$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft File: 56BE48FB7406C26DE662EBF89202C679B0854CE8.mft (raw, json) Hash identifier: ZcrrWMnlYytPzl+xh5OTYz0XC9v+C9VDsArx/ExBDTc= Subject key identifier: 7E:D8:E0:4C:00:D9:BF:51:30:6F:78:7F:21:6C:1E:A1:AB:DF:CC:FC Authority key identifier: 56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8 Certificate issuer: /CN=56BE48FB7406C26DE662EBF89202C679B0854CE8 Certificate serial: 561C2D7FAEA5E1F5AC23924B7A160C920C1EACB4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft Manifest number: 17 Signing time: Sun 12 Apr 2026 23:39:17 +0000 Manifest this update: Sun 12 Apr 2026 23:34:17 +0000 Manifest next update: Tue 14 Apr 2026 01:26:17 +0000 Files and hashes: 1: 56BE48FB7406C26DE662EBF89202C679B0854CE8.crl (hash: Jzv3urnkIg9npSPC3cGk4v6YlPA5INBwgVUK+ZWULbM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.crl rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 01:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1c:2d:7f:ae:a5:e1:f5:ac:23:92:4b:7a:16:0c:92:0c:1e:ac:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56BE48FB7406C26DE662EBF89202C679B0854CE8 Validity Not Before: Apr 12 23:34:17 2026 GMT Not After : Apr 14 01:26:17 2026 GMT Subject: CN=7ED8E04C00D9BF51306F787F216C1EA1ABDFCCFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:16:a7:50:66:67:3c:32:b4:78:b9:ec:f2: 14:33:ca:b5:8a:ef:11:b0:f8:d7:df:d1:4f:18:83: 87:6a:44:4f:de:00:ff:87:35:fb:73:d1:36:e5:39: 50:92:48:bc:43:00:97:37:70:91:af:a5:b0:c3:5f: 44:26:9c:67:5c:d2:af:e2:59:16:eb:89:55:d1:da: 29:e0:1e:a4:9e:bd:19:33:0f:7c:61:0a:3e:3a:e4: d6:86:57:2d:f1:47:f0:f8:39:62:3f:20:e0:4d:e5: 33:2c:84:57:af:5c:73:0c:31:d4:b3:0e:ab:67:31: 7e:6b:61:cb:a3:cb:de:c0:d5:54:2c:ff:f7:1e:db: 34:7a:62:c2:ae:ff:d5:15:85:b4:1c:6f:d9:d4:ef: 7a:e3:5d:4a:c0:5a:17:7c:85:65:01:6d:41:db:d6: 47:59:63:93:07:69:e2:1c:aa:82:50:93:84:b9:cd: af:14:98:69:c7:b3:64:7e:f5:84:fd:51:19:23:12: 08:26:7b:65:da:b0:a9:9a:6b:90:7f:1e:a4:ae:76: bf:f8:9e:90:8e:8f:a9:2d:8f:eb:b6:4e:8d:9b:eb: 57:27:fe:aa:f6:8f:1d:a6:65:3f:f0:3e:6b:93:98: 54:50:eb:46:7d:ad:3e:30:9e:56:19:6f:63:24:0d: 43:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D8:E0:4C:00:D9:BF:51:30:6F:78:7F:21:6C:1E:A1:AB:DF:CC:FC X509v3 Authority Key Identifier: keyid:56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:8e:eb:4f:3b:8c:e4:d4:1b:99:3a:bd:04:e1:19:d5:1e:d4: 5b:06:96:fa:c3:4a:f1:99:a2:1e:cd:2f:4c:2f:ee:1b:79:5e: 39:59:ee:ee:2c:2b:38:e6:e3:35:df:30:6a:9d:9a:08:9d:00: 1a:78:9e:14:d2:a3:a1:47:04:9c:b9:e7:0a:26:c0:46:37:f8: 44:db:fa:e2:5e:30:47:31:b3:ba:3b:a2:13:84:46:1d:98:10: ca:0a:47:40:38:54:e5:dc:d5:76:7f:e8:a3:ad:3d:78:dd:e1: 41:3d:bf:37:84:6a:48:ac:0f:4a:44:73:bc:af:81:47:64:1e: a1:93:71:65:1d:60:bd:56:9f:a1:b9:f7:f9:58:fc:3e:c6:70: 92:53:17:34:be:10:3e:e8:ea:45:f6:51:8a:6b:cd:db:84:9d: 12:c3:96:a4:62:0d:36:71:b7:f3:81:33:08:14:fa:54:66:ef: 2d:1d:81:23:38:21:4f:a8:fd:f6:ed:43:89:44:a2:5f:94:c1: 93:27:ff:4b:17:53:ca:d7:3d:3d:26:d4:24:4c:c7:9f:c7:2e: 59:20:92:c6:1e:a3:b4:8b:47:ed:e8:e3:d0:af:fd:17:34:6f: ba:ab:6e:3f:6f:32:50:73:ec:7d:64:b4:57:55:10:a6:0d:98: ec:f8:2e:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVhwtf66l4fWsI5JLehYMkgwerLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZCRTQ4RkI3NDA2QzI2REU2NjJFQkY4OTIwMkM2NzlC MDg1NENFODAeFw0yNjA0MTIyMzM0MTdaFw0yNjA0MTQwMTI2MTdaMDMxMTAvBgNV BAMTKDdFRDhFMDRDMDBEOUJGNTEzMDZGNzg3RjIxNkMxRUExQUJERkNDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQeBanUGZnPDK0eLns8hQzyrWK 7xGw+Nff0U8Yg4dqRE/eAP+HNftz0TblOVCSSLxDAJc3cJGvpbDDX0QmnGdc0q/i WRbriVXR2ingHqSevRkzD3xhCj465NaGVy3xR/D4OWI/IOBN5TMshFevXHMMMdSz DqtnMX5rYcujy97A1VQs//ce2zR6YsKu/9UVhbQcb9nU73rjXUrAWhd8hWUBbUHb 1kdZY5MHaeIcqoJQk4S5za8UmGnHs2R+9YT9URkjEggme2XasKmaa5B/HqSudr/4 npCOj6ktj+u2To2b61cn/qr2jx2mZT/wPmuTmFRQ60Z9rT4wnlYZb2MkDUMDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUftjgTADZv1Ewb3h/IWweoavfzPwwHwYDVR0j BBgwFoAUVr5I+3QGwm3mYuv4kgLGebCFTOgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTcyNjY3ODY3NjAxMzA1Ny8wLzU2QkU0OEZCNzQwNkMyNkRFNjYyRUJGODkyMDJD Njc5QjA4NTRDRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTZCRTQ4RkI3NDA2QzI2REU2NjJFQkY4OTIwMkM2NzlCMDg1NENFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODk3MjY2Nzg2NzYwMTMwNTcvMC81NkJFNDhGQjc0MDZD MjZERTY2MkVCRjg5MjAyQzY3OUIwODU0Q0U4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg47rTzuM5NQb mTq9BOEZ1R7UWwaW+sNK8ZmiHs0vTC/uG3leOVnu7iwrOObjNd8wap2aCJ0AGnie FNKjoUcEnLnnCibARjf4RNv64l4wRzGzujuiE4RGHZgQygpHQDhU5dzVdn/oo609 eN3hQT2/N4RqSKwPSkRzvK+BR2QeoZNxZR1gvVafobn3+Vj8PsZwklMXNL4QPujq RfZRimvN24SdEsOWpGINNnG384EzCBT6VGbvLR2BIzghT6j99u1DiUSiX5TBkyf/ SxdTytc9PSbUJEzHn8cuWSCSxh6jtItH7ejj0K/9FzRvuqtuP28yUHPsfWS0V1UQ pg2Y7PguNw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:02:07 2026 by rpki-client