$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: dDI7sK5smhTWt6jbIwf6lf71cctg6B7a3JWqOFpw4WQ= Subject key identifier: 0E:86:2F:65:C3:AA:B8:E2:F9:EF:E3:AB:F7:E9:3E:89:A4:C9:9A:05 Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 479257A348B8366B61190DF82477E6640D234360 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: 06 Signing time: Mon 13 Apr 2026 07:09:17 +0000 Manifest this update: Mon 13 Apr 2026 07:04:17 +0000 Manifest next update: Tue 14 Apr 2026 07:49:17 +0000 Files and hashes: 1: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: O7XZeJbB4rCmwDXOVecsjsvXXHdQxp2+7QjWmlWeqq8=) 2: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:92:57:a3:48:b8:36:6b:61:19:0d:f8:24:77:e6:64:0d:23:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: Apr 13 07:04:17 2026 GMT Not After : Apr 14 07:49:17 2026 GMT Subject: CN=0E862F65C3AAB8E2F9EFE3ABF7E93E89A4C99A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b6:bc:cc:a6:95:bc:42:7a:25:68:8b:11:4a: 5e:93:60:ca:7c:8f:92:79:36:08:b8:04:d6:c3:9c: 87:5e:65:ec:63:48:89:44:76:0e:96:4d:5a:96:f9: f3:bc:de:b2:49:4b:e6:d0:ee:9d:1a:db:bd:d9:7d: b8:16:5e:ea:9d:35:f5:08:14:03:7b:6e:a3:13:8b: 09:77:61:b0:58:4f:2e:1a:68:04:2a:1e:10:af:c1: da:7f:6e:62:fc:d0:0d:7e:89:e6:b6:19:7c:0f:ac: fe:92:fb:32:20:e5:d2:af:2b:fa:ce:13:71:e2:2f: 23:f4:84:93:97:23:9f:c3:2c:7b:81:a7:72:c7:9d: a2:03:f3:00:ad:72:60:1f:c7:66:0e:4e:d1:ac:ce: 11:e3:8a:f8:05:c6:b0:11:ce:ad:aa:7c:28:8f:31: ba:d8:58:ca:f0:06:73:42:ca:09:28:7b:4d:ef:96: ae:61:99:8f:57:ec:cc:03:3b:a0:75:64:4c:4d:c6: 6a:9d:b5:de:2b:97:ce:7c:ca:53:dd:12:45:be:f5: 41:6f:fd:91:b2:74:69:49:9c:63:d9:72:0f:17:fa: 2b:e3:58:29:97:83:e9:2d:c4:83:1b:f5:7d:1c:91: f4:fe:69:57:0f:cc:74:d1:54:e9:0d:e5:9b:82:e8: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:86:2F:65:C3:AA:B8:E2:F9:EF:E3:AB:F7:E9:3E:89:A4:C9:9A:05 X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:30:c1:20:ba:26:ec:e9:91:1e:6d:77:04:e7:94:e1:e9:33: 77:95:5c:0b:e0:aa:ab:f4:3e:6b:33:ac:02:41:ca:36:a6:e7: f5:52:1b:27:2f:3f:2c:e0:82:b8:9a:b4:d3:18:f8:34:67:70: 2c:0c:42:ad:05:dd:28:87:1f:c3:33:37:d7:63:72:b9:3d:4a: 27:eb:6f:b6:ab:bd:4c:83:4e:6b:27:21:0f:f4:3f:16:6b:41: 95:0f:14:96:17:38:52:64:66:6b:e2:1a:51:6e:25:14:7c:ff: f6:36:f0:c6:b0:6b:fc:36:d4:cd:54:26:02:f9:bf:44:13:7e: 39:2b:22:b1:92:a0:24:24:15:b2:04:8a:b0:f3:4a:2b:f5:1e: 30:cc:32:44:f5:4e:aa:93:03:b2:0f:cd:71:5c:ae:84:40:21: 5e:b3:75:d9:ff:b6:72:f2:bd:93:9e:c2:55:1f:b1:48:97:08: 69:08:a9:fc:7f:f7:ed:4b:7c:7f:fd:ff:25:64:54:27:8a:d1: 25:b9:cf:cb:43:97:9a:63:09:2e:b2:58:8c:1a:1b:d0:7a:fe: 4a:ad:34:5c:f8:e0:a4:02:9f:d7:79:57:93:b3:b6:ee:49:f0: 37:96:5d:ec:c1:99:a7:e7:51:35:3d:8b:b2:7b:6b:28:48:bc: 8a:31:4d:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR5JXo0i4NmthGQ34JHfmZA0jQ2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjA0MTMwNzA0MTdaFw0yNjA0MTQwNzQ5MTdaMDMxMTAvBgNV BAMTKDBFODYyRjY1QzNBQUI4RTJGOUVGRTNBQkY3RTkzRTg5QTRDOTlBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZtrzMppW8QnolaIsRSl6TYMp8 j5J5Ngi4BNbDnIdeZexjSIlEdg6WTVqW+fO83rJJS+bQ7p0a273ZfbgWXuqdNfUI FAN7bqMTiwl3YbBYTy4aaAQqHhCvwdp/bmL80A1+iea2GXwPrP6S+zIg5dKvK/rO E3HiLyP0hJOXI5/DLHuBp3LHnaID8wCtcmAfx2YOTtGszhHjivgFxrARzq2qfCiP MbrYWMrwBnNCygkoe03vlq5hmY9X7MwDO6B1ZExNxmqdtd4rl858ylPdEkW+9UFv /ZGydGlJnGPZcg8X+ivjWCmXg+ktxIMb9X0ckfT+aVcPzHTRVOkN5ZuC6EsHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDoYvZcOquOL57+Or9+k+iaTJmgUwHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDDBILom7OmR Hm13BOeU4ekzd5VcC+Cqq/Q+azOsAkHKNqbn9VIbJy8/LOCCuJq00xj4NGdwLAxC rQXdKIcfwzM312NyuT1KJ+tvtqu9TINOaychD/Q/FmtBlQ8Ulhc4UmRma+IaUW4l FHz/9jbwxrBr/DbUzVQmAvm/RBN+OSsisZKgJCQVsgSKsPNKK/UeMMwyRPVOqpMD sg/NcVyuhEAhXrN12f+2cvK9k57CVR+xSJcIaQip/H/37Ut8f/3/JWRUJ4rRJbnP y0OXmmMJLrJYjBob0Hr+Sq00XPjgpAKf13lXk7O27knwN5Zd7MGZp+dRNT2Lsntr KEi8ijFNgQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:09 2026 by rpki-client