$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: RNotvkE6/27x2hT28t9DNPTtSQuC2lZ3bMiiv7NqGuY= Subject key identifier: F5:65:5A:63:7A:39:E4:ED:AC:02:2B:73:18:78:56:13:C9:D3:06:52 Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 50BA7EDA5991739610E06A962A654C31C5CA967A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: 06 Signing time: Fri 17 Apr 2026 05:34:40 +0000 Manifest this update: Fri 17 Apr 2026 05:29:40 +0000 Manifest next update: Sat 18 Apr 2026 08:45:40 +0000 Files and hashes: 1: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: MWhZR6Cy7+5ATCkf0ef5cm35/TR6G3vj/LuD/eVLOKI=) 2: 3130332e3131342e3130302e302f32322d3232203d3e20313337383037.roa (hash: f4RyrjC0PS+6xsc4FziMI2Z0vvlWGTvgZVGfCTiaDM0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ba:7e:da:59:91:73:96:10:e0:6a:96:2a:65:4c:31:c5:ca:96:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Apr 17 05:29:40 2026 GMT Not After : Apr 18 08:45:40 2026 GMT Subject: CN=F5655A637A39E4EDAC022B7318785613C9D30652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:a2:3c:8b:30:57:6d:55:9e:09:9d:9d:12: 9f:97:6e:ec:5f:26:ce:c0:79:52:13:bf:e0:fb:c4: f9:77:53:37:bc:66:52:53:28:c8:c6:90:8b:8b:f3: 3a:00:20:54:19:ba:91:4c:4d:c9:6e:12:5b:1a:2e: 40:61:31:fd:a1:2a:28:c9:6f:13:ac:6f:48:cd:7a: 7a:76:f7:aa:16:2d:c4:65:07:5d:22:30:eb:67:e5: 7c:26:a7:44:e8:fe:b4:1b:d3:46:3d:0d:0b:e4:e4: d4:eb:15:c7:c5:a8:19:33:df:8a:3f:2a:52:5d:df: 1e:1b:40:0f:b0:3e:86:2c:b8:82:8c:26:68:1a:4c: 20:77:fc:2e:4f:8a:f6:68:cf:8d:6a:c5:1a:78:5b: e8:7c:b1:c3:f5:8e:92:a1:1d:d6:4c:56:31:44:4b: 15:67:5f:6c:35:9f:68:7c:57:6e:53:0f:8f:39:8e: 06:74:45:e6:c2:74:30:de:60:40:ef:d5:be:7c:87: e7:16:ac:0a:89:33:17:be:f1:c6:ec:fb:f9:fe:c6: 0c:d5:69:a0:ce:4d:37:4a:ee:23:97:0b:67:02:5d: 39:7d:80:ce:f4:b7:b4:5b:15:ea:9d:4d:11:66:6f: 1c:3e:e1:10:ee:80:44:dc:5f:bf:4f:73:78:79:fc: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:65:5A:63:7A:39:E4:ED:AC:02:2B:73:18:78:56:13:C9:D3:06:52 X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c8:5b:85:3d:a3:72:cd:88:7e:51:04:e7:ab:af:0c:de:dc: b3:f2:8d:a7:d3:98:4e:8a:bb:cd:14:3c:dd:6f:25:0d:ac:29: 8a:ff:59:03:6e:48:f6:c5:17:5c:d0:3a:ee:17:fc:ce:95:69: 58:54:d0:8b:17:13:fb:c5:a1:46:a4:28:0a:58:96:63:17:aa: d0:04:08:78:98:b6:4c:e9:a3:93:fb:21:cd:79:fa:f2:ce:e4: da:a2:bf:a3:ec:9e:ab:f4:d8:5e:34:e2:0c:a1:0d:35:76:80: 2e:50:44:22:a0:e9:ce:7e:39:d0:92:86:77:96:9f:50:e7:b4: 45:43:24:36:c4:94:94:55:37:53:92:f3:ed:16:dd:59:62:fa: 80:88:d9:a0:32:79:60:79:af:1d:88:5b:8b:d1:06:fb:ab:25: 0d:1d:56:92:8c:ee:bf:a1:12:f6:51:65:db:1f:7f:b3:a2:cf: 85:be:c1:39:fc:d2:be:fd:33:22:36:7f:51:8d:53:67:b7:14: 41:79:4e:e0:29:7b:d4:e2:be:3b:62:a1:87:7a:9f:ce:3a:6c: ab:37:e0:b2:fd:fb:e3:f9:33:e4:7a:24:18:70:7a:e8:57:46: fd:e5:20:09:ca:23:ff:b8:48:ce:0c:a2:ec:8a:64:d8:18:c2: 68:19:cb:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUULp+2lmRc5YQ4GqWKmVMMcXKlnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA0MTcwNTI5NDBaFw0yNjA0MTgwODQ1NDBaMDMxMTAvBgNV BAMTKEY1NjU1QTYzN0EzOUU0RURBQzAyMkI3MzE4Nzg1NjEzQzlEMzA2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MaI8izBXbVWeCZ2dEp+Xbuxf Js7AeVITv+D7xPl3Uze8ZlJTKMjGkIuL8zoAIFQZupFMTcluElsaLkBhMf2hKijJ bxOsb0jNenp296oWLcRlB10iMOtn5Xwmp0To/rQb00Y9DQvk5NTrFcfFqBkz34o/ KlJd3x4bQA+wPoYsuIKMJmgaTCB3/C5PivZoz41qxRp4W+h8scP1jpKhHdZMVjFE SxVnX2w1n2h8V25TD485jgZ0RebCdDDeYEDv1b58h+cWrAqJMxe+8cbs+/n+xgzV aaDOTTdK7iOXC2cCXTl9gM70t7RbFeqdTRFmbxw+4RDugETcX79Pc3h5/KX3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9WVaY3o55O2sAitzGHhWE8nTBlIwHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8hbhT2jcs2I flEE56uvDN7cs/KNp9OYToq7zRQ83W8lDawpiv9ZA25I9sUXXNA67hf8zpVpWFTQ ixcT+8WhRqQoCliWYxeq0AQIeJi2TOmjk/shzXn68s7k2qK/o+yeq/TYXjTiDKEN NXaALlBEIqDpzn450JKGd5afUOe0RUMkNsSUlFU3U5Lz7RbdWWL6gIjZoDJ5YHmv HYhbi9EG+6slDR1Wkozuv6ES9lFl2x9/s6LPhb7BOfzSvv0zIjZ/UY1TZ7cUQXlO 4Cl71OK+O2Khh3qfzjpsqzfgsv374/kz5HokGHB66FdG/eUgCcoj/7hIzgyi7Ipk 2BjCaBnLQA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:29 2026 by rpki-client