$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft File: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft (raw, json) Hash identifier: TdApHfEr8OCHnzBzRL+wWzBQGiT9jhIsToOVOIT8Fxw= Subject key identifier: 71:34:2A:F2:16:39:EC:F3:3B:61:46:3F:53:09:D7:4E:FF:A8:64:D8 Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Certificate serial: 42A2CD432BC6CE48DED903A1ACE038D1666B40CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft Manifest number: 04 Signing time: Fri 17 Apr 2026 07:31:58 +0000 Manifest this update: Fri 17 Apr 2026 07:26:58 +0000 Manifest next update: Sat 18 Apr 2026 07:52:58 +0000 Files and hashes: 1: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (hash: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=) 2: 3130332e3232322e3138302e302f32322d3332203d3e203633353939.roa (hash: QbOOENgtKkWaYBpuNr1ZMzVLHybzXZXqQ9clQG0dDZQ=) 3: 34352e3235312e35322e302f32322d3332203d3e203633353939.roa (hash: N5+bTQYYbzKAxO/rwqjbtnXxs3J/0xvonZjOU6VKUq8=) 4: 3130332e38392e3131322e302f32322d3332203d3e203633353939.roa (hash: mm2nGoL3z48v+jc5byQc82UgZeDVWf0qHUCxNLkRAMM=) 5: 3130332e38342e31362e302f32322d3332203d3e203633353939.roa (hash: VoSUaL/tdgMTKh9ghUzFbZIbZY9SJ9O6G+/rr0YYTGM=) 6: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (hash: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=) 7: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl (hash: iXemlY83YWtlV5fsiGx+bSKLNgA1V1Ntfb1fXsTLvg0=) 8: 3130332e3231352e34342e302f32342d3234203d3e203538343636.roa (hash: aTIutstV7nnOrlPVa9rL0oVDFBjtwfzvlvl2eoyD1/8=) 9: 3130332e3231352e34352e302f32342d3234203d3e203633353939.roa (hash: 8mVkqtHAsXXoQdq7QTFwXAv0F2qADSnLhXnxk2xo7+M=) 10: 3130332e3232322e3137362e302f32322d3332203d3e203633353939.roa (hash: pyntV5d+Ry0e6b3kVCP9XtAhqXMKUTMOuIAbrxSN+w4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a2:cd:43:2b:c6:ce:48:de:d9:03:a1:ac:e0:38:d1:66:6b:40:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Validity Not Before: Apr 17 07:26:58 2026 GMT Not After : Apr 18 07:52:58 2026 GMT Subject: CN=71342AF21639ECF33B61463F5309D74EFFA864D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:e5:e7:5e:5b:dd:09:a6:43:8b:77:18:e7: 92:a6:57:e9:d4:3a:43:59:4f:71:3c:be:f6:2e:2c: dd:bd:d0:31:49:08:59:a2:a5:6d:23:21:66:62:6f: 5f:d3:71:ae:b4:49:5a:e5:b9:c4:fe:da:54:13:74: 3d:a2:70:bf:9e:66:e6:9e:95:2e:af:4e:7d:6f:a5: 4c:55:e7:a6:98:f0:ac:58:21:86:9b:2c:9b:87:58: 45:75:2e:88:97:50:f6:79:bb:cc:09:67:09:8f:a4: 1e:0d:3b:6d:5a:86:be:c0:0e:ac:99:07:58:7a:58: 45:81:5d:b4:cf:86:4d:b5:65:1a:b7:41:74:c1:0f: 53:8c:ac:7f:0f:56:48:8a:b1:da:2f:52:df:0f:96: 43:ab:00:29:f4:86:33:06:52:a7:41:5e:2d:9b:a6: 90:74:cf:c4:61:d6:d7:96:d8:15:09:b8:6a:00:98: 93:9b:cc:78:a7:1c:72:5c:dd:06:c9:54:a7:77:32: 9a:31:8b:51:4d:8f:e8:d0:fa:92:7e:74:2a:a4:cd: 17:7e:7d:3a:df:8b:88:42:15:3f:14:5f:b8:3b:78: 9b:5b:ad:0e:3d:3f:76:5f:fa:a8:2a:6f:2c:0f:e2: 45:c8:5e:1c:c9:94:22:22:9f:00:a4:cb:58:73:09: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:2A:F2:16:39:EC:F3:3B:61:46:3F:53:09:D7:4E:FF:A8:64:D8 X509v3 Authority Key Identifier: keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2d:cc:a9:79:34:ec:ef:e8:03:1f:8e:69:64:14:5b:e9:a3: ab:cb:cb:b1:d5:7f:46:9b:0e:03:1b:87:7f:e4:b4:d5:6d:a8: cc:66:b0:cf:26:8c:6e:47:58:ea:74:3d:e6:a9:b3:d6:02:05: 18:e0:39:b7:fc:e5:c9:dc:20:9a:bf:eb:af:0e:f7:03:3e:02: da:c5:1d:a8:91:ab:9b:31:12:6d:e7:16:27:b0:d3:6c:e5:06: 29:57:56:f4:a2:ac:1a:84:9f:63:ab:d4:93:fe:20:08:e2:28: 83:4a:e4:43:e8:fe:b1:f1:ec:e2:c7:12:e2:77:47:72:99:a8: 6e:4b:3d:20:6a:d6:4f:31:af:fb:6b:8c:2a:e9:2f:13:60:ce: 68:18:bf:c4:d4:ee:79:c5:3a:1f:10:63:6e:62:af:53:b0:08: 97:2e:80:4d:35:40:bb:46:32:e4:56:60:77:a9:78:11:1e:b1: 3c:d9:52:6f:ec:7d:c9:fb:b8:75:81:23:bc:a5:f7:57:50:5c: c9:d0:f0:01:7e:db:2f:73:d5:d2:9d:96:c1:14:77:9a:7b:15: 97:f2:bd:17:83:41:b0:ef:4b:68:3a:f0:69:d1:3d:1a:b6:e8: a5:5c:6b:70:ca:17:e3:4b:30:bd:22:6b:99:d0:b0:1c:ab:0b: 8a:96:9e:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQqLNQyvGzkje2QOhrOA40WZrQMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG NUFCNjEzMzAeFw0yNjA0MTcwNzI2NThaFw0yNjA0MTgwNzUyNThaMDMxMTAvBgNV BAMTKDcxMzQyQUYyMTYzOUVDRjMzQjYxNDYzRjUzMDlENzRFRkZBODY0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSQuXnXlvdCaZDi3cY55KmV+nU OkNZT3E8vvYuLN290DFJCFmipW0jIWZib1/Tca60SVrlucT+2lQTdD2icL+eZuae lS6vTn1vpUxV56aY8KxYIYabLJuHWEV1LoiXUPZ5u8wJZwmPpB4NO21ahr7ADqyZ B1h6WEWBXbTPhk21ZRq3QXTBD1OMrH8PVkiKsdovUt8PlkOrACn0hjMGUqdBXi2b ppB0z8Rh1teW2BUJuGoAmJObzHinHHJc3QbJVKd3Mpoxi1FNj+jQ+pJ+dCqkzRd+ fTrfi4hCFT8UX7g7eJtbrQ49P3Zf+qgqbywP4kXIXhzJlCIinwCky1hzCSVpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcTQq8hY57PM7YUY/UwnXTv+oZNgwHwYDVR0j BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgyNDE5MjMvMC80ODUzQTFCMzE3QzQ3 QUE3MkI0NUZEMDg2QjFCRDlFMkY1QUI2MTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAry3MqXk07O/o Ax+OaWQUW+mjq8vLsdV/RpsOAxuHf+S01W2ozGawzyaMbkdY6nQ95qmz1gIFGOA5 t/zlydwgmr/rrw73Az4C2sUdqJGrmzESbecWJ7DTbOUGKVdW9KKsGoSfY6vUk/4g COIog0rkQ+j+sfHs4scS4ndHcpmobks9IGrWTzGv+2uMKukvE2DOaBi/xNTuecU6 HxBjbmKvU7AIly6ATTVAu0Yy5FZgd6l4ER6xPNlSb+x9yfu4dYEjvKX3V1BcydDw AX7bL3PV0p2WwRR3mnsVl/K9F4NBsO9LaDrwadE9GrbopVxrcMoX40swvSJrmdCw HKsLipaefQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:46 2026 by rpki-client