$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft File: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft (raw, json) Hash identifier: jOI6g/RrN5AOflwrc/QbXtQGbd8l02+e3YEQX1knMVo= Subject key identifier: 11:A3:82:32:20:95:96:B4:89:D2:DA:C3:F7:46:E7:4F:06:04:2C:D5 Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 Certificate issuer: /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Certificate serial: 7A9B22D1C47D20D9790A28CBBA81FD9702B8D7EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft Manifest number: 03 Signing time: Fri 17 Apr 2026 17:59:46 +0000 Manifest this update: Fri 17 Apr 2026 17:54:46 +0000 Manifest next update: Sat 18 Apr 2026 18:36:46 +0000 Files and hashes: 1: E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl (hash: RtDH83+zuxdH/rtUH9QyiTd22Xn2Atm22fBhf3LLudQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9b:22:d1:c4:7d:20:d9:79:0a:28:cb:ba:81:fd:97:02:b8:d7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0 Validity Not Before: Apr 17 17:54:46 2026 GMT Not After : Apr 18 18:36:46 2026 GMT Subject: CN=11A38232209596B489D2DAC3F746E74F06042CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:73:5c:c9:2a:83:39:29:a1:b2:8f:53:e3: d5:99:a7:12:df:8c:70:57:c5:7a:e3:94:95:2c:e3: 04:ba:23:7f:ca:15:01:01:e6:e1:ab:5e:3a:ce:b0: 94:bd:a7:77:89:01:0a:d9:0a:9e:e1:d6:2a:ee:fa: 72:c7:0a:a4:57:87:28:67:37:6e:ad:39:0d:7d:66: 04:1f:1f:27:8c:42:e6:15:4b:a3:58:21:2f:06:7e: d7:dd:85:5d:f8:06:b4:42:9e:85:43:61:0d:91:73: 88:a3:b9:e1:a0:a8:c7:8c:a0:93:15:a7:e2:ee:7a: f4:b5:75:06:45:48:55:bc:2d:70:a2:40:3d:db:e8: 97:8e:82:a2:ab:69:81:f1:bc:55:56:ad:79:d8:42: 1d:ed:e8:83:12:87:79:1e:b6:67:33:b7:33:d0:f5: 8a:95:5a:fc:bb:5e:99:9f:72:9b:86:f8:b9:f4:27: 86:9e:fc:81:16:bb:39:fc:2f:54:01:a9:21:37:6f: 1d:82:7a:56:36:00:b3:93:9f:a8:14:9a:60:47:b0: 73:40:8c:bf:e7:cb:48:3f:c6:eb:fd:85:f1:79:6e: 3b:32:e9:e3:36:81:63:88:d8:38:c4:b6:02:56:57: 7c:c4:3e:45:85:94:d8:26:b7:ad:ba:e4:79:0a:f5: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A3:82:32:20:95:96:B4:89:D2:DA:C3:F7:46:E7:4F:06:04:2C:D5 X509v3 Authority Key Identifier: keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e9:d9:99:17:81:f4:b6:2b:4e:26:1a:de:80:77:6e:b9:11: 09:0a:7c:74:37:c2:ab:da:b7:19:a2:d1:dc:9f:8f:ac:35:88: b7:e0:34:83:78:c6:fc:5b:bb:1c:28:ba:0c:9a:c7:6f:fc:ab: a6:d8:32:75:6a:50:f3:db:67:c8:83:e6:a9:bb:72:6e:7b:56: f3:6e:8b:f8:7d:d7:34:24:7a:ea:c2:5a:68:c5:ef:3b:03:0d: 42:93:67:5c:80:0d:77:bd:be:4e:43:25:86:52:42:7a:f1:5c: 2f:f4:69:4c:e0:47:b0:39:0e:57:9a:7a:1b:6c:b8:61:e4:0a: d9:87:81:80:1f:1b:16:54:b3:a7:9b:76:bd:8e:0f:bc:66:94: 4d:e4:70:b9:15:92:53:24:d8:71:40:88:9e:df:14:d8:a1:63: da:2c:eb:df:66:55:eb:5c:b2:8b:58:28:e1:68:03:54:91:6e: 08:8a:53:25:7b:ed:74:c6:fd:31:ed:c7:61:a7:02:39:51:09: d1:d3:84:71:c2:27:1d:56:ef:aa:4c:38:42:30:0d:d8:22:29: 93:a3:34:8c:d5:55:79:85:5c:92:11:ee:a0:ce:d0:1b:18:c7: 0e:99:e5:98:60:d0:45:02:98:08:c8:10:cd:b5:d9:04:30:61: cc:92:d2:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUepsi0cR9INl5CijLuoH9lwK41+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0 QkQwRURFMDAeFw0yNjA0MTcxNzU0NDZaFw0yNjA0MTgxODM2NDZaMDMxMTAvBgNV BAMTKDExQTM4MjMyMjA5NTk2QjQ4OUQyREFDM0Y3NDZFNzRGMDYwNDJDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEOnNcySqDOSmhso9T49WZpxLf jHBXxXrjlJUs4wS6I3/KFQEB5uGrXjrOsJS9p3eJAQrZCp7h1iru+nLHCqRXhyhn N26tOQ19ZgQfHyeMQuYVS6NYIS8GftfdhV34BrRCnoVDYQ2Rc4ijueGgqMeMoJMV p+LuevS1dQZFSFW8LXCiQD3b6JeOgqKraYHxvFVWrXnYQh3t6IMSh3ketmcztzPQ 9YqVWvy7XpmfcpuG+Ln0J4ae/IEWuzn8L1QBqSE3bx2CelY2ALOTn6gUmmBHsHNA jL/ny0g/xuv9hfF5bjsy6eM2gWOI2DjEtgJWV3zEPkWFlNgmt6265HkK9RhrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEaOCMiCVlrSJ0trD90bnTwYELNUwHwYDVR0j BBgwFoAU6afZto/wQLXO4sT2Vpl0LkvQ7eAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzMTcyNTU0NjAxMjY3My8wL0U5QTdEOUI2OEZGMDQwQjVDRUUyQzRGNjU2OTk3 NDJFNEJEMEVERTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlBN0Q5QjY4RkYwNDBCNUNFRTJDNEY2NTY5OTc0MkU0QkQwRURFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzE3MjU1NDYwMTI2NzMvMC9FOUE3RDlCNjhGRjA0 MEI1Q0VFMkM0RjY1Njk5NzQyRTRCRDBFREUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+nZmReB9LYr TiYa3oB3brkRCQp8dDfCq9q3GaLR3J+PrDWIt+A0g3jG/Fu7HCi6DJrHb/yrptgy dWpQ89tnyIPmqbtybntW826L+H3XNCR66sJaaMXvOwMNQpNnXIANd72+TkMlhlJC evFcL/RpTOBHsDkOV5p6G2y4YeQK2YeBgB8bFlSzp5t2vY4PvGaUTeRwuRWSUyTY cUCInt8U2KFj2izr32ZV61yyi1go4WgDVJFuCIpTJXvtdMb9Me3HYacCOVEJ0dOE ccInHVbvqkw4QjAN2CIpk6M0jNVVeYVckhHuoM7QGxjHDpnlmGDQRQKYCMgQzbXZ BDBhzJLSvg== -----END CERTIFICATE-----Generated at Sat Apr 18 07:28:53 2026 by rpki-client