$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json) Hash identifier: NskHNTQmvzLJgY+xddr+ERzyNhG/tm6w/7QruYzbxsA= Subject key identifier: DD:9F:B7:EA:9E:15:79:F4:07:64:C4:A9:F9:57:9A:F5:04:7C:A7:7E Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 29C7F8435E94635BF240E089C8E1B8E5D3CAD30F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft Manifest number: 04 Signing time: Fri 17 Apr 2026 15:54:43 +0000 Manifest this update: Fri 17 Apr 2026 15:49:43 +0000 Manifest next update: Sat 18 Apr 2026 17:32:43 +0000 Files and hashes: 1: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=) 2: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: sK5StNu21kSzZRLrgbp9lV8z2pc8ICB9ogo1VJAq91o=) 3: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=) 4: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=) 5: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=) 6: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=) 7: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c7:f8:43:5e:94:63:5b:f2:40:e0:89:c8:e1:b8:e5:d3:ca:d3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: Apr 17 15:49:43 2026 GMT Not After : Apr 18 17:32:43 2026 GMT Subject: CN=DD9FB7EA9E1579F40764C4A9F9579AF5047CA77E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:de:0f:3d:50:85:fa:fd:5a:27:02:ad:23: eb:72:6c:0a:dd:f2:89:13:44:7a:62:a2:e2:57:c9: 68:1e:25:09:b4:73:23:71:b8:85:c1:9e:2d:53:3a: 0c:0e:07:bb:be:b6:48:27:80:d8:1b:41:63:1d:81: 8c:0f:4a:f1:c1:90:80:ac:5f:36:7a:15:c4:26:45: 99:a5:5d:a2:89:c9:f3:0b:a2:14:49:a7:48:27:e9: 84:66:87:50:89:da:70:35:50:c6:dc:a1:fa:dd:98: 34:12:64:88:ba:79:c3:bb:ba:6a:d7:11:58:71:62: 87:d8:23:1b:d4:f2:45:ca:50:66:d0:e9:bf:2a:fa: 84:fd:38:05:0e:29:68:72:b8:b3:d1:51:26:86:79: 9a:f9:a9:ae:05:d4:6a:05:46:d9:9e:1a:f7:53:56: fb:b8:ce:e3:f7:1d:16:e7:e2:e0:f3:9e:ad:9e:fe: db:07:7d:b6:ce:ce:83:6e:8b:26:36:b3:36:8e:a0: ca:1b:ac:d0:eb:f0:92:ed:33:b7:d0:4e:81:12:64: d3:ea:76:d7:fe:a1:6b:7b:5e:0a:d1:39:97:3c:07: c0:79:75:12:a9:63:09:13:0e:79:f4:c1:42:51:fc: 5b:6b:91:8f:93:5f:0d:42:23:61:1c:df:44:01:e6: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9F:B7:EA:9E:15:79:F4:07:64:C4:A9:F9:57:9A:F5:04:7C:A7:7E X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a4:83:27:a7:3f:16:e6:dd:de:cb:bc:1c:31:6e:d0:75:76: 4c:b5:b6:2b:60:aa:9f:6b:d1:f6:05:c5:94:5d:f2:a1:6d:14: 5f:7a:08:1a:3c:94:2e:1f:9b:05:80:07:b4:3d:18:ae:96:55: 63:ce:7b:5c:53:e0:fa:9c:ee:e5:81:94:4b:0b:a9:c9:60:85: 4a:73:43:73:5e:be:79:c3:5a:90:16:82:80:29:7d:b1:e3:a4: 51:3d:72:4c:fe:eb:65:75:55:08:ac:cf:d4:36:8b:76:f7:17: 30:24:9e:c0:b2:86:e9:1a:be:98:dc:d3:d7:c5:ea:6e:68:8e: 6d:d5:33:2f:ba:38:60:00:db:a8:dc:5e:91:9d:ab:4e:d8:64: 85:31:15:2e:c8:80:b3:30:64:5c:0b:d0:df:2e:e7:76:fd:af: 2c:d3:53:31:39:1c:5c:46:64:1f:c5:c4:99:00:d5:5f:32:77: 39:9f:9c:0a:ce:72:82:dc:3f:89:9c:58:13:5f:a8:54:4c:de: 26:d5:5b:23:06:10:ed:82:f0:6e:b3:c2:12:ab:24:47:c2:09: 1d:99:56:2a:88:2a:93:f7:e3:f5:b2:b0:79:e7:ac:ea:88:b1: 3a:af:48:71:08:28:92:bd:2d:5b:4d:33:b6:d0:bb:ae:c7:14: 41:54:f1:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKcf4Q16UY1vyQOCJyOG45dPK0w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjA0MTcxNTQ5NDNaFw0yNjA0MTgxNzMyNDNaMDMxMTAvBgNV BAMTKEREOUZCN0VBOUUxNTc5RjQwNzY0QzRBOUY5NTc5QUY1MDQ3Q0E3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9N4PPVCF+v1aJwKtI+tybArd 8okTRHpiouJXyWgeJQm0cyNxuIXBni1TOgwOB7u+tkgngNgbQWMdgYwPSvHBkICs XzZ6FcQmRZmlXaKJyfMLohRJp0gn6YRmh1CJ2nA1UMbcofrdmDQSZIi6ecO7umrX EVhxYofYIxvU8kXKUGbQ6b8q+oT9OAUOKWhyuLPRUSaGeZr5qa4F1GoFRtmeGvdT Vvu4zuP3HRbn4uDznq2e/tsHfbbOzoNuiyY2szaOoMobrNDr8JLtM7fQToESZNPq dtf+oWt7XgrROZc8B8B5dRKpYwkTDnn0wUJR/FtrkY+TXw1CI2Ec30QB5qjnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3Z+36p4VefQHZMSp+Vea9QR8p34wHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8wNDkxRjQyQTM5OTBC RDYwRDMyMjQ4NTgzNzQxRjE0MUFDNjFGMEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6SDJ6c/Fubd 3su8HDFu0HV2TLW2K2Cqn2vR9gXFlF3yoW0UX3oIGjyULh+bBYAHtD0YrpZVY857 XFPg+pzu5YGUSwupyWCFSnNDc16+ecNakBaCgCl9seOkUT1yTP7rZXVVCKzP1DaL dvcXMCSewLKG6Rq+mNzT18XqbmiObdUzL7o4YADbqNxekZ2rTthkhTEVLsiAszBk XAvQ3y7ndv2vLNNTMTkcXEZkH8XEmQDVXzJ3OZ+cCs5ygtw/iZxYE1+oVEzeJtVb IwYQ7YLwbrPCEqskR8IJHZlWKogqk/fj9bKweees6oixOq9IcQgokr0tW00zttC7 rscUQVTxow== -----END CERTIFICATE-----Generated at Sat Apr 18 03:52:12 2026 by rpki-client