$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json) Hash identifier: FTwHOi86Wk2qYZ6+XEFQGbHHYXxUnzZ5X1DXbZ+vC08= Subject key identifier: 22:50:F8:4B:2E:65:59:21:F5:11:86:21:C9:1C:31:FD:E1:92:1D:C1 Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Certificate serial: 32D78F0050A50FF3B7001C22873151D17EDD58EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft Manifest number: 07 Signing time: Mon 13 Apr 2026 05:59:17 +0000 Manifest this update: Mon 13 Apr 2026 05:54:17 +0000 Manifest next update: Tue 14 Apr 2026 08:28:17 +0000 Files and hashes: 1: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: +rZVsHp74gebfeQJcV7SaN9UElBoMctK/SXY7HAX59M=) 2: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d7:8f:00:50:a5:0f:f3:b7:00:1c:22:87:31:51:d1:7e:dd:58:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Validity Not Before: Apr 13 05:54:17 2026 GMT Not After : Apr 14 08:28:17 2026 GMT Subject: CN=2250F84B2E655921F5118621C91C31FDE1921DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:26:0d:d5:ec:22:cd:b1:3c:ea:cf:37:59: 0e:21:e8:44:f4:28:11:48:97:1d:ba:61:14:c2:ed: 98:8f:8c:5b:3f:a6:0a:5c:13:91:52:eb:8a:4a:c2: 31:32:1b:6a:b7:b1:bd:e8:69:13:ac:52:a8:a4:92: f0:b3:22:60:2f:aa:b7:d2:8f:a3:a4:5c:e1:5b:b9: 7f:73:5c:7c:1c:82:d9:da:78:b4:0b:f0:40:a3:45: 5a:04:a8:52:b7:92:75:32:17:c2:97:fc:fa:53:18: e5:e4:77:e2:5e:7b:8d:60:62:3c:6a:79:7c:f3:58: 28:c0:8a:69:03:84:5b:27:f0:cf:e9:b8:3b:4f:9d: db:9f:b3:73:e1:d9:bf:e1:96:c6:ea:f8:4d:95:05: 96:de:67:66:b4:4f:eb:d4:bf:5f:30:6d:da:f8:d2: 93:9d:a2:3f:52:2e:b9:cf:f2:4c:b7:82:3c:d4:4d: 67:b0:96:ce:20:61:93:9a:b4:21:44:90:ca:cc:34: 3d:28:f5:1f:c4:81:ec:f4:2e:9e:21:5e:88:23:fa: de:a5:18:83:b0:43:5a:82:4f:23:4d:9d:45:6b:dc: 46:16:87:4d:45:77:93:d1:d9:57:ae:86:5d:4d:3c: e1:d6:83:2c:10:64:a9:30:f4:4e:76:9d:56:b0:27: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:50:F8:4B:2E:65:59:21:F5:11:86:21:C9:1C:31:FD:E1:92:1D:C1 X509v3 Authority Key Identifier: keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:07:75:10:3a:36:8b:1d:7a:26:e5:04:9b:a9:65:17:84:ec: 21:d1:70:0c:ec:e9:35:c4:a0:f5:5f:c2:27:08:3c:db:bf:34: 60:53:9f:bf:35:6a:9c:d1:16:f4:ad:1f:e8:05:88:f1:32:c0: b1:ab:61:19:93:bc:e2:68:39:08:8d:d3:a5:57:d0:c2:2e:79: eb:a4:de:04:0a:94:5b:db:12:95:7c:7c:11:af:2b:4e:8e:52: 89:ac:2a:77:72:6c:de:72:50:70:54:6f:8d:d8:36:ec:e7:a9: 73:1b:93:e3:20:07:88:fc:f6:c2:03:17:5f:b9:7c:a5:99:c6: 6a:ae:46:81:21:4a:98:b0:3e:2d:3f:f1:0b:9e:e7:97:31:87: 38:22:7a:d3:5c:85:79:db:dc:0d:84:f8:bb:0e:a0:f6:85:86: 93:11:11:3d:ef:36:c4:ec:a9:32:b1:ce:35:6e:17:42:49:6a: 5b:06:b0:d0:b5:a6:d1:80:2e:9f:ec:ea:5e:02:7e:26:11:f8: 36:56:32:8a:23:6b:a1:ee:be:f5:6f:2e:43:fc:8c:09:6a:8e: 93:1d:f5:cb:31:1e:5f:6a:cc:61:5d:a7:ce:97:0a:4f:1f:67: 40:fe:75:a9:4a:5a:93:0a:bf:9a:3b:05:ae:d9:8a:02:74:fa: 6b:65:7d:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMtePAFClD/O3ABwihzFR0X7dWO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx OUM1RkNGNzAeFw0yNjA0MTMwNTU0MTdaFw0yNjA0MTQwODI4MTdaMDMxMTAvBgNV BAMTKDIyNTBGODRCMkU2NTU5MjFGNTExODYyMUM5MUMzMUZERTE5MjFEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPSYN1ewizbE86s83WQ4h6ET0 KBFIlx26YRTC7ZiPjFs/pgpcE5FS64pKwjEyG2q3sb3oaROsUqikkvCzImAvqrfS j6OkXOFbuX9zXHwcgtnaeLQL8ECjRVoEqFK3knUyF8KX/PpTGOXkd+Jee41gYjxq eXzzWCjAimkDhFsn8M/puDtPndufs3Ph2b/hlsbq+E2VBZbeZ2a0T+vUv18wbdr4 0pOdoj9SLrnP8ky3gjzUTWewls4gYZOatCFEkMrMND0o9R/Egez0Lp4hXogj+t6l GIOwQ1qCTyNNnUVr3EYWh01Fd5PR2Veuhl1NPOHWgywQZKkw9E52nVawJ/sbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIlD4Sy5lWSH1EYYhyRwx/eGSHcEwHwYDVR0j BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4 QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgd1EDo2ix16 JuUEm6llF4TsIdFwDOzpNcSg9V/CJwg82780YFOfvzVqnNEW9K0f6AWI8TLAsath GZO84mg5CI3TpVfQwi5566TeBAqUW9sSlXx8Ea8rTo5Siawqd3Js3nJQcFRvjdg2 7OepcxuT4yAHiPz2wgMXX7l8pZnGaq5GgSFKmLA+LT/xC57nlzGHOCJ601yFedvc DYT4uw6g9oWGkxERPe82xOypMrHONW4XQklqWwaw0LWm0YAun+zqXgJ+JhH4NlYy iiNroe6+9W8uQ/yMCWqOkx31yzEeX2rMYV2nzpcKTx9nQP51qUpakwq/mjsFrtmK AnT6a2V9AQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:06:17 2026 by rpki-client