$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json) Hash identifier: yMBdiJPxfffqtlJH9078NxQyZB89WmL9SeiWXs6N3Rk= Subject key identifier: 9E:BE:A0:E4:A0:8C:E0:F4:D1:B0:5D:83:1C:B5:58:54:2E:D6:BC:9B Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Certificate serial: 7DC9FF59EFD12B8A64B7CFFA721FFF7C3878A249 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 07:54:42 +0000 Manifest this update: Fri 17 Apr 2026 07:49:42 +0000 Manifest next update: Sat 18 Apr 2026 10:28:42 +0000 Files and hashes: 1: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=) 2: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: jlsLK9uqZPU7tffG1kGgSRyk1Wko8vtSPb+Ahs2QOyk=) 3: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=) 4: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c9:ff:59:ef:d1:2b:8a:64:b7:cf:fa:72:1f:ff:7c:38:78:a2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Validity Not Before: Apr 17 07:49:42 2026 GMT Not After : Apr 18 10:28:42 2026 GMT Subject: CN=9EBEA0E4A08CE0F4D1B05D831CB558542ED6BC9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:be:0d:87:61:d4:95:a8:4d:1e:f5:d5:0b: c1:85:a1:1c:9a:6f:75:33:ce:a6:7f:0c:a8:6a:3b: 7f:a2:43:2b:68:7e:00:9d:be:13:70:a1:b3:f7:d9: c7:c2:a7:b8:85:38:3e:7b:81:bf:01:74:a3:9c:bc: d0:c4:80:8f:d7:5b:ba:1d:aa:88:cf:15:4f:ea:70: 9f:85:d9:c5:5c:2c:29:a9:9d:49:1d:5c:d4:0b:8f: 9c:02:80:19:6a:dc:44:ce:3d:e9:6b:77:b5:e0:4d: 8e:c0:14:e7:1a:a8:e1:9f:83:a5:b6:78:25:53:a7: 93:a0:ae:6e:07:21:07:97:f4:69:bc:e3:ac:26:81: 14:2f:ac:85:c2:f1:a0:d6:ff:01:ac:bc:5e:56:87: 15:ac:2c:b9:63:d6:99:eb:58:2f:76:f4:92:68:31: 07:0a:35:2e:5c:20:53:61:30:f2:83:32:40:fa:84: f8:c8:f5:e1:95:52:d6:db:a1:94:17:3d:10:02:34: 9e:ea:ad:75:8d:4e:5e:ab:b4:06:0a:cd:e9:6c:7d: 7b:9b:6f:73:58:1b:ff:8b:6f:f4:d8:76:7d:82:10: 1e:14:dc:2b:dc:b9:a2:1e:9b:b9:02:df:95:c3:00: 29:8c:57:f1:7d:77:2f:2f:09:80:f9:60:1e:b8:49: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BE:A0:E4:A0:8C:E0:F4:D1:B0:5D:83:1C:B5:58:54:2E:D6:BC:9B X509v3 Authority Key Identifier: keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:17:f6:67:cd:f3:19:00:7f:ff:97:b0:24:25:b1:a7:68:97: d5:b4:f7:5b:96:8d:fb:c2:8c:33:07:6f:e9:71:35:e5:d2:30: 4e:16:70:5c:b7:1b:2e:b9:56:6c:ec:ca:38:64:20:9a:31:b5: 7c:51:a1:df:39:97:13:1b:34:fa:14:5f:69:c9:7e:54:c7:20: a0:90:c1:9a:46:51:25:58:f6:e0:40:f6:51:58:e6:e0:96:e8: 6c:87:8a:8a:50:48:8f:17:b4:a6:09:67:19:3c:1e:3a:a8:79: 5f:ab:25:77:db:9b:4c:3e:59:84:95:f4:bf:fb:3d:5a:4b:1a: a5:19:75:17:10:48:40:53:81:3b:93:29:3a:a5:0d:c1:7b:68: d1:1b:87:6a:45:73:1d:e4:84:d3:e4:85:ae:39:ea:33:5e:3a: 9f:1b:5d:e8:3c:4f:74:83:62:e6:fb:ca:b9:e8:3c:32:56:a2: 3e:33:73:fe:dd:87:d8:dc:18:0c:b8:2d:de:85:e9:3c:99:dd: 5a:d9:df:a1:06:30:d5:48:d1:fe:b1:2d:30:79:f8:6d:95:fa: bb:15:ad:58:68:76:72:c9:75:bd:a1:a1:cd:7b:f4:86:44:be: f3:34:9a:1b:a9:fe:fd:9c:0f:1d:ae:ca:ad:9c:aa:23:75:72: 65:af:d8:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfcn/We/RK4pkt8/6ch//fDh4okkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdB N0EwOEY2MzAeFw0yNjA0MTcwNzQ5NDJaFw0yNjA0MTgxMDI4NDJaMDMxMTAvBgNV BAMTKDlFQkVBMEU0QTA4Q0UwRjREMUIwNUQ4MzFDQjU1ODU0MkVENkJDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVIb4Nh2HUlahNHvXVC8GFoRya b3UzzqZ/DKhqO3+iQytofgCdvhNwobP32cfCp7iFOD57gb8BdKOcvNDEgI/XW7od qojPFU/qcJ+F2cVcLCmpnUkdXNQLj5wCgBlq3ETOPelrd7XgTY7AFOcaqOGfg6W2 eCVTp5Ogrm4HIQeX9Gm846wmgRQvrIXC8aDW/wGsvF5WhxWsLLlj1pnrWC929JJo MQcKNS5cIFNhMPKDMkD6hPjI9eGVUtbboZQXPRACNJ7qrXWNTl6rtAYKzelsfXub b3NYG/+Lb/TYdn2CEB4U3CvcuaIem7kC35XDACmMV/F9dy8vCYD5YB64SbF5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnr6g5KCM4PTRsF2DHLVYVC7WvJswHwYDVR0j BBgwFoAUY0WB8blfuiBLHI0CcbuBx6egj2MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjAwMzE5OTA0MTUzOC8wLzYzNDU4MUYxQjk1RkJBMjA0QjFDOEQwMjcxQkI4 MUM3QTdBMDhGNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwMDMxOTkwNDE1MzgvMC82MzQ1ODFGMUI5NUZC QTIwNEIxQzhEMDI3MUJCODFDN0E3QTA4RjYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRf2Z83zGQB/ /5ewJCWxp2iX1bT3W5aN+8KMMwdv6XE15dIwThZwXLcbLrlWbOzKOGQgmjG1fFGh 3zmXExs0+hRfacl+VMcgoJDBmkZRJVj24ED2UVjm4JbobIeKilBIjxe0pglnGTwe Oqh5X6sld9ubTD5ZhJX0v/s9WksapRl1FxBIQFOBO5MpOqUNwXto0RuHakVzHeSE 0+SFrjnqM146nxtd6DxPdINi5vvKueg8MlaiPjNz/t2H2NwYDLgt3oXpPJndWtnf oQYw1UjR/rEtMHn4bZX6uxWtWGh2csl1vaGhzXv0hkS+8zSaG6n+/ZwPHa7KrZyq I3VyZa/YKA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:20:31 2026 by rpki-client