$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: pbTsqCG60RRQAVseuwvkeBD2EBwGndlf0dDxJjBHGVo= Subject key identifier: A6:28:BD:D3:91:18:3D:FA:C3:43:06:99:CB:7A:FC:89:DA:DC:87:46 Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 1A09FCC23774237BB9B57DADE1FD6360E8459030 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: 17 Signing time: Mon 13 Apr 2026 00:54:17 +0000 Manifest this update: Mon 13 Apr 2026 00:49:17 +0000 Manifest next update: Tue 14 Apr 2026 02:47:17 +0000 Files and hashes: 1: AS4816.roa (hash: BywVrOa/rTx2XRV6nlK+Ut0SECxpAnA1y0+uKoNgzks=) 2: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: Q9TJC6KcOaNcc8mNg09WWi8wC+WwW2dUgkhQfNFkP60=) 3: AS134762.roa (hash: N2z2+koBLtbircqTZG5JtgAodTgNR2x6zwYjT3mns84=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:09:fc:c2:37:74:23:7b:b9:b5:7d:ad:e1:fd:63:60:e8:45:90:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: Apr 13 00:49:17 2026 GMT Not After : Apr 14 02:47:17 2026 GMT Subject: CN=A628BDD391183DFAC3430699CB7AFC89DADC8746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:ec:1a:b9:10:2c:70:2d:40:56:74:9b:4f: 15:16:d7:5f:67:85:0e:67:f6:28:c3:20:f9:37:31: 1c:24:2b:2d:8a:16:98:a6:d5:09:bf:64:fe:37:37: 99:94:76:97:0a:db:80:33:6d:ca:e2:89:f4:9b:b4: 7a:9a:bf:ef:0b:2f:78:70:63:04:23:11:d1:e7:87: 7a:23:0d:66:eb:ca:c5:f2:5e:ab:53:96:83:f7:8f: 3d:e6:f9:13:a2:01:da:7e:38:6a:99:17:b4:c8:3f: ce:66:cf:0c:8d:51:86:11:79:08:80:c1:ca:2f:29: ae:ed:c4:27:06:7c:e8:b1:62:60:cf:8b:c0:33:df: bd:4b:af:53:ec:e8:9d:3d:aa:7e:fd:5e:33:8a:ca: 0a:cf:20:90:69:02:9a:48:45:ca:af:74:d4:d6:72: f4:c8:4c:34:fe:a7:ee:57:40:1b:6f:8d:ac:6e:7c: f3:e5:5b:ec:97:cd:11:53:04:09:42:1a:3b:48:2b: e7:06:ad:7a:85:7e:b6:7d:ef:2e:4a:6c:7f:be:68: 24:74:0b:90:99:37:a5:4e:6c:17:07:a5:ea:18:ee: cc:60:93:7f:61:f2:31:2a:1d:d8:dc:ea:d2:bc:68: a9:5a:ae:3d:5b:e1:91:c0:45:fd:15:6c:62:38:26: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:BD:D3:91:18:3D:FA:C3:43:06:99:CB:7A:FC:89:DA:DC:87:46 X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d5:c7:7c:fb:c4:62:62:2c:4e:0d:e5:56:16:e8:8a:cb:8c: 1e:e5:93:08:fd:d0:a8:20:1b:88:c5:5d:44:9e:d3:e4:35:18: 4a:37:d2:eb:8d:9b:ac:66:78:19:3c:5c:0b:d0:f5:b6:de:e4: 92:99:9e:36:3c:9d:18:3c:da:bb:ee:3c:73:8b:85:f1:33:32: 9b:be:ac:dc:07:a5:1f:aa:33:f4:33:46:9c:9f:43:93:8d:f7: 45:db:d8:ad:a2:61:5b:12:bf:00:8e:36:d3:47:74:94:54:39: c2:fe:4d:4b:37:c7:65:79:e6:33:34:63:97:f0:e5:84:85:5e: e8:3c:55:8b:b6:69:f6:f3:d8:0d:db:f5:bb:cc:f3:06:7b:c8: a4:2f:d2:ec:9b:9f:61:20:78:22:d3:1c:d1:b0:5d:17:e8:41: e2:6e:d0:00:ed:43:09:ce:30:1b:ef:25:8e:26:ec:eb:5c:72: d0:ec:d5:7d:57:8c:7d:dc:35:34:21:25:5a:9f:b6:15:52:37: 66:af:05:22:aa:2a:ea:4e:16:e9:af:17:eb:06:93:e6:98:df: 46:84:cb:a9:e7:46:6c:99:0d:ca:52:69:5a:cf:27:30:ca:53: 49:70:52:cf:07:8b:65:42:78:5a:ba:e7:52:ba:3c:8d:cc:81: 6e:26:21:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGgn8wjd0I3u5tX2t4f1jYOhFkDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjA0MTMwMDQ5MTdaFw0yNjA0MTQwMjQ3MTdaMDMxMTAvBgNV BAMTKEE2MjhCREQzOTExODNERkFDMzQzMDY5OUNCN0FGQzg5REFEQzg3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNuwauRAscC1AVnSbTxUW119n hQ5n9ijDIPk3MRwkKy2KFpim1Qm/ZP43N5mUdpcK24AzbcriifSbtHqav+8LL3hw YwQjEdHnh3ojDWbrysXyXqtTloP3jz3m+ROiAdp+OGqZF7TIP85mzwyNUYYReQiA wcovKa7txCcGfOixYmDPi8Az371Lr1Ps6J09qn79XjOKygrPIJBpAppIRcqvdNTW cvTITDT+p+5XQBtvjaxufPPlW+yXzRFTBAlCGjtIK+cGrXqFfrZ97y5KbH++aCR0 C5CZN6VObBcHpeoY7sxgk39h8jEqHdjc6tK8aKlarj1b4ZHARf0VbGI4JlzPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpii905EYPfrDQwaZy3r8idrch0YwHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9XHfPvEYmIs Tg3lVhboisuMHuWTCP3QqCAbiMVdRJ7T5DUYSjfS642brGZ4GTxcC9D1tt7kkpme NjydGDzau+48c4uF8TMym76s3AelH6oz9DNGnJ9Dk433RdvYraJhWxK/AI4200d0 lFQ5wv5NSzfHZXnmMzRjl/DlhIVe6DxVi7Zp9vPYDdv1u8zzBnvIpC/S7JufYSB4 ItMc0bBdF+hB4m7QAO1DCc4wG+8ljibs61xy0OzVfVeMfdw1NCElWp+2FVI3Zq8F Iqoq6k4W6a8X6waT5pjfRoTLqedGbJkNylJpWs8nMMpTSXBSzweLZUJ4WrrnUro8 jcyBbiYhVQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:06:22 2026 by rpki-client