$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: IZy5SK4S4NIS+3e3thWfJhCjwEgdVp2Yn250BH4d618= Subject key identifier: 7F:3C:81:71:96:E9:18:0A:E3:55:4B:CD:9D:2A:B7:CA:9E:56:58:C3 Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 2CCFF1E96A694359FA075132EBA5904F3B1524B0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: 0C Signing time: Fri 17 Apr 2026 15:54:43 +0000 Manifest this update: Fri 17 Apr 2026 15:49:43 +0000 Manifest next update: Sat 18 Apr 2026 19:51:43 +0000 Files and hashes: 1: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: clzT1Qro7X2wBnuJJ9bt0vLLp+n2LVKsKoRSSCr0cUQ=) 2: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cf:f1:e9:6a:69:43:59:fa:07:51:32:eb:a5:90:4f:3b:15:24:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: Apr 17 15:49:43 2026 GMT Not After : Apr 18 19:51:43 2026 GMT Subject: CN=7F3C817196E9180AE3554BCD9D2AB7CA9E5658C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:91:2a:43:91:b9:c0:1b:92:ea:76:fd:c1: df:fa:8a:8b:96:d2:ec:6f:60:49:42:91:9d:2b:0f: d9:cb:a4:b5:b4:75:28:4e:4a:38:45:4b:67:68:ca: 57:96:47:71:d7:22:f1:9b:0e:22:34:cd:b1:5b:55: 6a:db:88:56:0a:2b:70:cb:44:e9:62:d2:04:bd:1e: ef:8c:17:c1:9d:74:7a:2e:99:aa:c8:fd:6b:10:a2: ec:d0:04:b4:d9:d9:2c:cb:52:2f:4e:13:8a:aa:2d: 76:89:8e:fd:28:91:f8:1b:e1:48:69:8f:e5:1f:76: 27:75:df:ac:69:73:0a:15:03:0c:91:01:25:45:ec: f6:6a:d4:49:08:33:13:7d:3b:bc:65:b7:33:70:cf: 7d:28:68:71:8b:2b:5f:71:d4:50:99:d7:cc:b8:ab: 61:7f:f2:3d:6d:d2:b2:6b:13:60:4b:40:04:34:3a: a8:53:11:1a:73:1f:76:a1:9e:9f:4e:7c:1e:06:cd: 3d:4d:73:d3:5b:e9:1f:06:c1:a4:f2:96:46:e1:e4: f6:45:09:ce:7a:0c:48:2d:b8:16:94:49:ee:dc:73: 92:72:b6:a6:9b:f0:14:64:65:4a:21:6f:42:92:78: da:63:03:5c:d2:1a:06:8a:06:ee:54:81:2e:bf:4a: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:81:71:96:E9:18:0A:E3:55:4B:CD:9D:2A:B7:CA:9E:56:58:C3 X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b7:4e:90:a8:7c:33:01:7f:77:c9:a1:1b:25:47:85:3a:2e: b7:8c:c5:2e:b0:b4:bb:85:b7:52:1e:6c:46:cf:8a:95:bc:5a: 48:3b:5b:2f:3d:40:45:3f:eb:49:ad:71:cc:c6:da:39:64:da: b5:2e:44:73:79:36:3d:88:1f:f0:3d:68:1d:a5:78:ef:70:24: bb:21:c8:7e:68:fa:a6:f2:de:d0:4f:30:d4:f5:4b:bc:b0:6a: 46:cd:2e:f4:56:7a:3e:a9:c8:21:91:44:c0:06:c0:9a:67:09: 1c:68:0a:bd:34:6a:ef:7c:33:61:4f:5a:bf:f5:91:e3:d9:fc: 35:c8:8e:ca:eb:95:f8:20:f1:d5:48:eb:6e:9f:4f:6c:c3:84: ab:41:b8:4a:d8:aa:06:bb:a8:ec:62:63:fd:ae:95:9a:00:d5: c0:19:c1:fb:70:65:0e:84:91:a6:1e:73:02:d5:a1:94:e8:70: 82:81:54:e1:9b:ed:25:79:14:10:94:06:fa:2b:e4:77:f1:4d: 2f:b4:c0:d9:c3:a5:30:6f:c1:eb:b5:ef:38:0b:c5:f7:8a:02: 36:9d:fa:87:b1:ea:be:0a:95:a1:04:dc:5e:6d:72:c8:e4:0d: 65:47:cd:2a:d6:a5:9a:ef:c5:01:a4:fe:77:98:dd:80:bf:37: c0:8b:26:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULM/x6WppQ1n6B1Ey66WQTzsVJLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjA0MTcxNTQ5NDNaFw0yNjA0MTgxOTUxNDNaMDMxMTAvBgNV BAMTKDdGM0M4MTcxOTZFOTE4MEFFMzU1NEJDRDlEMkFCN0NBOUU1NjU4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowJEqQ5G5wBuS6nb9wd/6iouW 0uxvYElCkZ0rD9nLpLW0dShOSjhFS2doyleWR3HXIvGbDiI0zbFbVWrbiFYKK3DL ROli0gS9Hu+MF8GddHoumarI/WsQouzQBLTZ2SzLUi9OE4qqLXaJjv0okfgb4Uhp j+Ufdid136xpcwoVAwyRASVF7PZq1EkIMxN9O7xltzNwz30oaHGLK19x1FCZ18y4 q2F/8j1t0rJrE2BLQAQ0OqhTERpzH3ahnp9OfB4GzT1Nc9Nb6R8GwaTylkbh5PZF Cc56DEgtuBaUSe7cc5Jytqab8BRkZUohb0KSeNpjA1zSGgaKBu5UgS6/SuoxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfzyBcZbpGArjVUvNnSq3yp5WWMMwHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrdOkKh8MwF/ d8mhGyVHhTout4zFLrC0u4W3Uh5sRs+KlbxaSDtbLz1ART/rSa1xzMbaOWTatS5E c3k2PYgf8D1oHaV473AkuyHIfmj6pvLe0E8w1PVLvLBqRs0u9FZ6PqnIIZFEwAbA mmcJHGgKvTRq73wzYU9av/WR49n8NciOyuuV+CDx1Ujrbp9PbMOEq0G4StiqBruo 7GJj/a6VmgDVwBnB+3BlDoSRph5zAtWhlOhwgoFU4ZvtJXkUEJQG+ivkd/FNL7TA 2cOlMG/B67XvOAvF94oCNp36h7HqvgqVoQTcXm1yyOQNZUfNKtalmu/FAaT+d5jd gL83wIsm+Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:20:20 2026 by rpki-client