$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json) Hash identifier: TV3BxfKwT6KMY44k8Sjwyv241YUvDEcpIXeJP5KvDCA= Subject key identifier: 9F:44:DC:5E:35:E7:50:E4:F6:6D:20:E4:6B:E5:6C:DA:D4:D4:94:92 Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Certificate serial: 295CF45D12EC785178DBE01B4F41342A9EEB04A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 07:54:42 +0000 Manifest this update: Fri 17 Apr 2026 07:49:42 +0000 Manifest next update: Sat 18 Apr 2026 11:32:42 +0000 Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: wDoDutgW1PKjgfOxIDGLqK47pCAsN3q38jVKmxwtZbw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5c:f4:5d:12:ec:78:51:78:db:e0:1b:4f:41:34:2a:9e:eb:04:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Validity Not Before: Apr 17 07:49:42 2026 GMT Not After : Apr 18 11:32:42 2026 GMT Subject: CN=9F44DC5E35E750E4F66D20E46BE56CDAD4D49492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:50:ca:b3:37:06:e3:86:e8:b0:fd:06:8e: 85:de:6a:bd:be:7f:a9:a8:1c:d9:05:77:ab:f4:d2: 42:95:8a:62:7a:36:09:fe:5c:f6:b0:0c:a3:33:ef: 05:5c:a5:ee:6c:66:f6:2a:dc:98:b1:77:63:23:0e: ba:cd:53:d0:7a:d0:8d:f3:c0:ed:b5:22:27:ce:0a: e4:d9:d6:dd:33:fd:c9:d9:66:fc:c7:e0:26:fa:c3: b6:bc:a9:7a:12:fe:ac:79:da:d1:72:de:f3:c9:f7: c6:27:72:85:3b:00:e9:15:9a:2c:6a:30:98:a4:8b: 36:b8:f1:26:19:2d:93:34:7c:98:4b:ca:ea:8a:ca: 7e:9e:63:09:fb:76:40:e6:a2:63:bc:1a:78:a6:0c: 37:89:ea:7b:5f:4b:cf:23:a3:a4:f7:c6:64:d9:8c: 14:8b:d1:59:41:d4:cd:e6:62:3e:27:ee:ae:92:7b: 5f:91:e8:6f:f4:8f:49:8c:c2:9a:6e:b0:b5:9a:7a: b1:34:1f:8f:11:bd:87:e6:66:65:93:86:9f:f3:2b: dd:a2:23:08:0f:cc:04:41:bd:42:c3:3f:58:e1:2b: 79:ac:7d:6b:55:ab:c1:66:4f:68:5d:88:db:46:fc: e6:c8:b5:88:a4:ef:95:53:c0:f9:08:17:48:b3:69: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:44:DC:5E:35:E7:50:E4:F6:6D:20:E4:6B:E5:6C:DA:D4:D4:94:92 X509v3 Authority Key Identifier: keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7f:13:06:1a:2f:de:13:67:55:b3:97:65:9e:49:7b:65:1a: c5:93:38:d6:d7:b3:66:6a:f0:9d:b8:3d:a0:9f:75:7d:e0:f4: 14:fb:17:bf:a7:c6:4d:82:cc:90:30:18:dd:60:6a:51:eb:89: 7e:f5:3d:2a:94:f9:2d:db:9f:99:65:84:d9:d0:e3:b6:35:00: 35:65:c7:a4:26:a3:9e:ef:3c:82:78:78:6d:d5:bc:a9:ca:de: 4b:3f:36:14:e1:38:51:23:05:01:96:73:d1:2e:27:a5:e6:64: e2:a5:7b:4e:29:8e:65:1d:f6:94:d3:9f:ea:10:73:ba:b8:71: 6b:f5:fd:51:20:7f:a3:81:a7:c6:71:9b:e4:3f:45:d3:f4:04: 27:ba:af:32:7e:60:29:35:7a:3b:59:bd:48:e6:80:71:81:50: fb:0e:2c:80:02:6a:b2:58:84:d9:b1:9a:95:57:d9:ca:f3:10: bd:72:6a:3b:ea:d3:03:76:f9:79:73:e7:25:ec:c2:cd:6d:f5: 0e:6f:29:21:2a:c5:ed:85:0d:dd:99:94:d1:49:0c:dd:30:fe: b9:2e:f2:de:af:6e:55:82:46:b9:f5:62:60:82:67:db:b1:ef: ab:95:d6:89:3c:a8:94:c7:19:86:d2:57:d4:58:10:fc:cf:03: ba:61:fc:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKVz0XRLseFF42+AbT0E0Kp7rBKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNG Mjk0MjVBRDAeFw0yNjA0MTcwNzQ5NDJaFw0yNjA0MTgxMTMyNDJaMDMxMTAvBgNV BAMTKDlGNDREQzVFMzVFNzUwRTRGNjZEMjBFNDZCRTU2Q0RBRDRENDk0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FFDKszcG44bosP0GjoXear2+ f6moHNkFd6v00kKVimJ6Ngn+XPawDKMz7wVcpe5sZvYq3Jixd2MjDrrNU9B60I3z wO21IifOCuTZ1t0z/cnZZvzH4Cb6w7a8qXoS/qx52tFy3vPJ98YncoU7AOkVmixq MJikiza48SYZLZM0fJhLyuqKyn6eYwn7dkDmomO8GnimDDeJ6ntfS88jo6T3xmTZ jBSL0VlB1M3mYj4n7q6Se1+R6G/0j0mMwppusLWaerE0H48RvYfmZmWThp/zK92i IwgPzARBvULDP1jhK3msfWtVq8FmT2hdiNtG/ObItYik75VTwPkIF0izaQMHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn0TcXjXnUOT2bSDka+Vs2tTUlJIwHwYDVR0j BBgwFoAUBQPA3PI1mmOTXKQpePfpXPKUJa0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8wLzA1MDNDMERDRjIzNTlBNjM5MzVDQTQyOTc4RjdF OTVDRjI5NDI1QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMC8wNTAzQzBEQ0YyMzU5 QTYzOTM1Q0E0Mjk3OEY3RTk1Q0YyOTQyNUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY38TBhov3hNn VbOXZZ5Je2UaxZM41tezZmrwnbg9oJ91feD0FPsXv6fGTYLMkDAY3WBqUeuJfvU9 KpT5LdufmWWE2dDjtjUANWXHpCajnu88gnh4bdW8qcreSz82FOE4USMFAZZz0S4n peZk4qV7TimOZR32lNOf6hBzurhxa/X9USB/o4GnxnGb5D9F0/QEJ7qvMn5gKTV6 O1m9SOaAcYFQ+w4sgAJqsliE2bGalVfZyvMQvXJqO+rTA3b5eXPnJezCzW31Dm8p ISrF7YUN3ZmU0UkM3TD+uS7y3q9uVYJGufViYIJn27Hvq5XWiTyolMcZhtJX1FgQ /M8DumH8mA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:32 2026 by rpki-client