$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: y3ECqhtw2AktOvfcpjesc3pE9ESSOeAuwjD8fDDXkhg= Subject key identifier: 5D:3A:D0:4E:F5:99:D3:6E:99:9E:57:F9:F7:47:28:03:3E:00:4B:6D Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 4C56D9D8711457F02B3DEFF2FD0504F2E86DEAAE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: 06 Signing time: Mon 13 Apr 2026 04:04:17 +0000 Manifest this update: Mon 13 Apr 2026 03:59:17 +0000 Manifest next update: Tue 14 Apr 2026 05:18:17 +0000 Files and hashes: 1: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: FcINloa1QHPUg9jT+786avH12BLDuiyzPhUUd3esbbM=) 2: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 3: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 05:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:56:d9:d8:71:14:57:f0:2b:3d:ef:f2:fd:05:04:f2:e8:6d:ea:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Apr 13 03:59:17 2026 GMT Not After : Apr 14 05:18:17 2026 GMT Subject: CN=5D3AD04EF599D36E999E57F9F74728033E004B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:4d:e7:e6:d2:c9:7e:8e:15:81:c2:2a:b5: fc:fe:f9:1a:7b:77:e7:2c:bf:51:17:b4:d5:34:75: f4:36:72:c0:83:3d:80:21:6b:c2:d9:c8:d1:ba:ef: 99:19:ed:b6:3f:87:34:ed:1c:56:47:c1:1c:f8:f8: 88:87:aa:3b:2b:77:57:3b:8f:b2:10:37:67:e1:b7: ed:b9:c6:e9:8e:a0:5d:44:08:19:1b:32:c4:ec:35: 6e:bf:45:4f:ef:89:11:46:b0:1f:fd:38:51:3e:2a: d1:ec:95:6a:bb:79:e4:9e:d2:9f:15:2a:ed:bb:ae: 5a:d7:25:a2:80:ea:25:c6:00:45:85:93:52:63:9a: 58:89:ba:a0:04:29:12:5e:de:48:88:2e:3c:dd:27: 0c:4b:ec:ee:d0:41:48:5a:ec:0f:3a:d1:2b:ff:9d: 98:18:73:58:33:ce:eb:34:f9:2d:0b:0c:8e:c7:a4: f1:07:a7:3f:80:5a:1d:fc:8b:f5:2a:c2:48:9c:4a: fd:ef:60:f6:2e:06:1b:5e:b9:1b:ee:78:a3:fc:e3: 6e:eb:9e:7b:c0:b2:45:a0:54:04:28:e2:b1:7f:70: ba:8f:0b:37:7d:5d:81:99:5f:29:3f:97:5d:38:49: 4d:00:7f:eb:0d:9c:58:a9:1d:de:35:c6:e8:45:5c: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3A:D0:4E:F5:99:D3:6E:99:9E:57:F9:F7:47:28:03:3E:00:4B:6D X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fe:10:8a:a1:10:dc:39:13:20:09:32:1b:a6:1e:2b:bb:eb: 99:ca:fa:2f:eb:60:5d:88:07:8a:97:a9:1a:63:8c:4e:8c:69: 30:a9:52:88:a2:39:8a:18:1a:38:18:b6:c8:64:d4:a1:f1:42: 78:9c:ef:f3:2c:ff:d3:d1:1e:44:df:fb:10:ac:ab:6a:96:38: b7:e8:ba:49:16:8c:6a:d7:c2:03:d6:ae:67:df:c5:f5:0a:e2: be:39:ff:38:84:2c:30:28:10:82:11:25:a0:5e:54:18:59:5a: 05:27:14:0a:9f:c4:43:1d:a3:28:74:d8:5d:dd:11:12:83:d0: e5:8c:d3:15:a2:46:de:90:b7:5c:e9:d8:5d:42:8f:3c:c6:e7: ed:87:28:35:f5:94:19:bb:9f:20:7a:eb:52:d1:46:96:22:da: ce:64:04:02:d7:0e:be:75:cc:50:da:4c:82:7e:71:35:74:17: f0:ee:2c:6f:06:2d:e9:6c:af:6f:a5:cb:17:a0:e8:2c:14:0f: e8:9a:a7:e3:38:9f:d9:16:2f:90:77:88:df:3c:09:4b:ac:dc: 2c:2a:0c:be:6c:0b:6d:02:c5:3a:06:27:33:ae:47:4d:53:cd: ea:27:e6:0a:f2:ff:2b:6c:fc:e1:24:de:47:41:34:25:da:1b: 85:63:79:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTFbZ2HEUV/ArPe/y/QUE8uht6q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA0MTMwMzU5MTdaFw0yNjA0MTQwNTE4MTdaMDMxMTAvBgNV BAMTKDVEM0FEMDRFRjU5OUQzNkU5OTlFNTdGOUY3NDcyODAzM0UwMDRCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Z03n5tLJfo4VgcIqtfz++Rp7 d+csv1EXtNU0dfQ2csCDPYAha8LZyNG675kZ7bY/hzTtHFZHwRz4+IiHqjsrd1c7 j7IQN2fht+25xumOoF1ECBkbMsTsNW6/RU/viRFGsB/9OFE+KtHslWq7eeSe0p8V Ku27rlrXJaKA6iXGAEWFk1JjmliJuqAEKRJe3kiILjzdJwxL7O7QQUha7A860Sv/ nZgYc1gzzus0+S0LDI7HpPEHpz+AWh38i/UqwkicSv3vYPYuBhteuRvueKP8427r nnvAskWgVAQo4rF/cLqPCzd9XYGZXyk/l104SU0Af+sNnFipHd41xuhFXAJbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXTrQTvWZ026Znlf590coAz4AS20wHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/4QiqEQ3DkT IAkyG6YeK7vrmcr6L+tgXYgHipepGmOMToxpMKlSiKI5ihgaOBi2yGTUofFCeJzv 8yz/09EeRN/7EKyrapY4t+i6SRaMatfCA9auZ9/F9Qrivjn/OIQsMCgQghEloF5U GFlaBScUCp/EQx2jKHTYXd0REoPQ5YzTFaJG3pC3XOnYXUKPPMbn7YcoNfWUGbuf IHrrUtFGliLazmQEAtcOvnXMUNpMgn5xNXQX8O4sbwYt6Wyvb6XLF6DoLBQP6Jqn 4zif2RYvkHeI3zwJS6zcLCoMvmwLbQLFOgYnM65HTVPN6ifmCvL/K2z84STeR0E0 JdobhWN5aQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:11 2026 by rpki-client