$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json) Hash identifier: Rc1K8AYEKecGpgE8WI9vRdPxBXC5nFkRt+1/AUJw2ig= Subject key identifier: AD:8F:02:F3:31:87:A9:68:5C:D5:86:08:95:9C:64:B0:A9:1B:54:CA Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Certificate serial: 718CB1DDA01F35D600F6D4C7D8D696F7D3D95CC2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft Manifest number: 09 Signing time: Mon 13 Apr 2026 03:09:17 +0000 Manifest this update: Mon 13 Apr 2026 03:04:17 +0000 Manifest next update: Tue 14 Apr 2026 05:43:17 +0000 Files and hashes: 1: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=) 2: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=) 3: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: IFzlvp6tWl3+wNhX2oHpP7tk7sBI10XVDDVIyb2lOSM=) 4: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 05:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8c:b1:dd:a0:1f:35:d6:00:f6:d4:c7:d8:d6:96:f7:d3:d9:5c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Validity Not Before: Apr 13 03:04:17 2026 GMT Not After : Apr 14 05:43:17 2026 GMT Subject: CN=AD8F02F33187A9685CD58608959C64B0A91B54CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:f9:39:1c:a3:e2:58:53:30:b8:33:a9:b0: ef:9b:8b:6d:c3:41:40:40:b0:33:db:ce:a6:db:be: 97:cc:13:ce:55:03:3b:7d:1c:70:3d:43:13:95:f2: bc:65:23:f2:f4:da:06:2d:1f:b9:b3:a8:a7:a6:53: 65:71:f2:68:8f:9b:4d:38:7e:26:81:c9:a2:5b:fb: dc:7a:81:97:8e:b0:66:ff:c5:58:a2:7c:18:51:24: bf:34:70:e5:d6:8f:13:19:d7:07:ea:a5:b5:da:79: c1:ff:fb:74:47:2b:81:64:ec:14:09:04:54:e5:73: ee:3e:7c:c7:4d:74:9b:ce:b3:1b:5d:04:75:c6:fc: c9:3d:2f:c3:c4:5f:99:19:d3:04:1d:d5:7b:02:30: c1:d5:75:71:2e:90:ca:f7:56:5e:76:f5:7f:92:9f: e1:38:d5:dd:cd:0b:39:25:2c:b8:2d:b7:ff:5f:00: e6:79:0a:1d:8f:35:39:80:39:3b:f4:24:e4:cd:fe: 34:8c:f3:54:12:01:09:66:c3:2f:f3:0e:33:be:7a: 30:c4:7b:d6:8e:fd:7e:f4:7d:a9:8a:2a:18:bd:f9: 33:20:eb:0f:38:05:ff:a9:12:4b:ee:65:71:22:36: 96:2c:a2:b2:7d:c3:cc:5f:ea:23:c3:23:37:89:9b: aa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8F:02:F3:31:87:A9:68:5C:D5:86:08:95:9C:64:B0:A9:1B:54:CA X509v3 Authority Key Identifier: keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1a:53:36:3d:bc:a6:05:76:96:29:e9:f4:d6:04:11:c4:c5: 19:54:c4:7a:51:67:b0:db:1d:4a:cd:54:39:22:53:b7:e1:e6: 48:d5:51:b7:88:bb:a2:c7:1f:a9:e1:30:53:4c:1d:d3:ff:7d: 1e:d3:30:77:a5:ea:14:05:8c:d0:5d:5d:21:8e:0b:ae:a5:9f: f3:60:61:ab:5a:4b:c0:08:49:ac:56:e3:79:10:d5:7b:2a:8b: 06:b0:2f:0f:00:b7:5c:02:45:e2:7f:b0:c5:bd:6a:e2:46:4b: 06:46:05:77:fb:c6:48:fb:fc:2e:01:af:b1:9f:38:82:09:9c: 88:90:ec:25:f0:1c:54:e7:36:1a:b9:dd:f3:93:51:c6:8a:24: 5c:85:36:47:39:ad:4c:1e:e4:36:2c:89:36:58:7e:b9:c8:db: cd:ad:12:fb:c4:41:c1:d9:d8:23:5d:df:36:79:f2:6e:10:50: 0c:06:3d:26:ac:ec:5c:e2:cb:a3:d4:64:cf:ae:cc:26:55:bc: 2d:7c:f7:ca:b8:9d:8c:70:f9:6e:c1:ca:81:62:e4:21:a5:e1: 95:c9:e3:39:9f:fc:fb:9d:a5:74:90:b8:eb:51:51:ed:a6:a8: b6:02:4d:c4:f1:17:80:ad:6f:55:d2:8a:af:05:45:2b:5e:a0: 67:34:f8:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcYyx3aAfNdYA9tTH2NaW99PZXMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx QUM4RjQ4QzAeFw0yNjA0MTMwMzA0MTdaFw0yNjA0MTQwNTQzMTdaMDMxMTAvBgNV BAMTKEFEOEYwMkYzMzE4N0E5Njg1Q0Q1ODYwODk1OUM2NEIwQTkxQjU0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7vk5HKPiWFMwuDOpsO+bi23D QUBAsDPbzqbbvpfME85VAzt9HHA9QxOV8rxlI/L02gYtH7mzqKemU2Vx8miPm004 fiaByaJb+9x6gZeOsGb/xViifBhRJL80cOXWjxMZ1wfqpbXaecH/+3RHK4Fk7BQJ BFTlc+4+fMdNdJvOsxtdBHXG/Mk9L8PEX5kZ0wQd1XsCMMHVdXEukMr3Vl529X+S n+E41d3NCzklLLgtt/9fAOZ5Ch2PNTmAOTv0JOTN/jSM81QSAQlmwy/zDjO+ejDE e9aO/X70famKKhi9+TMg6w84Bf+pEkvuZXEiNpYsorJ9w8xf6iPDIzeJm6rtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrY8C8zGHqWhc1YYIlZxksKkbVMowHwYDVR0j BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhpTNj28pgV2 linp9NYEEcTFGVTEelFnsNsdSs1UOSJTt+HmSNVRt4i7oscfqeEwU0wd0/99HtMw d6XqFAWM0F1dIY4LrqWf82Bhq1pLwAhJrFbjeRDVeyqLBrAvDwC3XAJF4n+wxb1q 4kZLBkYFd/vGSPv8LgGvsZ84ggmciJDsJfAcVOc2Grnd85NRxookXIU2RzmtTB7k NiyJNlh+ucjbza0S+8RBwdnYI13fNnnybhBQDAY9JqzsXOLLo9Rkz67MJlW8LXz3 yridjHD5bsHKgWLkIaXhlcnjOZ/8+52ldJC461FR7aaotgJNxPEXgK1vVdKKrwVF K16gZzT4UQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:05:53 2026 by rpki-client