$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: o7qC2O0VpI4e21+6CzR3i1B89P1+fEcuE0g6JtWgbJU= Subject key identifier: 79:76:04:71:A6:35:61:B1:8A:A6:D9:82:33:E4:DB:4C:93:45:01:7F Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 5DFC4612AE821AE26F83D18368F9FF2A5FDC3EAC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: 0C Signing time: Fri 17 Apr 2026 15:59:43 +0000 Manifest this update: Fri 17 Apr 2026 15:54:43 +0000 Manifest next update: Sat 18 Apr 2026 18:06:43 +0000 Files and hashes: 1: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: dCsKEA5fy7jTHiQsHxblOIMvzLdVyEc2ZcBlgHhmuGY=) 2: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 3: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fc:46:12:ae:82:1a:e2:6f:83:d1:83:68:f9:ff:2a:5f:dc:3e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Apr 17 15:54:43 2026 GMT Not After : Apr 18 18:06:43 2026 GMT Subject: CN=79760471A63561B18AA6D98233E4DB4C9345017F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:8c:46:a9:e7:4f:ef:2a:c7:c9:4b:34:2a: 9b:c7:be:b6:83:e1:0e:e7:52:06:b7:b8:44:e5:0a: f3:d5:91:72:fe:e8:8c:5e:d3:a1:d7:cc:59:06:66: e8:d7:58:05:60:99:7d:95:af:32:98:db:41:fd:20: cb:e3:45:10:80:c9:b2:cf:bf:66:ef:4e:4d:f8:f8: 88:bb:44:c7:54:30:67:28:91:5f:4d:cd:9c:3f:18: f0:2e:34:c2:df:91:87:9b:b7:74:c7:cf:90:fb:1e: 70:b4:cc:cb:1f:cf:5c:8c:60:84:1d:32:b7:31:70: 39:e8:7a:fc:84:cf:b8:a5:0b:9c:b9:d8:30:66:6b: 9b:a7:e6:23:0c:4d:ed:3b:eb:c8:46:91:6d:93:21: 75:0b:80:b2:3f:8f:8b:4a:e4:cf:0d:69:09:5e:c5: 24:c3:2d:83:a4:ff:a2:2b:12:84:22:58:23:32:bf: 5d:7d:60:b0:06:41:74:6e:12:e6:5d:29:b7:38:4d: be:dd:3e:5b:20:92:6b:d8:de:10:57:8d:2d:8d:20: dc:bd:f1:5d:25:f2:48:47:3e:16:e8:65:e5:7d:16: 8e:db:ce:0d:71:68:0f:ab:29:c7:0d:a4:78:88:f6: a1:31:8d:7e:33:a2:04:4a:26:b0:4a:7c:24:c3:6c: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:76:04:71:A6:35:61:B1:8A:A6:D9:82:33:E4:DB:4C:93:45:01:7F X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:77:69:72:66:27:c8:0a:2a:04:82:76:a2:0b:44:6c:6d:f5: 1c:6c:db:eb:16:19:df:92:b4:48:da:34:5f:85:2e:e3:6c:22: c1:fe:35:6c:39:43:bb:cc:29:db:72:52:dc:b6:c6:f1:4e:c1: 9b:26:93:cf:48:b2:31:01:6f:c1:d6:67:c4:14:c2:00:62:7c: 60:8e:f5:30:d6:21:9e:b3:42:24:28:7d:f8:17:a9:63:ad:e2: 18:ed:1f:02:23:95:c5:db:b2:59:3d:0f:e5:44:26:a6:e9:8a: a7:5e:6f:27:d4:e8:56:cb:25:05:30:e6:6b:9e:85:ef:e8:8d: 81:f2:da:63:5f:93:3c:24:ca:ba:78:5e:55:08:d7:c5:77:cf: c8:42:46:91:d4:8b:be:d4:23:a0:1c:bc:8f:d1:8e:b3:58:06: 99:f2:53:00:eb:f6:2c:b3:22:6c:f9:63:a4:7e:1f:da:9d:fb: c9:89:51:96:9b:c0:52:c3:8b:e6:d5:91:0f:8d:59:ef:56:59: 4a:f0:04:a6:d2:d5:cd:39:16:3c:b1:57:eb:1f:40:26:65:60: 47:c6:f0:e4:91:2a:ed:31:3b:da:89:a9:e8:f0:aa:a9:67:32: 61:b9:31:1c:a5:b7:7a:8e:91:33:c1:a2:64:f7:0c:40:63:7f: e9:9f:f3:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXfxGEq6CGuJvg9GDaPn/Kl/cPqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA0MTcxNTU0NDNaFw0yNjA0MTgxODA2NDNaMDMxMTAvBgNV BAMTKDc5NzYwNDcxQTYzNTYxQjE4QUE2RDk4MjMzRTREQjRDOTM0NTAxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLwYxGqedP7yrHyUs0KpvHvraD 4Q7nUga3uETlCvPVkXL+6Ixe06HXzFkGZujXWAVgmX2VrzKY20H9IMvjRRCAybLP v2bvTk34+Ii7RMdUMGcokV9NzZw/GPAuNMLfkYebt3THz5D7HnC0zMsfz1yMYIQd MrcxcDnoevyEz7ilC5y52DBma5un5iMMTe0768hGkW2TIXULgLI/j4tK5M8NaQle xSTDLYOk/6IrEoQiWCMyv119YLAGQXRuEuZdKbc4Tb7dPlsgkmvY3hBXjS2NINy9 8V0l8khHPhboZeV9Fo7bzg1xaA+rKccNpHiI9qExjX4zogRKJrBKfCTDbMLzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeXYEcaY1YbGKptmCM+TbTJNFAX8wHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkndpcmYnyAoq BIJ2ogtEbG31HGzb6xYZ35K0SNo0X4Uu42wiwf41bDlDu8wp23JS3LbG8U7BmyaT z0iyMQFvwdZnxBTCAGJ8YI71MNYhnrNCJCh9+BepY63iGO0fAiOVxduyWT0P5UQm pumKp15vJ9ToVsslBTDma56F7+iNgfLaY1+TPCTKunheVQjXxXfPyEJGkdSLvtQj oBy8j9GOs1gGmfJTAOv2LLMibPljpH4f2p37yYlRlpvAUsOL5tWRD41Z71ZZSvAE ptLVzTkWPLFX6x9AJmVgR8bw5JEq7TE72omp6PCqqWcyYbkxHKW3eo6RM8GiZPcM QGN/6Z/zMA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:24:35 2026 by rpki-client