$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft File: 5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft (raw, json) Hash identifier: seV+QU/IIUE2PzFZjXFEnXMARMwjhkZt1Ya13c+BLjY= Subject key identifier: D1:CF:58:A7:9E:FE:36:87:D2:4C:DF:C2:2B:EB:19:0E:5F:6F:FA:15 Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Certificate serial: 7E2EBB2BAF16CE2A1B4164D1438D3B7A5CC9ABB0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 11:44:43 +0000 Manifest this update: Fri 17 Apr 2026 11:39:43 +0000 Manifest next update: Sat 18 Apr 2026 13:06:43 +0000 Files and hashes: 1: 5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl (hash: qOguedKPZNWoE1oHJs/6dGgBUwgR0hNyIrb2xaoImRY=) 2: 3132322e3131392e3235332e302f32342d3234203d3e203338333831.roa (hash: YAk2M0O5mNS1bL5JHxM+2YAWesudHs3HuuLoM2iog84=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2e:bb:2b:af:16:ce:2a:1b:41:64:d1:43:8d:3b:7a:5c:c9:ab:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Validity Not Before: Apr 17 11:39:43 2026 GMT Not After : Apr 18 13:06:43 2026 GMT Subject: CN=D1CF58A79EFE3687D24CDFC22BEB190E5F6FFA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:6f:ec:b2:42:68:ba:15:29:e2:b2:bb:0e: a1:27:61:59:5a:aa:47:70:4a:d3:e3:d3:88:82:23: a8:c3:bf:4c:f2:86:16:ab:90:3b:b2:56:3a:61:5d: 99:86:70:78:0f:22:b0:15:d8:dc:8f:6c:f7:bd:be: 81:a0:d3:cf:6a:d7:51:35:3d:c6:29:db:19:52:d2: 40:40:cd:a6:c2:bf:17:82:1b:c3:b1:c0:d8:25:1d: 74:17:eb:90:de:9e:55:e0:9b:df:8c:db:aa:f0:70: 21:c5:5e:81:a2:ea:91:9a:17:fd:c2:14:8b:c1:45: 6c:03:9e:d9:e4:ee:36:da:08:94:17:ff:b7:33:20: a5:40:05:dd:a2:7e:02:4e:5a:c0:07:96:0a:09:51: c7:90:ff:75:03:3b:e9:49:5a:3f:61:39:49:22:f7: 63:b3:0f:61:ab:ad:66:71:0b:4e:2e:c9:df:26:94: 56:51:8c:b7:1a:2d:5b:b6:ab:51:1d:9a:77:a9:17: b1:ff:7a:d0:12:98:7e:79:2b:18:d4:20:e4:b1:57: 30:a3:5d:f1:f2:b9:81:a9:c7:fd:1a:75:86:5b:98: e2:6b:09:e7:60:9b:09:48:0d:a4:6a:81:da:03:55: 4e:5b:56:70:fb:5d:e0:17:8b:4a:3d:08:d7:2f:21: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:58:A7:9E:FE:36:87:D2:4C:DF:C2:2B:EB:19:0E:5F:6F:FA:15 X509v3 Authority Key Identifier: keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b5:ae:05:05:eb:93:b2:0a:ec:50:0f:c9:36:52:b7:df:f4: 18:30:77:ef:e5:fd:38:59:26:cc:7a:0d:d7:4b:10:a6:d7:e6: c2:6e:e8:af:fb:ce:98:02:f6:df:25:eb:17:8f:80:99:5d:82: c2:f9:4b:40:7f:57:18:74:8d:1d:53:e1:a5:f1:7f:cd:3e:ce: 91:95:b2:2e:fb:be:e0:b8:d2:b9:a3:bb:60:b3:76:12:67:b5: 11:d7:fa:fc:92:68:84:c5:c0:71:20:8c:c3:a3:f8:19:5f:a4: 90:69:b8:a7:ef:12:95:a2:7a:a8:d5:92:3b:3a:5d:23:42:aa: 90:b7:49:3a:90:e3:9f:99:4b:5e:ae:68:c0:e9:34:21:ab:2d: 7b:c8:be:d7:62:17:c1:1c:70:14:8f:23:f3:75:d2:80:98:1c: 33:ae:ba:17:33:5d:35:6e:11:b6:0b:04:36:3f:1e:0f:aa:14: 0e:15:2f:27:8e:4a:47:86:40:2a:c4:46:52:45:e5:59:67:0e: d2:05:fd:42:99:34:39:66:dc:d7:7a:32:e2:0c:98:b6:2c:a9: 54:68:e8:6b:42:c6:19:b1:ef:91:9b:1f:eb:f7:e7:76:05:ea: bd:60:6b:07:e0:93:8a:de:4e:90:a1:ca:c8:84:a3:c3:4c:92: 50:a5:50:1a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfi67K68WziobQWTRQ407elzJq7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy MDgxMUQ4RDAeFw0yNjA0MTcxMTM5NDNaFw0yNjA0MTgxMzA2NDNaMDMxMTAvBgNV BAMTKEQxQ0Y1OEE3OUVGRTM2ODdEMjRDREZDMjJCRUIxOTBFNUY2RkZBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsFm/sskJouhUp4rK7DqEnYVla qkdwStPj04iCI6jDv0zyhharkDuyVjphXZmGcHgPIrAV2NyPbPe9voGg089q11E1 PcYp2xlS0kBAzabCvxeCG8OxwNglHXQX65DenlXgm9+M26rwcCHFXoGi6pGaF/3C FIvBRWwDntnk7jbaCJQX/7czIKVABd2ifgJOWsAHlgoJUceQ/3UDO+lJWj9hOUki 92OzD2GrrWZxC04uyd8mlFZRjLcaLVu2q1EdmnepF7H/etASmH55KxjUIOSxVzCj XfHyuYGpx/0adYZbmOJrCedgmwlIDaRqgdoDVU5bVnD7XeAXi0o9CNcvIYuBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0c9Yp57+NofSTN/CK+sZDl9v+hUwHwYDVR0j BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5MDM4NDEzMjIyNzA3MjEvMC81MTE1OTY2RkI2MkEy QkRCNEQ2NUQ5NzRERjBERDlCMDIwODExRDhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLWuBQXrk7IK 7FAPyTZSt9/0GDB37+X9OFkmzHoN10sQptfmwm7or/vOmAL23yXrF4+AmV2CwvlL QH9XGHSNHVPhpfF/zT7OkZWyLvu+4LjSuaO7YLN2Eme1Edf6/JJohMXAcSCMw6P4 GV+kkGm4p+8SlaJ6qNWSOzpdI0KqkLdJOpDjn5lLXq5owOk0Iaste8i+12IXwRxw FI8j83XSgJgcM666FzNdNW4RtgsENj8eD6oUDhUvJ45KR4ZAKsRGUkXlWWcO0gX9 Qpk0OWbc13oy4gyYtiypVGjoa0LGGbHvkZsf6/fndgXqvWBrB+CTit5OkKHKyISj w0ySUKVQGg== -----END CERTIFICATE-----Generated at Sat Apr 18 06:24:17 2026 by rpki-client