$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: vVvhGaxu7FEKIMco1KTXCgsTs4uigCK/om0tj5ewHOQ= Subject key identifier: E6:1D:F1:08:95:07:0E:43:C3:E9:27:87:FD:35:8F:EA:2E:2D:D8:62 Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 34A90B3B055985129C73CDBFBFC005D4E6213CC1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: 0F Signing time: Sun 12 Apr 2026 19:14:16 +0000 Manifest this update: Sun 12 Apr 2026 19:09:16 +0000 Manifest next update: Mon 13 Apr 2026 20:09:16 +0000 Files and hashes: 1: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: 5KmZtA9AvtUjZwWg6b1Oy8oEJn+5vl6uoThxL9X03NM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 20:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a9:0b:3b:05:59:85:12:9c:73:cd:bf:bf:c0:05:d4:e6:21:3c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Apr 12 19:09:16 2026 GMT Not After : Apr 13 20:09:16 2026 GMT Subject: CN=E61DF10895070E43C3E92787FD358FEA2E2DD862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0e:e0:18:90:ec:f0:d2:10:fe:bb:cf:89:e1: e2:fa:72:eb:40:3d:db:8d:79:fc:9d:ef:fe:e5:7e: 8f:35:0a:15:ee:37:5d:e4:87:f5:1d:8b:30:c4:cd: 85:4f:39:0e:55:c0:d1:54:8f:f8:d4:7c:7a:de:3e: 6d:41:95:2e:85:f8:7a:27:c5:21:34:fc:71:1d:91: 4e:0e:63:6a:f8:83:50:6d:9a:5a:72:e6:27:ea:61: 99:51:87:df:7d:ee:de:6e:f2:38:7d:2b:89:ff:4a: 81:b9:57:d7:64:d2:98:94:74:ad:2a:9c:94:1c:88: cf:70:ff:6d:50:e1:f6:6d:3c:12:b2:91:1c:56:50: 65:f7:55:45:7e:57:a4:08:66:fb:ce:e2:b7:76:a7: 64:83:ec:fd:96:c0:63:06:b5:7d:0e:44:9b:7f:2a: 7c:20:1b:c2:49:8f:3c:59:40:ec:c3:bd:74:a8:3a: 0f:0a:1b:e3:ee:49:d7:88:0e:be:bb:0c:4c:d0:93: de:43:7f:f5:65:d6:11:d5:5e:8d:5b:9b:6d:68:f5: 2c:89:f5:56:33:39:55:11:4b:8e:06:45:64:f3:7b: 62:22:07:4d:af:7f:98:87:a8:8c:4d:b5:8c:56:02: dd:9b:2d:a6:1b:98:e8:b7:b9:6e:a6:15:2e:5f:0c: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1D:F1:08:95:07:0E:43:C3:E9:27:87:FD:35:8F:EA:2E:2D:D8:62 X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:e1:58:28:eb:7a:22:9f:76:7f:b4:cd:00:04:84:2d:e6:5f: 69:85:a7:d6:a9:b8:c8:9d:e7:c7:f7:6f:4c:fa:49:78:e4:3d: 56:13:39:77:ef:e5:80:cb:14:d1:bf:40:5b:87:16:77:2d:be: 85:16:64:8e:16:3d:77:04:83:30:60:cc:25:b8:c3:4d:b6:bb: bd:d0:44:96:7e:e2:da:a8:83:03:03:b0:0d:79:c7:7d:7e:de: 07:15:b7:3f:c7:ef:66:2c:26:7f:f1:8f:81:76:71:f8:64:5f: 90:e4:bd:95:f2:b0:37:57:18:68:ba:d1:a9:8b:e9:50:b1:5a: bf:d3:52:c5:c4:b2:9d:1e:4a:95:3a:c7:f9:85:65:ba:16:e0: fb:5d:46:d6:25:52:2c:44:d1:3b:56:04:ca:21:2e:88:ec:50: ef:74:ea:00:b3:a0:70:18:fd:9e:65:cb:32:08:21:28:bc:5b: 9b:bf:bc:a8:28:3c:c2:a0:d7:86:2b:9d:c6:b5:b1:bc:55:1f: a9:48:6c:cd:bf:a1:75:cd:7f:93:99:42:f3:32:3d:77:af:b7: 13:2e:73:ad:57:98:05:9c:69:55:14:a2:ce:d5:90:a8:e5:13: 07:73:44:d0:1d:c8:ec:48:d1:7c:0e:27:51:d9:66:8a:bd:58: 70:e6:77:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNKkLOwVZhRKcc82/v8AF1OYhPMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjA0MTIxOTA5MTZaFw0yNjA0MTMyMDA5MTZaMDMxMTAvBgNV BAMTKEU2MURGMTA4OTUwNzBFNDNDM0U5Mjc4N0ZEMzU4RkVBMkUyREQ4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0DuAYkOzw0hD+u8+J4eL6cutA PduNefyd7/7lfo81ChXuN13kh/UdizDEzYVPOQ5VwNFUj/jUfHrePm1BlS6F+Hon xSE0/HEdkU4OY2r4g1Btmlpy5ifqYZlRh9997t5u8jh9K4n/SoG5V9dk0piUdK0q nJQciM9w/21Q4fZtPBKykRxWUGX3VUV+V6QIZvvO4rd2p2SD7P2WwGMGtX0ORJt/ KnwgG8JJjzxZQOzDvXSoOg8KG+PuSdeIDr67DEzQk95Df/Vl1hHVXo1bm21o9SyJ 9VYzOVURS44GRWTze2IiB02vf5iHqIxNtYxWAt2bLaYbmOi3uW6mFS5fDE0dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5h3xCJUHDkPD6SeH/TWP6i4t2GIwHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwOFYKOt6Ip92 f7TNAASELeZfaYWn1qm4yJ3nx/dvTPpJeOQ9VhM5d+/lgMsU0b9AW4cWdy2+hRZk jhY9dwSDMGDMJbjDTba7vdBEln7i2qiDAwOwDXnHfX7eBxW3P8fvZiwmf/GPgXZx +GRfkOS9lfKwN1cYaLrRqYvpULFav9NSxcSynR5KlTrH+YVluhbg+11G1iVSLETR O1YEyiEuiOxQ73TqALOgcBj9nmXLMgghKLxbm7+8qCg8wqDXhiudxrWxvFUfqUhs zb+hdc1/k5lC8zI9d6+3Ey5zrVeYBZxpVRSiztWQqOUTB3NE0B3I7EjRfA4nUdlm ir1YcOZ3wg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:39 2026 by rpki-client