$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft File: C979A435EE505D2600A38B057A1D127AADD915A7.mft (raw, json) Hash identifier: ehzn0oW8ElJ6e2aR8WEZkgI3N/2bINOs40AQkxDHfh4= Subject key identifier: C5:66:E0:2B:2D:18:6B:B7:93:76:A0:88:A2:3D:12:BD:EB:20:92:9C Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7 Certificate serial: 09E7C8E031830150D7BE7AADB6DC5330B79118E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft Manifest number: 07 Signing time: Fri 17 Apr 2026 07:45:20 +0000 Manifest this update: Fri 17 Apr 2026 07:40:20 +0000 Manifest next update: Sat 18 Apr 2026 07:54:20 +0000 Files and hashes: 1: C979A435EE505D2600A38B057A1D127AADD915A7.crl (hash: FKh0p6wQeIX1jITrhf0CCSBfBxKAJtol7ywSbwWX+q0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e7:c8:e0:31:83:01:50:d7:be:7a:ad:b6:dc:53:30:b7:91:18:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7 Validity Not Before: Apr 17 07:40:20 2026 GMT Not After : Apr 18 07:54:20 2026 GMT Subject: CN=C566E02B2D186BB79376A088A23D12BDEB20929C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:62:cd:8b:d9:b8:77:55:05:f7:45:c3:45:fb: fb:a1:43:88:8b:43:b9:c7:30:64:44:b6:8f:82:d5: 78:13:14:4c:13:95:fd:31:2a:2b:75:f4:47:e4:69: fb:49:4e:7d:38:84:2f:a0:bf:9c:92:67:f8:aa:c3: dc:0f:9f:dd:58:e4:52:20:4a:46:c9:e3:ab:71:43: 16:38:56:48:b1:bf:4a:ca:ff:93:37:32:c4:2c:9b: db:88:b7:c7:9e:9f:bc:b2:92:5e:1f:d4:cc:a8:6d: fe:7a:ff:22:33:00:8a:44:76:0c:a6:a3:8a:b8:4e: a0:d3:59:6e:e3:71:b7:b7:3c:eb:f0:8e:d8:03:f7: 4c:a9:11:c1:8a:07:95:26:0e:f6:cf:00:4a:27:7f: ba:b6:48:f8:98:57:d4:50:9b:d8:44:2f:66:1e:6c: be:0d:dd:62:3d:a4:a3:20:57:51:bf:8c:51:28:4c: d8:fb:85:7d:77:f8:28:be:b0:2b:ce:52:84:6c:07: dc:6e:6b:89:c7:47:b1:39:32:12:fa:64:9b:77:d9: 40:a3:e7:64:e7:ec:cb:ab:e8:55:43:1c:3b:1d:4f: dc:96:74:39:cf:92:47:e0:c6:4f:c9:fe:c4:53:6b: 4e:e3:b4:5e:31:89:b7:d6:b0:92:85:fb:fa:d2:80: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:66:E0:2B:2D:18:6B:B7:93:76:A0:88:A2:3D:12:BD:EB:20:92:9C X509v3 Authority Key Identifier: keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:86:19:b9:6c:da:5b:f3:56:f1:f4:48:50:1d:ee:08:10:e7: 05:df:6d:be:0b:c8:80:d0:03:0a:29:af:b3:b2:c6:bd:2d:5a: 7a:22:5a:e5:a7:5c:4c:73:9d:09:d4:37:50:cc:73:a4:b4:d7: ce:a5:23:b6:e7:03:1a:1c:59:75:dd:24:69:f4:9d:73:04:24: 56:9f:d7:bb:77:fc:0e:8a:b5:76:47:e9:fb:7f:30:45:d8:b4: 83:0b:8a:03:e6:c1:de:e1:4c:14:e9:56:e9:d8:f9:cb:25:b5: 7d:19:7c:d8:a9:98:17:a5:9b:2d:01:3e:e5:97:80:c2:f9:8f: ee:1a:c6:2f:29:ea:92:a6:e8:92:e5:79:63:45:55:f4:61:c4: c8:56:2b:3b:b7:8e:70:8f:95:45:ff:21:bb:f4:dc:2b:af:fb: 73:16:e2:a7:77:ed:3e:45:af:f6:85:30:96:86:c6:4c:02:ff: d8:8f:c0:4d:4e:fd:28:a5:47:d6:09:57:83:1e:4d:3a:b5:08: a9:77:c9:63:92:0a:e1:7b:46:64:3b:2a:5f:0c:51:7c:5d:34: 0e:3a:01:a7:6e:1d:24:0d:05:6f:95:4d:80:f3:97:bb:32:1d: c2:43:54:00:ce:ca:e8:e4:52:62:79:12:27:15:5c:58:45:e5: d0:61:7d:d6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCefI4DGDAVDXvnqtttxTMLeRGOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FB REQ5MTVBNzAeFw0yNjA0MTcwNzQwMjBaFw0yNjA0MTgwNzU0MjBaMDMxMTAvBgNV BAMTKEM1NjZFMDJCMkQxODZCQjc5Mzc2QTA4OEEyM0QxMkJERUIyMDkyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrYs2L2bh3VQX3RcNF+/uhQ4iL Q7nHMGREto+C1XgTFEwTlf0xKit19EfkaftJTn04hC+gv5ySZ/iqw9wPn91Y5FIg SkbJ46txQxY4Vkixv0rK/5M3MsQsm9uIt8een7yykl4f1Myobf56/yIzAIpEdgym o4q4TqDTWW7jcbe3POvwjtgD90ypEcGKB5UmDvbPAEonf7q2SPiYV9RQm9hEL2Ye bL4N3WI9pKMgV1G/jFEoTNj7hX13+Ci+sCvOUoRsB9xua4nHR7E5MhL6ZJt32UCj 52Tn7Mur6FVDHDsdT9yWdDnPkkfgxk/J/sRTa07jtF4xibfWsJKF+/rSgKhfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxWbgKy0Ya7eTdqCIoj0SvesgkpwwHwYDVR0j BBgwFoAUyXmkNe5QXSYAo4sFeh0Seq3ZFacwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwMjcxODE3MjA1MzUwNS8wL0M5NzlBNDM1RUU1MDVEMjYwMEEzOEIwNTdBMUQx MjdBQUREOTE1QTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDI3MTgxNzIwNTM1MDUvMC9DOTc5QTQzNUVFNTA1 RDI2MDBBMzhCMDU3QTFEMTI3QUFERDkxNUE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4YZuWzaW/NW 8fRIUB3uCBDnBd9tvgvIgNADCimvs7LGvS1aeiJa5adcTHOdCdQ3UMxzpLTXzqUj tucDGhxZdd0kafSdcwQkVp/Xu3f8Doq1dkfp+38wRdi0gwuKA+bB3uFMFOlW6dj5 yyW1fRl82KmYF6WbLQE+5ZeAwvmP7hrGLynqkqbokuV5Y0VV9GHEyFYrO7eOcI+V Rf8hu/TcK6/7cxbip3ftPkWv9oUwlobGTAL/2I/ATU79KKVH1glXgx5NOrUIqXfJ Y5IK4XtGZDsqXwxRfF00DjoBp24dJA0Fb5VNgPOXuzIdwkNUAM7K6ORSYnkSJxVc WEXl0GF91g== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:38 2026 by rpki-client