$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: p9JITsbCdbnVGYjW9gy4+TNSDtJ9p0q98lkp0d2FrYk= Subject key identifier: AC:44:07:93:B4:4D:0D:D4:FF:11:33:97:C0:17:8C:CA:96:B0:A6:F0 Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 023ED546384913809676AD8914E1B012FF8FD48C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: 10 Signing time: Sat 18 Apr 2026 12:09:53 +0000 Manifest this update: Sat 18 Apr 2026 12:04:53 +0000 Manifest next update: Sun 19 Apr 2026 14:42:53 +0000 Files and hashes: 1: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: Dk/4wqN3NaVCq1MIuIb7PaapX2e5ngKa6/G6KqyG8hY=) 2: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) 3: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3e:d5:46:38:49:13:80:96:76:ad:89:14:e1:b0:12:ff:8f:d4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Apr 18 12:04:53 2026 GMT Not After : Apr 19 14:42:53 2026 GMT Subject: CN=AC440793B44D0DD4FF113397C0178CCA96B0A6F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:34:a6:6b:f4:df:ea:9d:a0:6a:9b:69:fd: d1:ca:66:cb:58:ec:bd:a9:c8:c9:b3:68:97:13:62: 27:53:26:d4:d9:9b:49:cb:ae:3d:81:95:3d:21:ec: 13:e4:9c:e1:58:6b:19:87:3b:ee:62:9a:72:41:0a: 52:4d:3e:90:4d:ef:63:d0:d7:7d:e2:aa:14:03:db: 49:a8:33:0f:4e:20:4f:73:d2:da:28:d7:38:ae:ee: 77:a8:05:b6:37:13:ed:c6:e1:ad:5c:36:a6:00:de: f5:f0:3a:55:ee:9e:71:97:e4:52:fb:0f:9a:94:fd: 1e:01:31:1a:4e:0c:4d:b9:37:65:6d:cc:4a:59:7c: 10:71:9d:7a:b7:ed:3c:4e:9d:10:75:54:c5:94:7e: f5:85:f8:fc:9f:ec:5d:4d:d9:b0:5a:fb:02:7d:37: 9b:f7:a7:58:88:e8:ce:c4:51:34:6f:7c:0e:b7:e8: 5d:5b:59:49:e8:aa:55:1c:f0:c1:2e:00:af:9a:01: 6e:e5:17:33:05:38:17:6e:79:ca:1a:a5:34:00:dd: 01:c2:50:98:3a:37:0b:2d:8f:ba:7d:11:de:08:a9: 02:cb:be:a3:41:6a:16:6e:4e:56:d6:a3:cf:72:23: 94:bd:d1:98:76:03:36:15:df:04:2c:0e:b5:9a:eb: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:44:07:93:B4:4D:0D:D4:FF:11:33:97:C0:17:8C:CA:96:B0:A6:F0 X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:95:be:93:e8:c3:8f:ee:e1:ce:da:40:3f:90:5a:fc:3d:81: 06:a4:1e:d4:cc:ac:23:30:e6:8c:8e:21:57:6e:a5:fc:76:9e: c9:dc:8a:fb:25:6f:e8:2e:33:da:51:d9:f0:28:90:3e:7e:da: ae:d0:8a:12:2d:ec:ed:e7:a3:30:67:7b:04:90:5b:a6:88:c0: 71:0f:74:eb:b3:fa:ab:99:53:ca:47:11:99:51:1e:e6:21:5f: ea:76:ff:e8:0b:32:28:bc:db:87:37:a1:09:43:40:59:50:d4: a9:57:e6:20:99:03:b7:e4:3f:0c:6b:fe:41:3f:b1:17:de:ca: eb:3a:27:f8:3b:f5:b1:d0:fd:46:85:63:45:ea:25:09:44:46: b9:f3:ee:90:0a:ba:2b:a8:ad:ab:45:de:9f:98:02:45:12:de: 87:42:c2:4e:d8:70:76:75:3c:a3:0e:00:5d:0b:ae:da:15:22: 4b:39:90:50:7d:54:6d:01:d3:f0:0d:49:99:6d:43:77:75:cb: 41:f6:53:10:51:b4:ce:65:27:de:f1:20:bb:74:2e:e7:99:27: d2:5b:5e:1e:ed:f5:25:93:59:8c:bd:fe:bc:53:43:9f:bb:7e: 18:e1:d3:6d:c6:fd:1b:d3:be:97:e2:46:db:70:f5:46:6d:6d: 7f:53:57:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAj7VRjhJE4CWdq2JFOGwEv+P1IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA0MTgxMjA0NTNaFw0yNjA0MTkxNDQyNTNaMDMxMTAvBgNV BAMTKEFDNDQwNzkzQjQ0RDBERDRGRjExMzM5N0MwMTc4Q0NBOTZCMEE2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQjSma/Tf6p2gaptp/dHKZstY 7L2pyMmzaJcTYidTJtTZm0nLrj2BlT0h7BPknOFYaxmHO+5imnJBClJNPpBN72PQ 133iqhQD20moMw9OIE9z0too1ziu7neoBbY3E+3G4a1cNqYA3vXwOlXunnGX5FL7 D5qU/R4BMRpODE25N2VtzEpZfBBxnXq37TxOnRB1VMWUfvWF+Pyf7F1N2bBa+wJ9 N5v3p1iI6M7EUTRvfA636F1bWUnoqlUc8MEuAK+aAW7lFzMFOBduecoapTQA3QHC UJg6Nwstj7p9Ed4IqQLLvqNBahZuTlbWo89yI5S90Zh2AzYV3wQsDrWa63GpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrEQHk7RNDdT/ETOXwBeMypawpvAwHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpW+k+jDj+7h ztpAP5Ba/D2BBqQe1MysIzDmjI4hV26l/HaeydyK+yVv6C4z2lHZ8CiQPn7artCK Ei3s7eejMGd7BJBbpojAcQ9067P6q5lTykcRmVEe5iFf6nb/6AsyKLzbhzehCUNA WVDUqVfmIJkDt+Q/DGv+QT+xF97K6zon+Dv1sdD9RoVjReolCURGufPukAq6K6it q0Xen5gCRRLeh0LCTthwdnU8ow4AXQuu2hUiSzmQUH1UbQHT8A1JmW1Dd3XLQfZT EFG0zmUn3vEgu3Qu55kn0lteHu31JZNZjL3+vFNDn7t+GOHTbcb9G9O+l+JG23D1 Rm1tf1NXvw== -----END CERTIFICATE-----Generated at Sun Apr 19 01:11:12 2026 by rpki-client