:c9: 8e:44:54:a1:e4:a2:e8:f3:29:2c:64:8d:0f:b5:67:ef:a8:97: 00:01:fd:a6:05:d5:53:05:bd:72:96:a7:91:29:4c:9c:cd:3f: 3a:52:c1:e6:08:88:7c:b3:2a:e9:92:cd:ce:59:ac:d6:a1:23: 0f:92:eb:1a:60:c1:8b:a9:14:a6:c9:8e:05:12:cb:27:ee:fe: 41:18:39:52:1e:32:41:4e:af:5c:cf:93:93:53:eb:14:30:da: b6:ed:6f:a3:2d:a1:12:ad:a2:d0:1b:57:08:13:a7:32:22:17: c1:b8:37:3e:f1:e7:ee:a3:ae:7a:83:c9:99:63:84:1e:ca:b1: 7e:b7:42:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZjkibb3gFvp7nsr34oEqTQcVHrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0 RkRCNEE1MjAeFw0yNjA0MTcxNTE5NDNaFw0yNjA0MTgxODE0NDNaMDMxMTAvBgNV BAMTKDJFNURGQUU5MzlGM0U1Qzk3MzdFQjI4NDIyMTU1ODdGQTMxMTc0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPYSkRScT6N/sl5zZcZXR9dF5i ri7oXT6vIVl44EHRuAhoOwhTw8TPi+G4e/PBCbposr9urV04NmcVMpY3/qw57VfY nU0ws0u0odECZOic14ovkcJQCyRn8hx9tdtu4KVXsD69ivr4QRR11iBJZM6sRJdt Vg6Zj4B6FeUeRjltTVdM/UFfipoL34nM1OhXiQe1CCVE8Luvml1kARfnsVd6TKYc xefaTKg3/s34c6XtOt36xSnwax6xXLRK3JwcWf3uYPUs4DUqPGmvYiUtP1zPDZbe 4y2InAC68cWqKq+VQPULCfT5ZlzZKWVyQ7PeolO3wbmUCXDmlqUGhCFjdYFpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULl366Tnz5clzfrKEIhVYf6MRdJMwHwYDVR0j BBgwFoAU1Z79k7AiwFboC9u1t1YrMk/bSlIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MzA4MDgyNjE0MjcyMi8wL0Q1OUVGRDkzQjAyMkMwNTZFODBCREJCNUI3NTYy QjMyNEZEQjRBNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0RkRCNEE1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODMwODA4MjYxNDI3MjIvMC9ENTlFRkQ5M0IwMjJD MDU2RTgwQkRCQjVCNzU2MkIzMjRGREI0QTUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJk156O5j8Yxb 8iRyZQxxIjGqaGRFx/rbD6ASPGDaETFP0aNR8h/yRhG4gRXa88eRP/ckFIil5Uq4 bpJDkchol6wsFj1mAvKnoLt9IlnCm+oWKj5hVZa4k2MuOt5qONfQwBiVZ2DCPfGj ztH3dXy74NlAzKHUo3hJHhyIRwfJjkRUoeSi6PMpLGSND7Vn76iXAAH9pgXVUwW9 cpankSlMnM0/OlLB5giIfLMq6ZLNzlms1qEjD5LrGmDBi6kUpsmOBRLLJ+7+QRg5 Uh4yQU6vXM+Tk1PrFDDatu1voy2hEq2i0BtXCBOnMiIXwbg3PvHn7qOueoPJmWOE HsqxfrdCpA== -----END CERTIFICATE-----Generated at Sat Apr 18 06:24:15 2026 by rpki-client