$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: 9Ki35ckHXxel+29ZEl4inr9QlrfXuq/y2tZ3ccHToZU= Subject key identifier: 87:E1:BF:51:00:C3:79:0C:D2:46:41:57:3E:B1:2D:5D:AE:75:B7:92 Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 66B0D6767ECD6E849A1BB0F7516DB20C9FB8906C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: 03 Signing time: Thu 16 Apr 2026 19:39:33 +0000 Manifest this update: Thu 16 Apr 2026 19:34:33 +0000 Manifest next update: Fri 17 Apr 2026 19:45:33 +0000 Files and hashes: 1: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) 2: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: eTwzAOW3Ej6Hcry5qmYVtplAD0XKiuCDDyvqqr9TU28=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 19:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b0:d6:76:7e:cd:6e:84:9a:1b:b0:f7:51:6d:b2:0c:9f:b8:90:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Apr 16 19:34:33 2026 GMT Not After : Apr 17 19:45:33 2026 GMT Subject: CN=87E1BF5100C3790CD24641573EB12D5DAE75B792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:80:ec:07:da:97:22:0d:e5:9b:a4:85:32: 4a:96:31:b5:ab:8b:0f:3f:01:56:38:a6:c6:83:f2: 40:96:c1:63:b9:12:17:77:d4:11:0c:7e:2b:f4:8f: fe:1f:0d:2f:19:cc:1a:fa:61:29:67:20:fd:1f:9c: e7:9c:49:5b:26:e3:f8:21:28:a0:b1:ab:22:a4:0f: 24:72:cf:a1:cc:f1:66:be:81:be:e2:78:13:7e:65: 5d:d7:2a:d2:98:4e:c4:86:a2:02:b9:f3:dc:b7:bb: 25:98:40:3a:23:96:bc:07:ab:ea:91:da:b4:f9:71: 3b:84:49:ca:60:82:57:22:ad:ec:40:44:4f:7f:63: ff:f5:51:00:dc:89:cb:fe:9f:e2:a1:2e:0e:72:29: e9:fd:ee:6e:08:5a:e6:a3:25:49:24:04:5e:7d:27: 45:c7:d2:f9:c7:d6:f6:19:0b:7c:59:3e:fc:a9:4e: 6b:82:70:1a:b4:7c:54:89:16:6b:8d:9b:61:59:d5: b6:d1:ac:d6:db:3c:fc:60:ef:80:a1:1a:91:96:b0: 14:e5:e1:47:f4:db:e4:bf:29:32:d9:d5:1a:fe:95: 44:03:be:77:7f:24:21:5f:87:e3:7c:68:96:99:02: 90:34:21:d7:30:8f:e2:77:02:29:6e:2f:9f:97:1a: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E1:BF:51:00:C3:79:0C:D2:46:41:57:3E:B1:2D:5D:AE:75:B7:92 X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:5e:f1:e0:14:42:35:85:96:5a:54:f1:aa:60:6d:25:7d:44: 4f:3f:52:4a:16:39:bc:58:f9:95:54:7c:f9:6a:3e:f4:20:4d: a4:ef:26:c7:1c:83:de:14:c6:a6:96:49:1d:f1:b2:e6:c7:85: 00:be:f3:ce:1f:a1:44:9c:9f:39:25:59:84:f3:a2:27:d2:42: 9b:07:b3:8c:15:7f:17:c2:bb:5f:47:30:9c:2c:1d:c4:16:b7: ef:57:61:23:36:e7:ba:36:e7:14:b2:fe:80:03:7a:05:cf:5c: 9c:fa:94:79:2f:f6:ac:c5:82:85:ba:3a:a7:44:28:12:9b:76: 8a:4e:75:e4:27:84:2f:4b:9e:07:68:37:b8:95:02:2e:e3:16: 19:f3:45:27:c5:f8:92:78:2d:de:12:c5:1b:da:4a:6b:58:43: 09:23:91:f9:0a:9a:5b:0e:ad:e3:88:be:65:0d:18:75:d3:6a: 4a:d9:bf:35:5e:c4:dc:c3:40:7b:cb:2f:df:1d:3b:7e:82:5d: 5e:5d:1f:fd:af:c5:d3:55:46:20:63:89:fd:49:2d:e7:bb:29: 47:d7:45:7d:67:7f:fb:9c:06:2a:9e:07:09:f7:fe:63:67:f7: 32:31:53:20:2d:93:43:c8:2b:22:80:46:d9:3a:00:cd:52:79: 4f:1e:23:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZrDWdn7NboSaG7D3UW2yDJ+4kGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjA0MTYxOTM0MzNaFw0yNjA0MTcxOTQ1MzNaMDMxMTAvBgNV BAMTKDg3RTFCRjUxMDBDMzc5MENEMjQ2NDE1NzNFQjEyRDVEQUU3NUI3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhYDsB9qXIg3lm6SFMkqWMbWr iw8/AVY4psaD8kCWwWO5Ehd31BEMfiv0j/4fDS8ZzBr6YSlnIP0fnOecSVsm4/gh KKCxqyKkDyRyz6HM8Wa+gb7ieBN+ZV3XKtKYTsSGogK589y3uyWYQDojlrwHq+qR 2rT5cTuEScpgglcirexARE9/Y//1UQDcicv+n+KhLg5yKen97m4IWuajJUkkBF59 J0XH0vnH1vYZC3xZPvypTmuCcBq0fFSJFmuNm2FZ1bbRrNbbPPxg74ChGpGWsBTl 4Uf02+S/KTLZ1Rr+lUQDvnd/JCFfh+N8aJaZApA0Idcwj+J3AiluL5+XGlwfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh+G/UQDDeQzSRkFXPrEtXa51t5IwHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxV7x4BRCNYWW WlTxqmBtJX1ETz9SShY5vFj5lVR8+Wo+9CBNpO8mxxyD3hTGppZJHfGy5seFAL7z zh+hRJyfOSVZhPOiJ9JCmwezjBV/F8K7X0cwnCwdxBa371dhIzbnujbnFLL+gAN6 Bc9cnPqUeS/2rMWChbo6p0QoEpt2ik515CeEL0ueB2g3uJUCLuMWGfNFJ8X4kngt 3hLFG9pKa1hDCSOR+QqaWw6t44i+ZQ0YddNqStm/NV7E3MNAe8sv3x07foJdXl0f /a/F01VGIGOJ/Ukt57spR9dFfWd/+5wGKp4HCff+Y2f3MjFTIC2TQ8grIoBG2ToA zVJ5Tx4jvg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:58 2026 by rpki-client