$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json) Hash identifier: 49B38rW2TMfS3vrnnF1urYgGK2lPuHQ1v3Ppkcdz/sA= Subject key identifier: 3B:44:91:9E:4A:5D:F1:07:60:BA:7F:38:B8:C7:B4:5A:19:18:86:F9 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 7AA7D61BB3737FDEAC5D34285EC70BAFA4EF54FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft Manifest number: 07 Signing time: Fri 17 Apr 2026 15:49:43 +0000 Manifest this update: Fri 17 Apr 2026 15:44:43 +0000 Manifest next update: Sat 18 Apr 2026 15:59:43 +0000 Files and hashes: 1: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: oWgAwv/nFwSzEpz3dxTg/uGTPxEywat+K1dXl4WbfXM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a7:d6:1b:b3:73:7f:de:ac:5d:34:28:5e:c7:0b:af:a4:ef:54:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: Apr 17 15:44:43 2026 GMT Not After : Apr 18 15:59:43 2026 GMT Subject: CN=3B44919E4A5DF10760BA7F38B8C7B45A191886F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:22:19:b5:1e:4f:7c:b3:46:b5:b0:cd:02: f1:a6:4a:d2:d5:33:b4:23:24:65:04:ce:a3:d9:df: 0a:a9:9f:db:37:b3:38:c9:2f:5f:01:3a:d1:4f:08: d7:8f:27:42:c0:c8:9d:05:85:2b:1e:44:f3:16:40: ed:d0:75:86:fe:2f:eb:ca:fc:38:7e:3a:0b:36:64: 25:7b:59:4b:d7:0e:49:2b:35:3f:9d:92:c9:96:62: 57:25:a2:07:1f:be:5c:d2:59:31:12:9f:6d:c4:10: b5:9d:8a:ae:83:19:51:21:7c:7d:fd:aa:89:e8:55: 69:47:5e:5f:9f:3d:b9:8e:10:81:87:81:3e:92:6f: 42:18:67:42:47:cb:05:7e:56:2d:ce:3c:04:8e:36: e9:73:ac:e2:c4:86:14:58:7c:7e:1d:29:45:62:b0: 03:1f:9b:2d:78:43:21:21:63:d1:14:89:c1:06:44: 63:11:43:0e:23:fb:c0:72:78:ad:1e:05:d8:2c:4c: 3f:10:4b:ba:24:c6:a0:e7:48:b8:a4:b1:e7:82:0e: 65:3b:11:7b:dc:21:de:b5:e4:c6:cb:ea:95:62:4d: 23:0d:7d:df:1a:14:6a:cf:35:4c:47:0b:a0:c4:97: 46:3a:27:9a:fd:4c:0e:84:6e:60:fe:c9:b1:f9:92: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:44:91:9E:4A:5D:F1:07:60:BA:7F:38:B8:C7:B4:5A:19:18:86:F9 X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:eb:9d:f7:f2:3c:19:fa:50:a7:aa:eb:fd:1a:5b:6b:77:5c: ef:f9:b7:b1:cc:fd:1d:23:87:b2:b6:f6:44:43:e8:23:5e:6b: 1b:9a:40:6d:36:1b:21:69:d0:8b:d2:7e:9b:06:1d:b4:4e:b8: 16:f7:f2:28:41:17:82:0c:65:96:eb:77:1f:24:db:73:57:8f: 0d:b3:ee:3e:27:d6:15:3c:98:5f:a4:0e:d7:9a:4b:c3:d1:9a: 12:ca:23:b4:ec:3b:57:d8:c7:35:46:9f:04:f7:75:b7:db:05: a7:3b:c3:77:64:37:a2:d3:a8:ea:8a:ef:e4:d7:93:13:0b:f5: ff:47:6f:3d:88:3e:e1:43:3d:ce:8a:90:61:49:f9:08:77:56: ee:19:b9:6b:c8:1a:ec:74:42:43:01:68:71:b3:a2:19:c7:b8: ec:22:0e:31:dd:6f:b4:39:98:fb:8a:a9:06:13:28:b3:65:47: a8:a9:fb:a3:27:8f:66:1f:af:01:5e:bc:9f:d1:e2:57:ac:7c: ad:24:f9:33:fc:27:7b:f9:5e:d1:69:1e:f5:e1:2b:56:dc:2f: 11:78:93:c7:53:79:d2:20:30:cd:9f:81:7a:d5:08:3e:c4:da: e3:9e:7b:52:2d:4b:bc:bc:f2:d5:96:47:68:87:5a:e0:07:4e: 9e:27:e9:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeqfWG7Nzf96sXTQoXscLr6TvVP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjA0MTcxNTQ0NDNaFw0yNjA0MTgxNTU5NDNaMDMxMTAvBgNV BAMTKDNCNDQ5MTlFNEE1REYxMDc2MEJBN0YzOEI4QzdCNDVBMTkxODg2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcCIZtR5PfLNGtbDNAvGmStLV M7QjJGUEzqPZ3wqpn9s3szjJL18BOtFPCNePJ0LAyJ0FhSseRPMWQO3QdYb+L+vK /Dh+Ogs2ZCV7WUvXDkkrNT+dksmWYlclogcfvlzSWTESn23EELWdiq6DGVEhfH39 qonoVWlHXl+fPbmOEIGHgT6Sb0IYZ0JHywV+Vi3OPASONulzrOLEhhRYfH4dKUVi sAMfmy14QyEhY9EUicEGRGMRQw4j+8ByeK0eBdgsTD8QS7okxqDnSLikseeCDmU7 EXvcId615MbL6pViTSMNfd8aFGrPNUxHC6DEl0Y6J5r9TA6EbmD+ybH5kubrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO0SRnkpd8Qdgun84uMe0WhkYhvkwHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTgwMTgxODIzNDg4MDEvMC8zNTE4QzFFNzBCMzBE NTAxRUMwODAzQjg1RTUyRjU5MDVFRTgyMDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOud9/I8GfpQ p6rr/Rpba3dc7/m3scz9HSOHsrb2REPoI15rG5pAbTYbIWnQi9J+mwYdtE64Fvfy KEEXggxllut3HyTbc1ePDbPuPifWFTyYX6QO15pLw9GaEsojtOw7V9jHNUafBPd1 t9sFpzvDd2Q3otOo6orv5NeTEwv1/0dvPYg+4UM9zoqQYUn5CHdW7hm5a8ga7HRC QwFocbOiGce47CIOMd1vtDmY+4qpBhMos2VHqKn7oyePZh+vAV68n9HiV6x8rST5 M/wne/le0Wke9eErVtwvEXiTx1N50iAwzZ+BetUIPsTa4557Ui1LvLzy1ZZHaIda 4AdOnifpvQ== -----END CERTIFICATE-----Generated at Sat Apr 18 04:14:47 2026 by rpki-client