$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft File: 96E9344F9168341F216708A437FB9801FEBBBBB6.mft (raw, json) Hash identifier: LqFV4nlTEhkZp9MOJy1avbNSbP/hcYNQIVZfCbcl6uA= Subject key identifier: 67:32:CC:2D:AB:16:49:E9:9B:A0:98:AB:11:C5:D2:8E:F5:73:18:95 Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 6C2FEDD03E4B523BA4656E9D9227504ED548B7C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft Manifest number: 02 Signing time: Fri 17 Apr 2026 08:12:50 +0000 Manifest this update: Fri 17 Apr 2026 08:07:50 +0000 Manifest next update: Sat 18 Apr 2026 10:57:50 +0000 Files and hashes: 1: 34332e3234382e3130312e302f32342d3234203d3e20313331343833.roa (hash: nxDjxnLALt/hIwHKRbfhK43Ckh4MK60QwEKg4P/wLbE=) 2: 96E9344F9168341F216708A437FB9801FEBBBBB6.crl (hash: SD6T/o9dUpNr7/XCqVLPs6RTpXQUlemSiLYSgRdnjlA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2f:ed:d0:3e:4b:52:3b:a4:65:6e:9d:92:27:50:4e:d5:48:b7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Apr 17 08:07:50 2026 GMT Not After : Apr 18 10:57:50 2026 GMT Subject: CN=6732CC2DAB1649E99BA098AB11C5D28EF5731895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:14:06:05:5e:ee:0e:c8:22:6a:bf:99:be: 0d:7d:a4:a9:5c:74:89:4f:c7:8f:4e:95:47:b7:50: 0f:38:50:3d:36:f6:35:66:98:df:8e:6f:2d:8f:9d: 84:e9:fb:48:ca:5b:57:8e:34:47:c7:3f:a9:91:f0: d7:f5:86:97:5f:5b:aa:ae:e2:12:24:f0:82:a5:3c: 79:fc:f9:83:da:0b:6c:56:67:13:f3:79:58:04:b1: 19:34:bd:f9:bd:64:6e:f5:40:94:06:77:d2:be:11: 4f:09:0c:7c:21:ce:0b:2c:87:77:c7:fc:79:57:8f: c4:57:51:56:f2:e6:60:1e:40:63:ff:d1:9a:57:a1: 6d:76:5c:24:89:46:bc:f2:d9:ae:a4:b3:ca:ca:fc: bf:0c:9d:0d:8d:ab:71:ba:6a:1f:93:04:8b:fe:ce: ae:18:ac:4f:97:b0:fd:59:18:c2:87:73:1a:c3:2e: 01:af:6c:b1:e0:7e:75:1d:bf:9c:d9:bf:e1:e7:d6: 2b:6e:d4:65:91:2e:a3:fa:86:ea:16:39:5d:16:c6: 92:f9:58:d1:a1:f8:ce:51:16:b8:91:00:c4:8c:42: 6c:20:d5:ea:c5:53:21:b7:a0:07:91:e5:92:c5:dd: 52:99:ef:f3:52:ce:d6:84:58:51:82:a7:2a:51:bd: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:32:CC:2D:AB:16:49:E9:9B:A0:98:AB:11:C5:D2:8E:F5:73:18:95 X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:57:01:82:13:55:16:33:21:53:43:f4:14:08:5b:b4:4c:f5: 84:c7:56:4a:4d:1c:52:a8:b5:3f:a0:6e:50:54:e7:df:b4:02: f1:43:ee:11:67:96:ba:33:6f:74:f2:a1:10:fd:c8:96:30:82: a0:66:71:c1:e2:47:df:2f:fd:aa:0c:c2:90:3a:c9:64:31:66: 47:54:a5:d3:d7:40:d6:f6:80:5c:4c:c9:1b:d8:7b:42:a5:8d: 4d:df:55:e7:13:b8:8f:35:4c:77:ac:8a:e0:05:29:78:ce:fc: ac:69:e1:e8:99:8b:da:40:00:6d:f4:41:7e:b4:28:25:b8:bb: 6d:dd:f8:0c:fb:67:80:45:89:c0:88:41:f8:92:23:7c:27:f6: 8a:4d:ed:e4:3c:7c:ca:14:aa:7a:67:8a:91:3e:28:b7:fe:49: a3:e1:ff:af:f5:c4:1d:e8:97:b7:44:e4:ce:f3:57:55:a3:5e: 09:11:bf:21:9e:99:d1:95:93:c6:bb:d8:b7:07:b4:bb:34:30: 3c:6b:2c:e0:38:71:41:6e:41:02:8a:03:64:49:dc:36:47:5c: 3a:e8:ab:50:ce:17:49:c3:0d:ff:04:90:fa:ae:82:41:6c:21: 01:16:0e:55:c1:2b:0f:09:89:e9:be:a6:50:c5:72:c9:2c:4f: 50:67:ba:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbC/t0D5LUjukZW6dkidQTtVIt8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA0MTcwODA3NTBaFw0yNjA0MTgxMDU3NTBaMDMxMTAvBgNV BAMTKDY3MzJDQzJEQUIxNjQ5RTk5QkEwOThBQjExQzVEMjhFRjU3MzE4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7RQGBV7uDsgiar+Zvg19pKlc dIlPx49OlUe3UA84UD029jVmmN+Oby2PnYTp+0jKW1eONEfHP6mR8Nf1hpdfW6qu 4hIk8IKlPHn8+YPaC2xWZxPzeVgEsRk0vfm9ZG71QJQGd9K+EU8JDHwhzgssh3fH /HlXj8RXUVby5mAeQGP/0ZpXoW12XCSJRrzy2a6ks8rK/L8MnQ2Nq3G6ah+TBIv+ zq4YrE+XsP1ZGMKHcxrDLgGvbLHgfnUdv5zZv+Hn1itu1GWRLqP6huoWOV0WxpL5 WNGh+M5RFriRAMSMQmwg1erFUyG3oAeR5ZLF3VKZ7/NSztaEWFGCpypRvS7DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZzLMLasWSemboJirEcXSjvVzGJUwHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MzM3ODk3ODY3NTA5NzcvMC85NkU5MzQ0RjkxNjgz NDFGMjE2NzA4QTQzN0ZCOTgwMUZFQkJCQkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFcBghNVFjMh U0P0FAhbtEz1hMdWSk0cUqi1P6BuUFTn37QC8UPuEWeWujNvdPKhEP3IljCCoGZx weJH3y/9qgzCkDrJZDFmR1Sl09dA1vaAXEzJG9h7QqWNTd9V5xO4jzVMd6yK4AUp eM78rGnh6JmL2kAAbfRBfrQoJbi7bd34DPtngEWJwIhB+JIjfCf2ik3t5Dx8yhSq emeKkT4ot/5Jo+H/r/XEHeiXt0TkzvNXVaNeCRG/IZ6Z0ZWTxrvYtwe0uzQwPGss 4DhxQW5BAooDZEncNkdcOuirUM4XScMN/wSQ+q6CQWwhARYOVcErDwmJ6b6mUMVy ySxPUGe6nA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:20:58 2026 by rpki-client