$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft File: 9256C7E8713211251A9F619DBC38D99394ABAA9D.mft (raw, json) Hash identifier: TU+q6pa9xm1frkBKPF5z2oDnGXy0d9EvnnEtYhIPTik= Subject key identifier: 8F:BC:53:59:B7:32:A9:61:93:72:45:D0:2D:C9:4D:03:25:21:B2:D8 Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D Certificate serial: 6C0CF1843E713C7F25135041AE38F05D098714 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft Manifest number: 04 Signing time: Fri 17 Apr 2026 17:24:44 +0000 Manifest this update: Fri 17 Apr 2026 17:19:44 +0000 Manifest next update: Sat 18 Apr 2026 19:29:44 +0000 Files and hashes: 1: 9256C7E8713211251A9F619DBC38D99394ABAA9D.crl (hash: j1W+j8nEMXdImSZVkLAcqdiX1fPWJ/9ChgOElzhcCP0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0c:f1:84:3e:71:3c:7f:25:13:50:41:ae:38:f0:5d:09:87:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D Validity Not Before: Apr 17 17:19:44 2026 GMT Not After : Apr 18 19:29:44 2026 GMT Subject: CN=8FBC5359B732A961937245D02DC94D032521B2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:a1:9b:4e:4f:37:63:f1:87:46:9a:28:b5: 75:26:1c:d4:94:b3:53:47:1e:4f:a8:57:75:79:5e: da:6e:88:46:59:8a:64:0a:96:ce:c5:9f:0c:0b:ea: 1e:80:33:51:89:6a:3a:34:45:5a:37:f2:d3:5f:8d: 63:f6:8a:f5:d6:d3:22:64:f3:ab:50:75:8a:b4:7a: ac:27:63:a2:d2:a5:0b:bb:a6:21:b4:26:5a:42:d3: 54:16:22:c9:71:d9:a6:ba:71:c0:d4:ea:61:75:56: bf:0a:65:e6:c8:09:d3:18:9e:a2:99:dc:4c:49:7f: d8:e8:2a:55:fa:ed:b4:3f:cd:61:34:12:93:4f:ca: 5d:f4:d3:4d:59:f4:6d:68:65:86:ba:85:11:65:5b: 2e:43:29:80:7e:ae:8a:8d:9f:f5:bf:32:10:93:2c: 0a:ec:00:b1:ea:f2:73:fe:8a:24:b4:91:2d:7d:87: 0c:e2:45:46:2b:06:f4:9d:59:47:ea:03:1f:3a:70: e0:e3:71:5d:a3:9d:a0:05:63:83:00:e8:8f:e0:00: 79:5f:1b:53:c6:0a:4f:98:d9:35:1f:b7:ff:fa:10: d2:36:ef:17:16:09:26:55:6a:69:9b:01:8e:90:c0: 8b:2d:61:b8:e8:81:b5:ba:b4:ef:91:e2:76:b4:f2: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BC:53:59:B7:32:A9:61:93:72:45:D0:2D:C9:4D:03:25:21:B2:D8 X509v3 Authority Key Identifier: keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:19:6e:5c:d2:93:8b:7a:67:b5:97:16:0f:76:05:94:5b:7b: a5:91:04:04:95:d3:cd:a7:8a:b3:5f:4b:02:20:56:66:97:29: fe:da:3a:50:1f:be:03:84:c1:d4:66:bd:03:19:5e:da:6a:be: 1f:6a:10:7b:c3:17:0d:4d:ef:f8:80:e3:43:1e:66:3e:6b:4e: 54:cd:83:9e:ef:5c:15:ab:39:fe:c3:42:ca:f7:64:e6:a0:d3: 7c:6d:a7:f1:d0:2d:57:ff:87:86:13:29:42:9d:3a:b8:49:53: 13:d3:23:d3:9e:0a:a6:10:a1:62:ad:16:45:5f:67:11:f8:73: 0a:02:44:da:4e:55:00:e9:8f:66:d0:cf:1f:7b:f4:f2:7c:cd: 70:a1:bc:cd:3a:a5:ca:10:60:5c:af:97:6b:c4:0a:6e:f4:39: 5f:0c:33:9b:84:ae:92:a4:1a:22:87:d8:27:34:59:da:9a:f2: d6:b3:14:36:b1:9c:d3:35:82:d8:06:c1:2b:d0:3a:20:1d:31: 96:24:df:3f:8e:f4:bb:bd:d3:13:da:81:72:00:0b:e4:df:d4: 80:b0:79:93:ac:40:7b:19:dd:a0:11:54:30:d8:6a:0a:d4:c6: 8a:e8:c4:fc:29:76:f6:ec:d5:a3:6f:fc:51:5e:21:0a:b6:05: 40:00:cc:9e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITbAzxhD5xPH8lE1BBrjjwXQmHFDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5MjU2QzdFODcxMzIxMTI1MUE5RjYxOURCQzM4RDk5Mzk0 QUJBQTlEMB4XDTI2MDQxNzE3MTk0NFoXDTI2MDQxODE5Mjk0NFowMzExMC8GA1UE AxMoOEZCQzUzNTlCNzMyQTk2MTkzNzI0NUQwMkRDOTREMDMyNTIxQjJEODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALhToZtOTzdj8YdGmii1dSYc1JSz U0ceT6hXdXle2m6IRlmKZAqWzsWfDAvqHoAzUYlqOjRFWjfy01+NY/aK9dbTImTz q1B1irR6rCdjotKlC7umIbQmWkLTVBYiyXHZprpxwNTqYXVWvwpl5sgJ0xieopnc TEl/2OgqVfrttD/NYTQSk0/KXfTTTVn0bWhlhrqFEWVbLkMpgH6uio2f9b8yEJMs CuwAseryc/6KJLSRLX2HDOJFRisG9J1ZR+oDHzpw4ONxXaOdoAVjgwDoj+AAeV8b U8YKT5jZNR+3//oQ0jbvFxYJJlVqaZsBjpDAiy1huOiBtbq075HidrTy+I8CAwEA AaOCAh0wggIZMB0GA1UdDgQWBBSPvFNZtzKpYZNyRdAtyU0DJSGy2DAfBgNVHSME GDAWgBSSVsfocTIRJRqfYZ28ONmTlKuqnTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2 NzA4NzQ5NTA0MDIwNDgyLzAvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5 OTM5NEFCQUE5RC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS85MjU2QzdFODcxMzIxMTI1MUE5RjYxOURCQzM4RDk5Mzk0QUJBQTlELmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTA5NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjEx MjUxQTlGNjE5REJDMzhEOTkzOTRBQkFBOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYGW5c0pOLeme1 lxYPdgWUW3ulkQQEldPNp4qzX0sCIFZmlyn+2jpQH74DhMHUZr0DGV7aar4fahB7 wxcNTe/4gONDHmY+a05UzYOe71wVqzn+w0LK92TmoNN8bafx0C1X/4eGEylCnTq4 SVMT0yPTngqmEKFirRZFX2cR+HMKAkTaTlUA6Y9m0M8fe/TyfM1wobzNOqXKEGBc r5drxApu9DlfDDObhK6SpBoih9gnNFnamvLWsxQ2sZzTNYLYBsEr0DogHTGWJN8/ jvS7vdMT2oFyAAvk39SAsHmTrEB7Gd2gEVQw2GoK1MaK6MT8KXb27NWjb/xRXiEK tgVAAMye -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:31 2026 by rpki-client