$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: Q3YsnijUPLfDLBakXs/V9eqk2ZPPCaW3Xh7nFH4+VNw= Subject key identifier: 70:FD:A9:9B:64:01:10:3E:FA:90:50:7E:F1:A3:B7:4B:6F:75:39:E3 Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 572884CDFC45DFB62551BEE24CC88853D8DC34C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: 02 Signing time: Fri 17 Apr 2026 07:45:19 +0000 Manifest this update: Fri 17 Apr 2026 07:40:19 +0000 Manifest next update: Sat 18 Apr 2026 11:10:19 +0000 Files and hashes: 1: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: bg8L2uNMtG7c2xgwLCLx2KGCm+lCyyPMuEGe0UBjWJE=) 2: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:28:84:cd:fc:45:df:b6:25:51:be:e2:4c:c8:88:53:d8:dc:34:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Apr 17 07:40:19 2026 GMT Not After : Apr 18 11:10:19 2026 GMT Subject: CN=70FDA99B6401103EFA90507EF1A3B74B6F7539E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:95:1c:e8:ac:95:6e:30:cb:f2:31:63:2f: ea:ef:83:2c:6f:26:6c:3a:0d:22:f5:ab:11:00:96: 11:50:02:fd:90:1a:3a:42:c3:b3:f9:fd:b3:90:73: 0e:f2:4f:a2:ed:be:9a:c9:d8:2a:05:e9:d3:0c:aa: ca:14:c1:da:35:ec:cd:ac:74:0f:e3:62:66:b2:49: 04:e2:53:38:5e:a1:8c:50:f7:5c:08:58:1a:97:83: 53:3c:e3:0e:31:b2:dd:0d:e7:bd:81:1e:98:24:4e: f1:67:8c:52:53:b4:d5:66:68:77:a0:74:ca:59:3d: b9:3f:85:59:16:1e:8f:62:fc:b2:c6:b9:e3:18:02: b9:61:a0:47:95:a6:2a:79:41:56:40:57:c2:13:e8: 84:32:c2:fd:05:f1:40:12:0e:03:c1:23:95:77:b9: a9:62:e0:dc:f7:b7:f1:b3:77:c2:b2:d5:77:b9:3c: 0c:78:d9:b2:cc:09:32:e4:83:7f:f9:3f:a4:3d:c2: 9e:56:4d:73:b6:6d:fd:3e:c0:b6:85:8a:3e:a0:1c: a3:0a:84:4d:ed:d8:5e:b6:b3:07:99:d5:28:2d:5d: 76:1b:bd:94:73:dc:05:de:c9:62:85:06:c0:ef:6c: 8a:a1:de:cc:29:09:8c:8f:12:52:9b:de:84:0c:7b: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:A9:9B:64:01:10:3E:FA:90:50:7E:F1:A3:B7:4B:6F:75:39:E3 X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:30:f4:44:32:6f:c4:d9:5e:55:ed:70:6b:a6:78:81:17:da: ab:48:94:69:76:bc:8b:58:38:34:a7:d8:11:58:d7:19:9f:bc: a7:02:9c:c6:da:ff:35:ac:ca:17:e6:d1:2d:32:f9:b4:12:6b: b6:28:94:f1:4e:f5:66:8e:5c:be:d8:7d:6f:2f:05:91:4f:62: 6e:d1:92:20:d1:64:f8:68:16:3d:fc:32:83:8a:eb:7f:a1:bb: c2:f7:25:0f:0b:6d:f2:d2:f0:8e:14:48:16:20:5a:2b:6f:ac: b5:c8:cb:d2:1b:2c:7a:f9:71:fb:34:be:79:a9:76:bd:77:94: b3:ce:9e:06:0c:b9:fd:b7:1c:64:9c:01:5e:6c:e8:72:58:31: 77:6d:04:dc:ad:b2:4f:8c:36:d3:28:55:a2:5d:11:03:bb:b3: 44:41:2d:26:b9:33:9e:79:e6:18:be:e9:58:6d:94:a0:91:c3: 85:dc:c8:2c:52:df:54:4e:4a:a5:d6:41:bc:d7:71:8f:e1:01: 49:07:67:a1:4a:4c:67:64:37:5c:e7:7d:90:a7:19:9a:10:f6: 18:ba:20:ed:24:bb:b7:b7:e3:4a:82:bf:4c:d0:ab:83:71:6c: 40:bd:e8:d2:93:78:98:1a:18:d7:e3:97:9d:b8:da:74:dc:27: 26:38:52:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVyiEzfxF37YlUb7iTMiIU9jcNMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjA0MTcwNzQwMTlaFw0yNjA0MTgxMTEwMTlaMDMxMTAvBgNV BAMTKDcwRkRBOTlCNjQwMTEwM0VGQTkwNTA3RUYxQTNCNzRCNkY3NTM5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VZUc6KyVbjDL8jFjL+rvgyxv Jmw6DSL1qxEAlhFQAv2QGjpCw7P5/bOQcw7yT6LtvprJ2CoF6dMMqsoUwdo17M2s dA/jYmaySQTiUzheoYxQ91wIWBqXg1M84w4xst0N572BHpgkTvFnjFJTtNVmaHeg dMpZPbk/hVkWHo9i/LLGueMYArlhoEeVpip5QVZAV8IT6IQywv0F8UASDgPBI5V3 uali4Nz3t/Gzd8Ky1Xe5PAx42bLMCTLkg3/5P6Q9wp5WTXO2bf0+wLaFij6gHKMK hE3t2F62sweZ1SgtXXYbvZRz3AXeyWKFBsDvbIqh3swpCYyPElKb3oQMe9/tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcP2pm2QBED76kFB+8aO3S291OeMwHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzD0RDJvxNle Ve1wa6Z4gRfaq0iUaXa8i1g4NKfYEVjXGZ+8pwKcxtr/NazKF+bRLTL5tBJrtiiU 8U71Zo5cvth9by8FkU9ibtGSINFk+GgWPfwyg4rrf6G7wvclDwtt8tLwjhRIFiBa K2+stcjL0hssevlx+zS+eal2vXeUs86eBgy5/bccZJwBXmzoclgxd20E3K2yT4w2 0yhVol0RA7uzREEtJrkznnnmGL7pWG2UoJHDhdzILFLfVE5KpdZBvNdxj+EBSQdn oUpMZ2Q3XOd9kKcZmhD2GLog7SS7t7fjSoK/TNCrg3FsQL3o0pN4mBoY1+OXnbja dNwnJjhSmQ== -----END CERTIFICATE-----Generated at Sat Apr 18 02:42:43 2026 by rpki-client