$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft File: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json) Hash identifier: xrikJCua7r6CUGf4yrvHBc4IoAzAKTV5HGpdR5TjKA0= Subject key identifier: 81:D6:D1:D1:7C:37:C6:87:06:DD:2A:00:24:9E:E5:98:B7:1D:BD:C6 Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E Certificate issuer: /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Certificate serial: 3B0A1444372F1050EF8A2189DEFCA403FE0D2090 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft Manifest number: 11 Signing time: Mon 13 Apr 2026 06:59:17 +0000 Manifest this update: Mon 13 Apr 2026 06:54:17 +0000 Manifest next update: Tue 14 Apr 2026 08:42:17 +0000 Files and hashes: 1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: j9S8SShOKRyTKvV74wJPCsM23F2P6zJc2Uco7xeqB3Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0a:14:44:37:2f:10:50:ef:8a:21:89:de:fc:a4:03:fe:0d:20:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Validity Not Before: Apr 13 06:54:17 2026 GMT Not After : Apr 14 08:42:17 2026 GMT Subject: CN=81D6D1D17C37C68706DD2A00249EE598B71DBDC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:e6:84:0d:ea:0f:67:fc:82:eb:eb:ee:c8: 10:f1:2c:7a:5f:61:97:e7:c0:34:e1:61:93:48:d5: 46:c0:56:4c:87:a8:23:cf:d2:a5:dc:f4:b8:4a:97: 5d:e8:66:3c:d6:0b:6f:66:d7:f3:a8:37:d7:95:03: 3a:d1:a1:b9:b6:b3:4c:cf:d3:8e:03:a6:15:af:82: ce:9e:1d:0c:bc:6a:7b:68:34:2e:e9:8a:6a:8a:dd: c9:89:c0:71:aa:00:7a:81:47:a0:9a:fd:31:92:f9: c2:85:66:2c:96:ac:48:20:aa:68:2c:9e:a7:bd:6b: 73:f2:be:6c:4f:4a:9a:1e:da:b1:48:ea:5a:05:4f: 2b:8d:73:72:8c:7e:ce:05:ef:f7:f9:45:7a:f3:dc: a2:b3:a4:0c:e0:b0:6d:f8:30:66:53:1d:fc:fe:25: dd:97:92:42:d2:7e:fa:66:98:e7:fb:09:0a:0f:47: 47:dc:5a:7c:ec:dc:37:70:9c:86:e8:af:46:64:60: 64:36:5d:ec:e8:8d:9f:17:0e:5a:e5:f4:15:52:51: a9:5f:01:ab:14:1f:73:cf:48:71:5c:62:31:3e:8a: 70:95:36:91:58:fd:04:d8:04:6d:9a:54:23:5c:29: e2:06:e9:a1:e2:1a:83:09:08:2b:e2:cc:8c:3c:83: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D6:D1:D1:7C:37:C6:87:06:DD:2A:00:24:9E:E5:98:B7:1D:BD:C6 X509v3 Authority Key Identifier: keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f9:9e:44:01:24:c3:83:a3:b6:f6:4c:7d:3c:de:19:29:9a: 9d:8c:af:ec:60:2e:40:d5:a4:f9:59:e9:fe:e4:5a:a5:2b:0b: 74:18:d7:49:8b:85:95:30:79:3e:5c:d5:67:ee:09:a9:67:8d: 4a:8a:27:87:09:ca:bc:40:f2:89:06:fb:f5:5a:ca:e4:29:ac: 05:62:1a:3d:24:e7:a4:84:02:a7:86:e8:81:f0:89:10:86:8b: c2:f0:b9:b8:0e:21:41:16:7d:9d:2c:dd:d8:99:9b:fe:48:61: 66:97:94:70:b9:3f:ea:25:f1:4c:32:e1:c8:b0:de:40:23:ba: 13:21:b6:09:ed:13:0a:e5:2c:bb:76:83:da:b2:f1:a0:65:25: 7e:92:c6:87:f1:35:a7:3c:ca:ea:16:63:5c:cc:68:81:d3:c1: 95:b7:04:3c:df:a4:12:e4:96:40:4a:41:38:d2:86:17:1b:aa: f7:b8:94:f5:ef:e2:4f:a7:d4:e0:2a:bf:5a:65:4c:6d:74:cf: f0:a3:c4:68:e9:83:53:89:92:df:89:f8:a1:f0:58:d1:a6:6a: 02:d0:9a:b5:0a:ef:a2:68:ba:06:b2:42:56:cb:d4:67:7c:00: bf:be:c8:bd:fb:12:d4:36:69:cb:cc:45:4e:0d:f5:f1:0c:db: ca:93:41:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOwoURDcvEFDviiGJ3vykA/4NIJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2 QzM4QzE0RTAeFw0yNjA0MTMwNjU0MTdaFw0yNjA0MTQwODQyMTdaMDMxMTAvBgNV BAMTKDgxRDZEMUQxN0MzN0M2ODcwNkREMkEwMDI0OUVFNTk4QjcxREJEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMguaEDeoPZ/yC6+vuyBDxLHpf YZfnwDThYZNI1UbAVkyHqCPP0qXc9LhKl13oZjzWC29m1/OoN9eVAzrRobm2s0zP 044DphWvgs6eHQy8antoNC7pimqK3cmJwHGqAHqBR6Ca/TGS+cKFZiyWrEggqmgs nqe9a3PyvmxPSpoe2rFI6loFTyuNc3KMfs4F7/f5RXrz3KKzpAzgsG34MGZTHfz+ Jd2XkkLSfvpmmOf7CQoPR0fcWnzs3DdwnIbor0ZkYGQ2XezojZ8XDlrl9BVSUalf AasUH3PPSHFcYjE+inCVNpFY/QTYBG2aVCNcKeIG6aHiGoMJCCvizIw8g5llAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgdbR0Xw3xocG3SoAJJ7lmLcdvcYwHwYDVR0j BBgwFoAUjGL79IdXuIqBsrRws6nmtGw4wU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTU1ODY3MDYwMjMzODMwNy8wLzhDNjJGQkY0ODc1N0I4OEE4MUIyQjQ3MEIzQTlF NkI0NkMzOEMxNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2QzM4QzE0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE1NTg2NzA2MDIzMzgzMDcvMC84QzYyRkJGNDg3NTdC ODhBODFCMkI0NzBCM0E5RTZCNDZDMzhDMTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvmeRAEkw4Oj tvZMfTzeGSmanYyv7GAuQNWk+Vnp/uRapSsLdBjXSYuFlTB5PlzVZ+4JqWeNSoon hwnKvEDyiQb79VrK5CmsBWIaPSTnpIQCp4bogfCJEIaLwvC5uA4hQRZ9nSzd2Jmb /khhZpeUcLk/6iXxTDLhyLDeQCO6EyG2Ce0TCuUsu3aD2rLxoGUlfpLGh/E1pzzK 6hZjXMxogdPBlbcEPN+kEuSWQEpBONKGFxuq97iU9e/iT6fU4Cq/WmVMbXTP8KPE aOmDU4mS34n4ofBY0aZqAtCatQrvomi6BrJCVsvUZ3wAv77IvfsS1DZpy8xFTg31 8QzbypNB8Q== -----END CERTIFICATE-----Generated at Mon Apr 13 11:02:59 2026 by rpki-client