$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft File: C074E80FFDB9B886B42838EA88032DC68025A5B3.mft (raw, json) Hash identifier: F6iCqSQineuyxg5+etf3xUrma+xfle5zghOCmq7IpB0= Subject key identifier: D2:DD:4E:E2:DF:86:F5:7B:6A:2B:FD:C8:7F:D2:5D:8D:FC:06:B1:0F Authority key identifier: C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 Certificate issuer: /CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Certificate serial: 3B5088EA73358DBDA3C4048C89E39E07D7C94059 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft Manifest number: 0A Signing time: Fri 17 Apr 2026 00:14:37 +0000 Manifest this update: Fri 17 Apr 2026 00:09:37 +0000 Manifest next update: Sat 18 Apr 2026 01:17:37 +0000 Files and hashes: 1: C074E80FFDB9B886B42838EA88032DC68025A5B3.crl (hash: tJgOzrg4gl3XI47osBK+aBtNlFfRQ6LBPiXz+kuC4c8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:50:88:ea:73:35:8d:bd:a3:c4:04:8c:89:e3:9e:07:d7:c9:40:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Validity Not Before: Apr 17 00:09:37 2026 GMT Not After : Apr 18 01:17:37 2026 GMT Subject: CN=D2DD4EE2DF86F57B6A2BFDC87FD25D8DFC06B10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:4e:a8:05:ee:a5:ff:8f:87:44:9f:1f:a2: f1:c2:63:65:c0:57:93:0b:93:93:aa:e5:56:54:fa: a7:df:5a:68:56:78:ef:6a:80:2b:36:4f:1c:a2:23: 98:25:ef:87:fd:07:ea:68:b0:a9:99:26:30:ed:74: 9b:b7:da:47:88:22:32:f4:2f:92:df:45:dd:e1:d3: bc:e8:de:47:c5:8c:d9:70:4f:4c:15:bb:0e:20:f6: 89:74:7b:ca:e6:72:f4:1d:a6:bb:69:c1:c9:ec:6b: 56:7b:56:89:28:b2:2f:81:3e:78:9a:00:fc:96:50: cb:9d:13:7e:e7:5d:51:de:7a:08:ac:a3:df:2b:d3: 0e:fa:71:a6:a9:32:9c:e6:ee:75:8e:55:8c:27:d0: c6:c2:ef:87:b7:b5:67:d1:91:ac:bb:0a:17:3f:67: 9d:ee:41:13:b2:73:db:84:ea:bf:88:94:5b:5c:ef: 72:96:b8:8a:61:fe:da:ed:7c:0a:c8:bc:c3:5a:2a: b9:97:04:9c:89:ae:d6:bb:2d:f2:35:3c:f1:04:de: 84:dd:0e:27:99:80:30:b4:89:92:3c:86:2d:3f:d4: 59:a3:92:64:16:07:74:91:8e:7d:52:6f:58:f1:85: b7:2a:ae:48:1a:64:14:d0:a5:14:28:8b:67:fb:52: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DD:4E:E2:DF:86:F5:7B:6A:2B:FD:C8:7F:D2:5D:8D:FC:06:B1:0F X509v3 Authority Key Identifier: keyid:C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:34:13:d3:e3:78:3e:45:8f:ac:7f:e9:a4:82:a1:7f:80:63: cf:44:92:28:0d:87:dc:25:2e:56:02:a9:94:dd:74:de:69:4f: 43:58:08:43:ae:12:e3:36:6e:16:bc:65:d0:ed:2f:70:e1:b3: da:01:06:bb:e6:bb:9a:9f:83:f5:ca:72:a3:93:d4:40:70:1f: df:1a:54:2f:87:d7:95:2a:48:19:f9:fb:73:90:bd:30:b4:0d: 65:91:c1:2d:eb:dc:86:82:51:02:ad:5f:cd:6c:69:e2:7f:cc: f1:c5:cd:30:56:ad:f9:03:3f:f4:2d:a0:90:e1:0c:96:7d:ec: c5:38:d6:e9:5d:24:fe:15:eb:23:08:32:eb:fd:d8:d1:e3:88: 7b:97:37:e4:e8:52:e5:22:4b:3d:76:58:43:4e:bd:50:1c:4c: 7a:a7:54:ac:b1:fd:7b:74:4a:ee:a5:30:62:ed:96:0e:43:16: 4d:ac:69:98:22:98:0b:d9:61:f5:12:fa:29:5e:49:5c:30:d8: 8c:14:c2:ba:a6:80:6b:2c:57:15:b1:8c:b1:93:d0:45:38:29: 8a:28:47:56:7a:56:06:4b:dd:3a:84:c0:33:11:db:f8:9e:e7: bc:86:c4:38:38:96:25:43:81:df:d6:5f:31:29:dc:50:af:d0: 54:06:05:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO1CI6nM1jb2jxASMieOeB9fJQFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4 MDI1QTVCMzAeFw0yNjA0MTcwMDA5MzdaFw0yNjA0MTgwMTE3MzdaMDMxMTAvBgNV BAMTKEQyREQ0RUUyREY4NkY1N0I2QTJCRkRDODdGRDI1RDhERkMwNkIxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnMk6oBe6l/4+HRJ8fovHCY2XA V5MLk5Oq5VZU+qffWmhWeO9qgCs2TxyiI5gl74f9B+posKmZJjDtdJu32keIIjL0 L5LfRd3h07zo3kfFjNlwT0wVuw4g9ol0e8rmcvQdprtpwcnsa1Z7Vokosi+BPnia APyWUMudE37nXVHeegiso98r0w76caapMpzm7nWOVYwn0MbC74e3tWfRkay7Chc/ Z53uQROyc9uE6r+IlFtc73KWuIph/trtfArIvMNaKrmXBJyJrta7LfI1PPEE3oTd DieZgDC0iZI8hi0/1FmjkmQWB3SRjn1Sb1jxhbcqrkgaZBTQpRQoi2f7Ui/5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0t1O4t+G9XtqK/3If9JdjfwGsQ8wHwYDVR0j BBgwFoAUwHToD/25uIa0KDjqiAMtxoAlpbMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTcwOTE4Ny8wL0MwNzRFODBGRkRCOUI4ODZCNDI4MzhFQTg4MDMy REM2ODAyNUE1QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4MDI1QTVCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU3MDkxODcvMC9DMDc0RTgwRkZEQjlC ODg2QjQyODM4RUE4ODAzMkRDNjgwMjVBNUIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTQT0+N4PkWP rH/ppIKhf4Bjz0SSKA2H3CUuVgKplN103mlPQ1gIQ64S4zZuFrxl0O0vcOGz2gEG u+a7mp+D9cpyo5PUQHAf3xpUL4fXlSpIGfn7c5C9MLQNZZHBLevchoJRAq1fzWxp 4n/M8cXNMFat+QM/9C2gkOEMln3sxTjW6V0k/hXrIwgy6/3Y0eOIe5c35OhS5SJL PXZYQ069UBxMeqdUrLH9e3RK7qUwYu2WDkMWTaxpmCKYC9lh9RL6KV5JXDDYjBTC uqaAayxXFbGMsZPQRTgpiihHVnpWBkvdOoTAMxHb+J7nvIbEODiWJUOB39ZfMSnc UK/QVAYFeg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:48 2026 by rpki-client