$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json) Hash identifier: XPX5uFy1BnwYDGNIl2MHE+IzWFs2lz4QPLeoRpKEZvc= Subject key identifier: D9:BE:1E:27:AC:83:E8:59:87:73:3A:F7:90:BB:23:F9:92:C2:18:A4 Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Certificate serial: 45FEC98EB45BFA9B426FB30BB5B22D5C7F1C9A5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 18:39:47 +0000 Manifest this update: Fri 17 Apr 2026 18:34:47 +0000 Manifest next update: Sat 18 Apr 2026 19:24:47 +0000 Files and hashes: 1: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: eEAD346EpQEFHEZg729oMjvbmYCk8IbMwk3k4qG9Aac=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fe:c9:8e:b4:5b:fa:9b:42:6f:b3:0b:b5:b2:2d:5c:7f:1c:9a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Validity Not Before: Apr 17 18:34:47 2026 GMT Not After : Apr 18 19:24:47 2026 GMT Subject: CN=D9BE1E27AC83E85987733AF790BB23F992C218A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:c9:cf:39:bd:26:a3:08:88:e2:40:0b:e3: 8c:4c:59:ab:c0:77:a3:98:9f:45:1b:d9:96:c8:ef: 31:7e:8a:71:ac:7e:8b:58:91:5e:d5:45:44:82:a0: 54:af:15:1a:e9:63:fa:6b:04:e3:8b:88:13:cb:8e: c1:c8:05:ef:15:ee:85:1c:1f:3d:26:38:8a:0d:ef: 0c:33:9c:9e:84:b3:94:76:15:39:2c:31:59:86:51: 42:ce:1c:eb:c9:a7:bd:f2:7f:ba:ab:e9:66:3e:a8: d3:0e:70:26:41:0f:24:d1:e4:58:7e:61:dd:29:7c: ff:d8:ca:11:81:01:89:de:3e:54:6e:0f:ad:46:58: cc:9e:a5:8f:4c:72:ef:7b:c0:1e:d7:f0:12:1b:b5: 5b:e9:d6:02:e7:f8:67:35:ec:89:4b:f7:73:02:76: 2e:8b:7e:b5:83:ce:51:9a:e6:ba:af:d0:ef:cf:71: 8f:30:50:4d:8b:dd:1c:0d:de:8d:c2:0d:e0:91:64: 92:4f:6c:d3:a6:5b:63:ae:53:57:77:cd:3e:06:73: 33:1f:e5:f3:55:1c:9a:c9:ba:09:92:da:56:b6:97: 35:40:c5:59:07:6e:32:3b:00:3e:c1:d6:66:ce:b5: af:4d:6a:8a:c9:29:c9:03:1f:93:74:47:1d:73:54: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BE:1E:27:AC:83:E8:59:87:73:3A:F7:90:BB:23:F9:92:C2:18:A4 X509v3 Authority Key Identifier: keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ee:18:fe:b3:0e:b8:b0:b2:91:d8:18:c2:3b:ec:c6:ce:20: 4d:67:8a:51:c3:63:cb:54:5b:97:e2:7c:3c:5a:b9:43:44:25: db:b7:2d:20:7b:62:93:b6:c8:5c:13:28:30:4c:41:13:28:90: 02:68:bb:74:58:3c:66:8e:b8:c4:5e:5f:dc:99:1d:f1:7d:a1: f3:06:0b:53:a4:c8:63:5d:d3:83:74:38:d1:30:f1:4c:47:16: 04:d3:dc:8a:08:1a:dc:29:10:8a:4e:d0:12:bc:28:20:15:78: 05:c8:15:bc:8a:71:a0:31:b3:de:bc:4a:1a:1a:e1:f1:46:96: 60:f6:5f:8a:3d:19:de:ad:8a:67:aa:63:69:a6:6d:dc:a5:0b: b7:9e:c0:77:75:9e:cd:db:be:e7:32:ff:a7:28:77:54:4e:f9: 9f:b2:f8:6d:95:45:53:f1:78:19:73:ac:0b:05:15:de:9f:6c: a2:61:6e:44:cf:b2:c3:a5:8b:f0:49:4c:98:3e:61:96:90:20: dd:6d:6f:ef:e5:62:37:a4:40:cb:42:28:05:a3:22:dd:df:4b: e3:ce:28:36:3d:20:9c:fd:c8:4a:e2:c3:ae:f2:8d:c9:4a:74: 18:52:fe:1d:61:44:fa:33:63:57:ed:39:43:65:00:cd:30:e1: 4a:8a:fe:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURf7JjrRb+ptCb7MLtbItXH8cml8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2 RUFCNTJENDAeFw0yNjA0MTcxODM0NDdaFw0yNjA0MTgxOTI0NDdaMDMxMTAvBgNV BAMTKEQ5QkUxRTI3QUM4M0U4NTk4NzczM0FGNzkwQkIyM0Y5OTJDMjE4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUsnPOb0mowiI4kAL44xMWavA d6OYn0Ub2ZbI7zF+inGsfotYkV7VRUSCoFSvFRrpY/prBOOLiBPLjsHIBe8V7oUc Hz0mOIoN7wwznJ6Es5R2FTksMVmGUULOHOvJp73yf7qr6WY+qNMOcCZBDyTR5Fh+ Yd0pfP/YyhGBAYnePlRuD61GWMyepY9Mcu97wB7X8BIbtVvp1gLn+Gc17IlL93MC di6LfrWDzlGa5rqv0O/PcY8wUE2L3RwN3o3CDeCRZJJPbNOmW2OuU1d3zT4GczMf 5fNVHJrJugmS2la2lzVAxVkHbjI7AD7B1mbOta9NaorJKckDH5N0Rx1zVApFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2b4eJ6yD6FmHczr3kLsj+ZLCGKQwHwYDVR0j BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI0NDMxMzcvMC85QjU0QTgyMkQ4QjFF QUI3RTYwQzg1RDJCMzFEQTQ4ODZFQUI1MkQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+4Y/rMOuLCy kdgYwjvsxs4gTWeKUcNjy1Rbl+J8PFq5Q0Ql27ctIHtik7bIXBMoMExBEyiQAmi7 dFg8Zo64xF5f3Jkd8X2h8wYLU6TIY13Tg3Q40TDxTEcWBNPcigga3CkQik7QErwo IBV4BcgVvIpxoDGz3rxKGhrh8UaWYPZfij0Z3q2KZ6pjaaZt3KULt57Ad3Wezdu+ 5zL/pyh3VE75n7L4bZVFU/F4GXOsCwUV3p9somFuRM+yw6WL8ElMmD5hlpAg3W1v 7+ViN6RAy0IoBaMi3d9L484oNj0gnP3ISuLDrvKNyUp0GFL+HWFE+jNjV+05Q2UA zTDhSor+jg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:20:18 2026 by rpki-client