$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft File: C074E80FFDB9B886B42838EA88032DC68025A5B3.mft (raw, json) Hash identifier: 4h/d5WAtfDrGQIYX93Mdr8CBk/9pDn/fFZ4+wadqDCo= Subject key identifier: 34:8A:CD:1B:9D:7F:CA:9C:D4:3B:D1:2D:50:4A:03:69:96:0C:C4:8D Authority key identifier: C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 Certificate issuer: /CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Certificate serial: 73DA365258EEE603CAC52CBA5D00C84C2C3E6B6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft Manifest number: 05 Signing time: Mon 13 Apr 2026 07:29:17 +0000 Manifest this update: Mon 13 Apr 2026 07:24:17 +0000 Manifest next update: Tue 14 Apr 2026 07:37:17 +0000 Files and hashes: 1: C074E80FFDB9B886B42838EA88032DC68025A5B3.crl (hash: BIp6XqWP0NpCJf/KXBlpqsI6W0XoZvvJ9K/ZcRei3UQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:da:36:52:58:ee:e6:03:ca:c5:2c:ba:5d:00:c8:4c:2c:3e:6b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C074E80FFDB9B886B42838EA88032DC68025A5B3 Validity Not Before: Apr 13 07:24:17 2026 GMT Not After : Apr 14 07:37:17 2026 GMT Subject: CN=348ACD1B9D7FCA9CD43BD12D504A0369960CC48D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:12:1f:f3:56:88:07:89:b1:c9:06:68:a1: bc:5b:56:3c:95:2c:48:4e:97:44:53:82:6e:fa:bb: f0:2b:75:22:6d:63:22:ca:fc:3f:85:64:f0:a4:72: 2f:01:a8:12:8f:a3:00:4b:1b:6d:74:da:32:e6:1c: 53:1a:14:b1:fd:1b:6e:50:e1:b5:b1:1e:de:66:e5: cc:fe:1e:e0:2f:ee:89:df:da:38:1c:da:a6:c3:74: 22:48:30:bd:62:a8:ec:ba:26:98:07:34:9e:34:b2: 0f:1e:a0:4e:af:6a:f6:8a:aa:ac:76:27:07:78:41: be:a2:68:55:6a:d2:32:72:40:be:9d:bf:ff:0c:f7: d4:6d:36:db:48:fc:c5:3b:3a:ea:44:c0:6e:41:da: f4:54:95:de:93:74:c9:68:77:c3:8b:e9:c2:88:7c: e9:29:7d:b1:19:73:35:c7:6e:91:a5:2f:06:e6:7b: 53:cc:d2:8c:44:7d:a1:b4:3c:3e:7f:6b:88:64:90: 48:56:3c:e7:6b:3a:06:ac:ae:95:71:20:e2:51:f2: db:7b:00:d3:0d:8d:3c:52:c2:ef:ac:3d:ac:01:1d: a1:c2:45:5f:49:12:e3:eb:38:2e:e7:b3:84:26:ab: 21:aa:80:79:85:1e:26:17:bf:7d:20:b2:be:e8:3e: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8A:CD:1B:9D:7F:CA:9C:D4:3B:D1:2D:50:4A:03:69:96:0C:C4:8D X509v3 Authority Key Identifier: keyid:C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5b:01:6c:9a:5f:56:6b:e8:4e:60:a5:fe:59:2b:13:d6:7d: 84:13:42:62:c4:7b:cb:aa:39:e5:31:91:61:ac:83:06:98:ee: 3f:05:17:2f:b6:74:2a:32:e3:2b:52:d5:e8:b5:cd:df:6b:be: 10:da:0c:a4:a4:90:62:b1:3f:69:25:e4:31:c1:34:97:fa:46: 67:26:6f:47:b1:ae:75:28:5c:84:ca:ae:7c:fc:c9:9b:ae:ef: 8f:06:e1:d2:32:8a:0f:e1:17:7e:02:f3:f8:d6:30:2b:68:67: 20:4e:95:7f:fd:2a:6a:df:1d:c0:a4:b3:f9:42:78:2b:99:c1: 03:28:b0:18:e7:f4:26:28:68:69:31:dd:de:40:cc:80:34:ea: 66:2d:c5:26:1f:9a:0d:1d:f0:49:b0:ee:cb:38:ee:5e:5d:0a: f7:29:1b:e7:1a:0a:b1:83:04:54:17:71:a0:46:ee:5e:24:10: e2:94:fb:25:75:11:38:fa:2f:8f:5a:05:e1:08:4c:d2:a0:ad: 1e:cd:0b:f2:2b:8d:fe:50:01:1c:37:b7:a7:a9:95:ff:89:05: 83:0c:ed:31:c1:3a:33:5a:20:7e:30:a8:dd:51:bf:55:96:33: 50:ab:4a:d2:89:7b:01:d0:1b:db:16:1c:20:c2:bd:1b:af:1c: c1:d1:5b:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc9o2Ulju5gPKxSy6XQDITCw+a2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4 MDI1QTVCMzAeFw0yNjA0MTMwNzI0MTdaFw0yNjA0MTQwNzM3MTdaMDMxMTAvBgNV BAMTKDM0OEFDRDFCOUQ3RkNBOUNENDNCRDEyRDUwNEEwMzY5OTYwQ0M0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaBIf81aIB4mxyQZoobxbVjyV LEhOl0RTgm76u/ArdSJtYyLK/D+FZPCkci8BqBKPowBLG2102jLmHFMaFLH9G25Q 4bWxHt5m5cz+HuAv7onf2jgc2qbDdCJIML1iqOy6JpgHNJ40sg8eoE6vavaKqqx2 Jwd4Qb6iaFVq0jJyQL6dv/8M99RtNttI/MU7OupEwG5B2vRUld6TdMlod8OL6cKI fOkpfbEZczXHbpGlLwbme1PM0oxEfaG0PD5/a4hkkEhWPOdrOgasrpVxIOJR8tt7 ANMNjTxSwu+sPawBHaHCRV9JEuPrOC7ns4QmqyGqgHmFHiYXv30gsr7oPnZ7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNIrNG51/ypzUO9EtUEoDaZYMxI0wHwYDVR0j BBgwFoAUwHToD/25uIa0KDjqiAMtxoAlpbMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTcwOTE4Ny8wL0MwNzRFODBGRkRCOUI4ODZCNDI4MzhFQTg4MDMy REM2ODAyNUE1QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA3NEU4MEZGREI5Qjg4NkI0MjgzOEVBODgwMzJEQzY4MDI1QTVCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU3MDkxODcvMC9DMDc0RTgwRkZEQjlC ODg2QjQyODM4RUE4ODAzMkRDNjgwMjVBNUIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVsBbJpfVmvo TmCl/lkrE9Z9hBNCYsR7y6o55TGRYayDBpjuPwUXL7Z0KjLjK1LV6LXN32u+ENoM pKSQYrE/aSXkMcE0l/pGZyZvR7GudShchMqufPzJm67vjwbh0jKKD+EXfgLz+NYw K2hnIE6Vf/0qat8dwKSz+UJ4K5nBAyiwGOf0JihoaTHd3kDMgDTqZi3FJh+aDR3w SbDuyzjuXl0K9ykb5xoKsYMEVBdxoEbuXiQQ4pT7JXUROPovj1oF4QhM0qCtHs0L 8iuN/lABHDe3p6mV/4kFgwztMcE6M1ogfjCo3VG/VZYzUKtK0ol7AdAb2xYcIMK9 G68cwdFbMg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:05:53 2026 by rpki-client