$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json) Hash identifier: b9ECYgguxvL/W/0nYezO2TMQLeyKoPTT0NZF6PAOI+Q= Subject key identifier: AA:DD:7A:F1:06:BB:1F:CE:08:55:C3:12:29:7C:64:81:21:3E:F8:BD Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Certificate serial: 2A468CA290E5E747DA9B86F76079F73B12952B06 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft Manifest number: 5C Signing time: Mon 13 Apr 2026 05:39:17 +0000 Manifest this update: Mon 13 Apr 2026 05:34:17 +0000 Manifest next update: Tue 14 Apr 2026 07:35:17 +0000 Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: znBV5oy4MdNUGADgGVHgjbXKWyuL3hFZ+eIpZUB5TxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:46:8c:a2:90:e5:e7:47:da:9b:86:f7:60:79:f7:3b:12:95:2b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Validity Not Before: Apr 13 05:34:17 2026 GMT Not After : Apr 14 07:35:17 2026 GMT Subject: CN=AADD7AF106BB1FCE0855C312297C6481213EF8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:81:c5:d7:ef:4c:34:f7:f1:70:0f:3d:c5:4f: 01:53:0b:b6:8c:a3:37:8d:ed:55:4e:13:83:03:e8: 5a:79:71:cf:3f:73:ed:36:e7:61:b1:a5:3e:92:52: f5:b7:90:02:d2:c6:ac:22:6e:94:63:a4:e1:b4:12: 25:19:06:8f:75:67:c3:23:f5:49:44:0d:40:9a:6b: 4e:b0:99:27:b0:ff:2d:cb:80:29:d8:d7:32:b0:ec: 7c:d9:ff:78:e2:51:72:52:12:ec:e6:41:e5:2d:76: 87:32:c0:48:b6:cb:d1:ac:fb:0f:71:f5:9a:37:8f: de:a4:01:b5:d6:18:34:5d:0e:15:c1:3e:56:f5:7c: f8:35:d6:c2:c1:eb:5e:14:78:47:56:f1:38:2c:a4: 22:4f:1a:ce:9b:5c:1b:08:0f:77:03:e2:9a:16:e7: a7:0e:b6:bd:e5:4a:5a:ee:aa:fc:29:e4:a3:9e:48: c6:1f:cb:ab:b8:8d:28:7e:ce:bd:da:db:3e:87:f5: 07:e5:80:4c:02:a9:d7:33:0b:3c:de:a0:65:93:5c: 55:29:16:7f:00:d5:61:57:e2:c5:f9:fa:e1:37:35: af:24:e8:91:b2:2a:6f:93:63:0f:ba:cf:15:7e:cf: 4b:a5:95:61:55:62:ae:ae:9b:c0:0a:02:04:a5:48: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DD:7A:F1:06:BB:1F:CE:08:55:C3:12:29:7C:64:81:21:3E:F8:BD X509v3 Authority Key Identifier: keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:18:b7:89:3b:b6:3c:d0:72:11:32:4e:0a:7e:00:b3:bd:f7: b9:16:c1:e8:1e:f7:82:ba:ff:d9:55:22:55:01:ee:49:3d:8d: cd:c1:58:e4:d9:87:8e:ea:fa:e7:a0:73:e0:e3:de:2c:54:2d: 6a:62:67:64:0a:b4:61:90:30:73:f0:1a:e5:12:78:20:20:45: 55:f2:36:d5:52:2d:04:3d:5b:3a:56:49:9a:c8:e6:fa:01:8b: f8:d9:c8:7e:aa:67:fb:e3:51:32:23:36:56:41:0a:f6:d6:d9: 35:a2:bf:79:5d:42:ee:b7:fb:63:b2:ef:16:10:17:20:4e:d3: f8:92:c8:47:74:74:d4:77:6b:31:c2:43:3a:40:50:24:bb:79: b7:a6:70:22:f9:ff:30:23:81:64:6e:3a:32:ff:5e:ce:53:0a: de:1d:74:07:a9:f0:4a:3d:e4:30:3e:70:42:2e:d9:47:60:76: f8:17:02:8d:ad:f4:5b:19:09:5a:20:44:ca:bd:19:02:3c:a6: 9e:b5:59:87:67:36:db:5a:b3:d6:1a:d7:90:21:3d:ec:94:cc: 56:c1:96:66:a3:4a:62:7f:96:6c:05:8d:44:3b:fa:a4:3d:e7: ec:b0:43:93:c3:cc:85:5f:85:d6:bf:76:86:2d:86:70:36:2a: 94:d5:d3:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKkaMopDl50fam4b3YHn3OxKVKwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdF NzVBNTc0QTAeFw0yNjA0MTMwNTM0MTdaFw0yNjA0MTQwNzM1MTdaMDMxMTAvBgNV BAMTKEFBREQ3QUYxMDZCQjFGQ0UwODU1QzMxMjI5N0M2NDgxMjEzRUY4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDegcXX70w09/FwDz3FTwFTC7aM ozeN7VVOE4MD6Fp5cc8/c+0252GxpT6SUvW3kALSxqwibpRjpOG0EiUZBo91Z8Mj 9UlEDUCaa06wmSew/y3LgCnY1zKw7HzZ/3jiUXJSEuzmQeUtdocywEi2y9Gs+w9x 9Zo3j96kAbXWGDRdDhXBPlb1fPg11sLB614UeEdW8TgspCJPGs6bXBsID3cD4poW 56cOtr3lSlruqvwp5KOeSMYfy6u4jSh+zr3a2z6H9QflgEwCqdczCzzeoGWTXFUp Fn8A1WFX4sX5+uE3Na8k6JGyKm+TYw+6zxV+z0ullWFVYq6um8AKAgSlSJz/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqt168Qa7H84IVcMSKXxkgSE++L0wHwYDVR0j BBgwFoAU89IYnnnYyrqm5janBuOIJ+daV0owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzQ4MDE5NS8wL0YzRDIxODlFNzlEOENBQkFBNkU2MzZBNzA2RTM4 ODI3RTc1QTU3NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdFNzVBNTc0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM0ODAxOTUvMC9GM0QyMTg5RTc5RDhD QUJBQTZFNjM2QTcwNkUzODgyN0U3NUE1NzRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxi3iTu2PNBy ETJOCn4As733uRbB6B73grr/2VUiVQHuST2NzcFY5NmHjur656Bz4OPeLFQtamJn ZAq0YZAwc/Aa5RJ4ICBFVfI21VItBD1bOlZJmsjm+gGL+NnIfqpn++NRMiM2VkEK 9tbZNaK/eV1C7rf7Y7LvFhAXIE7T+JLIR3R01HdrMcJDOkBQJLt5t6ZwIvn/MCOB ZG46Mv9ezlMK3h10B6nwSj3kMD5wQi7ZR2B2+BcCja30WxkJWiBEyr0ZAjymnrVZ h2c221qz1hrXkCE97JTMVsGWZqNKYn+WbAWNRDv6pD3n7LBDk8PMhV+F1r92hi2G cDYqlNXTfA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:02 2026 by rpki-client