$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft File: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft (raw, json) Hash identifier: lWPDQo3g2fETXHgKETbf4Wjkgzo/J9zbHDV+5rn1Bg8= Subject key identifier: A2:42:E0:C5:2A:1C:F0:C0:79:FF:44:1B:7E:81:7B:02:13:AC:8B:63 Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 Certificate issuer: /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Certificate serial: 7F7EC72C43A9096B39B5445515D4474EC0FF8527 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft Manifest number: 04 Signing time: Fri 17 Apr 2026 15:59:43 +0000 Manifest this update: Fri 17 Apr 2026 15:54:43 +0000 Manifest next update: Sat 18 Apr 2026 16:10:43 +0000 Files and hashes: 1: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl (hash: /uxQrgnhyCm9FQx1HXHHOYTMXwV5bPdUTR/mzyXgcrU=) 2: 323430313a633032303a3a2f33322d3332203d3e20313531323736.roa (hash: sWyLgWj9a8RCb7kKBNUwmHI7X2u5++ri+kUpNqQ/hsk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7e:c7:2c:43:a9:09:6b:39:b5:44:55:15:d4:47:4e:c0:ff:85:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Validity Not Before: Apr 17 15:54:43 2026 GMT Not After : Apr 18 16:10:43 2026 GMT Subject: CN=A242E0C52A1CF0C079FF441B7E817B0213AC8B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:ba:ee:e3:e4:22:65:33:f2:47:20:a7:e4: 0d:b8:bb:fc:6d:32:f0:2e:fa:76:d0:ed:77:68:ca: 00:e0:55:12:cd:f0:f0:dc:ad:86:73:b3:90:24:86: 39:99:59:70:ba:45:e5:19:2c:8d:20:d2:05:01:98: 55:c7:87:81:ee:55:05:46:f6:6e:6e:51:18:8e:9e: 5f:3d:54:30:fd:f4:17:00:3b:df:86:e9:e8:c1:23: 9b:ab:51:32:2d:e2:34:00:54:3d:3c:22:81:84:e8: 8d:f4:ab:4c:d9:12:7d:71:b2:c0:27:ae:99:08:5c: 69:26:e9:00:8b:1b:65:2d:ff:e9:99:02:ca:a4:db: e6:a9:a9:9b:af:7b:1f:5f:b7:5b:f8:2c:3c:61:35: 26:26:99:3f:ea:68:47:47:7b:32:df:bd:90:12:c6: 64:51:94:8b:0f:5d:ad:6f:cd:ed:19:59:21:f8:83: ae:dc:d6:a8:27:50:8a:84:90:7b:eb:98:ff:4a:fd: 4e:33:c8:27:77:f1:a4:26:a0:cc:66:fb:6d:59:6e: e8:63:18:15:b8:87:bc:5f:a4:8b:93:20:6d:7f:e6: b4:42:d4:a5:73:a7:8c:a2:ed:a2:0a:7f:60:67:45: 1c:bc:50:2a:7a:4d:42:e3:16:3a:d2:f4:46:6e:26: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:42:E0:C5:2A:1C:F0:C0:79:FF:44:1B:7E:81:7B:02:13:AC:8B:63 X509v3 Authority Key Identifier: keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:78:27:4f:33:78:29:db:9c:4c:4b:d8:21:db:63:99:16:74: ff:09:c9:19:e3:3f:38:6d:1c:63:74:a0:cc:63:75:75:cb:66: 49:77:86:b0:f9:2e:95:d5:03:2c:8b:0e:e8:e5:ec:0b:0e:94: 1b:c4:01:92:49:c0:eb:10:25:cc:ee:2e:45:54:1d:5d:44:0c: 13:c8:1e:79:09:0b:0d:25:83:62:fc:2a:fa:4b:56:01:e5:6e: 5b:b6:5d:91:f2:69:30:aa:83:a2:2e:01:cd:6f:55:b4:5b:0b: e0:f4:d1:54:bd:15:d2:26:b4:69:2d:fd:4a:85:7d:5d:df:c3: ca:45:f6:a3:08:25:55:c5:16:ff:fb:88:ec:fb:23:00:fb:13: 9f:bb:57:bc:56:3d:70:97:38:9a:0e:cf:2a:39:b7:3e:06:e6: df:79:36:d4:02:94:56:15:99:81:9a:11:e8:c8:db:98:40:cd: d5:fd:41:3e:ba:f3:ad:36:c3:53:50:e8:6f:26:3f:78:eb:e4: c1:af:57:81:c2:5f:3f:4d:61:f7:8a:9a:75:df:c0:7e:99:be: 41:db:cf:fa:00:79:c3:ea:ab:e6:30:ab:f6:c8:12:d2:42:f4: ec:22:91:b2:68:c6:c2:5f:94:bf:b7:63:a5:db:54:06:8d:40: 44:c7:08:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf37HLEOpCWs5tURVFdRHTsD/hScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0 QjlBRDY4MjAeFw0yNjA0MTcxNTU0NDNaFw0yNjA0MTgxNjEwNDNaMDMxMTAvBgNV BAMTKEEyNDJFMEM1MkExQ0YwQzA3OUZGNDQxQjdFODE3QjAyMTNBQzhCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKv7ru4+QiZTPyRyCn5A24u/xt MvAu+nbQ7XdoygDgVRLN8PDcrYZzs5AkhjmZWXC6ReUZLI0g0gUBmFXHh4HuVQVG 9m5uURiOnl89VDD99BcAO9+G6ejBI5urUTIt4jQAVD08IoGE6I30q0zZEn1xssAn rpkIXGkm6QCLG2Ut/+mZAsqk2+apqZuvex9ft1v4LDxhNSYmmT/qaEdHezLfvZAS xmRRlIsPXa1vze0ZWSH4g67c1qgnUIqEkHvrmP9K/U4zyCd38aQmoMxm+21Zbuhj GBW4h7xfpIuTIG1/5rRC1KVzp4yi7aIKf2BnRRy8UCp6TULjFjrS9EZuJnPTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUokLgxSoc8MB5/0QbfoF7AhOsi2MwHwYDVR0j BBgwFoAU0Itf0UH25LToIZ/z6Nl5ykua1oIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5MzkzMTI3NjU4MjkxNC8wL0QwOEI1RkQxNDFGNkU0QjRFODIxOUZGM0U4RDk3 OUNBNEI5QUQ2ODIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0QjlBRDY4Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTM5MzEyNzY1ODI5MTQvMC9EMDhCNUZEMTQxRjZF NEI0RTgyMTlGRjNFOEQ5NzlDQTRCOUFENjgyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALngnTzN4Kduc TEvYIdtjmRZ0/wnJGeM/OG0cY3SgzGN1dctmSXeGsPkuldUDLIsO6OXsCw6UG8QB kknA6xAlzO4uRVQdXUQME8geeQkLDSWDYvwq+ktWAeVuW7ZdkfJpMKqDoi4BzW9V tFsL4PTRVL0V0ia0aS39SoV9Xd/DykX2owglVcUW//uI7PsjAPsTn7tXvFY9cJc4 mg7PKjm3Pgbm33k21AKUVhWZgZoR6MjbmEDN1f1BPrrzrTbDU1DobyY/eOvkwa9X gcJfP01h94qadd/Afpm+QdvP+gB5w+qr5jCr9sgS0kL07CKRsmjGwl+Uv7djpdtU Bo1ARMcI8Q== -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:26 2026 by rpki-client