$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: XIAj6kG/jGNXNlAdE6mA9MVbTUYcWCukYL0m5eBfhU4= Subject key identifier: B2:A5:57:12:42:E4:C4:18:40:34:C1:D9:65:24:4E:8D:10:34:38:76 Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 48890A9495EAAEC1A83FEA5730A6D4EFEF9C0D77 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: 0C Signing time: Fri 17 Apr 2026 14:04:43 +0000 Manifest this update: Fri 17 Apr 2026 13:59:43 +0000 Manifest next update: Sat 18 Apr 2026 14:09:43 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: jpy26025pHBKgu7pa0KoDeMb3im1fm/qXLw/rM68hS4=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:89:0a:94:95:ea:ae:c1:a8:3f:ea:57:30:a6:d4:ef:ef:9c:0d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Apr 17 13:59:43 2026 GMT Not After : Apr 18 14:09:43 2026 GMT Subject: CN=B2A5571242E4C4184034C1D965244E8D10343876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:e2:7c:32:94:13:20:d7:76:58:e3:a9:c5: 6b:b5:e2:0d:8e:28:bc:7d:27:7f:15:1e:f1:59:0c: 40:66:40:3a:7f:06:c0:32:5c:94:d3:c5:68:37:d0: 41:fd:55:41:d6:dc:9e:16:71:f4:5f:19:ec:b0:4d: 40:a6:27:da:37:15:f1:fa:0e:82:06:28:81:b8:e3: ec:35:eb:fa:76:d8:f6:b9:1d:9d:81:a3:f7:d3:f7: 7f:c2:25:75:72:04:13:b2:fd:d4:e8:dd:72:8a:67: 7d:83:8e:6b:82:22:f1:a9:ec:4c:05:c2:4f:b0:16: e4:45:65:3c:31:f9:b9:fe:07:a8:1b:53:34:14:d0: 99:42:35:01:0f:a8:96:45:a0:5a:c1:df:75:1b:2a: df:1f:41:8c:f5:4b:bf:5a:22:07:93:b0:d8:63:6f: 42:0c:a3:51:d1:2a:13:93:e8:1e:d1:4f:0b:3c:db: 34:da:17:cb:fa:f4:58:69:a2:a9:00:61:a7:ee:48: 81:0e:28:cd:85:56:38:09:64:b1:ed:0f:c1:b1:eb: 16:de:d5:a4:a1:0b:3e:f5:3a:fa:80:cb:dd:3e:60: b6:d7:c6:8a:ce:24:93:0a:50:7f:e0:21:bc:c5:5c: ea:4f:8c:de:65:93:3b:d7:a8:7a:02:a9:ac:0d:22: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A5:57:12:42:E4:C4:18:40:34:C1:D9:65:24:4E:8D:10:34:38:76 X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:6d:1c:af:6c:e3:91:5e:5d:6e:b7:5d:38:c4:86:da:d3:8e: 17:f5:14:0b:c1:18:7b:f1:6e:9e:87:8f:c9:da:31:64:11:56: f6:1c:4f:89:5f:a8:42:4f:b1:cd:06:85:35:a7:9a:83:85:22: d6:f2:27:32:c8:b5:89:0d:c8:c2:0c:25:98:2f:7c:24:03:c1: 02:0c:1a:2a:fb:d1:bc:98:79:b0:4a:ef:b2:fb:40:26:10:a4: 1c:b8:d8:ec:52:99:21:a1:0d:ca:c7:75:e2:0e:ee:9d:40:ab: ca:d6:28:a6:23:5b:77:ac:20:97:db:79:a8:b1:6e:d7:a6:e0: 27:ae:2a:94:48:bf:78:a2:1d:50:3a:db:4d:82:92:bb:d0:57: 5c:21:87:24:01:ba:01:17:f5:69:ed:78:4f:96:33:e3:4d:b2: 7f:41:97:00:31:c3:e0:c0:fa:86:71:f5:27:14:52:e4:35:12: 9f:e4:a7:f5:62:f5:69:0d:93:b5:8c:1d:95:43:8e:a8:e6:63: 9d:43:da:7b:2e:de:d9:4d:33:bb:f0:05:4e:4a:67:2b:fb:1e: 13:64:5c:86:0d:11:a8:6c:7d:28:e8:b6:ad:81:5a:76:c0:34: bd:c9:c5:34:c8:4f:0a:97:2a:3d:3e:3c:9e:c3:ac:54:a2:a8: ce:1e:11:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSIkKlJXqrsGoP+pXMKbU7++cDXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA0MTcxMzU5NDNaFw0yNjA0MTgxNDA5NDNaMDMxMTAvBgNV BAMTKEIyQTU1NzEyNDJFNEM0MTg0MDM0QzFEOTY1MjQ0RThEMTAzNDM4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPeJ8MpQTINd2WOOpxWu14g2O KLx9J38VHvFZDEBmQDp/BsAyXJTTxWg30EH9VUHW3J4WcfRfGeywTUCmJ9o3FfH6 DoIGKIG44+w16/p22Pa5HZ2Bo/fT93/CJXVyBBOy/dTo3XKKZ32DjmuCIvGp7EwF wk+wFuRFZTwx+bn+B6gbUzQU0JlCNQEPqJZFoFrB33UbKt8fQYz1S79aIgeTsNhj b0IMo1HRKhOT6B7RTws82zTaF8v69FhpoqkAYafuSIEOKM2FVjgJZLHtD8Gx6xbe 1aShCz71OvqAy90+YLbXxorOJJMKUH/gIbzFXOpPjN5lkzvXqHoCqawNIoF3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsqVXEkLkxBhANMHZZSROjRA0OHYwHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuW0cr2zjkV5d brddOMSG2tOOF/UUC8EYe/FunoePydoxZBFW9hxPiV+oQk+xzQaFNaeag4Ui1vIn Msi1iQ3IwgwlmC98JAPBAgwaKvvRvJh5sErvsvtAJhCkHLjY7FKZIaENysd14g7u nUCrytYopiNbd6wgl9t5qLFu16bgJ64qlEi/eKIdUDrbTYKSu9BXXCGHJAG6ARf1 ae14T5Yz402yf0GXADHD4MD6hnH1JxRS5DUSn+Sn9WL1aQ2TtYwdlUOOqOZjnUPa ey7e2U0zu/AFTkpnK/seE2Rchg0RqGx9KOi2rYFadsA0vcnFNMhPCpcqPT48nsOs VKKozh4RZw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:28:13 2026 by rpki-client