$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json) Hash identifier: f9NKejsuVGp0G2zi9zLnIWEU0qg3SnjuL54IOV6ucKs= Subject key identifier: 3A:9F:99:59:51:C7:90:FA:36:D1:76:1C:8C:0F:EA:7B:E0:1A:41:E9 Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Certificate serial: 046F9AFC74BBCEEE280C37BF8BA67EE6DEEC22A1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft Manifest number: 05 Signing time: Mon 13 Apr 2026 09:09:17 +0000 Manifest this update: Mon 13 Apr 2026 09:04:17 +0000 Manifest next update: Tue 14 Apr 2026 09:30:17 +0000 Files and hashes: 1: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: qi/5CAhcDGL/2tB+Ryxq9RuZzYqzq/Lny/DLrOgVvKg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6f:9a:fc:74:bb:ce:ee:28:0c:37:bf:8b:a6:7e:e6:de:ec:22:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Validity Not Before: Apr 13 09:04:17 2026 GMT Not After : Apr 14 09:30:17 2026 GMT Subject: CN=3A9F995951C790FA36D1761C8C0FEA7BE01A41E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:3f:85:aa:6c:2f:6c:76:91:60:1a:11:6f: bf:7d:ee:90:59:2a:9e:9f:31:13:68:4b:41:51:e5: 57:7b:5b:d5:07:19:c5:5e:e0:74:55:83:f8:dc:a9: d7:83:32:30:df:d4:f8:9a:3a:94:42:4d:59:47:fd: 24:40:74:cc:2c:e9:a3:47:b0:60:8d:1d:c9:13:29: ef:24:b5:f5:56:1e:e7:eb:ff:32:e1:55:74:63:6a: 61:71:f2:a1:4a:fa:6c:b6:4d:f2:cc:d7:21:40:f9: ce:f0:b0:40:7f:68:87:63:98:ac:e1:c3:78:53:ad: dd:5c:b1:7d:84:b7:72:f3:0f:bd:95:32:39:4c:08: 91:0f:f4:c1:46:d8:2b:f5:d3:4c:68:20:a8:71:f8: b7:3d:8d:b3:aa:64:b3:58:40:49:04:27:cc:5c:be: 0c:32:a1:e1:99:8f:e3:cc:4e:9d:ed:fc:ee:d5:a1: 4f:9f:0b:1d:69:81:5b:2b:fa:51:f1:c2:cb:08:1e: 85:8b:c7:11:dd:90:e0:1f:8a:f3:b5:f5:02:a0:d0: 14:7a:01:d0:db:16:3a:62:50:f0:a2:a7:d3:2c:7c: 45:61:f6:26:ae:f4:24:fc:c6:33:9c:8d:67:20:d5: 8e:c6:84:60:4f:86:c6:c9:51:43:ca:62:4f:1e:8a: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9F:99:59:51:C7:90:FA:36:D1:76:1C:8C:0F:EA:7B:E0:1A:41:E9 X509v3 Authority Key Identifier: keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e9:c1:e5:7c:e4:ab:15:bf:ef:9e:50:89:ac:74:c3:23:29: 9e:84:f0:b3:93:74:51:c0:2a:b3:c5:7e:eb:8c:6b:be:55:52: e6:8b:a0:13:cf:76:4a:f5:24:5e:19:ff:7a:41:e3:7d:db:47: 2e:73:c6:97:f2:b4:d6:fb:4a:ab:11:6b:b5:ad:57:98:87:0f: 41:97:8b:b3:28:95:21:c3:76:80:a2:5e:91:a8:05:ed:ff:8c: 78:da:6d:f4:6c:49:c5:71:e0:3e:e0:43:66:89:61:ea:56:76: e8:88:60:c7:df:8d:5f:da:e9:a5:e2:18:28:37:da:c9:1e:8d: 56:97:98:ad:9b:f1:f6:c3:cc:26:49:e2:a9:dd:63:62:8b:7f: cf:4c:b1:21:b9:5f:b9:25:ba:36:9d:2b:7a:52:c3:bd:5b:bb: 54:12:a1:90:52:ce:39:b5:c6:42:49:8b:63:0f:42:93:06:46: d9:ee:d7:86:2c:28:37:81:4a:f1:f1:72:22:a4:9d:ae:29:de: b0:15:20:c3:51:ef:98:f7:f2:13:27:19:91:de:5f:a6:91:d1: 22:63:4c:90:d1:37:87:a4:d6:c3:81:b1:33:3b:1f:b2:d0:11: b6:83:92:72:57:3f:b8:87:24:cd:f0:d2:3b:4d:20:1a:de:66: b7:f0:f0:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBG+a/HS7zu4oDDe/i6Z+5t7sIqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAz ODBBMjgyRTAeFw0yNjA0MTMwOTA0MTdaFw0yNjA0MTQwOTMwMTdaMDMxMTAvBgNV BAMTKDNBOUY5OTU5NTFDNzkwRkEzNkQxNzYxQzhDMEZFQTdCRTAxQTQxRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbz+FqmwvbHaRYBoRb7997pBZ Kp6fMRNoS0FR5Vd7W9UHGcVe4HRVg/jcqdeDMjDf1PiaOpRCTVlH/SRAdMws6aNH sGCNHckTKe8ktfVWHufr/zLhVXRjamFx8qFK+my2TfLM1yFA+c7wsEB/aIdjmKzh w3hTrd1csX2Et3LzD72VMjlMCJEP9MFG2Cv100xoIKhx+Lc9jbOqZLNYQEkEJ8xc vgwyoeGZj+PMTp3t/O7VoU+fCx1pgVsr+lHxwssIHoWLxxHdkOAfivO19QKg0BR6 AdDbFjpiUPCip9MsfEVh9iau9CT8xjOcjWcg1Y7GhGBPhsbJUUPKYk8eii2pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOp+ZWVHHkPo20XYcjA/qe+AaQekwHwYDVR0j BBgwFoAUSezxLyN8GM/g3T4dP5nikDgKKC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQxNzQxMS8wLzQ5RUNGMTJGMjM3QzE4Q0ZFMEREM0UxRDNGOTlF MjkwMzgwQTI4MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0MTc0MTEvMC80OUVDRjEyRjIzN0Mx OENGRTBERDNFMUQzRjk5RTI5MDM4MEEyODJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArunB5XzkqxW/ 755Qiax0wyMpnoTws5N0UcAqs8V+64xrvlVS5ougE892SvUkXhn/ekHjfdtHLnPG l/K01vtKqxFrta1XmIcPQZeLsyiVIcN2gKJekagF7f+MeNpt9GxJxXHgPuBDZolh 6lZ26Ihgx9+NX9rppeIYKDfayR6NVpeYrZvx9sPMJkniqd1jYot/z0yxIblfuSW6 Np0relLDvVu7VBKhkFLOObXGQkmLYw9CkwZG2e7XhiwoN4FK8fFyIqSdrinesBUg w1HvmPfyEycZkd5fppHRImNMkNE3h6TWw4GxMzsfstARtoOSclc/uIckzfDSO00g Gt5mt/Dw8Q== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:10 2026 by rpki-client