$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft File: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft (raw, json) Hash identifier: kO4jQyzfD8jhu46DbfXBlfHfN9yMssBdxB3q5bgDSag= Subject key identifier: 4C:61:D6:AB:6C:53:97:64:DF:FF:DA:10:1D:5A:E9:8E:4B:51:6D:C6 Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77 Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077 Certificate serial: 15489EC320AD9171AB1E329B868145171E4A453F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft Manifest number: 79 Signing time: Sat 18 Apr 2026 19:44:57 +0000 Manifest this update: Sat 18 Apr 2026 19:39:57 +0000 Manifest next update: Sun 19 Apr 2026 19:58:57 +0000 Files and hashes: 1: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl (hash: jA/6WTtXsCbEwgXUJ8Psn1QKQkncr6AfnB+izcab1mg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:48:9e:c3:20:ad:91:71:ab:1e:32:9b:86:81:45:17:1e:4a:45:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077 Validity Not Before: Apr 18 19:39:57 2026 GMT Not After : Apr 19 19:58:57 2026 GMT Subject: CN=4C61D6AB6C539764DFFFDA101D5AE98E4B516DC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7a:75:2c:a6:a6:90:20:0b:94:5f:6c:82:13: 5b:82:98:f7:40:09:a9:98:6a:68:0b:37:26:23:cc: 6c:a8:2f:59:ea:c5:31:f3:28:1b:64:3b:2f:ec:d5: d0:b9:d2:29:98:1f:14:e7:ec:3a:27:3f:2e:0f:5e: b5:68:76:0f:89:c3:5f:d0:74:5b:62:42:5d:0f:ec: 44:50:1c:63:b1:57:21:60:25:ae:d2:de:7f:a3:32: dc:ff:06:ed:66:01:64:92:f3:a8:14:6e:ab:19:aa: a8:21:2d:19:5e:1a:07:6f:8d:19:be:24:77:4f:f1: 5a:d9:9e:1a:97:69:5a:e7:be:97:8d:c5:30:53:17: b0:4a:14:90:1e:6f:f6:98:a1:f8:99:32:9c:e8:fb: 92:8c:78:33:be:13:c9:b0:31:48:2f:0f:48:49:3c: 6f:f2:48:8f:d7:8a:5a:36:72:c8:f2:01:54:ab:05: 59:87:e2:ad:a8:93:de:2f:d6:80:aa:de:d5:3f:0b: 70:74:cc:1f:cf:a0:67:9c:aa:7c:e0:b8:dc:f2:77: ee:30:a1:50:05:36:e8:6e:1f:94:69:d1:cc:c8:a9: 23:6e:d6:e3:24:20:63:9b:3b:31:77:87:79:3f:06: f1:06:21:76:71:6b:91:3d:e7:da:c8:21:d0:b0:60: 21:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:61:D6:AB:6C:53:97:64:DF:FF:DA:10:1D:5A:E9:8E:4B:51:6D:C6 X509v3 Authority Key Identifier: keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cf:a6:c0:45:a3:57:89:a7:ce:27:f4:67:23:09:14:5d:0a: ef:56:f2:c8:72:98:93:fb:ec:27:e8:24:cb:ce:e2:ca:2b:bc: 87:d0:28:5d:f6:8e:00:f2:54:a2:e6:66:3c:f3:42:17:cf:f9: 06:60:a6:17:65:44:18:2c:96:e8:ee:e1:f5:26:64:cf:74:62: fa:28:18:e8:3c:1a:c3:5a:ef:ef:e2:9c:1e:28:19:17:c7:eb: d5:08:09:46:3a:11:a8:78:ae:8e:a3:f5:e8:51:68:4d:32:94: 9e:fb:1d:43:61:14:2c:a9:02:9b:49:68:17:9c:f3:7b:4a:b4: 15:c4:7b:c0:55:4c:f0:cd:12:0f:13:ce:39:18:2d:a3:2c:c0: 5b:b8:d1:1f:35:77:0d:2c:b1:f4:ae:e3:44:db:e5:6c:e1:79: d0:7d:03:11:02:0a:ce:f9:be:58:af:55:e6:cc:1e:e1:01:18: 38:ef:db:2d:6e:a6:2b:a4:58:ee:52:9d:b7:91:78:73:d7:3e: d7:c3:9b:1c:77:73:8d:f9:f8:f4:59:78:1d:e7:84:38:3e:8d: 3b:4b:c9:69:9c:8d:a5:e2:f4:06:cd:ac:e9:d3:ab:94:e4:d4: 70:1c:1d:5c:2f:2b:a0:a8:67:57:5a:fd:36:ce:7e:f3:04:78: 00:c6:2f:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFUiewyCtkXGrHjKbhoFFFx5KRT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1 MUM2RjA3NzAeFw0yNjA0MTgxOTM5NTdaFw0yNjA0MTkxOTU4NTdaMDMxMTAvBgNV BAMTKDRDNjFENkFCNkM1Mzk3NjRERkZGREExMDFENUFFOThFNEI1MTZEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjenUspqaQIAuUX2yCE1uCmPdA CamYamgLNyYjzGyoL1nqxTHzKBtkOy/s1dC50imYHxTn7DonPy4PXrVodg+Jw1/Q dFtiQl0P7ERQHGOxVyFgJa7S3n+jMtz/Bu1mAWSS86gUbqsZqqghLRleGgdvjRm+ JHdP8VrZnhqXaVrnvpeNxTBTF7BKFJAeb/aYofiZMpzo+5KMeDO+E8mwMUgvD0hJ PG/ySI/Xilo2csjyAVSrBVmH4q2ok94v1oCq3tU/C3B0zB/PoGecqnzguNzyd+4w oVAFNuhuH5Rp0czIqSNu1uMkIGObOzF3h3k/BvEGIXZxa5E959rIIdCwYCEpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTGHWq2xTl2Tf/9oQHVrpjktRbcYwHwYDVR0j BBgwFoAUHgxtQLhrLMXe/t+OQva6hFHG8HcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8xLzFFMEM2RDQwQjg2QjJDQzVERUZFREY4RTQyRjZC QTg0NTFDNkYwNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1MUM2RjA3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMS8xRTBDNkQ0MEI4NkIy Q0M1REVGRURGOEU0MkY2QkE4NDUxQzZGMDc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUc+mwEWjV4mn zif0ZyMJFF0K71byyHKYk/vsJ+gky87iyiu8h9AoXfaOAPJUouZmPPNCF8/5BmCm F2VEGCyW6O7h9SZkz3Ri+igY6Dwaw1rv7+KcHigZF8fr1QgJRjoRqHiujqP16FFo TTKUnvsdQ2EULKkCm0loF5zze0q0FcR7wFVM8M0SDxPOORgtoyzAW7jRHzV3DSyx 9K7jRNvlbOF50H0DEQIKzvm+WK9V5swe4QEYOO/bLW6mK6RY7lKdt5F4c9c+18Ob HHdzjfn49Fl4HeeEOD6NO0vJaZyNpeL0Bs2s6dOrlOTUcBwdXC8roKhnV1r9Ns5+ 8wR4AMYveQ== -----END CERTIFICATE-----Generated at Sun Apr 19 01:14:17 2026 by rpki-client