$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft File: 951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json) Hash identifier: F68SxjGs18EprsecX+TfPfPr6pDP8GRQ8uQa772OrQc= Subject key identifier: 9E:16:8C:3F:52:59:FC:16:5F:AA:0E:DC:2A:81:AF:3C:1A:6C:FC:1B Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 Certificate issuer: /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Certificate serial: 0475D6A94AD0283E0325E1C0EC2124C74C067EC1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft Manifest number: 02 Signing time: Fri 17 Apr 2026 21:29:48 +0000 Manifest this update: Fri 17 Apr 2026 21:24:48 +0000 Manifest next update: Sat 18 Apr 2026 22:28:48 +0000 Files and hashes: 1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: vfPpFM+2S9ZaVvaYAD+tmT/K08WovUbIe4w6cL/k9eg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:75:d6:a9:4a:d0:28:3e:03:25:e1:c0:ec:21:24:c7:4c:06:7e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Validity Not Before: Apr 17 21:24:48 2026 GMT Not After : Apr 18 22:28:48 2026 GMT Subject: CN=9E168C3F5259FC165FAA0EDC2A81AF3C1A6CFC1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7a:a9:56:08:d1:40:95:bd:30:b8:5c:90:38: cf:88:4b:8b:be:46:89:7c:b7:1b:13:2f:80:ad:7f: a6:ef:b7:41:df:21:f5:57:67:9b:15:91:43:02:01: d1:50:a8:4d:4a:13:d8:b6:92:55:c7:de:91:ae:54: 77:78:b5:90:72:dc:e6:92:fa:98:eb:3e:06:24:1c: d4:e2:ce:a2:d6:c5:e1:a0:bb:7c:38:4a:41:ee:e4: ab:4f:2d:be:a1:49:77:ea:2d:0f:d1:b4:65:e7:d9: 73:c5:c1:3c:ac:a2:66:9b:19:99:17:aa:31:54:66: 13:30:73:58:69:e6:07:3a:b1:23:5d:28:d0:aa:87: ae:2d:02:69:8e:e0:6d:99:d0:1e:20:ce:bb:3d:fa: cb:38:9b:5a:c0:fb:8e:a9:4e:e6:ac:d5:5e:36:30: 4b:ac:7c:ac:6b:cf:33:9c:98:bb:cd:19:8d:10:13: 51:c0:19:f0:dd:c3:2b:ae:4e:b3:8d:11:6f:32:5b: 1e:53:50:af:b3:dd:87:08:80:53:0e:a0:f0:e1:79: 97:23:38:95:a5:17:a6:e6:12:72:06:d0:f6:c3:1e: 06:49:5a:2f:9e:b9:1d:d5:23:04:de:94:13:83:cf: 88:95:bd:0f:11:c0:08:d7:b4:48:6c:ae:1b:1f:6d: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:16:8C:3F:52:59:FC:16:5F:AA:0E:DC:2A:81:AF:3C:1A:6C:FC:1B X509v3 Authority Key Identifier: keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f2:b0:6a:8f:02:05:ba:36:ac:27:08:eb:49:e8:59:08:6b: f9:d7:64:73:80:66:e4:58:3b:2c:6a:4f:8c:23:6a:1f:0f:8b: 37:29:84:46:c1:d2:a8:a0:f8:49:ed:58:97:4e:6d:eb:a2:d2: 12:52:a1:a2:1c:74:e4:d6:d7:01:32:20:16:d4:02:fd:7f:a4: 4e:10:d4:f8:ff:0d:9e:d9:38:a1:14:5c:7b:e8:e3:9b:b2:22: 62:4f:f8:f3:77:e5:34:23:08:85:7c:27:d9:66:66:c1:5f:a2: 01:2a:94:31:cf:e8:76:e6:03:87:94:74:f9:f0:05:19:af:9f: b7:39:41:26:19:43:b6:82:f5:6a:89:a0:48:29:55:e2:8d:07: 15:41:b1:39:fd:5c:14:7c:e7:75:b9:c5:b3:75:84:66:04:b1: 16:8b:24:cb:76:5c:53:40:a6:75:87:f7:4b:59:f5:d3:14:8c: 3b:e7:78:d4:14:ce:d7:8b:45:ac:47:ab:ab:79:89:d2:91:95: d6:cb:6a:eb:89:8b:d1:5e:97:98:08:d3:ac:5a:c6:e9:9c:62: 74:21:30:f8:c8:7e:eb:67:cd:a7:ad:94:43:0f:0e:78:db:09: 57:75:af:7b:9e:a8:98:8d:94:e6:bb:47:2b:31:e4:0b:cf:d0: 2d:56:b5:3f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBHXWqUrQKD4DJeHA7CEkx0wGfsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVC QkNGM0RDNDAeFw0yNjA0MTcyMTI0NDhaFw0yNjA0MTgyMjI4NDhaMDMxMTAvBgNV BAMTKDlFMTY4QzNGNTI1OUZDMTY1RkFBMEVEQzJBODFBRjNDMUE2Q0ZDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeqlWCNFAlb0wuFyQOM+IS4u+ Rol8txsTL4Ctf6bvt0HfIfVXZ5sVkUMCAdFQqE1KE9i2klXH3pGuVHd4tZBy3OaS +pjrPgYkHNTizqLWxeGgu3w4SkHu5KtPLb6hSXfqLQ/RtGXn2XPFwTysomabGZkX qjFUZhMwc1hp5gc6sSNdKNCqh64tAmmO4G2Z0B4gzrs9+ss4m1rA+46pTuas1V42 MEusfKxrzzOcmLvNGY0QE1HAGfDdwyuuTrONEW8yWx5TUK+z3YcIgFMOoPDheZcj OJWlF6bmEnIG0PbDHgZJWi+euR3VIwTelBODz4iVvQ8RwAjXtEhsrhsfbUJlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnhaMP1JZ/BZfqg7cKoGvPBps/BswHwYDVR0j BBgwFoAUlRgw+utT+Al8E18WKS4plbvPPcQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2NjA4MjEyNzEzNDcyMy8wLzk1MTgzMEZBRUI1M0Y4MDk3QzEzNUYxNjI5MkUy OTk1QkJDRjNEQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVCQkNGM0RDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjYwODIxMjcxMzQ3MjMvMC85NTE4MzBGQUVCNTNG ODA5N0MxMzVGMTYyOTJFMjk5NUJCQ0YzREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPKwao8CBbo2 rCcI60noWQhr+ddkc4Bm5Fg7LGpPjCNqHw+LNymERsHSqKD4Se1Yl05t66LSElKh ohx05NbXATIgFtQC/X+kThDU+P8Nntk4oRRce+jjm7IiYk/483flNCMIhXwn2WZm wV+iASqUMc/oduYDh5R0+fAFGa+ftzlBJhlDtoL1aomgSClV4o0HFUGxOf1cFHzn dbnFs3WEZgSxFosky3ZcU0CmdYf3S1n10xSMO+d41BTO14tFrEerq3mJ0pGV1stq 64mL0V6XmAjTrFrG6ZxidCEw+Mh+62fNp62UQw8OeNsJV3Wve56omI2U5rtHKzHk C8/QLVa1Pw== -----END CERTIFICATE-----Generated at Sat Apr 18 02:43:46 2026 by rpki-client