$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft File: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft (raw, json) Hash identifier: X4rFtcVHd3+/dH2SMMTJ8ECxoc6eiQZA2OBHSTPVwl4= Subject key identifier: 99:AC:EF:AC:6A:9C:A7:C5:5B:7C:01:32:B8:F5:37:A2:4D:5D:A8:4C Authority key identifier: D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 Certificate issuer: /CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Certificate serial: 1B5679B2A2B0B1D88A385FE7361D3F40BF144548 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft Manifest number: 05 Signing time: Sun 12 Apr 2026 23:39:17 +0000 Manifest this update: Sun 12 Apr 2026 23:34:17 +0000 Manifest next update: Tue 14 Apr 2026 03:30:17 +0000 Files and hashes: 1: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl (hash: AURrw1IjGJxVXa/LcMKvRgaoOSj5y0L1TTicr19G7f8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 03:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:56:79:b2:a2:b0:b1:d8:8a:38:5f:e7:36:1d:3f:40:bf:14:45:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Validity Not Before: Apr 12 23:34:17 2026 GMT Not After : Apr 14 03:30:17 2026 GMT Subject: CN=99ACEFAC6A9CA7C55B7C0132B8F537A24D5DA84C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:ee:a2:ae:e1:48:1b:c6:2e:34:0e:bf:a4: e7:5c:06:e4:64:37:99:80:b1:39:a4:15:af:61:99: 06:fb:2d:20:5d:61:ef:95:05:b6:dd:d8:79:3b:6f: 36:01:65:51:8f:00:b1:07:b3:ab:e1:56:07:48:55: 6f:55:27:c7:66:5b:79:ee:93:c7:6d:63:f6:a3:d2: 4f:a7:fe:8b:45:e9:6e:b9:22:7d:a1:07:0b:79:38: 06:89:cb:d0:74:46:f3:f2:1d:b2:7a:cd:15:f4:e7: c1:2b:49:59:e0:d5:6e:23:b2:19:ca:2a:96:0b:90: 15:18:09:86:b8:1c:2c:36:ae:ee:48:fb:8c:2a:75: ce:85:95:22:f5:40:3d:3c:bc:53:4a:71:01:7b:bb: a1:7e:1a:8f:bc:a6:be:7e:43:6c:b8:38:9e:ed:f3: c8:70:b7:57:2e:7f:78:f4:93:ad:82:25:d3:6d:fe: 6d:cc:a4:6b:7d:f2:10:75:ea:99:00:e9:c7:18:74: 93:1a:af:ac:c0:c7:22:52:2a:cc:f9:c4:07:ad:2f: 7f:07:e2:46:b6:79:70:f5:da:8f:42:3c:7c:4e:52: b5:8e:8e:81:10:79:bf:64:de:ad:0e:22:70:eb:c4: 38:eb:17:ab:03:0c:85:e3:16:2c:53:38:60:cb:bc: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AC:EF:AC:6A:9C:A7:C5:5B:7C:01:32:B8:F5:37:A2:4D:5D:A8:4C X509v3 Authority Key Identifier: keyid:D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:20:82:31:c9:1a:ce:31:fc:db:d9:2b:9c:73:da:a6:82:85: ee:94:5e:42:b4:35:eb:aa:43:f3:fc:5f:f1:53:a1:a3:7d:c4: 92:90:66:1b:17:c4:ca:f8:ee:a2:5d:fb:12:8d:76:c4:73:f9: 5e:62:c4:a6:19:a3:7e:df:41:33:2e:04:db:ac:59:03:e4:12: bf:56:56:80:a2:1e:c1:1d:0b:3d:ce:92:ae:05:60:d9:31:cf: 57:ee:eb:6d:c0:e0:0c:81:7f:c4:c0:d5:50:d5:ec:ab:2b:32: 3a:96:b9:b6:53:c9:79:96:60:52:c3:78:bf:2d:0c:b8:3b:d9: fb:2f:1e:f0:fb:28:e7:6c:8e:f8:7e:d1:8d:3e:26:0d:d7:c4: 62:88:4d:25:f2:e3:3c:0d:eb:ff:1d:d4:8c:a3:b9:de:ae:66: 92:1e:2c:af:0a:a3:ca:24:d1:ba:71:88:d8:0a:fb:72:39:51: d8:cd:c9:f0:4c:63:0d:af:c8:f9:34:a9:a8:4c:3e:c1:b0:ba: 24:c1:80:0f:69:9e:88:d2:90:cf:34:b4:be:98:1b:b4:cb:ce: 20:9d:47:9e:7f:9e:36:24:4d:43:ad:2b:d4:35:a8:16:d6:b4: 86:9e:81:33:f8:0f:3d:02:2f:73:45:a1:89:ce:7e:c8:a1:8b: 39:d5:33:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG1Z5sqKwsdiKOF/nNh0/QL8URUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0 RkRCNEE1MjAeFw0yNjA0MTIyMzM0MTdaFw0yNjA0MTQwMzMwMTdaMDMxMTAvBgNV BAMTKDk5QUNFRkFDNkE5Q0E3QzU1QjdDMDEzMkI4RjUzN0EyNEQ1REE4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+O6iruFIG8YuNA6/pOdcBuRk N5mAsTmkFa9hmQb7LSBdYe+VBbbd2Hk7bzYBZVGPALEHs6vhVgdIVW9VJ8dmW3nu k8dtY/aj0k+n/otF6W65In2hBwt5OAaJy9B0RvPyHbJ6zRX058ErSVng1W4jshnK KpYLkBUYCYa4HCw2ru5I+4wqdc6FlSL1QD08vFNKcQF7u6F+Go+8pr5+Q2y4OJ7t 88hwt1cuf3j0k62CJdNt/m3MpGt98hB16pkA6ccYdJMar6zAxyJSKsz5xAetL38H 4ka2eXD12o9CPHxOUrWOjoEQeb9k3q0OInDrxDjrF6sDDIXjFixTOGDLvIg3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmazvrGqcp8VbfAEyuPU3ok1dqEwwHwYDVR0j BBgwFoAU1Z79k7AiwFboC9u1t1YrMk/bSlIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MzA4MDgyNjE0MjcyMi8wL0Q1OUVGRDkzQjAyMkMwNTZFODBCREJCNUI3NTYy QjMyNEZEQjRBNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0RkRCNEE1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODMwODA4MjYxNDI3MjIvMC9ENTlFRkQ5M0IwMjJD MDU2RTgwQkRCQjVCNzU2MkIzMjRGREI0QTUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCCCMckazjH8 29krnHPapoKF7pReQrQ166pD8/xf8VOho33EkpBmGxfEyvjuol37Eo12xHP5XmLE phmjft9BMy4E26xZA+QSv1ZWgKIewR0LPc6SrgVg2THPV+7rbcDgDIF/xMDVUNXs qysyOpa5tlPJeZZgUsN4vy0MuDvZ+y8e8Pso52yO+H7RjT4mDdfEYohNJfLjPA3r /x3UjKO53q5mkh4srwqjyiTRunGI2Ar7cjlR2M3J8ExjDa/I+TSpqEw+wbC6JMGA D2meiNKQzzS0vpgbtMvOIJ1Hnn+eNiRNQ60r1DWoFta0hp6BM/gPPQIvc0Whic5+ yKGLOdUzgw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:13 2026 by rpki-client