$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: DrICdZVDnOJ5WltIvX3LFXpbdATqdSrQIwpWOeBGQcQ= Subject key identifier: B5:36:5A:57:33:99:CC:C6:A6:0C:A8:22:F7:9C:96:3B:95:1E:B6:D0 Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 21FA641C386F73CCBD54564C622E756219AF401C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: 83 Signing time: Mon 13 Apr 2026 07:44:17 +0000 Manifest this update: Mon 13 Apr 2026 07:39:17 +0000 Manifest next update: Tue 14 Apr 2026 11:40:17 +0000 Files and hashes: 1: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: ItM/Xc5tOIuHvcOQNkIJupZQbRrmjDheMO6eOEpBi/I=) 2: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fa:64:1c:38:6f:73:cc:bd:54:56:4c:62:2e:75:62:19:af:40:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: Apr 13 07:39:17 2026 GMT Not After : Apr 14 11:40:17 2026 GMT Subject: CN=B5365A573399CCC6A60CA822F79C963B951EB6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:94:15:98:2f:df:a3:12:7a:d3:19:49:6c: a4:11:3f:09:ac:83:0d:ba:3e:5f:ea:f5:74:34:bc: 46:27:91:68:e6:f2:38:c7:c3:94:f0:97:29:23:a0: 30:54:a3:ee:72:86:8d:1a:b5:11:77:b4:e8:14:2c: df:a3:6c:64:cb:13:b0:03:e8:b8:d5:5a:fe:d5:57: b0:ec:70:65:fa:c1:fb:61:c4:7c:68:7c:51:aa:f4: d4:da:20:54:71:d9:5b:26:20:91:c5:6a:dc:05:42: 80:5b:45:1e:0e:ac:dc:d2:d6:86:89:ce:4b:bf:64: e6:e0:53:7f:fe:9a:43:ee:07:6c:d6:30:7e:be:9b: 0f:02:8f:34:ab:cf:8d:db:86:22:9d:c3:99:55:9f: 72:2d:74:c4:04:b5:62:87:10:a5:11:ac:5a:94:61: 0a:f8:71:5a:f5:06:99:c2:0c:31:36:90:aa:87:b2: 64:bc:d7:c4:43:0a:62:57:2b:6c:c2:ec:43:3d:c2: c9:81:bc:a6:fd:8e:7c:d8:cc:25:93:42:de:7f:39: a4:e9:ae:1a:56:d3:2e:c6:42:43:ab:dc:d0:0d:19: 48:15:59:5b:92:e1:c2:d5:69:22:31:a6:e0:f4:83: a5:c4:76:60:ae:62:23:fa:75:5b:94:b8:f6:d8:4b: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:36:5A:57:33:99:CC:C6:A6:0C:A8:22:F7:9C:96:3B:95:1E:B6:D0 X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a7:db:49:a1:df:7a:6e:7e:9d:fc:03:14:9f:9e:d0:ca:5f: f6:29:58:00:70:ad:c8:9a:21:cb:ad:73:44:1b:d7:82:47:ac: 46:a9:f8:a0:01:13:93:39:e3:c6:16:7e:dc:61:51:cb:50:a2: f6:be:6c:00:4b:90:82:3f:ee:25:b2:51:0d:9e:4b:04:b6:6e: 77:70:2d:af:b6:a0:df:5d:cf:37:f4:a4:d9:ef:a1:9e:f4:4b: ca:cf:c2:37:0d:2f:99:d8:b7:e5:1b:e9:3c:c8:4f:29:8c:5f: fd:04:c2:af:ed:af:d3:50:62:11:da:79:dc:43:52:10:d5:dc: 46:4d:9d:33:fd:fe:d6:4f:70:7e:27:9f:e1:41:ba:4c:4e:df: 09:7e:e5:61:4f:e8:78:9b:17:69:c9:93:08:d8:b7:39:ff:9d: ac:ef:83:2f:4b:8e:fd:47:90:bc:55:e0:51:1c:5b:d0:cf:ae: 95:4c:c4:a0:72:84:59:e8:6a:e0:82:fe:be:5a:ab:15:e5:d1: 3b:e2:5b:10:c6:0e:f1:26:2e:61:4d:b9:59:f1:24:fc:f6:a7: c4:56:0e:9d:f0:4d:c3:94:96:22:bd:c2:e5:df:2d:a9:77:b0: e3:e8:84:28:f9:2f:67:8d:d3:ea:b8:b1:f2:ae:68:2d:eb:4f: 86:50:c8:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIfpkHDhvc8y9VFZMYi51YhmvQBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjA0MTMwNzM5MTdaFw0yNjA0MTQxMTQwMTdaMDMxMTAvBgNV BAMTKEI1MzY1QTU3MzM5OUNDQzZBNjBDQTgyMkY3OUM5NjNCOTUxRUI2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsk5QVmC/foxJ60xlJbKQRPwms gw26Pl/q9XQ0vEYnkWjm8jjHw5TwlykjoDBUo+5yho0atRF3tOgULN+jbGTLE7AD 6LjVWv7VV7DscGX6wfthxHxofFGq9NTaIFRx2VsmIJHFatwFQoBbRR4OrNzS1oaJ zku/ZObgU3/+mkPuB2zWMH6+mw8CjzSrz43bhiKdw5lVn3ItdMQEtWKHEKURrFqU YQr4cVr1BpnCDDE2kKqHsmS818RDCmJXK2zC7EM9wsmBvKb9jnzYzCWTQt5/OaTp rhpW0y7GQkOr3NANGUgVWVuS4cLVaSIxpuD0g6XEdmCuYiP6dVuUuPbYSxOnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtTZaVzOZzMamDKgi95yWO5UettAwHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQafbSaHfem5+ nfwDFJ+e0Mpf9ilYAHCtyJohy61zRBvXgkesRqn4oAETkznjxhZ+3GFRy1Ci9r5s AEuQgj/uJbJRDZ5LBLZud3Atr7ag313PN/Sk2e+hnvRLys/CNw0vmdi35RvpPMhP KYxf/QTCr+2v01BiEdp53ENSENXcRk2dM/3+1k9wfief4UG6TE7fCX7lYU/oeJsX acmTCNi3Of+drO+DL0uO/UeQvFXgURxb0M+ulUzEoHKEWehq4IL+vlqrFeXRO+Jb EMYO8SYuYU25WfEk/PanxFYOnfBNw5SWIr3C5d8tqXew4+iEKPkvZ43T6rix8q5o LetPhlDI2g== -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:27 2026 by rpki-client