$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: VEL7weMuPCWA/7HvDz8AkPx+AewUgUgPk7zdqwVopbg= Subject key identifier: B1:0D:58:51:EA:FA:3D:80:96:96:89:9F:46:21:F5:A6:F3:5F:0E:05 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 113752EAD6A33D8A05AC3CD14BD90A40138004BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: 02 Signing time: Fri 17 Apr 2026 17:44:45 +0000 Manifest this update: Fri 17 Apr 2026 17:39:45 +0000 Manifest next update: Sat 18 Apr 2026 18:10:45 +0000 Files and hashes: 1: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: F9cliXlw500vdh6VKfYHW1vClxnojulQW6cQ/83xLvQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:37:52:ea:d6:a3:3d:8a:05:ac:3c:d1:4b:d9:0a:40:13:80:04:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: Apr 17 17:39:45 2026 GMT Not After : Apr 18 18:10:45 2026 GMT Subject: CN=B10D5851EAFA3D809696899F4621F5A6F35F0E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:ac:a8:e4:8e:3c:3d:27:4c:3a:d6:a1:07: 38:a1:72:37:28:bd:1e:a7:2c:4d:af:80:02:3e:76: 1c:04:62:8b:4d:e3:22:7c:b6:6f:67:e6:a8:6a:d9: 5e:85:d2:b1:91:d3:9d:21:b1:c8:ae:f7:e0:e3:b3: 85:10:fb:c8:fa:c6:6c:1d:71:2e:36:09:c3:70:0d: 34:76:b7:28:4f:ae:10:e2:b1:d1:ef:3a:d7:00:9a: fb:0a:5b:b8:ad:91:ca:ed:7b:90:e9:b7:97:0c:cb: 38:bb:c9:c9:08:51:74:0b:d4:97:cb:4d:4a:f6:48: f1:b0:a3:a2:46:36:e9:92:b5:71:e3:79:79:81:aa: 1f:fa:3b:bd:85:f3:d1:4d:11:a4:d3:53:51:7b:7d: 40:2c:ed:9d:f8:e5:9f:0b:4d:d9:9d:8f:32:d6:44: 31:32:1d:f5:aa:cb:95:fd:e6:ed:55:4a:83:df:d0: db:b9:40:67:5d:13:2e:0f:be:a3:52:72:f9:a9:5a: b0:0c:e2:d2:40:85:dc:21:9a:d0:10:ff:bf:cf:3b: dc:f6:3b:83:f6:0e:6f:67:1c:b1:4f:c7:4b:05:c9: 08:7f:2d:7a:20:e8:9a:4e:7d:27:5a:ee:cd:b3:a5: 02:aa:d1:9c:69:7b:b8:0a:eb:5d:78:e7:31:b3:1c: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0D:58:51:EA:FA:3D:80:96:96:89:9F:46:21:F5:A6:F3:5F:0E:05 X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:86:4e:73:c3:d2:c7:5f:18:a2:f0:4c:8a:60:1a:fb:33:72: 9d:ab:4d:de:a6:7b:01:c8:02:71:10:b9:d9:bd:b1:0b:f1:15: 14:a5:44:ab:ff:16:39:c1:d1:b4:03:aa:0b:59:d6:68:f1:77: 19:74:91:24:06:18:0d:20:31:a2:48:7a:fb:88:ca:51:19:38: 48:67:19:17:50:e9:95:05:6f:8b:17:82:8a:00:7f:a0:8a:b2: 22:00:30:14:1f:d3:0b:b0:35:b8:b0:6d:c4:06:7f:47:93:b4: 21:23:96:76:34:51:e1:44:b3:54:f3:37:78:f0:1d:2e:30:45: ca:77:8d:fc:07:4e:8f:ad:f5:6c:ab:83:57:81:41:48:4b:13: 42:d9:a2:9d:8a:9e:82:7f:a9:57:2d:5f:aa:e0:cb:bd:67:81: 35:2e:61:3f:b7:c0:09:51:38:13:50:70:7b:06:ef:02:4b:47: 34:58:df:92:f4:4f:b8:cf:16:dc:73:de:f9:34:f5:23:12:22: d9:70:d7:8f:32:77:44:84:05:19:10:33:f9:d8:21:da:3a:3d: e5:14:26:12:9e:24:d5:8b:a6:b3:b3:7d:c2:2d:c8:1b:a3:8a: b0:b2:6d:de:7e:ce:9a:8b:dd:27:e6:ab:4a:19:95:71:81:e6: 94:1e:ab:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUETdS6tajPYoFrDzRS9kKQBOABL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA0MTcxNzM5NDVaFw0yNjA0MTgxODEwNDVaMDMxMTAvBgNV BAMTKEIxMEQ1ODUxRUFGQTNEODA5Njk2ODk5RjQ2MjFGNUE2RjM1RjBFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTKyo5I48PSdMOtahBzihcjco vR6nLE2vgAI+dhwEYotN4yJ8tm9n5qhq2V6F0rGR050hsciu9+Djs4UQ+8j6xmwd cS42CcNwDTR2tyhPrhDisdHvOtcAmvsKW7itkcrte5Dpt5cMyzi7yckIUXQL1JfL TUr2SPGwo6JGNumStXHjeXmBqh/6O72F89FNEaTTU1F7fUAs7Z345Z8LTdmdjzLW RDEyHfWqy5X95u1VSoPf0Nu5QGddEy4PvqNScvmpWrAM4tJAhdwhmtAQ/7/PO9z2 O4P2Dm9nHLFPx0sFyQh/LXog6JpOfSda7s2zpQKq0Zxpe7gK61145zGzHNILAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsQ1YUer6PYCWlomfRiH1pvNfDgUwHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIZOc8PSx18Y ovBMimAa+zNynatN3qZ7AcgCcRC52b2xC/EVFKVEq/8WOcHRtAOqC1nWaPF3GXSR JAYYDSAxokh6+4jKURk4SGcZF1DplQVvixeCigB/oIqyIgAwFB/TC7A1uLBtxAZ/ R5O0ISOWdjRR4USzVPM3ePAdLjBFyneN/AdOj631bKuDV4FBSEsTQtminYqegn+p Vy1fquDLvWeBNS5hP7fACVE4E1BwewbvAktHNFjfkvRPuM8W3HPe+TT1IxIi2XDX jzJ3RIQFGRAz+dgh2jo95RQmEp4k1Yums7N9wi3IG6OKsLJt3n7OmovdJ+arShmV cYHmlB6rFw== -----END CERTIFICATE-----Generated at Sat Apr 18 04:13:33 2026 by rpki-client