$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft File: 1332FF90625961F264C4C1697510C8D39E9865D7.mft (raw, json) Hash identifier: hJDXsGow5gxgYeHdra2aCk6pU0SxN587v0XJlHMl7hs= Subject key identifier: 43:CB:59:94:A5:B7:B8:83:C2:E4:9C:6A:C4:BF:4D:3C:05:1D:AA:7F Authority key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 Certificate issuer: /CN=1332FF90625961F264C4C1697510C8D39E9865D7 Certificate serial: 6616EA3B0CCE3D78ED422BD27D3937467717C87D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft Manifest number: 0B Signing time: Fri 17 Apr 2026 04:39:39 +0000 Manifest this update: Fri 17 Apr 2026 04:34:39 +0000 Manifest next update: Sat 18 Apr 2026 06:13:39 +0000 Files and hashes: 1: 1332FF90625961F264C4C1697510C8D39E9865D7.crl (hash: NDOf7z3CTjNcrKsXxYoOWPxMlXSm+6JuVl6M516LU3I=) 2: 3130332e3132322e34382e302f32322d3232203d3e20313337373838.roa (hash: SbHyx5JcXCPgWqbXvh1lU44U3Nytrtx2FQt2UAWIA9Q=) 3: 3130332e3131372e3232302e302f32322d3232203d3e20313337373838.roa (hash: +BUcGZOQFiD6PT+iLY28PJeBHvjqy0X2J6YfTJqs3Lc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 06:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:16:ea:3b:0c:ce:3d:78:ed:42:2b:d2:7d:39:37:46:77:17:c8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1332FF90625961F264C4C1697510C8D39E9865D7 Validity Not Before: Apr 17 04:34:39 2026 GMT Not After : Apr 18 06:13:39 2026 GMT Subject: CN=43CB5994A5B7B883C2E49C6AC4BF4D3C051DAA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:45:cc:bc:28:a4:60:1c:a8:e2:07:f6:8c: e1:2c:ae:05:83:df:69:52:28:60:be:d6:c2:13:57: 50:c9:b9:1d:5b:e2:89:e5:f2:93:32:44:2d:c4:1f: 17:ac:53:7d:5e:ce:8d:50:a0:c5:e7:f9:8a:d4:ae: 9b:0a:30:31:87:02:a4:e1:a3:73:46:ea:1a:db:22: eb:5d:4d:f5:9b:61:c7:65:5d:1c:99:85:cb:7e:73: 2f:bb:32:a0:a4:95:90:9b:41:f7:44:63:52:b6:ff: 06:4b:c9:ad:e5:60:07:0d:67:ab:91:e3:a5:dd:10: 02:01:92:76:6f:96:3c:6e:1c:8d:58:56:bc:21:5e: c6:47:d8:a9:5c:57:46:f1:08:b3:a1:8d:91:f5:04: 3b:27:f8:71:e9:99:04:57:cd:10:cd:b0:41:ae:9a: 6f:06:61:37:d1:4b:f4:68:c9:5f:61:52:c3:4e:ea: a7:cc:e6:ca:42:fe:47:51:74:77:8f:9c:cc:0e:69: c9:fc:be:68:6b:a9:87:40:81:5c:3c:eb:d7:8e:d6: 5a:bd:68:1d:ba:df:32:07:55:5a:37:7f:68:c9:02: 0f:a4:b9:1f:36:d8:5f:7b:e0:9f:a3:f2:8b:87:ea: 49:c0:d6:37:bc:a1:8b:fa:b3:aa:c0:a3:f6:57:c5: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:59:94:A5:B7:B8:83:C2:E4:9C:6A:C4:BF:4D:3C:05:1D:AA:7F X509v3 Authority Key Identifier: keyid:13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:be:62:73:e9:bb:0b:c5:d7:77:58:2b:e4:84:5c:56:03:d9: be:98:e7:79:d6:7a:25:d0:d5:9f:c0:66:b9:02:82:18:73:a2: aa:72:70:14:14:aa:b7:8a:bb:ab:53:a2:f6:93:92:b2:b2:1d: d8:08:bf:16:5b:d7:d6:e6:23:c4:46:f3:40:26:f7:41:0b:9c: bd:86:c1:47:95:7b:45:41:e1:0e:2e:fd:2f:e8:47:b9:ad:2c: 19:24:77:fd:8b:b3:83:45:61:3e:0c:36:c5:b4:46:b9:0b:26: 5d:b0:d9:cb:28:f9:fe:f9:cc:f0:44:58:ec:82:3b:15:f1:5e: 01:96:ba:ce:18:13:28:05:38:5d:6c:37:66:a6:f4:cd:46:e4: b5:90:1d:da:2c:25:f8:a0:ef:e2:49:c0:d1:63:55:24:f3:4a: fe:31:ad:9b:f6:bb:69:c0:21:5e:28:97:ca:2d:e7:23:03:d7: 2d:0f:aa:3d:59:2b:6b:61:a8:ae:a3:23:fb:d1:9a:89:50:3b: 35:c4:2d:de:4b:05:c3:8f:cb:e1:5f:58:ce:cb:14:69:a8:fd: f2:11:33:f0:f5:55:e4:30:c9:af:c8:03:42:fd:58:4a:6a:1c: c8:96:2d:85:de:da:e3:26:d3:25:df:df:bc:36:f1:25:7d:6d: f2:c6:53:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZhbqOwzOPXjtQivSfTk3RncXyH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5 RTk4NjVENzAeFw0yNjA0MTcwNDM0MzlaFw0yNjA0MTgwNjEzMzlaMDMxMTAvBgNV BAMTKDQzQ0I1OTk0QTVCN0I4ODNDMkU0OUM2QUM0QkY0RDNDMDUxREFBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHkXMvCikYByo4gf2jOEsrgWD 32lSKGC+1sITV1DJuR1b4onl8pMyRC3EHxesU31ezo1QoMXn+YrUrpsKMDGHAqTh o3NG6hrbIutdTfWbYcdlXRyZhct+cy+7MqCklZCbQfdEY1K2/wZLya3lYAcNZ6uR 46XdEAIBknZvljxuHI1YVrwhXsZH2KlcV0bxCLOhjZH1BDsn+HHpmQRXzRDNsEGu mm8GYTfRS/RoyV9hUsNO6qfM5spC/kdRdHePnMwOacn8vmhrqYdAgVw869eO1lq9 aB263zIHVVo3f2jJAg+kuR822F974J+j8ouH6knA1je8oYv6s6rAo/ZXxbcpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ8tZlKW3uIPC5JxqxL9NPAUdqn8wHwYDVR0j BBgwFoAUEzL/kGJZYfJkxMFpdRDI056YZdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDkxMzU2MzUwMTI2NDg5OS8wLzEzMzJGRjkwNjI1OTYxRjI2NEM0QzE2OTc1MTBD OEQzOUU5ODY1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5RTk4NjVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ5MTM1NjM1MDEyNjQ4OTkvMC8xMzMyRkY5MDYyNTk2 MUYyNjRDNEMxNjk3NTEwQzhEMzlFOTg2NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHb5ic+m7C8XX d1gr5IRcVgPZvpjnedZ6JdDVn8BmuQKCGHOiqnJwFBSqt4q7q1Oi9pOSsrId2Ai/ FlvX1uYjxEbzQCb3QQucvYbBR5V7RUHhDi79L+hHua0sGSR3/Yuzg0VhPgw2xbRG uQsmXbDZyyj5/vnM8ERY7II7FfFeAZa6zhgTKAU4XWw3Zqb0zUbktZAd2iwl+KDv 4knA0WNVJPNK/jGtm/a7acAhXiiXyi3nIwPXLQ+qPVkra2GorqMj+9GaiVA7NcQt 3ksFw4/L4V9YzssUaaj98hEz8PVV5DDJr8gDQv1YSmocyJYthd7a4ybTJd/fvDbx JX1t8sZTVw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:25:09 2026 by rpki-client