$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: gXln7UPdVsa9I6c9e1Kzwvcg7wtwPYGT6XcKfajQSvk= Subject key identifier: 41:2F:BE:52:33:8F:05:CC:18:6A:37:46:37:9D:8A:1E:4F:7A:E2:47 Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 626C02661F270235590D7672CE5B6E69B527A9EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: 02 Signing time: Fri 17 Apr 2026 02:04:38 +0000 Manifest this update: Fri 17 Apr 2026 01:59:38 +0000 Manifest next update: Sat 18 Apr 2026 04:32:38 +0000 Files and hashes: 1: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: B+4XLunqZuiExSL89mhJuST1U65xKlIe3o/HUfLHjDM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6c:02:66:1f:27:02:35:59:0d:76:72:ce:5b:6e:69:b5:27:a9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Apr 17 01:59:38 2026 GMT Not After : Apr 18 04:32:38 2026 GMT Subject: CN=412FBE52338F05CC186A3746379D8A1E4F7AE247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:93:53:b0:c9:c5:ac:ee:ef:34:b7:bc:2d: 06:41:e6:e7:ef:99:27:96:7d:b1:17:29:68:2a:0e: 68:df:e6:52:56:e3:22:32:4b:15:fb:38:e0:09:01: 77:4f:4f:a2:3f:1d:a1:ed:d0:ee:56:38:0b:41:35: c3:ba:dd:f3:63:fb:d4:79:db:24:8c:47:5f:5b:c7: ed:4b:7b:5d:83:4e:b3:5e:8d:e4:6d:94:d2:21:89: 58:eb:4d:6a:c4:32:a2:2f:fc:97:ee:3d:bc:c8:62: 7f:b5:99:7c:82:c8:83:6e:8a:ef:8b:de:7b:28:f2: 53:3b:23:2f:8c:f4:a9:4a:95:7a:36:87:4a:d3:16: e0:bb:d0:e4:a4:b7:04:2d:97:07:20:e3:ef:b9:e8: 9c:47:86:aa:af:b1:bb:39:60:ac:5d:80:a5:d9:02: 4d:73:52:0c:9b:66:bf:f8:9f:f3:b5:c0:6c:09:99: 4f:33:89:e8:6a:1a:c5:83:54:70:c0:a6:e9:ef:37: f4:42:40:9a:05:ce:c0:59:7a:8a:57:ea:e2:2b:3e: fb:dd:59:c3:93:8b:88:24:e2:26:bc:e3:0a:9b:6a: bd:3d:22:00:6f:13:af:29:01:49:90:ca:31:92:4e: 4b:a0:cf:e8:ff:1e:d7:46:20:4b:23:8a:5b:30:1c: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2F:BE:52:33:8F:05:CC:18:6A:37:46:37:9D:8A:1E:4F:7A:E2:47 X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2e:54:59:39:5a:c7:55:4e:59:92:56:9b:96:02:2c:ef:5b: 1b:da:10:6b:4d:49:5f:fe:c8:9f:3b:0d:83:2e:60:3b:9d:1c: b7:dc:3e:cc:8a:fa:0b:39:f7:24:3e:0b:3b:54:10:9f:86:62: 52:d1:67:81:86:45:44:e3:9a:1a:90:18:6e:4f:fd:1f:af:8f: ba:99:fe:2b:0f:7c:2d:ef:77:95:10:f3:4a:9e:63:91:ef:84: 3a:b0:a7:b6:73:9f:52:b3:c4:4c:26:d5:03:df:2d:ed:8f:b3: 8d:c6:1a:c6:76:16:39:34:62:68:fb:74:6c:b8:9a:16:2b:4e: 01:b9:8a:f4:12:f5:81:4d:70:af:3d:36:56:80:b8:b6:46:90: 5f:c5:63:2b:87:bc:34:cd:ca:c9:34:d7:06:99:6a:6d:4f:9c: f6:1b:df:44:95:7d:ae:77:3f:ea:4c:f1:7c:75:e9:c1:2e:a4: d1:7f:49:78:32:83:d0:e2:3e:2d:10:16:39:66:67:72:06:ec: 28:5d:af:33:61:50:b7:62:26:48:11:36:80:ab:9a:18:c7:a7: 20:96:c5:f9:a7:1b:8a:0b:87:98:c8:1a:c3:35:27:b6:d1:6c: 27:d0:13:d9:be:00:47:2c:7b:36:54:d0:ae:9d:d0:5c:8e:ad: fd:24:7e:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYmwCZh8nAjVZDXZyzltuabUnqeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA0MTcwMTU5MzhaFw0yNjA0MTgwNDMyMzhaMDMxMTAvBgNV BAMTKDQxMkZCRTUyMzM4RjA1Q0MxODZBMzc0NjM3OUQ4QTFFNEY3QUUyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUpNTsMnFrO7vNLe8LQZB5ufv mSeWfbEXKWgqDmjf5lJW4yIySxX7OOAJAXdPT6I/HaHt0O5WOAtBNcO63fNj+9R5 2ySMR19bx+1Le12DTrNejeRtlNIhiVjrTWrEMqIv/JfuPbzIYn+1mXyCyINuiu+L 3nso8lM7Iy+M9KlKlXo2h0rTFuC70OSktwQtlwcg4++56JxHhqqvsbs5YKxdgKXZ Ak1zUgybZr/4n/O1wGwJmU8ziehqGsWDVHDApunvN/RCQJoFzsBZeopX6uIrPvvd WcOTi4gk4ia84wqbar09IgBvE68pAUmQyjGSTkugz+j/HtdGIEsjilswHLplAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQS++UjOPBcwYajdGN52KHk964kcwHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAly5UWTlax1VO WZJWm5YCLO9bG9oQa01JX/7InzsNgy5gO50ct9w+zIr6Czn3JD4LO1QQn4ZiUtFn gYZFROOaGpAYbk/9H6+Pupn+Kw98Le93lRDzSp5jke+EOrCntnOfUrPETCbVA98t 7Y+zjcYaxnYWOTRiaPt0bLiaFitOAbmK9BL1gU1wrz02VoC4tkaQX8VjK4e8NM3K yTTXBplqbU+c9hvfRJV9rnc/6kzxfHXpwS6k0X9JeDKD0OI+LRAWOWZncgbsKF2v M2FQt2ImSBE2gKuaGMenIJbF+acbiguHmMgawzUnttFsJ9AT2b4ARyx7NlTQrp3Q XI6t/SR+oQ== -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:31 2026 by rpki-client