$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft File: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft (raw, json) Hash identifier: RGqplnxVcjVjuikxB8glBKum2MvK44xfDyTMywspZYQ= Subject key identifier: 33:2D:6A:D9:91:EC:9F:B3:31:97:30:F5:F7:06:77:5E:8D:24:41:2E Authority key identifier: FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D Certificate issuer: /CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D Certificate serial: 396A9B2F01BE9D334DB816276ED9B347A18FEE38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 15:59:43 +0000 Manifest this update: Fri 17 Apr 2026 15:54:43 +0000 Manifest next update: Sat 18 Apr 2026 19:20:43 +0000 Files and hashes: 1: 323430373a396263303a3a2f33322d3332203d3e20313436373436.roa (hash: Oy/Z6kZQu3MFqdajWzdr4HEF6jg7aYQKFEno2tldjJE=) 2: 3130332e3136392e36322e302f32332d3233203d3e20313436373436.roa (hash: K+igfdpX4dyqlaiPGaiQ/D+ne2AyiTVYoQO5bTIdUK8=) 3: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl (hash: youmbouyyM6yTuc+N+51hw6HhFD43jYyo+zR7yaLkkE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6a:9b:2f:01:be:9d:33:4d:b8:16:27:6e:d9:b3:47:a1:8f:ee:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D Validity Not Before: Apr 17 15:54:43 2026 GMT Not After : Apr 18 19:20:43 2026 GMT Subject: CN=332D6AD991EC9FB3319730F5F706775E8D24412E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:12:d2:f7:80:dd:50:d8:16:d2:a8:84:58: 06:58:73:1e:06:8c:ef:df:a3:3f:de:60:5e:74:c5: 87:16:dd:91:2b:f7:f5:34:c9:ed:c7:34:23:fc:5b: 2e:d1:54:5d:0b:25:40:7d:4a:3d:23:15:a6:cd:79: 6b:5a:1b:9e:66:24:90:a6:04:3f:c9:86:84:a7:f2: 83:3d:5f:59:9b:b3:b7:0f:18:cc:ad:14:6d:93:6e: 78:a7:3b:d4:da:fa:98:22:e8:97:5c:34:c9:6c:18: 15:55:69:7e:0b:c8:b4:6a:dc:b5:6c:a7:cd:5b:c2: 98:fb:3f:30:cf:68:8f:4a:74:58:dd:c8:df:05:13: 3f:74:e0:c4:53:c5:1b:d4:d1:9e:ad:21:f7:7e:f3: 4e:b4:bb:5c:6a:cd:18:d6:fd:7e:ec:6d:fa:62:69: 8e:4b:9d:5b:bd:ab:dd:ba:25:4b:e0:2c:04:f0:8e: ac:1d:d7:d9:c8:df:af:ed:1d:bd:93:ed:44:b8:18: 78:29:a6:1b:72:6e:f4:98:76:eb:0f:18:e7:24:df: cb:a8:26:7b:b8:14:25:45:6a:42:fc:b5:54:d5:f6: f6:31:a7:0d:8e:69:01:c0:ca:ad:84:26:07:42:24: 2a:84:09:4c:4e:73:6c:f3:98:a9:3c:f2:d8:d6:56: b7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:6A:D9:91:EC:9F:B3:31:97:30:F5:F7:06:77:5E:8D:24:41:2E X509v3 Authority Key Identifier: keyid:FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b1:fa:ea:8a:ad:32:b0:50:4e:33:df:19:35:6a:81:94:11: ea:27:d2:f1:83:7f:ba:9a:ed:70:33:cd:d4:50:a0:3a:73:df: f2:f4:a7:1d:30:bd:ac:2d:dc:78:64:5b:44:35:5f:4a:45:8f: d0:3b:10:0a:9f:c1:a9:7c:92:14:0f:df:0e:a0:a0:87:bf:ac: 6c:fc:cb:a8:03:e6:1c:08:9f:4e:22:ab:58:6d:e1:30:26:b6: 8a:76:93:4c:11:26:b7:eb:4a:3b:ef:51:6e:f7:cd:35:70:59: 46:19:6f:a4:b1:41:12:f5:69:ee:ae:bf:7d:5e:18:a4:3b:0c: 43:61:f9:1f:27:39:1c:88:be:9c:c3:d8:31:99:35:17:f8:63: d6:a3:8f:74:7b:33:11:64:05:97:94:22:8b:d5:e4:8b:85:cc: be:ec:7e:6b:24:7f:bf:66:b5:d3:e4:2d:e3:eb:00:9e:74:e4: f4:3c:0b:a0:c3:f7:76:c8:7a:d1:e9:7c:68:cd:ba:dd:72:b4: 22:22:ab:29:1b:1f:69:de:56:a1:2a:cd:ab:ab:0c:ba:d3:2c: 86:48:89:0c:37:1b:bf:bf:a5:61:51:6d:86:b5:2c:83:f9:fd: fb:4f:6f:ba:99:f9:47:b5:d3:20:39:74:80:31:53:dc:f3:cc: ea:48:39:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOWqbLwG+nTNNuBYnbtmzR6GP7jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFEMEFENUNDNThGQjRCMzI3MTU2OUExNkM4MDVBNTNB QjRBMjcwRDAeFw0yNjA0MTcxNTU0NDNaFw0yNjA0MTgxOTIwNDNaMDMxMTAvBgNV BAMTKDMzMkQ2QUQ5OTFFQzlGQjMzMTk3MzBGNUY3MDY3NzVFOEQyNDQxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdRLS94DdUNgW0qiEWAZYcx4G jO/foz/eYF50xYcW3ZEr9/U0ye3HNCP8Wy7RVF0LJUB9Sj0jFabNeWtaG55mJJCm BD/JhoSn8oM9X1mbs7cPGMytFG2TbninO9Ta+pgi6JdcNMlsGBVVaX4LyLRq3LVs p81bwpj7PzDPaI9KdFjdyN8FEz904MRTxRvU0Z6tIfd+8060u1xqzRjW/X7sbfpi aY5LnVu9q926JUvgLATwjqwd19nI36/tHb2T7US4GHgpphtybvSYdusPGOck38uo Jnu4FCVFakL8tVTV9vYxpw2OaQHAyq2EJgdCJCqECUxOc2zzmKk88tjWVrdpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMy1q2ZHsn7MxlzD19wZ3Xo0kQS4wHwYDVR0j BBgwFoAU+tCtXMWPtLMnFWmhbIBaU6tKJw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njc2MTQ1Mzk3MDQ1NjU3OC8wL0ZBRDBBRDVDQzU4RkI0QjMyNzE1NjlBMTZDODA1 QTUzQUI0QTI3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkFEMEFENUNDNThGQjRCMzI3MTU2OUExNkM4MDVBNTNBQjRBMjcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3NjE0NTM5NzA0NTY1NzgvMC9GQUQwQUQ1Q0M1OEZC NEIzMjcxNTY5QTE2QzgwNUE1M0FCNEEyNzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibH66oqtMrBQ TjPfGTVqgZQR6ifS8YN/uprtcDPN1FCgOnPf8vSnHTC9rC3ceGRbRDVfSkWP0DsQ Cp/BqXySFA/fDqCgh7+sbPzLqAPmHAifTiKrWG3hMCa2inaTTBEmt+tKO+9RbvfN NXBZRhlvpLFBEvVp7q6/fV4YpDsMQ2H5Hyc5HIi+nMPYMZk1F/hj1qOPdHszEWQF l5Qii9Xki4XMvux+ayR/v2a10+Qt4+sAnnTk9DwLoMP3dsh60el8aM263XK0IiKr KRsfad5WoSrNq6sMutMshkiJDDcbv7+lYVFthrUsg/n9+09vupn5R7XTIDl0gDFT 3PPM6kg5NQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:59:36 2026 by rpki-client