$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft File: 5ACF72DA32919503D15480832BA57EB063AE113B.mft (raw, json) Hash identifier: nkVamWYTJTi7Fa10RhrfdFJFywRhH2w5jyfTWt2I/fQ= Subject key identifier: 86:BF:9E:EC:8D:DF:BE:DE:36:7A:05:3C:F5:13:95:3B:1B:2C:84:E8 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 03AF792CD8D332DAB666502E648769C3306BE478 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft Manifest number: 06 Signing time: Fri 17 Apr 2026 17:24:44 +0000 Manifest this update: Fri 17 Apr 2026 17:19:44 +0000 Manifest next update: Sat 18 Apr 2026 17:25:44 +0000 Files and hashes: 1: 5ACF72DA32919503D15480832BA57EB063AE113B.crl (hash: VzZWKogGk5FdW89rOBbQYKA1NXjQJLrYBnuNEhtnpec=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:af:79:2c:d8:d3:32:da:b6:66:50:2e:64:87:69:c3:30:6b:e4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: Apr 17 17:19:44 2026 GMT Not After : Apr 18 17:25:44 2026 GMT Subject: CN=86BF9EEC8DDFBEDE367A053CF513953B1B2C84E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:3e:67:91:8d:44:1a:da:a6:04:7e:ea:b5: de:b5:0c:c4:92:26:a7:b9:4b:06:bf:e3:01:6d:7b: 78:25:82:80:06:1a:73:64:01:ef:10:1f:d5:7e:89: 73:53:70:cb:ce:9a:2d:38:d3:1d:04:e7:1e:4a:3a: 59:96:72:5b:40:5b:84:71:23:5a:5f:be:85:b9:8c: 7d:76:0e:5d:1e:38:4a:29:12:26:ed:e1:0b:85:84: 92:01:99:4d:af:af:8c:e1:a6:b6:40:73:f4:2a:6e: 01:88:31:b0:d7:d8:49:4e:d1:03:1f:1a:89:70:38: 91:a2:ee:2d:c3:02:eb:82:64:71:d9:bd:c1:d7:e8: 95:75:81:1c:80:3a:2b:fd:97:d1:f6:6a:ad:15:b5: 44:7b:8e:ee:13:e4:21:01:a1:2d:82:7a:00:d9:f5: 4f:6d:a7:d3:f9:af:01:77:d4:36:e5:b6:59:ad:fb: 2c:35:4f:44:4d:17:00:f7:55:d7:8a:a5:5c:50:96: 24:25:e9:ca:70:4f:fa:e5:b8:79:18:92:ee:84:6e: 64:58:d8:85:eb:77:6b:0e:58:79:98:b2:23:17:b1: 18:01:12:84:ad:4f:e9:36:ab:34:1f:33:04:0d:cd: 71:23:9b:2e:2f:5b:a7:04:c5:4a:af:4e:d0:53:e4: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BF:9E:EC:8D:DF:BE:DE:36:7A:05:3C:F5:13:95:3B:1B:2C:84:E8 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:7f:4d:f2:cf:29:16:7e:42:9b:82:f6:8d:63:d4:02:8b:3d: 06:8b:bb:58:ef:c9:66:14:c8:6b:89:22:4a:51:99:70:ee:bb: 26:50:ce:e3:70:b6:26:4c:a0:40:cc:e4:34:45:db:8c:61:36: f9:f9:7d:15:ba:a0:2c:1a:d5:30:1a:26:8a:ca:b8:27:2f:b0: 20:80:39:05:a8:91:41:bd:d5:0c:25:79:99:be:41:7b:59:96: d5:a2:62:17:2b:0b:cf:1d:60:cb:d4:c8:01:da:7e:fd:40:4b: e2:20:e4:2f:9b:2b:93:77:49:80:71:02:f3:67:9e:1d:c0:42: a6:72:58:9c:38:ad:d7:33:b9:26:84:27:82:e3:93:ef:b0:9d: 61:70:72:49:29:f4:0c:62:e4:41:91:92:93:6e:a3:9b:3e:89: 2f:65:b1:dc:21:8e:28:78:61:23:64:33:15:f2:0a:92:6c:4e: 0c:71:bc:ec:50:53:69:8e:fa:4e:dc:3a:fb:d3:60:9f:41:ed: bb:83:2b:83:bb:fb:ac:87:7d:7a:76:a8:e1:ac:28:03:cb:8d: 10:df:69:fe:11:f9:e8:69:46:14:e9:dc:a4:8b:3b:03:a5:40: 49:f8:c8:c6:91:72:d5:87:85:01:54:65:92:b2:d6:98:72:72: 34:b2:4f:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA695LNjTMtq2ZlAuZIdpwzBr5HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjA0MTcxNzE5NDRaFw0yNjA0MTgxNzI1NDRaMDMxMTAvBgNV BAMTKDg2QkY5RUVDOERERkJFREUzNjdBMDUzQ0Y1MTM5NTNCMUIyQzg0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9T5nkY1EGtqmBH7qtd61DMSS Jqe5Swa/4wFte3glgoAGGnNkAe8QH9V+iXNTcMvOmi040x0E5x5KOlmWcltAW4Rx I1pfvoW5jH12Dl0eOEopEibt4QuFhJIBmU2vr4zhprZAc/QqbgGIMbDX2ElO0QMf GolwOJGi7i3DAuuCZHHZvcHX6JV1gRyAOiv9l9H2aq0VtUR7ju4T5CEBoS2CegDZ 9U9tp9P5rwF31Dbltlmt+yw1T0RNFwD3VdeKpVxQliQl6cpwT/rluHkYku6EbmRY 2IXrd2sOWHmYsiMXsRgBEoStT+k2qzQfMwQNzXEjmy4vW6cExUqvTtBT5FoLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhr+e7I3fvt42egU89ROVOxsshOgwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMS81QUNGNzJEQTMyOTE5 NTAzRDE1NDgwODMyQkE1N0VCMDYzQUUxMTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzH9N8s8pFn5C m4L2jWPUAos9Bou7WO/JZhTIa4kiSlGZcO67JlDO43C2JkygQMzkNEXbjGE2+fl9 FbqgLBrVMBomisq4Jy+wIIA5BaiRQb3VDCV5mb5Be1mW1aJiFysLzx1gy9TIAdp+ /UBL4iDkL5srk3dJgHEC82eeHcBCpnJYnDit1zO5JoQnguOT77CdYXBySSn0DGLk QZGSk26jmz6JL2Wx3CGOKHhhI2QzFfIKkmxODHG87FBTaY76Ttw6+9Ngn0Htu4Mr g7v7rId9enao4awoA8uNEN9p/hH56GlGFOncpIs7A6VASfjIxpFy1YeFAVRlkrLW mHJyNLJPQg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:40:03 2026 by rpki-client