$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft File: F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json) Hash identifier: rWbqBHSGDq7B2yDaj+AgIjoO7bXsRNcxCGoXr9gjNd4= Subject key identifier: D7:09:47:A6:D0:08:07:79:F2:73:9E:32:B6:B9:0D:B4:B4:F8:08:C7 Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5 Certificate issuer: /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5 Certificate serial: 01DBF078DEDEE0D74B7AF65CCFB55E546D4F531C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft Manifest number: 10 Signing time: Mon 13 Apr 2026 07:49:17 +0000 Manifest this update: Mon 13 Apr 2026 07:44:17 +0000 Manifest next update: Tue 14 Apr 2026 10:06:17 +0000 Files and hashes: 1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: 2ouRdV0eRb24K/uJW2o0cW6AkZ5T07q5mx2rZR6iWx0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:db:f0:78:de:de:e0:d7:4b:7a:f6:5c:cf:b5:5e:54:6d:4f:53:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5 Validity Not Before: Apr 13 07:44:17 2026 GMT Not After : Apr 14 10:06:17 2026 GMT Subject: CN=D70947A6D0080779F2739E32B6B90DB4B4F808C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:13:9d:2a:17:a7:c0:bf:a6:d2:f6:75:b8: 1b:26:24:5c:d6:a5:18:39:ff:33:f5:7e:fe:7d:25: 8f:8c:61:f2:fe:a6:b3:b6:44:07:ef:72:3e:67:db: ab:54:b9:a3:19:5b:47:70:74:43:92:41:d0:14:3b: 32:c8:6c:1e:20:49:47:46:6e:c1:2b:09:78:6f:43: 38:f4:00:50:18:32:60:21:36:83:84:96:7d:22:f2: e9:af:08:f7:5d:0b:0a:62:62:b5:8a:a9:66:2c:e9: 35:9a:c9:b8:ac:2a:aa:02:17:0b:da:06:40:30:3a: 22:29:df:a8:e7:7a:bc:7e:28:f5:ec:b2:af:c5:76: 9b:05:6d:e9:44:9d:e0:a8:7d:9b:e4:d5:cf:1b:cb: 4e:ef:6d:b7:96:31:a2:9b:da:a8:b7:f0:67:4a:26: d3:24:b6:c9:03:dd:23:48:52:31:cd:5f:87:95:5e: 4c:fc:77:70:7b:ce:21:00:ea:75:22:6a:bb:df:1d: 04:93:7e:0c:d9:38:a2:91:e9:3d:16:ae:7f:0f:82: 52:6b:0b:0b:db:3f:f6:cd:80:94:dc:9a:6d:35:0b: a3:2c:d7:21:58:bd:44:65:30:09:6b:55:dc:85:0f: 78:21:0f:99:63:5b:ad:1d:f7:54:cd:56:f4:49:38: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:47:A6:D0:08:07:79:F2:73:9E:32:B6:B9:0D:B4:B4:F8:08:C7 X509v3 Authority Key Identifier: keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:19:06:04:a1:15:23:3d:08:31:5f:23:73:71:63:17:3a:0b: be:ad:47:32:c7:ac:4d:50:89:a7:99:52:58:96:7a:32:f3:74: c6:4d:20:7b:02:5f:d4:5a:ab:5e:33:db:be:11:19:64:19:be: 35:e0:07:34:76:6f:fc:bc:ba:75:c8:39:86:fe:21:ab:80:2f: 90:b5:03:85:a0:04:67:2c:3f:80:35:cd:d7:ab:1f:8c:75:60: 09:ba:19:d2:61:9b:aa:7f:99:fc:46:7a:e4:bc:ea:bf:cd:fa: 90:f4:f0:82:9c:cc:95:c5:6d:68:4f:25:68:5d:f2:30:8b:ff: 83:33:33:02:ba:af:7c:03:c6:0c:b1:51:51:79:dd:3d:63:e0: b0:9c:06:93:56:1b:6c:5b:a7:17:d0:cc:c5:09:ae:74:96:72: f9:19:3e:19:91:9d:2b:de:1d:ce:7d:e0:a8:4f:0f:63:a3:5b: dc:6a:05:7e:e7:03:16:43:24:83:26:41:2f:3e:76:d2:08:d1: c2:1c:79:37:38:fc:d7:04:7f:55:50:dd:01:6d:81:1f:5c:9a: f6:24:d4:b1:ac:16:cd:cc:38:86:1c:08:73:5b:29:42:dc:b3: 7c:a9:d4:d8:1e:53:b9:c2:64:1e:93:17:cc:f8:db:52:a7:0e: d7:f6:b1:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAdvweN7e4NdLevZcz7VeVG1PUxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlE ODZFMjhBNTAeFw0yNjA0MTMwNzQ0MTdaFw0yNjA0MTQxMDA2MTdaMDMxMTAvBgNV BAMTKEQ3MDk0N0E2RDAwODA3NzlGMjczOUUzMkI2QjkwREI0QjRGODA4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwxOdKhenwL+m0vZ1uBsmJFzW pRg5/zP1fv59JY+MYfL+prO2RAfvcj5n26tUuaMZW0dwdEOSQdAUOzLIbB4gSUdG bsErCXhvQzj0AFAYMmAhNoOEln0i8umvCPddCwpiYrWKqWYs6TWaybisKqoCFwva BkAwOiIp36jnerx+KPXssq/FdpsFbelEneCofZvk1c8by07vbbeWMaKb2qi38GdK JtMktskD3SNIUjHNX4eVXkz8d3B7ziEA6nUiarvfHQSTfgzZOKKR6T0Wrn8PglJr CwvbP/bNgJTcmm01C6Ms1yFYvURlMAlrVdyFD3ghD5ljW60d91TNVvRJOKFBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1wlHptAIB3nyc54ytrkNtLT4CMcwHwYDVR0j BBgwFoAU8xgpf34rHJSEmku2ehDwKdhuKKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjE3NDk3Ny8wL0YzMTgyOTdGN0UyQjFDOTQ4NDlBNEJCNjdBMTBG MDI5RDg2RTI4QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlEODZFMjhBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTEwMDQ0ODIxNzQ5NzcvMC9GMzE4Mjk3RjdFMkIx Qzk0ODQ5QTRCQjY3QTEwRjAyOUQ4NkUyOEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhkGBKEVIz0I MV8jc3FjFzoLvq1HMsesTVCJp5lSWJZ6MvN0xk0gewJf1FqrXjPbvhEZZBm+NeAH NHZv/Ly6dcg5hv4hq4AvkLUDhaAEZyw/gDXN16sfjHVgCboZ0mGbqn+Z/EZ65Lzq v836kPTwgpzMlcVtaE8laF3yMIv/gzMzArqvfAPGDLFRUXndPWPgsJwGk1YbbFun F9DMxQmudJZy+Rk+GZGdK94dzn3gqE8PY6Nb3GoFfucDFkMkgyZBLz520gjRwhx5 Nzj81wR/VVDdAW2BH1ya9iTUsawWzcw4hhwIc1spQtyzfKnU2B5TucJkHpMXzPjb UqcO1/axcg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:02:57 2026 by rpki-client