$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: x1FrpoqfQTbr693yu40hZkWfHGij7WCenjgCVLxl/8o= Subject key identifier: 49:B4:4E:A1:38:FF:F7:4E:75:DF:DA:24:45:73:36:32:6E:43:38:B7 Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 39C662C3681AB89B4AEA9A51D68050E497688FB9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: 19 Signing time: Fri 17 Apr 2026 04:39:39 +0000 Manifest this update: Fri 17 Apr 2026 04:34:39 +0000 Manifest next update: Sat 18 Apr 2026 06:07:39 +0000 Files and hashes: 1: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) 2: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: DVmkKeuKXdHVf0G8COfB7UHbpumtQJCzNaYPP/VV6Jk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 06:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c6:62:c3:68:1a:b8:9b:4a:ea:9a:51:d6:80:50:e4:97:68:8f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Apr 17 04:34:39 2026 GMT Not After : Apr 18 06:07:39 2026 GMT Subject: CN=49B44EA138FFF74E75DFDA24457336326E4338B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:25:d7:bf:86:21:43:6b:f2:05:c9:a8:70: 3c:e4:92:99:6b:a9:19:3c:16:d8:88:eb:53:70:3e: c9:55:82:34:a6:3e:8e:8b:f6:80:6a:ad:50:9e:37: bd:3f:d3:bd:c1:e7:56:67:23:34:3f:1c:57:ec:dd: 90:d4:92:46:9e:f7:ce:28:4e:ff:f5:c6:bf:43:61: fc:2a:0e:95:43:96:7f:be:e8:17:c6:14:49:ff:09: 4d:f3:38:40:2e:3c:c6:90:9e:33:c2:f7:d7:37:51: 2b:65:64:e9:37:e3:40:86:2b:07:a1:f6:c2:27:e6: 72:00:b8:d5:98:e2:3b:21:5b:b0:71:49:66:71:c0: ed:94:23:f9:df:f9:3d:22:3e:ef:4b:70:90:95:ae: 66:7c:bd:50:68:fd:6f:48:a6:58:f9:85:1e:a2:e1: 0e:ac:2b:25:14:eb:35:2f:d5:5e:61:21:31:04:ab: 62:d6:2a:57:af:46:00:53:d3:d9:e9:12:57:6a:88: ee:26:46:82:8a:22:c7:c9:6d:b2:2f:27:c5:75:48: 18:98:a5:a5:f4:22:e5:09:02:28:54:13:a7:27:2f: 63:61:5b:8f:5a:6b:83:30:e1:a6:89:bd:21:28:fa: 60:61:e7:0d:21:99:b6:43:25:9c:0d:0f:2e:85:1b: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:4E:A1:38:FF:F7:4E:75:DF:DA:24:45:73:36:32:6E:43:38:B7 X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:02:2b:94:1d:32:a3:21:d9:50:a4:01:29:e2:05:ba:cc:c8: bc:37:74:8a:57:f6:d2:0d:6a:78:e1:93:14:8d:ee:77:9e:22: aa:54:2a:ad:af:0d:d9:dd:42:ed:9d:6b:16:a6:66:3c:a9:7c: f4:11:5d:18:a3:da:05:b3:48:20:23:7d:a2:df:c3:94:a5:72: d1:54:fc:db:11:2c:e5:a8:5c:6b:d9:60:71:52:28:56:75:bb: f4:bf:20:f0:94:6f:9d:fa:dd:40:b3:99:c4:3d:af:d6:3d:86: 6c:e7:3d:69:8d:28:7d:db:68:e8:3e:cb:71:64:c2:f7:38:9d: a3:7e:16:7e:ae:ad:3c:67:11:74:46:38:d2:5b:cb:c6:d2:0f: 55:63:1b:77:0c:6c:52:fc:bb:3b:c2:80:d4:84:55:ff:c9:9a: 3f:a3:6a:f6:93:f4:08:f6:fe:99:5b:30:9a:00:dd:f5:42:00: fc:66:92:c7:b9:80:21:55:77:61:98:03:36:49:c6:93:a4:66: 70:13:6e:52:44:b7:19:b4:0b:c4:07:03:b6:a4:93:59:45:14: 28:dd:61:f6:30:73:1a:58:ea:f9:fa:7d:d5:9b:55:ce:a2:bd: 8d:60:e8:0d:0b:35:7d:aa:cb:0a:73:02:85:b1:a4:6f:8d:61: d3:47:05:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOcZiw2gauJtK6ppR1oBQ5Jdoj7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjA0MTcwNDM0MzlaFw0yNjA0MTgwNjA3MzlaMDMxMTAvBgNV BAMTKDQ5QjQ0RUExMzhGRkY3NEU3NURGREEyNDQ1NzMzNjMyNkU0MzM4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYiXXv4YhQ2vyBcmocDzkkplr qRk8FtiI61NwPslVgjSmPo6L9oBqrVCeN70/073B51ZnIzQ/HFfs3ZDUkkae984o Tv/1xr9DYfwqDpVDln++6BfGFEn/CU3zOEAuPMaQnjPC99c3UStlZOk340CGKweh 9sIn5nIAuNWY4jshW7BxSWZxwO2UI/nf+T0iPu9LcJCVrmZ8vVBo/W9Iplj5hR6i 4Q6sKyUU6zUv1V5hITEEq2LWKlevRgBT09npEldqiO4mRoKKIsfJbbIvJ8V1SBiY paX0IuUJAihUE6cnL2NhW49aa4Mw4aaJvSEo+mBh5w0hmbZDJZwNDy6FG935AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSbROoTj/905139okRXM2Mm5DOLcwHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwIrlB0yoyHZ UKQBKeIFuszIvDd0ilf20g1qeOGTFI3ud54iqlQqra8N2d1C7Z1rFqZmPKl89BFd GKPaBbNIICN9ot/DlKVy0VT82xEs5ahca9lgcVIoVnW79L8g8JRvnfrdQLOZxD2v 1j2GbOc9aY0ofdto6D7LcWTC9zido34Wfq6tPGcRdEY40lvLxtIPVWMbdwxsUvy7 O8KA1IRV/8maP6Nq9pP0CPb+mVswmgDd9UIA/GaSx7mAIVV3YZgDNknGk6RmcBNu UkS3GbQLxAcDtqSTWUUUKN1h9jBzGljq+fp91ZtVzqK9jWDoDQs1farLCnMChbGk b41h00cFLg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:25 2026 by rpki-client