$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: p6NkZIm8fvMfz4RDap1fX3wvryx+PbhCByNmMfB9rY4= Subject key identifier: C1:EB:37:C8:43:B4:67:68:92:E3:6D:DB:77:74:18:6B:9A:3D:5E:C2 Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 6D592615BF69882595CDA78D895E500C12F01BA1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: 0B Signing time: Fri 17 Apr 2026 17:34:44 +0000 Manifest this update: Fri 17 Apr 2026 17:29:44 +0000 Manifest next update: Sat 18 Apr 2026 17:37:44 +0000 Files and hashes: 1: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: XiVwIirbPUZDteiJOhuG7xP5DCREcIkwEIBoncME2no=) 2: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:59:26:15:bf:69:88:25:95:cd:a7:8d:89:5e:50:0c:12:f0:1b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: Apr 17 17:29:44 2026 GMT Not After : Apr 18 17:37:44 2026 GMT Subject: CN=C1EB37C843B4676892E36DDB7774186B9A3D5EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:d8:ae:44:8d:6a:51:7a:e5:55:5c:5c:d8: e3:62:0a:39:0a:75:8f:bd:02:53:b9:ad:75:47:1e: ed:b7:45:e8:76:85:18:e0:75:91:85:91:4e:0c:3a: ec:8d:c5:9a:1a:6b:cb:41:d1:79:e7:23:85:51:4a: 76:94:3f:2f:51:58:e3:b0:65:e0:8b:3b:23:89:ed: 53:99:c0:31:e0:78:b5:91:d0:f7:8c:a8:85:e0:c7: f0:d1:59:0b:dc:e8:75:11:d1:6c:10:35:d9:b6:eb: 98:87:d4:67:f4:fb:cf:cd:ca:48:21:68:9e:3e:0b: 45:21:ae:8f:f0:f8:53:ec:6f:21:cb:7e:87:15:aa: a2:df:43:a6:f8:be:c5:e4:a4:da:0e:95:62:da:5b: a7:bd:4d:23:92:41:2b:c0:1c:08:b0:9b:ea:d0:45: d7:6c:45:d7:2f:cb:57:25:ac:89:51:47:40:f5:f9: 21:28:f2:12:59:27:66:c6:aa:ac:dd:f8:9e:87:c5: 83:11:8e:ee:df:36:4b:c0:73:a9:96:e1:fd:f6:2c: c2:1e:ef:10:09:67:8d:ee:01:68:67:4f:2e:e4:1d: 3e:ea:53:8a:e7:e7:38:f0:85:ae:53:bf:5c:3b:7d: 85:1d:79:0b:45:87:1f:79:24:23:fb:ec:88:ff:ce: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EB:37:C8:43:B4:67:68:92:E3:6D:DB:77:74:18:6B:9A:3D:5E:C2 X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fc:79:69:1b:ce:61:f6:f9:e6:3e:fa:2a:84:88:41:80:30: 4d:07:a7:52:6f:27:a7:74:e1:e4:e5:ff:37:c3:28:38:5d:a6: e1:46:8d:f2:f1:74:13:3e:95:1b:04:58:c7:27:73:47:13:fc: 70:7f:9f:f0:f3:08:a3:58:92:8b:3c:0f:35:00:19:df:da:d6: e6:d1:79:43:60:74:74:93:e3:ea:34:4b:bf:84:7a:a6:c4:79: 8a:ba:f4:ab:c8:c6:30:37:04:5e:1e:0d:94:67:d8:40:d0:ea: 09:22:ba:ff:f6:d7:34:72:9d:ec:17:9b:36:7c:61:df:53:16: fe:5d:0d:14:3a:e6:5c:55:61:be:65:41:ef:89:d2:a3:46:5a: 35:c6:bf:2d:06:54:15:4e:96:35:3f:69:fd:35:7d:50:1e:a8: 14:4c:24:58:8e:c1:28:48:3a:c3:01:7d:10:4d:e5:93:31:32: 75:d3:54:a5:19:d2:d2:8a:a5:2a:1c:4d:08:85:cc:f9:3a:f8: 51:28:f4:4b:13:15:90:6a:59:9c:43:2a:c5:1d:5f:02:5b:c6: 07:38:05:ff:34:5f:d1:35:02:fb:1d:f8:8a:69:8e:73:ef:f2: c0:e2:5f:c3:af:c6:96:73:9b:64:f6:51:64:c0:ca:7f:b1:17: 69:c0:87:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbVkmFb9piCWVzaeNiV5QDBLwG6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjA0MTcxNzI5NDRaFw0yNjA0MTgxNzM3NDRaMDMxMTAvBgNV BAMTKEMxRUIzN0M4NDNCNDY3Njg5MkUzNkREQjc3NzQxODZCOUEzRDVFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhytiuRI1qUXrlVVxc2ONiCjkK dY+9AlO5rXVHHu23Reh2hRjgdZGFkU4MOuyNxZoaa8tB0XnnI4VRSnaUPy9RWOOw ZeCLOyOJ7VOZwDHgeLWR0PeMqIXgx/DRWQvc6HUR0WwQNdm265iH1Gf0+8/Nykgh aJ4+C0Uhro/w+FPsbyHLfocVqqLfQ6b4vsXkpNoOlWLaW6e9TSOSQSvAHAiwm+rQ RddsRdcvy1clrIlRR0D1+SEo8hJZJ2bGqqzd+J6HxYMRju7fNkvAc6mW4f32LMIe 7xAJZ43uAWhnTy7kHT7qU4rn5zjwha5Tv1w7fYUdeQtFhx95JCP77Ij/zozPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwes3yEO0Z2iS423bd3QYa5o9XsIwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfx5aRvOYfb5 5j76KoSIQYAwTQenUm8np3Th5OX/N8MoOF2m4UaN8vF0Ez6VGwRYxydzRxP8cH+f 8PMIo1iSizwPNQAZ39rW5tF5Q2B0dJPj6jRLv4R6psR5irr0q8jGMDcEXh4NlGfY QNDqCSK6//bXNHKd7BebNnxh31MW/l0NFDrmXFVhvmVB74nSo0ZaNca/LQZUFU6W NT9p/TV9UB6oFEwkWI7BKEg6wwF9EE3lkzEyddNUpRnS0oqlKhxNCIXM+Tr4USj0 SxMVkGpZnEMqxR1fAlvGBzgF/zRf0TUC+x34immOc+/ywOJfw6/GlnObZPZRZMDK f7EXacCHVg== -----END CERTIFICATE-----Generated at Sat Apr 18 07:29:32 2026 by rpki-client