$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json) Hash identifier: JwEX2ra32DlRFL28p6RcxrRE7DMFJLn4eJ/y/c6jt5g= Subject key identifier: 89:84:5C:D1:E5:63:95:13:4B:66:34:A0:7A:B4:19:8A:DA:3E:58:F1 Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Certificate serial: 76CA34FC42CB54FBECB1F8E26D69501166114500 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 06:49:41 +0000 Manifest this update: Fri 17 Apr 2026 06:44:41 +0000 Manifest next update: Sat 18 Apr 2026 08:43:41 +0000 Files and hashes: 1: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: 1kdVJoN7zOksmtcYqGZIeDJT04rhNg3yk2P7zXcJkwE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ca:34:fc:42:cb:54:fb:ec:b1:f8:e2:6d:69:50:11:66:11:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Validity Not Before: Apr 17 06:44:41 2026 GMT Not After : Apr 18 08:43:41 2026 GMT Subject: CN=89845CD1E56395134B6634A07AB4198ADA3E58F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:17:e3:e9:72:fa:b4:b2:27:42:94:41:ce: 1b:f5:31:74:d0:a6:08:3f:59:69:ed:3a:00:5f:5e: 91:29:9b:06:95:b7:3b:1f:ac:76:6d:9b:b5:99:63: 39:84:d1:44:b7:84:47:ee:ae:a2:ab:85:de:47:c7: cb:47:b0:f1:0b:25:00:11:25:77:52:66:6d:7b:3e: 3a:b3:00:c3:16:b3:e6:77:de:15:95:6f:c3:d0:44: 1f:eb:ac:0f:fa:52:87:45:5e:45:4f:e5:ca:7b:34: 93:b1:20:72:83:57:81:02:d1:b9:ca:40:86:78:19: 5b:40:62:4d:2c:7c:d3:14:2b:84:33:4c:cb:df:3d: f9:a9:09:de:f0:2a:23:00:8c:d9:e0:3f:a8:5e:8a: 23:3a:77:ea:d3:51:74:dc:17:99:d1:de:c5:b2:1e: 53:46:ad:b9:b3:70:4b:fe:bb:e7:a8:aa:c4:c5:99: f3:98:6b:a0:2d:76:68:be:8e:88:52:6d:09:b0:67: e9:a3:f5:75:b5:11:99:fb:12:0d:22:4c:a2:a8:04: 58:e2:bd:59:28:c0:fc:ae:39:80:53:50:77:d5:d5: 21:a2:72:0f:f9:62:81:b5:7e:1a:8d:55:c5:78:57: d5:b8:1d:56:74:37:2b:3b:8a:11:a1:fe:eb:52:90: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:5C:D1:E5:63:95:13:4B:66:34:A0:7A:B4:19:8A:DA:3E:58:F1 X509v3 Authority Key Identifier: keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:73:3f:c6:03:88:22:53:11:90:3f:e5:44:cf:9f:40:e8:8a: f8:6e:67:dd:8f:ba:a0:69:27:b8:e4:02:38:8b:fc:fb:e5:c2: 84:79:b5:31:85:0f:a2:7b:73:21:8f:70:25:62:29:be:86:e4: 6c:88:75:fa:d2:bc:7e:2e:31:4c:13:5a:36:19:14:bd:3b:56: 73:c0:a9:9c:d1:56:06:80:df:04:40:10:bc:83:0c:2e:7f:2c: d2:02:3b:c7:04:fd:06:ab:cb:d4:76:69:4d:59:07:86:64:ea: 7f:0e:50:00:43:55:33:66:a6:5f:63:67:76:7a:69:33:de:ef: d7:89:ec:5b:7a:bf:f7:6d:8c:af:26:12:3c:e7:51:f4:d5:6d: 5f:48:a8:4f:8c:29:27:9c:9e:cb:0f:bc:84:2c:7d:ee:f7:45: dd:79:86:e5:04:63:d7:10:ab:3c:64:3b:3f:a1:89:27:61:ad: 46:85:fd:d9:83:fc:87:24:22:f3:7f:69:b0:02:98:68:44:0b: f5:f8:75:67:e0:7f:5f:36:8d:74:50:41:6a:e6:be:8a:b1:2e: 57:e0:39:0e:63:cf:29:6c:b6:80:1f:52:4a:9b:45:2a:31:50: b0:f0:1b:e0:7d:66:f1:1f:4a:93:7c:e7:f4:73:f2:71:06:fb: 38:11:ad:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdso0/ELLVPvssfjibWlQEWYRRQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4 OUZFNzYwODAeFw0yNjA0MTcwNjQ0NDFaFw0yNjA0MTgwODQzNDFaMDMxMTAvBgNV BAMTKDg5ODQ1Q0QxRTU2Mzk1MTM0QjY2MzRBMDdBQjQxOThBREEzRTU4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTxfj6XL6tLInQpRBzhv1MXTQ pgg/WWntOgBfXpEpmwaVtzsfrHZtm7WZYzmE0US3hEfurqKrhd5Hx8tHsPELJQAR JXdSZm17PjqzAMMWs+Z33hWVb8PQRB/rrA/6UodFXkVP5cp7NJOxIHKDV4EC0bnK QIZ4GVtAYk0sfNMUK4QzTMvfPfmpCd7wKiMAjNngP6heiiM6d+rTUXTcF5nR3sWy HlNGrbmzcEv+u+eoqsTFmfOYa6Atdmi+johSbQmwZ+mj9XW1EZn7Eg0iTKKoBFji vVkowPyuOYBTUHfV1SGicg/5YoG1fhqNVcV4V9W4HVZ0Nys7ihGh/utSkFn3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiYRc0eVjlRNLZjSgerQZito+WPEwHwYDVR0j BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1 MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnM/xgOIIlMR kD/lRM+fQOiK+G5n3Y+6oGknuOQCOIv8++XChHm1MYUPontzIY9wJWIpvobkbIh1 +tK8fi4xTBNaNhkUvTtWc8CpnNFWBoDfBEAQvIMMLn8s0gI7xwT9BqvL1HZpTVkH hmTqfw5QAENVM2amX2NndnppM97v14nsW3q/922MryYSPOdR9NVtX0ioT4wpJ5ye yw+8hCx97vdF3XmG5QRj1xCrPGQ7P6GJJ2GtRoX92YP8hyQi839psAKYaEQL9fh1 Z+B/XzaNdFBBaua+irEuV+A5DmPPKWy2gB9SSptFKjFQsPAb4H1m8R9Kk3zn9HPy cQb7OBGtrg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:20:13 2026 by rpki-client