$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: rx1ZEhx4joIU2M+cUblwnl7e8iYa7YZxuJoGTJ4OHrg= Subject key identifier: A7:EA:DD:8D:51:94:20:DF:DE:F9:61:AE:DB:05:B8:4D:96:BF:92:BD Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 7BF372AA3FC5D6DA83475A8CA4E54E522C527B29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 72 Signing time: Mon 13 Apr 2026 07:24:17 +0000 Manifest this update: Mon 13 Apr 2026 07:19:17 +0000 Manifest next update: Tue 14 Apr 2026 08:55:17 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: e2wv+61HanxgBdWbVbJRih5teJpvAnQGj7PY5j3g5mo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f3:72:aa:3f:c5:d6:da:83:47:5a:8c:a4:e5:4e:52:2c:52:7b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Apr 13 07:19:17 2026 GMT Not After : Apr 14 08:55:17 2026 GMT Subject: CN=A7EADD8D519420DFDEF961AEDB05B84D96BF92BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:a8:77:0a:08:45:7c:4f:f8:1c:59:14:65: f6:b4:65:5e:0d:2d:2b:e0:97:c8:8e:24:60:4a:60: 0b:9d:37:0a:28:6b:f5:83:7f:d3:ef:c7:6c:23:2c: cd:c3:b4:b6:7b:e4:e7:23:0b:d2:42:2d:81:57:ab: 6f:da:95:e1:9b:76:0b:fa:93:ab:58:36:02:b0:64: b0:6f:ca:fc:d4:94:e2:8c:09:92:7e:86:03:12:84: b4:54:a8:19:a4:1e:ce:f8:5c:a9:ec:3d:28:fc:40: da:56:9a:ce:ea:78:86:58:84:6f:75:91:5f:f5:40: 84:6b:a7:2d:91:f1:75:63:f8:73:42:8b:7e:bb:ce: 59:fb:62:de:be:b1:5f:b5:f3:a3:00:86:d4:cc:62: 80:e5:04:07:db:a2:b6:22:f4:53:eb:6c:47:b1:3b: 98:d9:a2:ab:d0:47:16:cd:41:da:96:81:7f:f9:bb: 41:c3:6d:02:1b:e5:6f:4f:e3:dc:c3:32:6f:ca:56: aa:4c:eb:2c:4d:da:b6:04:6e:aa:00:19:c0:23:ac: de:f5:f7:15:0f:83:68:8e:25:bf:59:9a:22:6f:66: 1f:94:ea:0f:b2:ae:31:2b:6f:11:60:69:41:50:39: 0f:22:21:88:6b:a3:de:0d:0f:cc:f0:25:15:66:56: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EA:DD:8D:51:94:20:DF:DE:F9:61:AE:DB:05:B8:4D:96:BF:92:BD X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:20:3c:79:07:d3:7b:e5:07:dd:c0:64:c1:09:fd:a1:45:9c: 0e:8b:d1:9d:23:89:77:40:f2:ab:4e:fd:ce:6e:a4:c9:9d:2c: 0d:d3:8e:30:7d:cb:9f:0c:72:66:b4:8a:49:69:ec:9f:e6:87: f6:23:b6:cf:4d:0a:59:2d:b7:e6:7d:07:5b:80:ba:3e:9e:ca: 52:58:bc:1e:91:0a:e4:fe:bb:32:a8:f0:7b:74:98:b2:d6:57: 43:b9:0c:68:e4:77:7e:c3:c4:b7:0b:00:f4:24:d2:83:9b:c5: a6:a5:b3:31:c1:4c:79:a3:75:30:d7:cb:38:b8:1a:eb:e8:5b: 26:46:07:6c:b5:9d:a3:aa:8e:96:0e:6d:98:27:b6:47:e0:34: 6e:33:1a:71:e3:6f:2d:12:ff:f6:8e:2a:77:18:e5:ef:bc:ef: f3:61:98:5d:9e:12:cd:c8:c9:7d:15:b2:74:c8:90:bf:20:e2: 6c:09:b5:eb:bf:5e:91:41:1b:09:ed:64:d4:3e:2c:7f:94:4c: 14:6c:ea:55:16:7d:c2:ab:9e:23:e6:71:21:41:90:ed:95:b6: b6:15:6e:a5:84:91:fa:b3:51:1e:0f:6a:88:f9:a8:b6:ba:86: 20:8f:fa:58:2f:89:e7:16:73:42:fe:fb:f6:1d:fa:1c:bd:54: 08:36:a5:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe/Nyqj/F1tqDR1qMpOVOUixSeykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjA0MTMwNzE5MTdaFw0yNjA0MTQwODU1MTdaMDMxMTAvBgNV BAMTKEE3RUFERDhENTE5NDIwREZERUY5NjFBRURCMDVCODREOTZCRjkyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYXqh3CghFfE/4HFkUZfa0ZV4N LSvgl8iOJGBKYAudNwooa/WDf9Pvx2wjLM3DtLZ75OcjC9JCLYFXq2/aleGbdgv6 k6tYNgKwZLBvyvzUlOKMCZJ+hgMShLRUqBmkHs74XKnsPSj8QNpWms7qeIZYhG91 kV/1QIRrpy2R8XVj+HNCi367zln7Yt6+sV+186MAhtTMYoDlBAfborYi9FPrbEex O5jZoqvQRxbNQdqWgX/5u0HDbQIb5W9P49zDMm/KVqpM6yxN2rYEbqoAGcAjrN71 9xUPg2iOJb9ZmiJvZh+U6g+yrjErbxFgaUFQOQ8iIYhro94ND8zwJRVmVvtzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp+rdjVGUIN/e+WGu2wW4TZa/kr0wHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICA8eQfTe+UH 3cBkwQn9oUWcDovRnSOJd0Dyq079zm6kyZ0sDdOOMH3LnwxyZrSKSWnsn+aH9iO2 z00KWS235n0HW4C6Pp7KUli8HpEK5P67Mqjwe3SYstZXQ7kMaOR3fsPEtwsA9CTS g5vFpqWzMcFMeaN1MNfLOLga6+hbJkYHbLWdo6qOlg5tmCe2R+A0bjMaceNvLRL/ 9o4qdxjl77zv82GYXZ4SzcjJfRWydMiQvyDibAm1679ekUEbCe1k1D4sf5RMFGzq VRZ9wqueI+ZxIUGQ7ZW2thVupYSR+rNRHg9qiPmotrqGII/6WC+J5xZzQv779h36 HL1UCDalXw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:21 2026 by rpki-client