$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft File: 5253565A27C06C800009631402F5A6EE85C46456.mft (raw, json) Hash identifier: mGJ1qneLnJNAw8WUnPSPc0AYhvfaY1KBOEBKQH7Iqg4= Subject key identifier: 8C:38:D8:07:17:47:4E:56:80:73:00:B1:AF:5C:6E:47:9E:A7:7F:E1 Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456 Certificate serial: 01CF39F44F6C38C242F07225C828BC7D86057209 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft Manifest number: 0B Signing time: Fri 17 Apr 2026 17:49:46 +0000 Manifest this update: Fri 17 Apr 2026 17:44:46 +0000 Manifest next update: Sat 18 Apr 2026 18:12:46 +0000 Files and hashes: 1: 5253565A27C06C800009631402F5A6EE85C46456.crl (hash: 7ZFQyuT/kpOa36FE4hzGcGWfTQex7JeOFFirDkmFwuw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cf:39:f4:4f:6c:38:c2:42:f0:72:25:c8:28:bc:7d:86:05:72:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456 Validity Not Before: Apr 17 17:44:46 2026 GMT Not After : Apr 18 18:12:46 2026 GMT Subject: CN=8C38D80717474E56807300B1AF5C6E479EA77FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:64:7b:c7:aa:aa:e8:56:08:07:98:8c:16: b2:23:2e:ef:01:22:fd:be:de:bf:05:4f:bb:b7:48: 76:e7:d5:8c:cb:47:c3:b7:07:8d:b3:20:10:a3:0c: 9c:cc:27:50:0c:71:ab:bf:d9:fe:5a:07:bb:53:b1: b6:33:c9:20:3d:3b:e4:33:31:9c:25:ed:67:24:5b: 34:b2:b6:2b:0f:27:06:79:06:96:50:3a:81:16:50: f7:87:78:5c:7b:6d:b7:e9:da:30:46:77:01:a7:e7: c7:ea:ca:8c:46:97:9e:fe:cb:ac:b6:89:29:d0:9a: c2:70:85:6a:75:0f:7c:2f:c4:06:88:00:1a:d5:63: 1d:0b:54:f2:2b:16:69:ee:83:b2:57:c1:5f:9e:25: 0e:c3:1d:07:0e:76:6a:9e:08:84:ba:47:0d:35:68: ba:ab:ec:9c:0c:6d:a9:f7:78:c4:06:1e:83:d9:77: bf:47:ee:76:79:9b:00:ff:45:92:7a:b6:36:9b:e5: e0:90:4e:9d:6b:b1:49:b6:70:09:c7:c5:06:e1:1c: 3b:2f:17:a6:fc:8b:0a:b1:3f:8e:1f:a0:89:37:6b: 99:89:68:00:00:7a:9a:b6:66:bf:d0:2f:98:34:23: 14:09:f1:eb:76:95:d2:0a:4e:bf:b0:b6:d4:34:91: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:38:D8:07:17:47:4E:56:80:73:00:B1:AF:5C:6E:47:9E:A7:7F:E1 X509v3 Authority Key Identifier: keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:da:83:ee:06:95:d4:84:38:72:dc:e4:09:7f:e9:11:6c:47: d5:89:7c:30:db:be:1e:75:24:99:17:26:2a:27:ec:cd:e4:22: d4:e2:b0:db:4b:40:77:61:fe:a2:6e:ae:ab:e0:ea:bd:68:66: ea:56:6e:25:33:57:82:24:a9:47:f8:d2:26:06:cd:f7:ac:a8: 58:f9:96:df:95:cb:3a:6e:af:1e:bd:15:4d:72:63:63:e2:25: bd:e9:df:60:aa:7a:80:5d:3b:dc:b3:f0:ac:12:65:bc:16:90: 52:af:af:eb:1f:1b:40:19:38:30:49:23:15:9b:cf:b9:a4:e4: 82:8f:37:de:6e:2a:93:e9:6f:54:11:dc:a4:44:83:ff:89:43: 0d:1d:0d:33:b3:cb:dd:23:00:10:d7:c5:32:ec:50:d5:3e:23: 07:bc:af:c7:9c:90:d3:62:af:a5:5c:14:d5:52:e3:bf:86:9c: ea:e0:73:3c:bd:26:3f:98:07:b7:3c:ba:bf:62:9d:76:3b:1a: 18:41:72:e4:c9:3d:bd:c3:18:9c:15:e7:e5:1a:01:16:4d:09: df:81:88:b6:72:87:cf:af:75:a2:8b:ad:81:38:df:74:9b:54: 0c:cf:48:9b:5c:69:f1:29:58:f4:38:17:90:d2:25:ed:b3:c6: 12:77:39:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAc859E9sOMJC8HIlyCi8fYYFcgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4 NUM0NjQ1NjAeFw0yNjA0MTcxNzQ0NDZaFw0yNjA0MTgxODEyNDZaMDMxMTAvBgNV BAMTKDhDMzhEODA3MTc0NzRFNTY4MDczMDBCMUFGNUM2RTQ3OUVBNzdGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IWR7x6qq6FYIB5iMFrIjLu8B Iv2+3r8FT7u3SHbn1YzLR8O3B42zIBCjDJzMJ1AMcau/2f5aB7tTsbYzySA9O+Qz MZwl7WckWzSytisPJwZ5BpZQOoEWUPeHeFx7bbfp2jBGdwGn58fqyoxGl57+y6y2 iSnQmsJwhWp1D3wvxAaIABrVYx0LVPIrFmnug7JXwV+eJQ7DHQcOdmqeCIS6Rw01 aLqr7JwMban3eMQGHoPZd79H7nZ5mwD/RZJ6tjab5eCQTp1rsUm2cAnHxQbhHDsv F6b8iwqxP44foIk3a5mJaAAAepq2Zr/QL5g0IxQJ8et2ldIKTr+wttQ0kT53AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjDjYBxdHTlaAcwCxr1xuR56nf+EwHwYDVR0j BBgwFoAUUlNWWifAbIAACWMUAvWm7oXEZFYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTY0MzY1MS8wLzUyNTM1NjVBMjdDMDZDODAwMDA5NjMxNDAyRjVB NkVFODVDNDY0NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4NUM0NjQ1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU2NDM2NTEvMC81MjUzNTY1QTI3QzA2 QzgwMDAwOTYzMTQwMkY1QTZFRTg1QzQ2NDU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdqD7gaV1IQ4 ctzkCX/pEWxH1Yl8MNu+HnUkmRcmKifszeQi1OKw20tAd2H+om6uq+DqvWhm6lZu JTNXgiSpR/jSJgbN96yoWPmW35XLOm6vHr0VTXJjY+IlvenfYKp6gF073LPwrBJl vBaQUq+v6x8bQBk4MEkjFZvPuaTkgo833m4qk+lvVBHcpESD/4lDDR0NM7PL3SMA ENfFMuxQ1T4jB7yvx5yQ02KvpVwU1VLjv4ac6uBzPL0mP5gHtzy6v2KddjsaGEFy 5Mk9vcMYnBXn5RoBFk0J34GItnKHz691ooutgTjfdJtUDM9Im1xp8SlY9DgXkNIl 7bPGEnc57w== -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:16 2026 by rpki-client