$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: D1u5Joe0BXntkMEFSZ84n352zt0T0K74lD4+SiGHD1w= Subject key identifier: 30:A9:48:73:DB:C8:AD:7D:B5:F2:EC:E0:8D:DD:27:8F:04:AF:01:70 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 797DF99DA3D698770B303436293A92B67B5FBF6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: 03 Signing time: Fri 17 Apr 2026 17:09:43 +0000 Manifest this update: Fri 17 Apr 2026 17:04:43 +0000 Manifest next update: Sat 18 Apr 2026 20:04:43 +0000 Files and hashes: 1: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: Amg30B7jiXdYzQ/CFn4jqDG05QGbmJPhY1I951seYbs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7d:f9:9d:a3:d6:98:77:0b:30:34:36:29:3a:92:b6:7b:5f:bf:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Apr 17 17:04:43 2026 GMT Not After : Apr 18 20:04:43 2026 GMT Subject: CN=30A94873DBC8AD7DB5F2ECE08DDD278F04AF0170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4a:72:da:31:12:ba:74:de:2f:64:87:4a:05: 79:b8:5d:4c:d5:8b:94:a8:3a:f5:f1:08:20:e1:e6: f1:c8:a1:89:1a:5d:fc:bc:9f:45:82:78:9b:7c:69: 5d:be:22:23:8c:84:a2:a0:ae:a9:57:2c:43:d3:99: f2:11:7e:45:69:76:2e:70:55:22:51:64:79:27:b8: 24:4f:3f:cc:5c:a6:2c:51:50:e0:4e:31:21:35:2a: 77:49:cc:e4:0a:3f:13:02:01:c2:da:a4:c4:28:ac: 7c:da:9b:05:f0:74:cd:cc:e9:2a:57:6c:28:17:0a: 75:eb:a3:d1:ae:d7:43:fb:46:52:87:00:d7:11:4d: 8e:e2:22:f8:4b:55:ad:88:ea:3c:d5:2d:13:fd:9d: cc:34:58:2b:87:6a:34:23:99:4a:9c:a7:0c:43:a7: 92:be:bd:71:25:67:f5:ee:21:c5:ef:46:d1:15:f0: e0:b6:b0:0d:33:b8:0a:ab:6b:ad:61:4a:5d:3f:05: 15:8c:9b:c3:c8:b5:6f:82:1f:62:59:50:1a:b0:d9: 94:a3:c5:8b:c7:db:18:17:6c:2d:be:19:c3:88:0f: 95:e9:f7:a3:b2:86:6a:81:11:b4:be:88:85:f8:26: 9b:82:b3:c7:8d:3f:87:83:79:38:64:fc:5a:1f:a4: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A9:48:73:DB:C8:AD:7D:B5:F2:EC:E0:8D:DD:27:8F:04:AF:01:70 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:31:1d:a3:3d:ed:f2:0b:cb:d3:45:e6:e7:6d:c0:57:55:66: 0a:e3:42:8d:bc:6f:4e:7b:26:b7:b4:81:84:2d:c0:0a:55:15: 41:c8:0a:cd:36:56:3e:1e:2e:1c:c3:0d:42:f2:0f:3c:6f:c0: 1c:46:85:d9:78:a7:81:84:44:65:f6:b1:cd:99:fc:fc:4c:ee: 19:2c:21:1c:d1:92:79:17:54:de:ec:dc:ec:c7:0e:2f:d7:58: e8:c6:fe:9f:d4:65:99:df:f7:fb:04:e6:e7:06:1b:ec:6b:be: 2c:84:d8:de:c5:5d:c8:80:f1:cb:d4:40:b1:8b:f3:a8:54:e1: 2a:b7:4b:9c:2e:4c:8b:7d:3f:8a:d8:e2:7f:87:55:dd:69:67: 5b:08:89:e6:d8:6c:9d:e5:0b:d8:f2:8e:90:85:57:c7:75:6e: 29:79:0f:38:6c:71:11:e4:db:4d:54:aa:78:1f:cf:f1:3a:f4: be:1c:fa:4c:bd:4c:8e:e3:4f:28:4e:72:6f:f4:3d:e8:6f:2d: 4d:d3:db:8a:1b:7d:25:11:87:78:38:38:15:ef:81:cf:8a:c9: 82:ad:5b:31:96:68:18:7d:22:a8:c8:8e:17:b0:e3:a8:a7:33: ba:e8:bc:15:4a:43:b3:dd:f2:d0:27:fa:2e:3f:f0:33:53:e5: cc:f4:0c:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeX35naPWmHcLMDQ2KTqStntfv2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjA0MTcxNzA0NDNaFw0yNjA0MTgyMDA0NDNaMDMxMTAvBgNV BAMTKDMwQTk0ODczREJDOEFEN0RCNUYyRUNFMDhEREQyNzhGMDRBRjAxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoSnLaMRK6dN4vZIdKBXm4XUzV i5SoOvXxCCDh5vHIoYkaXfy8n0WCeJt8aV2+IiOMhKKgrqlXLEPTmfIRfkVpdi5w VSJRZHknuCRPP8xcpixRUOBOMSE1KndJzOQKPxMCAcLapMQorHzamwXwdM3M6SpX bCgXCnXro9Gu10P7RlKHANcRTY7iIvhLVa2I6jzVLRP9ncw0WCuHajQjmUqcpwxD p5K+vXElZ/XuIcXvRtEV8OC2sA0zuAqra61hSl0/BRWMm8PItW+CH2JZUBqw2ZSj xYvH2xgXbC2+GcOID5Xp96OyhmqBEbS+iIX4JpuCs8eNP4eDeThk/FofpBJfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMKlIc9vIrX218uzgjd0njwSvAXAwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzEdoz3t8gvL 00Xm523AV1VmCuNCjbxvTnsmt7SBhC3AClUVQcgKzTZWPh4uHMMNQvIPPG/AHEaF 2XingYREZfaxzZn8/EzuGSwhHNGSeRdU3uzc7McOL9dY6Mb+n9Rlmd/3+wTm5wYb 7Gu+LITY3sVdyIDxy9RAsYvzqFThKrdLnC5Mi30/itjif4dV3WlnWwiJ5thsneUL 2PKOkIVXx3VuKXkPOGxxEeTbTVSqeB/P8Tr0vhz6TL1MjuNPKE5yb/Q96G8tTdPb iht9JRGHeDg4Fe+Bz4rJgq1bMZZoGH0iqMiOF7DjqKczuui8FUpDs93y0Cf6Lj/w M1PlzPQMFg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:24:45 2026 by rpki-client