$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft File: 8A05255B735973D13F97609E45A6D000FBCD953B.mft (raw, json) Hash identifier: FEcxeX6bi05FZFn9GXDNmwsiD5kO1I1iI4NNLQzK5z8= Subject key identifier: F1:DE:FA:E0:2D:82:E9:E9:B0:B0:67:5D:FA:13:32:25:14:DC:1F:5B Authority key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B Certificate issuer: /CN=8A05255B735973D13F97609E45A6D000FBCD953B Certificate serial: 7CBAC8934895B6EA3CBFB449523A5A19F3487356 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft Manifest number: 03 Signing time: Fri 17 Apr 2026 22:54:49 +0000 Manifest this update: Fri 17 Apr 2026 22:49:49 +0000 Manifest next update: Sun 19 Apr 2026 00:15:49 +0000 Files and hashes: 1: 8A05255B735973D13F97609E45A6D000FBCD953B.crl (hash: YY5AsnxdtLFlh03/fxC6yrfZ0HCp+bDHiNYVTD++Qq0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ba:c8:93:48:95:b6:ea:3c:bf:b4:49:52:3a:5a:19:f3:48:73:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05255B735973D13F97609E45A6D000FBCD953B Validity Not Before: Apr 17 22:49:49 2026 GMT Not After : Apr 19 00:15:49 2026 GMT Subject: CN=F1DEFAE02D82E9E9B0B0675DFA13322514DC1F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:de:6b:02:b6:12:e9:08:4a:3d:a3:78:f3: f3:2f:f3:40:a0:27:b7:90:d3:8e:8d:f7:e9:93:a7: b8:09:e9:bc:41:59:95:32:f0:ed:b0:f8:98:00:e2: 03:bc:cc:ee:43:07:ba:a0:0f:1f:b6:da:b1:0a:ab: a2:c0:55:f9:2c:83:16:f0:01:b0:3d:13:ea:8d:71: 07:30:ed:ec:ce:a0:47:8e:fe:36:96:e4:96:cc:c7: 2c:d9:4f:f0:3b:42:4f:8b:5b:14:fe:67:62:e8:1a: ac:71:0f:df:37:28:7d:96:df:7c:c8:16:d3:2d:0a: 6c:17:89:09:c1:73:9d:b5:14:01:6d:a6:b1:fe:e4: f3:54:4c:a2:98:13:5e:19:ef:82:69:72:2e:94:ad: d5:eb:05:6d:26:93:72:6a:00:9e:e1:ad:39:9d:92: f6:b5:c2:8a:4d:00:7b:46:8f:b0:be:3d:de:49:8d: 7d:f0:36:7a:57:6d:28:6b:c8:4c:83:bd:9c:ae:98: 12:0a:84:f3:bc:ab:c5:6f:1c:52:dd:97:f4:a7:6b: 4b:29:d2:ae:0e:77:3e:05:eb:fc:d2:2b:0a:b1:2d: e7:38:b5:01:ea:56:24:a9:dc:2e:a0:91:71:67:40: 24:12:d7:90:4d:32:dd:41:7b:5f:d0:bb:64:a9:31: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DE:FA:E0:2D:82:E9:E9:B0:B0:67:5D:FA:13:32:25:14:DC:1F:5B X509v3 Authority Key Identifier: keyid:8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:27:3c:9c:92:37:68:c3:2b:97:ed:9a:22:33:87:95:9c:ff: d8:5b:04:ac:94:3a:a9:b8:2e:94:1a:57:af:9f:b6:d7:25:52: ef:48:71:4e:bf:48:f7:70:77:ba:4d:37:69:3d:98:71:16:ea: b6:9d:46:87:c3:9a:99:43:cc:4d:22:f9:1a:04:7e:c3:dd:de: 05:e4:4c:ef:61:60:c0:81:33:c8:cb:01:d0:ad:64:46:c1:04: 9b:4a:76:cc:9a:b0:fa:57:a5:32:bd:13:1a:a3:b9:95:12:26: 0f:74:be:85:87:23:fc:9a:64:ac:ed:c7:7e:e0:a2:be:f3:11: cc:a9:9e:bb:56:00:b8:3f:87:1a:83:22:93:3a:87:ca:b9:9d: 4b:75:44:3f:70:9f:5d:ff:69:76:9e:eb:3e:19:bc:6a:f2:23: 43:57:51:bc:b1:07:0a:14:20:6f:8d:3c:37:dd:4e:4f:1d:38: 9d:60:65:23:38:8d:86:8b:a7:bb:b1:4f:11:49:44:56:84:1a: e7:f2:ab:ed:11:1e:e4:dd:d6:20:37:28:ec:45:40:69:6b:6d: 22:f2:99:3b:8b:6f:18:c6:3d:59:46:99:08:ef:7f:f3:60:18: 29:22:a0:aa:7f:40:ee:07:b2:c1:80:cb:43:79:fc:43:69:c1: 3e:3b:16:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfLrIk0iVtuo8v7RJUjpaGfNIc1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBG QkNEOTUzQjAeFw0yNjA0MTcyMjQ5NDlaFw0yNjA0MTkwMDE1NDlaMDMxMTAvBgNV BAMTKEYxREVGQUUwMkQ4MkU5RTlCMEIwNjc1REZBMTMzMjI1MTREQzFGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQd5rArYS6QhKPaN48/Mv80Cg J7eQ046N9+mTp7gJ6bxBWZUy8O2w+JgA4gO8zO5DB7qgDx+22rEKq6LAVfksgxbw AbA9E+qNcQcw7ezOoEeO/jaW5JbMxyzZT/A7Qk+LWxT+Z2LoGqxxD983KH2W33zI FtMtCmwXiQnBc521FAFtprH+5PNUTKKYE14Z74Jpci6UrdXrBW0mk3JqAJ7hrTmd kva1wopNAHtGj7C+Pd5JjX3wNnpXbShryEyDvZyumBIKhPO8q8VvHFLdl/Sna0sp 0q4Odz4F6/zSKwqxLec4tQHqViSp3C6gkXFnQCQS15BNMt1Be1/Qu2SpMe4nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8d764C2C6emwsGdd+hMyJRTcH1swHwYDVR0j BBgwFoAUigUlW3NZc9E/l2CeRabQAPvNlTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MTgxMjE1NzcwMjE0NS8wLzhBMDUyNTVCNzM1OTczRDEzRjk3NjA5RTQ1QTZE MDAwRkJDRDk1M0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzE4MTIxNTc3MDIxNDUvMC84QTA1MjU1QjczNTk3 M0QxM0Y5NzYwOUU0NUE2RDAwMEZCQ0Q5NTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqic8nJI3aMMr l+2aIjOHlZz/2FsErJQ6qbgulBpXr5+21yVS70hxTr9I93B3uk03aT2YcRbqtp1G h8OamUPMTSL5GgR+w93eBeRM72FgwIEzyMsB0K1kRsEEm0p2zJqw+lelMr0TGqO5 lRImD3S+hYcj/JpkrO3HfuCivvMRzKmeu1YAuD+HGoMikzqHyrmdS3VEP3CfXf9p dp7rPhm8avIjQ1dRvLEHChQgb408N91OTx04nWBlIziNhounu7FPEUlEVoQa5/Kr 7REe5N3WIDco7EVAaWttIvKZO4tvGMY9WUaZCO9/82AYKSKgqn9A7geywYDLQ3n8 Q2nBPjsWNg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:00:53 2026 by rpki-client