$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: sbPVWL/9G3AqvSPMQ620Ko/QVAPe+EAPJ66nZgVEGsc= Subject key identifier: 16:05:10:D1:04:54:72:9B:C3:38:BD:68:D8:BD:53:E6:71:41:CA:E2 Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 2FD84E6118431940E1440B8F0B535305B6C141E3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: 03 Signing time: Fri 17 Apr 2026 18:24:47 +0000 Manifest this update: Fri 17 Apr 2026 18:19:47 +0000 Manifest next update: Sat 18 Apr 2026 19:45:47 +0000 Files and hashes: 1: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) 2: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: 90cj0yL5V0w431fHlROhGT0qqMqB21zGoAFyJhkji48=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d8:4e:61:18:43:19:40:e1:44:0b:8f:0b:53:53:05:b6:c1:41:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Apr 17 18:19:47 2026 GMT Not After : Apr 18 19:45:47 2026 GMT Subject: CN=160510D10454729BC338BD68D8BD53E67141CAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9c:a3:1c:3b:39:c9:84:e9:0d:7e:e8:62:78: b4:f8:86:fd:fa:a1:1a:f9:ad:d1:21:cc:66:4e:9a: 97:ac:95:7d:cc:4c:d9:1f:77:07:05:51:ad:14:75: c4:2a:da:17:75:ad:74:75:b2:d0:20:8d:44:b0:ab: f3:de:40:89:d8:13:40:bc:f0:75:b0:42:e4:f0:16: ee:2c:33:78:f4:6e:a5:65:ff:5d:56:80:34:04:20: c0:d9:f3:d9:9d:1a:27:f1:5b:08:7d:67:81:17:10: 99:f1:e3:3d:84:ab:66:f5:e6:85:6b:c5:81:97:bf: ce:13:dd:0d:c1:29:1e:66:6d:cd:cd:9c:d8:55:90: 20:4d:df:6b:10:11:57:61:0f:e5:9e:7f:ce:46:79: 84:6d:ad:96:22:8e:d2:a4:15:8e:68:a8:38:7f:ce: 05:6a:0b:8b:da:8b:ee:b9:08:9b:03:24:78:49:bb: 41:02:c3:9c:80:9c:de:bd:04:e9:8e:fa:b4:3d:b1: a5:98:75:6e:cb:8c:dc:20:4a:30:aa:22:03:95:8b: d0:aa:6a:76:76:c1:00:6b:14:7c:1e:6d:8c:74:ad: 44:ee:4f:1d:77:af:f0:25:36:f0:e1:77:b3:55:61: 9c:9d:cf:e0:ab:01:20:c4:a6:eb:e8:4b:b6:63:58: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:05:10:D1:04:54:72:9B:C3:38:BD:68:D8:BD:53:E6:71:41:CA:E2 X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:be:4b:bf:f3:38:48:73:bb:96:11:c0:4c:db:ad:3a:ed:92: 5d:de:d4:d2:96:d3:e7:63:01:6d:5b:ea:42:34:6f:cd:5b:65: 68:bc:38:56:5b:e2:66:ea:69:c9:77:6c:24:dd:44:63:a5:fe: 4f:a5:ec:69:95:ad:26:f7:95:45:ce:46:49:02:10:b8:dc:8d: bf:b9:8b:97:07:a3:c4:69:75:9b:b3:6d:1e:a0:59:35:99:71: fd:46:b0:42:2b:26:31:da:9f:1b:a2:be:c8:79:9b:91:9c:f2: 2e:de:74:da:ee:69:e5:0e:9f:3c:c8:e1:bf:0f:ef:74:de:d1: a4:76:cc:47:ef:11:ac:13:65:6a:d6:c5:ed:49:d7:c9:1f:fc: 1b:7f:21:f2:55:8a:32:87:44:62:23:d9:04:4a:7f:d7:3a:c9: 0f:cb:e0:f1:17:6a:03:6f:3a:2d:26:15:cc:e7:55:ad:ce:c1: f3:fc:d6:86:01:be:4c:ba:29:a8:d0:ea:38:9a:ed:e0:bf:62: da:01:3a:fb:9a:2a:9e:88:38:f7:6a:7e:78:a3:b0:40:d1:2b: 87:09:7c:4d:2f:9c:46:87:49:ed:32:e0:72:ed:01:25:4d:8d: 33:8f:ee:ed:06:90:93:ec:40:ed:5e:7c:04:a4:20:95:78:70: 8a:9c:48:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL9hOYRhDGUDhRAuPC1NTBbbBQeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjA0MTcxODE5NDdaFw0yNjA0MTgxOTQ1NDdaMDMxMTAvBgNV BAMTKDE2MDUxMEQxMDQ1NDcyOUJDMzM4QkQ2OEQ4QkQ1M0U2NzE0MUNBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDynKMcOznJhOkNfuhieLT4hv36 oRr5rdEhzGZOmpeslX3MTNkfdwcFUa0UdcQq2hd1rXR1stAgjUSwq/PeQInYE0C8 8HWwQuTwFu4sM3j0bqVl/11WgDQEIMDZ89mdGifxWwh9Z4EXEJnx4z2Eq2b15oVr xYGXv84T3Q3BKR5mbc3NnNhVkCBN32sQEVdhD+Wef85GeYRtrZYijtKkFY5oqDh/ zgVqC4vai+65CJsDJHhJu0ECw5yAnN69BOmO+rQ9saWYdW7LjNwgSjCqIgOVi9Cq anZ2wQBrFHwebYx0rUTuTx13r/AlNvDhd7NVYZydz+CrASDEpuvoS7ZjWCxLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFgUQ0QRUcpvDOL1o2L1T5nFByuIwHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmb5Lv/M4SHO7 lhHATNutOu2SXd7U0pbT52MBbVvqQjRvzVtlaLw4VlviZuppyXdsJN1EY6X+T6Xs aZWtJveVRc5GSQIQuNyNv7mLlwejxGl1m7NtHqBZNZlx/UawQismMdqfG6K+yHmb kZzyLt502u5p5Q6fPMjhvw/vdN7RpHbMR+8RrBNlatbF7UnXyR/8G38h8lWKModE YiPZBEp/1zrJD8vg8RdqA286LSYVzOdVrc7B8/zWhgG+TLopqNDqOJrt4L9i2gE6 +5oqnog492p+eKOwQNErhwl8TS+cRodJ7TLgcu0BJU2NM4/u7QaQk+xA7V58BKQg lXhwipxIoQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:23:34 2026 by rpki-client