$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft File: 91C6B644DD6D84839ED120FBC00984D60495C8C4.mft (raw, json) Hash identifier: GW5/l4wUz4MsSS3QC9AfKM9vp8U78UHkam56DYnwtCs= Subject key identifier: 7A:D2:1F:AE:E8:30:49:4E:BD:BB:92:89:F5:9C:12:D4:DC:40:4D:22 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 3D08C19CDC5276289AC84577937EE57377EEA345 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft Manifest number: 09 Signing time: Fri 17 Apr 2026 19:09:48 +0000 Manifest this update: Fri 17 Apr 2026 19:04:48 +0000 Manifest next update: Sat 18 Apr 2026 21:35:48 +0000 Files and hashes: 1: 3131342e36362e302e302f31392d3139203d3e20313336313838.roa (hash: P8qLBPMnoAI1K0C1HPD2wJZI0UZcqPIHED6vslCCU3s=) 2: 3131362e3235352e3132382e302f31372d3137203d3e2034383337.roa (hash: OIQNHYoSLKIBpe7rvo4tbhbbjhiqeDEZ0gkKtToT+JM=) 3: 3131342e36362e302e302f31382d3138203d3e20313336313838.roa (hash: Yb8gU6u81C04/TNC3HgfUU3F68fZCxHkkZH6KDU/qSY=) 4: 3131342e36362e33322e302f31392d3139203d3e20313336313838.roa (hash: X8tfx6VvzuOMYA/kUsa6wy/hmJbSO3jUFUy5DPO0MCs=) 5: 91C6B644DD6D84839ED120FBC00984D60495C8C4.crl (hash: Fbd579JyIJZUXOH0aKf1M1kmrJn6f0fdipnb3Ekf3eY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:08:c1:9c:dc:52:76:28:9a:c8:45:77:93:7e:e5:73:77:ee:a3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: Apr 17 19:04:48 2026 GMT Not After : Apr 18 21:35:48 2026 GMT Subject: CN=7AD21FAEE830494EBDBB9289F59C12D4DC404D22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:26:cf:01:c1:ab:05:2d:89:20:8b:fe:65: 01:90:60:f2:00:1c:61:91:8a:9a:2a:5a:2c:16:cc: 6e:c1:77:b3:e2:5d:f7:fb:85:c0:4e:ec:c6:a9:26: 91:bd:c7:77:c9:21:f5:12:e8:df:f1:4c:f5:7a:a1: 1a:3a:c2:f4:3f:a4:62:96:ca:dd:d1:46:68:a3:46: d7:59:f1:6b:02:1b:05:9a:b8:e7:2a:bf:7f:c7:3d: 3f:84:da:78:b7:e4:71:94:ca:dc:92:77:b9:69:b8: 1a:d3:f5:35:de:99:3d:3e:53:38:9a:98:67:6f:1d: f0:42:e5:41:11:49:56:89:97:41:1c:c9:c5:b5:7a: 3a:59:40:dd:26:6c:47:56:31:f4:c7:04:66:ec:50: 4b:df:e4:f8:06:a9:ab:d7:d1:ac:ec:71:14:18:a6: ed:b8:e1:b0:f0:0f:58:e3:f0:8a:7e:5c:c5:dc:4d: 68:80:8f:d5:be:14:c6:60:94:b7:27:a7:c8:a1:46: 2a:c6:87:86:d7:6e:2b:de:c6:bb:3c:77:a7:4c:b7: d0:af:21:71:ea:6e:d3:7f:b6:19:7b:77:ef:13:8f: 8a:e2:2e:dc:fb:c0:a4:2f:70:bb:e8:25:2a:1e:75: e9:9e:0d:1f:8e:f4:88:22:a9:f4:62:50:84:39:6f: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D2:1F:AE:E8:30:49:4E:BD:BB:92:89:F5:9C:12:D4:DC:40:4D:22 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b5:f4:83:6d:91:6e:d0:1c:98:da:36:b3:aa:f9:88:ba:0f: 04:ae:47:3c:b8:10:03:58:4a:57:aa:41:45:9e:a1:19:ec:7e: ea:d3:33:f4:39:a2:16:fa:e1:22:b5:4b:42:69:24:d1:c2:61: 37:c4:fe:04:26:5c:60:aa:3e:aa:ca:bb:b4:9b:1b:b5:66:b8: 9b:a3:b4:7a:21:f6:6c:9c:4e:96:3e:05:85:51:86:e3:f4:cb: a3:5a:a9:4d:dd:10:6e:4b:38:df:36:b4:62:58:e0:50:21:db: ab:be:f0:44:84:d1:e3:35:75:94:8c:8f:1c:b6:a0:8b:4e:ec: ab:ec:a5:a1:2d:72:e5:ad:39:be:fe:d0:f4:44:9e:1b:e0:8e: 85:38:58:76:c8:80:fa:b0:f0:d2:a0:ab:f7:57:d1:1e:f4:83: bc:77:92:53:bf:93:eb:c5:72:6a:fe:d8:ec:a4:d6:11:31:17: cb:ee:ea:c6:07:89:0d:8d:e8:49:64:4a:b3:ab:96:44:4e:9b: ce:60:9b:b6:26:a5:42:d0:80:ad:ca:17:55:0b:4c:79:c6:a9: 53:8c:89:0f:a3:33:b5:18:b5:45:ed:62:a8:f4:70:b4:9d:15: ae:55:49:f0:86:ed:a5:05:70:9f:00:95:1c:f5:92:2e:c5:1e: f5:0f:27:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPQjBnNxSdiiayEV3k37lc3fuo0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA0MTcxOTA0NDhaFw0yNjA0MTgyMTM1NDhaMDMxMTAvBgNV BAMTKDdBRDIxRkFFRTgzMDQ5NEVCREJCOTI4OUY1OUMxMkQ0REM0MDREMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgybPAcGrBS2JIIv+ZQGQYPIA HGGRipoqWiwWzG7Bd7PiXff7hcBO7MapJpG9x3fJIfUS6N/xTPV6oRo6wvQ/pGKW yt3RRmijRtdZ8WsCGwWauOcqv3/HPT+E2ni35HGUytySd7lpuBrT9TXemT0+Uzia mGdvHfBC5UERSVaJl0EcycW1ejpZQN0mbEdWMfTHBGbsUEvf5PgGqavX0azscRQY pu244bDwD1jj8Ip+XMXcTWiAj9W+FMZglLcnp8ihRirGh4bXbivexrs8d6dMt9Cv IXHqbtN/thl7d+8Tj4riLtz7wKQvcLvoJSoedemeDR+O9IgiqfRiUIQ5b2SvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUetIfrugwSU69u5KJ9ZwS1NxATSIwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC85MUM2QjY0NERENkQ4 NDgzOUVEMTIwRkJDMDA5ODRENjA0OTVDOEM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrX0g22RbtAc mNo2s6r5iLoPBK5HPLgQA1hKV6pBRZ6hGex+6tMz9DmiFvrhIrVLQmkk0cJhN8T+ BCZcYKo+qsq7tJsbtWa4m6O0eiH2bJxOlj4FhVGG4/TLo1qpTd0Qbks43za0Yljg UCHbq77wRITR4zV1lIyPHLagi07sq+yloS1y5a05vv7Q9ESeG+COhThYdsiA+rDw 0qCr91fRHvSDvHeSU7+T68Vyav7Y7KTWETEXy+7qxgeJDY3oSWRKs6uWRE6bzmCb tialQtCArcoXVQtMecapU4yJD6MztRi1Re1iqPRwtJ0VrlVJ8IbtpQVwnwCVHPWS LsUe9Q8nmg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:26:27 2026 by rpki-client