$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft (raw, json) Hash identifier: O1iwBWDc2QHTkxSDjHA2Y7hWBd22tg1tttf97zVHzTk= Subject key identifier: F6:A6:9F:8C:7E:A2:F6:A7:08:66:33:A9:C7:66:2F:BB:96:7C:84:F6 Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Certificate issuer: /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Certificate serial: 7D7CA135649ED5F6875BA627537592F3054453D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft Manifest number: 01 Signing time: Fri 17 Apr 2026 05:05:46 +0000 Manifest this update: Fri 17 Apr 2026 05:00:46 +0000 Manifest next update: Sat 18 Apr 2026 08:30:46 +0000 Files and hashes: 1: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl (hash: p4Iy/oR7yCMaKpsuR2aeaRSJ1AewcwqfrJQyv75q45c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7c:a1:35:64:9e:d5:f6:87:5b:a6:27:53:75:92:f3:05:44:53:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Validity Not Before: Apr 17 05:00:46 2026 GMT Not After : Apr 18 08:30:46 2026 GMT Subject: CN=F6A69F8C7EA2F6A7086633A9C7662FBB967C84F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:02:bf:ec:be:75:3c:bd:03:d2:c5:dd:db:e6: 37:ec:82:94:70:e3:ac:41:29:97:4e:f4:56:21:73: 4c:bc:37:90:fe:e8:44:7c:71:89:cf:84:6b:30:30: c7:d7:11:3f:6d:73:1c:4b:63:0e:2e:fd:da:10:5e: 86:b6:ba:1e:f6:e7:21:a4:9f:69:fa:53:bd:3e:1c: c3:4c:c8:61:59:17:2d:a3:36:01:66:5c:a1:df:97: 1c:91:3e:40:24:eb:39:8b:ee:e9:e9:90:6b:f4:06: 75:35:d4:63:89:02:22:26:ca:d3:6b:75:4c:06:dc: b2:3f:16:31:fe:cc:43:75:48:d2:ad:ed:47:88:46: 45:e7:8d:5c:0d:d2:cc:a8:bb:0b:bc:62:99:4c:e2: 70:40:f1:dd:6f:8c:dc:4d:64:a7:b6:6f:07:0d:28: 0c:9e:27:9c:dc:0e:94:db:4f:65:60:44:67:c5:58: f2:a9:70:b2:ad:d4:e7:42:db:d0:96:e1:14:03:87: e5:4d:87:c8:92:1a:37:d4:86:6b:39:75:b5:d6:f4: fe:fd:f8:ca:6f:6b:6b:74:d7:1b:12:c9:73:8c:34: bc:74:ec:07:56:b4:0f:e1:91:db:df:b6:f6:7d:06: 61:b4:56:b2:0b:7a:1c:54:63:ad:26:fe:3e:8b:1a: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A6:9F:8C:7E:A2:F6:A7:08:66:33:A9:C7:66:2F:BB:96:7C:84:F6 X509v3 Authority Key Identifier: keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:98:6f:52:f0:01:52:9c:ec:f2:f9:e4:4a:d8:f2:39:2c:6a: f7:0a:c7:17:25:34:62:c5:62:3f:75:ec:03:ab:53:fa:a5:ba: 0f:6b:55:6a:38:2e:50:e4:30:e8:00:ad:c7:c5:ec:2c:b8:35: 57:18:bc:29:de:d7:cb:f2:1a:42:90:0f:03:de:48:d4:41:40: 52:40:da:2f:4b:90:0c:d3:9c:cf:67:16:45:e9:1a:8a:3f:5e: 28:55:36:df:dd:3a:75:b4:82:14:9b:e6:ba:1c:75:5e:e7:da: e2:9e:bb:d4:8b:d7:1a:0f:f0:c0:17:46:93:96:12:6c:09:e2: 1c:e2:da:29:6a:e3:9e:f3:81:c3:07:f3:77:53:63:3f:06:b4: 34:1b:a8:3f:49:a0:b4:57:70:86:6e:7f:7a:74:b7:e2:0c:dd: ed:7f:58:93:60:7c:b2:63:56:39:ca:c6:c1:40:ec:8b:81:11: 7e:fb:26:e5:56:d0:17:6d:a8:ec:9a:bb:a1:03:22:e3:71:08: 50:0b:a5:e2:ee:d4:dc:d9:bd:23:39:82:8e:62:a7:f2:c9:ae: f0:90:28:3c:9f:b8:28:c9:14:b4:c9:28:50:7e:97:34:60:de: 4a:07:71:5c:c9:ee:aa:d4:76:2c:70:66:be:59:0b:0d:b3:2e: 8d:36:d0:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfXyhNWSe1faHW6YnU3WS8wVEU9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1 RjNFNDI0RTAeFw0yNjA0MTcwNTAwNDZaFw0yNjA0MTgwODMwNDZaMDMxMTAvBgNV BAMTKEY2QTY5RjhDN0VBMkY2QTcwODY2MzNBOUM3NjYyRkJCOTY3Qzg0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgAr/svnU8vQPSxd3b5jfsgpRw 46xBKZdO9FYhc0y8N5D+6ER8cYnPhGswMMfXET9tcxxLYw4u/doQXoa2uh725yGk n2n6U70+HMNMyGFZFy2jNgFmXKHflxyRPkAk6zmL7unpkGv0BnU11GOJAiImytNr dUwG3LI/FjH+zEN1SNKt7UeIRkXnjVwN0syouwu8YplM4nBA8d1vjNxNZKe2bwcN KAyeJ5zcDpTbT2VgRGfFWPKpcLKt1OdC29CW4RQDh+VNh8iSGjfUhms5dbXW9P79 +Mpva2t01xsSyXOMNLx07AdWtA/hkdvftvZ9BmG0VrILehxUY60m/j6LGioFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9qafjH6i9qcIZjOpx2Yvu5Z8hPYwHwYDVR0j BBgwFoAUmor6fwM5VuBCXxWxBwpgb18+Qk4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM4NzM5ODQ2MDg2NjU2MS8wLzlBOEFGQTdGMDMzOTU2RTA0MjVGMTVCMTA3MEE2 MDZGNUYzRTQyNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczODczOTg0NjA4NjY1NjEvMC85QThBRkE3RjAzMzk1 NkUwNDI1RjE1QjEwNzBBNjA2RjVGM0U0MjRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZhvUvABUpzs 8vnkStjyOSxq9wrHFyU0YsViP3XsA6tT+qW6D2tVajguUOQw6ACtx8XsLLg1Vxi8 Kd7Xy/IaQpAPA95I1EFAUkDaL0uQDNOcz2cWRekaij9eKFU23906dbSCFJvmuhx1 Xufa4p671IvXGg/wwBdGk5YSbAniHOLaKWrjnvOBwwfzd1NjPwa0NBuoP0mgtFdw hm5/enS34gzd7X9Yk2B8smNWOcrGwUDsi4ERfvsm5VbQF22o7Jq7oQMi43EIUAul 4u7U3Nm9IzmCjmKn8smu8JAoPJ+4KMkUtMkoUH6XNGDeSgdxXMnuqtR2LHBmvlkL DbMujTbQhw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:56:07 2026 by rpki-client