$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: bb7q/LAbXE31Pys3XboZoPfvSZEPNYTK23T33uSVqLo= Subject key identifier: B5:9F:39:2C:C2:A8:EF:68:06:E4:F7:34:EE:30:02:1D:48:D8:56:D4 Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 33FF3ED842F39BB4579AD4D160420B7C5C91571F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: 06 Signing time: Mon 13 Apr 2026 00:39:17 +0000 Manifest this update: Mon 13 Apr 2026 00:34:17 +0000 Manifest next update: Tue 14 Apr 2026 03:21:17 +0000 Files and hashes: 1: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) 2: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: UNgycegWbZNNHQG7pxZovPYRM8TJxogw+so7YUX6Sec=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 03:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ff:3e:d8:42:f3:9b:b4:57:9a:d4:d1:60:42:0b:7c:5c:91:57:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Apr 13 00:34:17 2026 GMT Not After : Apr 14 03:21:17 2026 GMT Subject: CN=B59F392CC2A8EF6806E4F734EE30021D48D856D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:03:c9:24:10:93:37:7a:25:3e:07:3d:36: ac:cb:6b:4d:0e:ef:e7:1e:86:4c:97:b6:bb:7a:0a: 43:11:de:39:97:a6:bd:16:ac:e5:3e:69:96:08:31: 9a:a7:c4:82:3c:97:36:73:a7:46:8b:64:8a:0c:28: a2:a0:a7:0c:17:6e:f1:26:11:82:94:9f:5f:4a:c8: 6d:3e:34:5d:78:01:eb:a1:b1:45:58:8c:b7:63:50: ff:bb:92:28:7c:fc:06:ea:3a:7f:16:6c:f5:34:a8: 4b:b7:74:37:2d:02:bf:a6:ed:fa:31:18:89:c6:88: 29:b3:69:32:69:65:0a:be:43:bc:61:3e:7a:22:13: 0f:34:18:cc:08:63:27:9a:a4:f7:8b:8f:7d:0f:09: af:83:04:25:30:57:f9:26:6f:97:2e:fb:98:9b:cd: c3:e5:a0:a3:0c:a6:51:48:6d:16:21:12:85:6d:7e: 7c:8a:c8:23:e0:dd:0e:14:7f:24:1e:fb:dd:1b:3e: 6f:f3:9a:ea:91:20:40:85:9e:ea:11:f0:c9:53:04: 32:69:63:ba:e0:71:dc:60:fc:03:e1:54:cb:83:58: 20:db:65:0a:6f:7f:fe:37:dc:09:55:62:e6:34:40: ba:ee:b7:01:a9:78:f6:00:7a:ea:ff:2b:c0:55:dc: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9F:39:2C:C2:A8:EF:68:06:E4:F7:34:EE:30:02:1D:48:D8:56:D4 X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:23:88:c6:02:b5:aa:00:ba:de:1a:77:65:1e:5c:1d:f0:57: 4c:4a:74:02:1f:2a:e0:22:73:14:7a:cf:64:a3:5d:ce:ce:18: d9:eb:d6:fe:e6:95:7f:d0:54:8c:8b:38:95:62:22:77:f1:b1: ec:18:7e:0d:17:a6:75:54:11:d3:4f:e0:69:c0:be:9f:45:d1: a8:82:83:74:64:83:4b:2e:91:c1:0d:26:d6:97:af:12:58:08: 52:cd:cb:2f:25:e4:0b:47:1b:66:7d:93:07:6e:c6:21:14:8a: ec:69:c0:e6:01:82:c0:4b:31:57:0c:c7:ee:05:e8:ec:63:76: 75:a8:6a:d3:bd:59:e2:f0:88:b1:9c:2f:c1:b8:42:dc:19:70: 54:df:e7:06:29:23:99:1f:28:29:7c:14:af:aa:b3:19:ff:0d: 0e:9e:3c:a4:4f:58:d8:03:84:b9:2e:db:6f:08:27:3b:77:60: 43:9b:55:59:39:ee:c6:49:c1:0e:3e:3a:06:42:81:8b:0d:ee: dc:7a:56:e2:21:d5:a6:be:dd:bf:81:55:dd:c6:a0:9e:9f:92: ce:8f:31:31:f8:f2:46:b6:e5:32:e6:4d:c0:d0:be:f3:40:ea: a1:f1:58:fc:49:31:41:36:dc:b1:23:b9:4b:99:ea:e3:05:c9: 72:85:57:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM/8+2ELzm7RXmtTRYEILfFyRVx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA0MTMwMDM0MTdaFw0yNjA0MTQwMzIxMTdaMDMxMTAvBgNV BAMTKEI1OUYzOTJDQzJBOEVGNjgwNkU0RjczNEVFMzAwMjFENDhEODU2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoHAPJJBCTN3olPgc9NqzLa00O 7+cehkyXtrt6CkMR3jmXpr0WrOU+aZYIMZqnxII8lzZzp0aLZIoMKKKgpwwXbvEm EYKUn19KyG0+NF14AeuhsUVYjLdjUP+7kih8/AbqOn8WbPU0qEu3dDctAr+m7fox GInGiCmzaTJpZQq+Q7xhPnoiEw80GMwIYyeapPeLj30PCa+DBCUwV/kmb5cu+5ib zcPloKMMplFIbRYhEoVtfnyKyCPg3Q4UfyQe+90bPm/zmuqRIECFnuoR8MlTBDJp Y7rgcdxg/APhVMuDWCDbZQpvf/433AlVYuY0QLrutwGpePYAeur/K8BV3NnRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtZ85LMKo72gG5Pc07jACHUjYVtQwHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCOIxgK1qgC6 3hp3ZR5cHfBXTEp0Ah8q4CJzFHrPZKNdzs4Y2evW/uaVf9BUjIs4lWIid/Gx7Bh+ DRemdVQR00/gacC+n0XRqIKDdGSDSy6RwQ0m1pevElgIUs3LLyXkC0cbZn2TB27G IRSK7GnA5gGCwEsxVwzH7gXo7GN2dahq071Z4vCIsZwvwbhC3BlwVN/nBikjmR8o KXwUr6qzGf8NDp48pE9Y2AOEuS7bbwgnO3dgQ5tVWTnuxknBDj46BkKBiw3u3HpW 4iHVpr7dv4FV3cagnp+Szo8xMfjyRrblMuZNwNC+80DqofFY/EkxQTbcsSO5S5nq 4wXJcoVXiw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:12 2026 by rpki-client