$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: PCnoIiibyhc+HZz6aedVQa9zZ8QSwT1xOfAiVYQQUow= Subject key identifier: 93:A5:35:D2:7D:5D:63:D7:20:DC:97:F8:39:BD:13:DD:3A:13:FB:5F Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 2C3507464B309BFF9328776D9C5F6492AAC63EC2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 82 Signing time: Mon 27 Apr 2026 02:03:40 +0000 Manifest this update: Mon 27 Apr 2026 01:58:40 +0000 Manifest next update: Tue 28 Apr 2026 03:45:40 +0000 Files and hashes: 1: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=) 2: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 3: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: 4j1PP2Z0jxxqJ1gJibz6zrThmQv7u9J+EJeN3CSqSz8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 03:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:07:46:4b:30:9b:ff:93:28:77:6d:9c:5f:64:92:aa:c6:3e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Apr 27 01:58:40 2026 GMT Not After : Apr 28 03:45:40 2026 GMT Subject: CN=93A535D27D5D63D720DC97F839BD13DD3A13FB5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:18:d4:7c:ab:5a:68:1b:80:93:a1:67:96: 41:ac:9a:ba:4d:ee:33:2f:7c:1d:7b:76:ad:b5:b3: 6e:20:57:ee:17:66:20:1c:19:4d:ec:0f:f3:10:e5: 96:dc:12:70:3e:79:82:1f:69:dd:bb:0f:a3:b1:59: a0:bc:0f:ad:3a:31:fa:89:06:04:a2:ea:dc:be:43: ed:7c:43:fc:95:1a:5e:43:17:45:d4:6a:b7:6c:8c: 5c:2d:56:15:b9:12:55:9f:4a:99:1c:6f:22:e5:90: 5b:ae:f4:72:f7:10:2a:95:d5:50:20:04:db:77:ea: 56:92:f1:ca:a2:04:3d:0d:df:a1:49:b8:d0:6e:67: ef:2e:7d:47:30:6d:d2:f7:97:74:ea:30:ea:39:89: 09:52:58:c9:a5:27:c9:20:90:c6:5a:7e:66:08:04: c0:79:c4:54:0f:97:a7:39:e3:51:b9:c5:b2:ca:6f: 76:71:ff:77:bf:e9:1f:47:04:08:c4:db:1f:e8:c4: 00:a9:25:3c:c3:ba:b7:8f:36:9b:d9:b9:fe:5e:aa: e5:41:4c:6f:b7:c0:d0:4b:14:0f:73:0e:f8:81:15: f9:1c:28:19:6b:d5:34:c4:72:6b:c1:37:e4:26:0b: 27:22:a6:83:c2:89:2b:5d:1d:25:fa:fa:6b:7c:ee: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A5:35:D2:7D:5D:63:D7:20:DC:97:F8:39:BD:13:DD:3A:13:FB:5F X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2e:15:aa:c6:2e:e2:c1:78:3f:02:d2:9a:9d:d8:fd:f1:15: 1b:97:58:44:46:3a:06:62:b2:20:dc:5f:05:e4:22:d1:55:6f: 27:2a:27:2d:a2:30:c8:ab:e9:4f:2a:b7:3b:33:54:ec:9c:85: f2:63:49:f9:cf:1c:62:ee:17:c0:c2:fd:c3:39:aa:2d:d8:98: 79:bf:c0:a9:bd:7d:f7:ec:7f:48:cb:ad:7b:75:ff:7e:5c:f8: 28:89:9e:72:2b:59:3c:14:57:3c:80:d5:98:a0:2b:63:23:25: 6a:d2:b4:10:7f:c4:83:e2:9c:d4:ab:27:2d:79:78:24:6b:87: ab:45:21:e2:86:5f:39:7d:1c:e5:03:07:c0:e9:43:a7:49:28: 69:53:31:c3:84:ff:6c:29:b4:ac:77:07:a1:3c:bf:85:96:f8: 63:b8:a7:86:a2:63:78:f9:4a:a1:5f:94:2c:84:ca:26:0f:88: 56:b9:06:99:0d:ee:a7:d9:7d:43:28:ad:af:66:60:a3:1c:54: 80:23:1a:91:d8:95:82:36:33:05:6b:26:3f:2a:76:70:77:ce: 03:13:20:60:1e:27:27:49:e7:4e:8d:f7:00:67:74:da:06:5c: ed:ed:61:26:c2:c6:9d:c1:60:31:45:ad:b1:aa:b1:fb:be:cc: cd:15:7e:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULDUHRkswm/+TKHdtnF9kkqrGPsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA0MjcwMTU4NDBaFw0yNjA0MjgwMzQ1NDBaMDMxMTAvBgNV BAMTKDkzQTUzNUQyN0Q1RDYzRDcyMERDOTdGODM5QkQxM0REM0ExM0ZCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZhjUfKtaaBuAk6FnlkGsmrpN 7jMvfB17dq21s24gV+4XZiAcGU3sD/MQ5ZbcEnA+eYIfad27D6OxWaC8D606MfqJ BgSi6ty+Q+18Q/yVGl5DF0XUardsjFwtVhW5ElWfSpkcbyLlkFuu9HL3ECqV1VAg BNt36laS8cqiBD0N36FJuNBuZ+8ufUcwbdL3l3TqMOo5iQlSWMmlJ8kgkMZafmYI BMB5xFQPl6c541G5xbLKb3Zx/3e/6R9HBAjE2x/oxACpJTzDurePNpvZuf5equVB TG+3wNBLFA9zDviBFfkcKBlr1TTEcmvBN+QmCycipoPCiStdHSX6+mt87gX9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk6U10n1dY9cg3Jf4Ob0T3ToT+18wHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS4VqsYu4sF4 PwLSmp3Y/fEVG5dYREY6BmKyINxfBeQi0VVvJyonLaIwyKvpTyq3OzNU7JyF8mNJ +c8cYu4XwML9wzmqLdiYeb/Aqb199+x/SMute3X/flz4KImecitZPBRXPIDVmKAr YyMlatK0EH/Eg+Kc1KsnLXl4JGuHq0Uh4oZfOX0c5QMHwOlDp0koaVMxw4T/bCm0 rHcHoTy/hZb4Y7inhqJjePlKoV+ULITKJg+IVrkGmQ3up9l9Qyitr2ZgoxxUgCMa kdiVgjYzBWsmPyp2cHfOAxMgYB4nJ0nnTo33AGd02gZc7e1hJsLGncFgMUWtsaqx +77MzRV+9A== -----END CERTIFICATE-----Generated at Mon Apr 27 16:14:48 2026 by rpki-client