$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft File: C95DC06ABAF176962C0E90D36D939FA729AAC050.mft (raw, json) Hash identifier: 9CM2bCi2k1ICO5xYz1ITU6ElGQarnANgMtl7cSyaPsY= Subject key identifier: 3C:3F:0C:8E:26:39:E1:4B:BA:F0:6F:96:D1:04:CF:0D:CB:8A:8F:1D Authority key identifier: C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50 Certificate issuer: /CN=C95DC06ABAF176962C0E90D36D939FA729AAC050 Certificate serial: 1C851909C7A1E7FD6D1E5BC78A9A8259429B6B6F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft Manifest number: 45 Signing time: Sat 18 Apr 2026 21:19:58 +0000 Manifest this update: Sat 18 Apr 2026 21:14:58 +0000 Manifest next update: Sun 19 Apr 2026 23:31:58 +0000 Files and hashes: 1: 3134342e37392e3134382e302f32332d3234203d3e20313337373731.roa (hash: SAeCRFVxu1ERGhOcXkGGGkwcAEAXwuDqhIvQaUGtLYA=) 2: C95DC06ABAF176962C0E90D36D939FA729AAC050.crl (hash: DyXL+d98hcE54y0O9nEOWrhwqBXjDvCgBnOnt7yGStY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:85:19:09:c7:a1:e7:fd:6d:1e:5b:c7:8a:9a:82:59:42:9b:6b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C95DC06ABAF176962C0E90D36D939FA729AAC050 Validity Not Before: Apr 18 21:14:58 2026 GMT Not After : Apr 19 23:31:58 2026 GMT Subject: CN=3C3F0C8E2639E14BBAF06F96D104CF0DCB8A8F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:3f:db:a9:b6:ac:57:09:9f:af:ce:91:96: e4:c3:5e:4b:ba:bd:9f:d8:cc:b5:3b:43:66:3c:47: 3d:6e:92:ef:94:94:f5:c6:22:41:79:a3:4e:39:04: 78:c0:68:e3:01:cb:13:d4:57:24:35:b3:54:f6:f6: ab:c9:11:9f:9e:5a:97:24:c3:54:eb:08:29:7e:b6: 00:9b:3f:fb:14:d8:1b:3d:85:8e:56:32:ce:a9:da: c8:8c:72:51:61:05:36:87:ea:14:9a:47:4e:88:ec: 45:02:93:48:8f:a6:7f:08:c1:ae:a1:2e:1f:56:d9: a6:69:89:76:32:ff:fb:48:8c:f4:52:6a:ca:d6:24: 88:a6:b6:51:c6:3e:9b:ce:f4:e7:85:8a:d4:72:85: 0e:a3:52:80:85:05:12:26:8f:40:95:6c:16:57:cd: b5:9c:5f:db:75:eb:9d:7e:d9:04:36:0d:19:df:57: d5:b9:f5:d4:a2:52:c1:e7:a0:80:71:c5:ba:2f:39: 81:9c:81:69:c9:f2:c7:a6:d6:fd:eb:6b:6a:17:10: 29:f5:9d:12:fe:fa:10:11:43:a2:f4:73:f0:70:a3: 7a:7c:6d:db:07:5f:31:d1:27:cb:2a:cf:1f:50:4e: ab:df:15:49:f7:38:0b:ea:d2:c6:3f:68:14:a6:88: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3F:0C:8E:26:39:E1:4B:BA:F0:6F:96:D1:04:CF:0D:CB:8A:8F:1D X509v3 Authority Key Identifier: keyid:C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d1:52:04:32:34:a9:a3:51:66:1a:05:d3:1b:b2:c9:bb:cc: c3:c4:31:32:b9:8e:c0:57:5f:e2:ea:ab:a9:4b:dd:ad:0e:d1: 16:9a:a1:5c:f9:c4:1d:5c:7e:3b:2c:b9:ef:a0:73:e3:65:c1: 87:d6:ae:86:0f:17:30:cc:96:f9:bc:5c:cf:42:bb:a0:a6:a8: fc:98:45:9d:64:e1:eb:12:6a:73:f6:55:51:0c:05:80:79:1c: b7:39:8e:10:70:f2:09:7d:0c:b9:e0:68:ed:d7:d6:15:fb:a8: 0b:b2:53:70:d5:bf:9a:0d:c1:00:5d:bb:c0:ce:39:3e:d1:28: b8:d0:34:f8:a1:4f:44:5e:c8:ad:ea:19:78:16:b9:2b:ac:fc: 3e:35:a6:94:5a:45:53:41:c1:75:a1:91:3e:21:46:f2:c3:9a: 0c:6e:5a:ea:79:bc:18:2f:a5:be:80:1c:9c:53:ef:80:91:f5: 71:61:e5:cd:22:3d:d4:d8:d3:6e:43:c7:18:ad:7f:87:0e:a0: 82:80:ca:d3:2b:39:2a:d2:85:49:2d:50:6b:a0:47:cf:b5:52: b1:96:43:d2:2c:15:a0:c6:9a:da:35:10:cf:ab:34:d8:e5:8a: f4:e9:2b:69:d1:14:84:88:39:e1:8c:26:d5:a4:b2:ee:e4:98: 9b:6a:07:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHIUZCceh5/1tHlvHipqCWUKba28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1REMwNkFCQUYxNzY5NjJDMEU5MEQzNkQ5MzlGQTcy OUFBQzA1MDAeFw0yNjA0MTgyMTE0NThaFw0yNjA0MTkyMzMxNThaMDMxMTAvBgNV BAMTKDNDM0YwQzhFMjYzOUUxNEJCQUYwNkY5NkQxMDRDRjBEQ0I4QThGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZcT/bqbasVwmfr86RluTDXku6 vZ/YzLU7Q2Y8Rz1uku+UlPXGIkF5o045BHjAaOMByxPUVyQ1s1T29qvJEZ+eWpck w1TrCCl+tgCbP/sU2Bs9hY5WMs6p2siMclFhBTaH6hSaR06I7EUCk0iPpn8Iwa6h Lh9W2aZpiXYy//tIjPRSasrWJIimtlHGPpvO9OeFitRyhQ6jUoCFBRImj0CVbBZX zbWcX9t1651+2QQ2DRnfV9W59dSiUsHnoIBxxbovOYGcgWnJ8sem1v3ra2oXECn1 nRL++hARQ6L0c/Bwo3p8bdsHXzHRJ8sqzx9QTqvfFUn3OAvq0sY/aBSmiKrHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPD8MjiY54Uu68G+W0QTPDcuKjx0wHwYDVR0j BBgwFoAUyV3AarrxdpYsDpDTbZOfpymqwFAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8xL0M5NURDMDZBQkFGMTc2OTYyQzBFOTBEMzZEOTM5 RkE3MjlBQUMwNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzk1REMwNkFCQUYxNzY5NjJDMEU5MEQzNkQ5MzlGQTcyOUFBQzA1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMS9DOTVEQzA2QUJBRjE3 Njk2MkMwRTkwRDM2RDkzOUZBNzI5QUFDMDUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtFSBDI0qaNR ZhoF0xuyybvMw8QxMrmOwFdf4uqrqUvdrQ7RFpqhXPnEHVx+Oyy576Bz42XBh9au hg8XMMyW+bxcz0K7oKao/JhFnWTh6xJqc/ZVUQwFgHkctzmOEHDyCX0MueBo7dfW FfuoC7JTcNW/mg3BAF27wM45PtEouNA0+KFPRF7IreoZeBa5K6z8PjWmlFpFU0HB daGRPiFG8sOaDG5a6nm8GC+lvoAcnFPvgJH1cWHlzSI91NjTbkPHGK1/hw6ggoDK 0ys5KtKFSS1Qa6BHz7VSsZZD0iwVoMaa2jUQz6s02OWK9OkradEUhIg54Ywm1aSy 7uSYm2oH8w== -----END CERTIFICATE-----Generated at Sun Apr 19 01:45:46 2026 by rpki-client