$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft File: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft (raw, json) Hash identifier: geFE66pzxBv6vOYBvCFVKgrwfTG2s5xEvA2CyaS9J7g= Subject key identifier: 46:F6:A5:E3:F4:61:0D:DA:BB:DC:0B:D4:D3:00:66:19:8A:F0:5C:68 Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 Certificate issuer: /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Certificate serial: 4D8C55388C20AABFD4264EF7E1681730E8DD0E2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft Manifest number: 04 Signing time: Fri 17 Apr 2026 02:49:38 +0000 Manifest this update: Fri 17 Apr 2026 02:44:38 +0000 Manifest next update: Sat 18 Apr 2026 06:03:38 +0000 Files and hashes: 1: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl (hash: y9LyklidFcMeD9XdkHeL1OB1tQXkQELJssFJM4yHkOE=) 2: 3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (hash: eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=) 3: 3130332e3137312e3136362e302f32342d3332203d3e20313333313135.roa (hash: 9haZlqw9n325weK408mIds9agQ45PHZJ+Cb9a2drg54=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 06:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8c:55:38:8c:20:aa:bf:d4:26:4e:f7:e1:68:17:30:e8:dd:0e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Validity Not Before: Apr 17 02:44:38 2026 GMT Not After : Apr 18 06:03:38 2026 GMT Subject: CN=46F6A5E3F4610DDABBDC0BD4D30066198AF05C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:89:9d:9c:64:ba:1d:3a:a7:e8:8a:7a:9d: e3:c6:6e:a3:24:4b:de:26:88:60:6b:c0:2a:e6:38: 7d:cc:a2:9c:cc:9e:95:94:24:26:21:70:fa:ff:dc: 35:39:68:96:68:f6:42:e6:59:b9:02:f7:df:0f:6f: 39:13:08:1f:b2:63:b1:9c:e1:5a:5c:a1:9a:53:83: 92:dd:cc:94:cb:f9:df:c5:e9:c5:8e:82:bd:a5:14: 92:da:e7:1c:d3:0c:93:15:c7:fd:ec:1e:2d:8b:a4: cb:aa:52:47:1f:38:bf:6c:1e:16:c6:12:1c:fa:14: 26:fa:7f:70:92:31:d4:30:1a:26:1e:35:d9:02:1f: 09:47:0c:77:6f:c4:7a:e2:8b:32:80:f1:1e:af:2c: 01:b7:c2:87:56:e2:bd:1d:b5:5f:be:7a:dd:bd:75: b3:01:ef:d9:46:b9:0a:3b:71:5d:66:cf:06:60:11: a5:1f:30:13:2f:a6:18:b0:7e:48:1e:20:ac:17:4a: f9:66:9f:95:ac:96:f6:fe:f7:41:27:00:28:14:8a: d1:8a:e2:ca:66:34:28:d9:ee:e9:e6:11:98:63:86: 14:32:39:86:c9:95:76:83:d7:73:d6:5c:71:f5:01: 14:2b:f0:4b:20:7f:e9:74:5e:92:57:16:bb:8a:bf: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F6:A5:E3:F4:61:0D:DA:BB:DC:0B:D4:D3:00:66:19:8A:F0:5C:68 X509v3 Authority Key Identifier: keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:32:cb:d8:14:25:fc:eb:ae:84:6b:a3:28:22:d7:be:06:25: 6d:62:c6:cb:ba:13:7f:be:5b:49:ff:d0:18:26:2d:6b:e4:4d: 05:a4:8a:ef:85:27:60:9d:ef:8d:dc:12:63:66:e5:d5:1b:ec: 56:13:a6:2f:fb:ad:9e:34:71:1c:e0:74:c4:61:f1:ce:44:60: c3:96:68:91:13:d4:62:e9:38:bb:c7:23:d8:da:ad:68:62:cf: 0c:f0:7c:7c:97:48:ef:89:14:12:86:e4:99:90:d8:48:96:eb: bd:76:39:2d:f8:ad:04:4b:84:4d:1f:cf:fa:d7:c0:51:c7:0e: 6b:3d:0b:42:6e:e0:be:8a:eb:8c:66:39:12:fb:2f:d1:2e:eb: 46:3c:71:51:ef:86:97:80:0f:c2:60:ab:ec:02:1e:58:e1:5c: a9:41:70:82:b4:bd:64:46:c9:52:4a:34:b8:59:e1:35:64:4f: 20:9a:50:f4:6b:a4:24:02:17:94:25:fe:a8:36:ce:bf:9f:f6: 3b:ac:0c:5d:11:e2:0e:35:b6:77:3f:9d:7d:bf:ae:90:74:94: d6:a8:f7:07:7a:4a:68:4e:a8:f1:b9:62:58:09:4c:5e:0f:66: b0:d4:80:6d:ef:2f:3e:da:62:20:26:a0:bd:77:74:02:9f:9a: a2:f3:31:1b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTYxVOIwgqr/UJk734WgXMOjdDi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVF OUJDMDBGNzAeFw0yNjA0MTcwMjQ0MzhaFw0yNjA0MTgwNjAzMzhaMDMxMTAvBgNV BAMTKDQ2RjZBNUUzRjQ2MTBEREFCQkRDMEJENEQzMDA2NjE5OEFGMDVDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT6omdnGS6HTqn6Ip6nePGbqMk S94miGBrwCrmOH3MopzMnpWUJCYhcPr/3DU5aJZo9kLmWbkC998PbzkTCB+yY7Gc 4VpcoZpTg5LdzJTL+d/F6cWOgr2lFJLa5xzTDJMVx/3sHi2LpMuqUkcfOL9sHhbG Ehz6FCb6f3CSMdQwGiYeNdkCHwlHDHdvxHriizKA8R6vLAG3wodW4r0dtV++et29 dbMB79lGuQo7cV1mzwZgEaUfMBMvphiwfkgeIKwXSvlmn5Wslvb+90EnACgUitGK 4spmNCjZ7unmEZhjhhQyOYbJlXaD13PWXHH1ARQr8Esgf+l0XpJXFruKv0S1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURval4/RhDdq73AvU0wBmGYrwXGgwHwYDVR0j BBgwFoAU4V0KTdPD+zgT6/feKvwODum8APcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1Mzc0OTc2MS8wL0UxNUQwQTRERDNDM0ZCMzgxM0VCRjdERTJBRkMw RTBFRTlCQzAwRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVFOUJDMDBGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM3NDk3NjEvMC9FMTVEMEE0REQzQzNG QjM4MTNFQkY3REUyQUZDMEUwRUU5QkMwMEY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDLL2BQl/Ouu hGujKCLXvgYlbWLGy7oTf75bSf/QGCYta+RNBaSK74UnYJ3vjdwSY2bl1RvsVhOm L/utnjRxHOB0xGHxzkRgw5ZokRPUYuk4u8cj2NqtaGLPDPB8fJdI74kUEobkmZDY SJbrvXY5LfitBEuETR/P+tfAUccOaz0LQm7gvorrjGY5Evsv0S7rRjxxUe+Gl4AP wmCr7AIeWOFcqUFwgrS9ZEbJUko0uFnhNWRPIJpQ9GukJAIXlCX+qDbOv5/2O6wM XRHiDjW2dz+dfb+ukHSU1qj3B3pKaE6o8bliWAlMXg9msNSAbe8vPtpiICagvXd0 Ap+aovMxGw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:24 2026 by rpki-client