$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json) Hash identifier: vnTftwG9Q4NC2Ga70YbLlWiLfRVmTEaIqBG30Zky/dI= Subject key identifier: DA:30:1A:81:C9:58:1C:80:22:94:06:EA:C1:91:AA:98:E0:F1:15:35 Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Certificate serial: 4313B77EF125F08D6A471F6DF08A16CE65F034C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft Manifest number: 01 Signing time: Fri 17 Apr 2026 13:36:03 +0000 Manifest this update: Fri 17 Apr 2026 13:31:03 +0000 Manifest next update: Sat 18 Apr 2026 15:44:03 +0000 Files and hashes: 1: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: RGQM5QVBIciAM6cpTIhdNKnsIljz+glRQLlTiXAwuF4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:13:b7:7e:f1:25:f0:8d:6a:47:1f:6d:f0:8a:16:ce:65:f0:34:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Validity Not Before: Apr 17 13:31:03 2026 GMT Not After : Apr 18 15:44:03 2026 GMT Subject: CN=DA301A81C9581C80229406EAC191AA98E0F11535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:f6:c2:1d:e6:fb:4a:8b:83:98:65:64:2f: 89:c6:6a:02:8b:8b:c4:b4:2b:c1:a1:6e:aa:40:19: 6d:b9:de:49:98:50:a7:9a:4c:55:02:6b:76:09:86: d5:c3:48:fc:e5:45:b0:d8:06:78:03:77:a4:54:a0: a4:38:25:2c:bf:a4:2f:d9:19:42:56:7e:2c:a7:a8: 2c:42:05:0c:01:eb:88:f8:9c:30:b3:33:bd:12:3d: 24:b5:ef:c6:36:43:47:d0:14:9b:dd:b1:b5:26:3c: 4b:f8:0c:5f:2a:ab:8e:c5:88:4a:2f:02:ce:0a:1b: db:27:3f:55:08:00:1a:9c:5e:a6:98:78:aa:40:8d: 4e:ff:4c:78:ac:1b:3b:28:8f:1a:53:41:4e:7d:d5: 11:9a:45:f6:cf:f2:7b:9d:9d:55:f0:cf:41:35:37: 8c:24:98:9a:71:56:f4:a0:72:22:1e:cd:66:6d:18: e0:1d:8a:61:53:43:56:ad:2f:bc:43:97:cb:14:ec: a3:36:2b:f1:a6:87:96:69:f5:d2:b1:eb:7a:25:00: fd:98:25:5b:7c:4a:db:05:e3:4e:1a:3e:a4:66:d8: fa:96:e4:68:b0:96:51:58:8a:7c:5b:74:be:5a:bf: d3:20:73:06:1a:81:b7:cd:cf:13:08:6a:8d:7f:24: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:30:1A:81:C9:58:1C:80:22:94:06:EA:C1:91:AA:98:E0:F1:15:35 X509v3 Authority Key Identifier: keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:25:d4:be:45:95:6b:da:28:93:c4:91:98:f7:49:bf:45:f5: 32:2c:10:94:0f:c3:74:93:29:16:79:dc:f2:cf:24:ed:cc:ac: 16:e2:5b:ef:51:81:a7:f8:a9:53:0b:e5:1c:b3:0a:07:d0:ca: ce:c3:0b:dc:63:76:e5:b2:c4:56:4f:9e:af:e7:8e:51:60:66: 6c:f3:66:b1:ac:21:0d:05:e1:f5:ca:ce:31:2b:4d:a9:f8:d4: c1:c2:3e:d6:17:dd:b1:a9:6d:46:34:b9:08:86:b4:27:67:b5: 01:7c:03:86:58:03:0b:f1:2c:a6:be:82:4a:4e:b0:66:de:0f: 85:d8:9b:0e:e9:1b:23:40:2d:e0:cd:d6:cb:df:af:06:f6:b8: 3e:9d:7d:5c:14:c2:b3:61:da:2a:c1:af:95:03:7d:d5:28:07: 21:b2:8d:74:7e:5f:ab:64:17:68:5c:97:40:49:6b:13:17:13: 03:05:d0:89:15:ac:18:56:8d:2a:71:f9:17:b6:50:50:e1:90: 92:33:ed:66:e2:15:8d:f3:3c:f7:c2:18:28:0d:66:57:16:a9: ae:b6:ee:02:fa:73:ad:8f:d1:8d:b1:bd:f5:1c:ca:75:a2:5c: 77:8c:51:84:e1:1d:1a:af:4c:d5:ca:f7:d3:fe:6c:f3:b5:a6: c2:20:5a:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQxO3fvEl8I1qRx9t8IoWzmXwNMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYw MjU3QkRDNzAeFw0yNjA0MTcxMzMxMDNaFw0yNjA0MTgxNTQ0MDNaMDMxMTAvBgNV BAMTKERBMzAxQTgxQzk1ODFDODAyMjk0MDZFQUMxOTFBQTk4RTBGMTE1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa5PbCHeb7SouDmGVkL4nGagKL i8S0K8GhbqpAGW253kmYUKeaTFUCa3YJhtXDSPzlRbDYBngDd6RUoKQ4JSy/pC/Z GUJWfiynqCxCBQwB64j4nDCzM70SPSS178Y2Q0fQFJvdsbUmPEv4DF8qq47FiEov As4KG9snP1UIABqcXqaYeKpAjU7/THisGzsojxpTQU591RGaRfbP8nudnVXwz0E1 N4wkmJpxVvSgciIezWZtGOAdimFTQ1atL7xDl8sU7KM2K/Gmh5Zp9dKx63olAP2Y JVt8StsF404aPqRm2PqW5GiwllFYinxbdL5av9MgcwYagbfNzxMIao1/JJMlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2jAagclYHIAilAbqwZGqmODxFTUwHwYDVR0j BBgwFoAUtjJQLo1tI2nFGiNGy6Vp5gJXvccwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzUxNTgxMzkzMTMxOTI5OS8wL0I2MzI1MDJFOEQ2RDIzNjlDNTFBMjM0NkNCQTU2 OUU2MDI1N0JEQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc1MTU4MTM5MzEzMTkyOTkvMC9CNjMyNTAyRThENkQy MzY5QzUxQTIzNDZDQkE1NjlFNjAyNTdCREM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyXUvkWVa9oo k8SRmPdJv0X1MiwQlA/DdJMpFnnc8s8k7cysFuJb71GBp/ipUwvlHLMKB9DKzsML 3GN25bLEVk+er+eOUWBmbPNmsawhDQXh9crOMStNqfjUwcI+1hfdsaltRjS5CIa0 J2e1AXwDhlgDC/Espr6CSk6wZt4PhdibDukbI0At4M3Wy9+vBva4Pp19XBTCs2Ha KsGvlQN91SgHIbKNdH5fq2QXaFyXQElrExcTAwXQiRWsGFaNKnH5F7ZQUOGQkjPt ZuIVjfM898IYKA1mVxaprrbuAvpzrY/RjbG99RzKdaJcd4xRhOEdGq9M1cr30/5s 87WmwiBadA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:56:12 2026 by rpki-client