$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft File: D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft (raw, json) Hash identifier: UwM09cFJls/uQqPYzesSC/Yg43aYGbbT36sIzWsIdT8= Subject key identifier: BF:BB:BC:1B:08:4F:8A:DE:4F:BA:A6:29:11:F7:F3:EA:DB:29:E7:67 Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 4002265FF9498F8F0CF02A6627F326856709A3E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft Manifest number: 1C Signing time: Mon 13 Apr 2026 05:54:17 +0000 Manifest this update: Mon 13 Apr 2026 05:49:17 +0000 Manifest next update: Tue 14 Apr 2026 07:52:17 +0000 Files and hashes: 1: D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl (hash: b5iQiFCLB1r1aQIPy1SIyXn7AzrcgfHyETvb2AXD5Hw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:02:26:5f:f9:49:8f:8f:0c:f0:2a:66:27:f3:26:85:67:09:a3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 13 05:49:17 2026 GMT Not After : Apr 14 07:52:17 2026 GMT Subject: CN=BFBBBC1B084F8ADE4FBAA62911F7F3EADB29E767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:c2:69:41:db:e8:99:d3:b8:b8:59:b0:bc: 2f:d9:70:5f:6c:e6:05:0d:29:5f:0a:e5:d5:ed:47: 15:7b:a4:a2:79:6c:64:32:09:13:fe:f2:26:c7:f2: 0e:5e:4c:de:5c:9d:e1:7d:dc:94:66:d8:cd:91:bd: 61:d5:e8:3c:1e:61:d1:7e:9b:c4:21:41:4f:bf:40: 27:64:f9:3e:6b:09:e9:9b:f7:0d:9e:cd:aa:77:43: f6:33:b6:50:fd:71:c2:4b:60:9c:76:7d:22:59:a8: 7e:3d:fe:e3:bd:17:5b:1e:db:df:97:42:66:c6:f8: db:27:a0:9f:ad:68:ef:5f:33:e7:78:fd:df:74:f4: c9:74:51:e8:ae:a2:1e:98:5e:36:6c:dc:f4:fc:77: 15:64:da:63:7a:5a:c4:f0:7b:da:bb:31:39:8a:55: 3b:af:eb:0f:cc:9d:df:49:34:96:7c:f3:6a:e6:e4: 10:32:96:c9:4e:af:a2:f9:c1:f6:44:e8:dc:00:5a: 2a:9e:93:83:69:5f:b6:40:8c:04:e5:07:8c:0a:61: c3:c4:38:57:2b:67:c5:46:00:19:1f:e1:a0:a1:8b: 6f:13:90:88:ed:48:37:01:a3:bf:fa:28:65:38:89: 80:0d:a8:ef:a7:e3:d3:1f:aa:5e:45:1f:62:4d:1a: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BB:BC:1B:08:4F:8A:DE:4F:BA:A6:29:11:F7:F3:EA:DB:29:E7:67 X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a4:c5:75:d5:f5:d2:f3:d9:5f:e4:7e:01:8d:a7:b8:60:50: 99:aa:ad:57:75:25:b5:24:c7:1d:02:19:1e:c5:61:6a:4f:23: a9:d6:a3:ae:1e:df:12:82:8d:bb:6b:12:6d:99:d9:f9:9f:f7: a4:ef:06:70:60:28:a7:7f:22:59:40:56:93:88:59:eb:cd:24: ea:98:49:4f:87:b7:7e:57:5d:48:a1:94:bd:c0:a6:c8:3f:83: f5:59:70:07:5a:9a:cb:76:87:d0:22:ea:bc:cd:fc:6e:fe:7b: 48:82:a5:30:0e:b8:1c:5f:33:19:f8:55:c6:df:8a:1c:f3:32: 2b:4b:e6:9c:d7:4e:9f:0a:95:b4:0c:57:ce:9c:0d:5f:9d:58: 9a:5c:79:15:22:24:6c:13:b7:9b:d2:33:cc:d7:46:1d:9b:bb: 0b:59:c7:77:7f:34:d1:72:9f:2f:8d:ba:a4:d4:dd:a6:32:3a: 35:b7:bd:b2:08:4c:aa:91:58:7a:66:17:ab:3e:3c:05:26:3a: 81:dc:30:94:82:10:c7:2e:90:c1:35:a2:c4:89:cf:f8:96:4e: 9c:36:4b:c0:6b:6c:49:a3:5d:19:7e:97:58:d4:be:69:a5:13: 75:5c:6e:1a:4d:e9:d7:fb:fd:72:28:e7:63:66:82:43:5c:51: 8c:29:e1:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQAImX/lJj48M8CpmJ/MmhWcJo+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTMwNTQ5MTdaFw0yNjA0MTQwNzUyMTdaMDMxMTAvBgNV BAMTKEJGQkJCQzFCMDg0RjhBREU0RkJBQTYyOTExRjdGM0VBREIyOUU3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutsJpQdvomdO4uFmwvC/ZcF9s 5gUNKV8K5dXtRxV7pKJ5bGQyCRP+8ibH8g5eTN5cneF93JRm2M2RvWHV6DweYdF+ m8QhQU+/QCdk+T5rCemb9w2ezap3Q/YztlD9ccJLYJx2fSJZqH49/uO9F1se29+X QmbG+NsnoJ+taO9fM+d4/d909Ml0Ueiuoh6YXjZs3PT8dxVk2mN6WsTwe9q7MTmK VTuv6w/Mnd9JNJZ882rm5BAylslOr6L5wfZE6NwAWiqek4NpX7ZAjATlB4wKYcPE OFcrZ8VGABkf4aChi28TkIjtSDcBo7/6KGU4iYANqO+n49Mfql5FH2JNGnz9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv7u8GwhPit5PuqYpEffz6tsp52cwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODg2NTEwMTUxODEzMDM4MTAvMC9ENUVGMkE3OTIxNjZG OTRGQkUzMzM3N0UwMjM5MDM0RUQyRkMyRjgwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqTFddX10vPZ X+R+AY2nuGBQmaqtV3UltSTHHQIZHsVhak8jqdajrh7fEoKNu2sSbZnZ+Z/3pO8G cGAop38iWUBWk4hZ680k6phJT4e3flddSKGUvcCmyD+D9VlwB1qay3aH0CLqvM38 bv57SIKlMA64HF8zGfhVxt+KHPMyK0vmnNdOnwqVtAxXzpwNX51Ymlx5FSIkbBO3 m9IzzNdGHZu7C1nHd3800XKfL426pNTdpjI6Nbe9sghMqpFYemYXqz48BSY6gdww lIIQxy6QwTWixInP+JZOnDZLwGtsSaNdGX6XWNS+aaUTdVxuGk3p1/v9cijnY2aC Q1xRjCnhsw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:10 2026 by rpki-client