$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json) Hash identifier: DZ0GtHyqbUI0tKs8DITWjFEfu0lCce7C4bA9q6iXvy0= Subject key identifier: A0:94:F2:31:23:FD:B0:E9:03:84:85:CC:77:1E:BD:7F:F4:83:9F:6F Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Certificate serial: 7A5625444176A5FC5F343F48918E38942C59E730 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft Manifest number: 07 Signing time: Mon 13 Apr 2026 03:39:17 +0000 Manifest this update: Mon 13 Apr 2026 03:34:17 +0000 Manifest next update: Tue 14 Apr 2026 07:16:17 +0000 Files and hashes: 1: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=) 2: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=) 3: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: 20KbVnao1LTrtyKPHsT+C6WG+bwVwAgSLB3avEtBg1k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:56:25:44:41:76:a5:fc:5f:34:3f:48:91:8e:38:94:2c:59:e7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Validity Not Before: Apr 13 03:34:17 2026 GMT Not After : Apr 14 07:16:17 2026 GMT Subject: CN=A094F23123FDB0E9038485CC771EBD7FF4839F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:61:f5:4a:a1:48:cf:7c:18:ae:68:0d:78: 8d:b8:7b:95:96:97:d9:05:84:0b:90:2a:46:ae:6b: d4:43:93:ea:26:e9:5f:af:42:b9:4c:a9:0b:1e:bd: 10:ed:14:0f:ca:b8:e5:00:7a:a4:af:24:74:e6:c2: 07:99:f7:26:b2:92:3e:7d:97:c1:9f:03:fa:89:fb: 92:37:36:d5:5e:3c:b4:e4:80:ab:a3:c8:a0:7a:fa: 5c:91:89:49:36:a8:fb:ab:b6:ca:1b:44:f4:4c:08: e8:19:7f:12:d5:97:cd:bf:32:06:73:85:0a:33:52: 6a:72:98:7a:4c:dc:59:d0:19:df:e2:74:18:c2:86: a7:ac:24:8a:44:45:39:59:67:2e:0f:f3:c5:94:17: 10:a5:07:dd:43:1a:33:d7:8b:06:f2:ba:db:74:d4: a4:fd:5d:ec:3e:dc:2d:5e:d5:44:cd:7a:f5:1d:41: e3:c1:35:b3:c4:bc:a8:1b:84:52:40:70:49:a0:0f: 53:74:3e:2e:4a:49:7e:42:88:68:25:d3:71:87:79: b7:73:b3:e0:01:06:8d:ff:d3:12:43:58:d9:83:16: 96:f8:c5:c2:24:8a:78:f9:7c:ec:af:6a:97:7c:d9: 20:69:bb:53:fc:1b:cd:8e:bb:02:b0:97:b3:ec:5e: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:94:F2:31:23:FD:B0:E9:03:84:85:CC:77:1E:BD:7F:F4:83:9F:6F X509v3 Authority Key Identifier: keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:75:7e:79:ff:fb:8e:8d:09:80:98:33:35:84:f6:82:80:29: ed:93:dc:2f:aa:a9:9b:bf:f0:c7:a5:bd:f3:98:82:33:eb:b2: 84:54:a2:28:e5:b1:b2:83:ab:f3:a2:7c:9c:93:bd:7a:b9:b8: db:8f:25:be:58:33:03:20:9f:ea:50:b9:b2:12:f7:0b:66:35: 42:b6:67:4c:c9:96:af:c6:83:45:43:65:d6:ac:8c:83:14:58: c4:aa:2a:e6:46:a5:8f:9b:18:f1:4f:39:a2:c2:84:c4:0d:51: 4c:e4:97:61:74:86:df:95:92:a4:18:d9:09:43:90:26:80:a5: 68:92:16:a3:4c:06:99:bb:63:c3:1a:16:e2:5f:79:e3:ce:68: e0:79:6b:bf:3d:c4:a0:84:e8:c5:cc:0d:7a:7f:6f:c0:5a:e7: 10:eb:24:bd:45:31:8a:68:13:e4:60:16:da:6e:65:71:63:8c: da:1e:b5:c0:09:59:84:23:1e:92:75:c4:f2:27:0e:db:28:ba: 3c:fd:7f:0c:02:78:4c:1e:85:de:29:8b:85:81:71:f2:c3:c8: 25:02:03:b8:7c:b0:3b:b5:01:ce:44:fc:84:1c:9f:24:0a:aa: aa:ef:3e:fc:ca:0a:c5:dc:1a:22:2a:58:32:e9:4b:2d:86:74: 05:62:a8:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUelYlREF2pfxfND9IkY44lCxZ5zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC NTNDNzBFMDAeFw0yNjA0MTMwMzM0MTdaFw0yNjA0MTQwNzE2MTdaMDMxMTAvBgNV BAMTKEEwOTRGMjMxMjNGREIwRTkwMzg0ODVDQzc3MUVCRDdGRjQ4MzlGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsB2H1SqFIz3wYrmgNeI24e5WW l9kFhAuQKkaua9RDk+om6V+vQrlMqQsevRDtFA/KuOUAeqSvJHTmwgeZ9yaykj59 l8GfA/qJ+5I3NtVePLTkgKujyKB6+lyRiUk2qPurtsobRPRMCOgZfxLVl82/MgZz hQozUmpymHpM3FnQGd/idBjChqesJIpERTlZZy4P88WUFxClB91DGjPXiwbyutt0 1KT9Xew+3C1e1UTNevUdQePBNbPEvKgbhFJAcEmgD1N0Pi5KSX5CiGgl03GHebdz s+ABBo3/0xJDWNmDFpb4xcIkinj5fOyvapd82SBpu1P8G82OuwKwl7PsXr6VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoJTyMSP9sOkDhIXMdx69f/SDn28wHwYDVR0j BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MjYxNDYzNDA0NTQ0MDIvMC9GMjFCNjE3RjQ2RTVE RDc2MEFFNTZBMjFCNjg5MDE4NUI1M0M3MEUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnV+ef/7jo0J gJgzNYT2goAp7ZPcL6qpm7/wx6W985iCM+uyhFSiKOWxsoOr86J8nJO9erm4248l vlgzAyCf6lC5shL3C2Y1QrZnTMmWr8aDRUNl1qyMgxRYxKoq5kalj5sY8U85osKE xA1RTOSXYXSG35WSpBjZCUOQJoClaJIWo0wGmbtjwxoW4l95485o4Hlrvz3EoITo xcwNen9vwFrnEOskvUUximgT5GAW2m5lcWOM2h61wAlZhCMeknXE8icO2yi6PP1/ DAJ4TB6F3imLhYFx8sPIJQIDuHywO7UBzkT8hByfJAqqqu8+/MoKxdwaIipYMulL LYZ0BWKo/A== -----END CERTIFICATE-----Generated at Mon Apr 13 11:01:41 2026 by rpki-client