$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft File: 5F00140F672D031D0607493A021A46F1A9475AE8.mft (raw, json) Hash identifier: XNYIoSATgBmiZRahSELgXY9XIs85akwqlD0pDZiYgtQ= Subject key identifier: 40:41:B9:53:08:4B:E3:01:60:50:38:D6:6A:5D:2D:4F:11:CC:39:77 Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8 Certificate serial: 15307FBA0824B7068FA267687362964D07E9D906 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft Manifest number: 02 Signing time: Mon 13 Apr 2026 01:21:56 +0000 Manifest this update: Mon 13 Apr 2026 01:16:56 +0000 Manifest next update: Tue 14 Apr 2026 04:56:56 +0000 Files and hashes: 1: 5F00140F672D031D0607493A021A46F1A9475AE8.crl (hash: jVqhX2ApAEQqdlJAMsSh4USwaa13jBdcri08tfDOuR4=) 2: 3130332e3133322e3231322e302f32322d3232203d3e20313337373539.roa (hash: 0A06erw3OLdWIsY3e9VDc4+8JkwmhWD+EJBbNx8D0fI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:30:7f:ba:08:24:b7:06:8f:a2:67:68:73:62:96:4d:07:e9:d9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8 Validity Not Before: Apr 13 01:16:56 2026 GMT Not After : Apr 14 04:56:56 2026 GMT Subject: CN=4041B953084BE301605038D66A5D2D4F11CC3977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:c6:2a:b6:ae:f2:5b:88:4a:04:9a:c8:6a: 59:26:e2:55:0b:c6:09:d2:bb:20:c7:d1:5a:19:98: b5:1d:aa:b7:66:68:75:d0:d3:5a:cc:12:f2:53:d3: e3:87:82:07:da:c6:84:ed:eb:3a:f5:55:32:1c:86: 9f:7a:1a:b1:47:89:f2:7c:1d:62:27:ff:33:58:02: c6:9f:da:de:2e:49:3f:56:e7:0d:23:49:a3:57:3d: 1e:58:7a:25:17:67:79:86:0d:29:3a:41:94:c6:60: 52:3c:6c:41:dd:57:f0:31:a8:a0:5d:c8:be:c8:11: 2b:a8:b4:cc:3f:25:49:33:a1:41:14:70:29:e3:20: 83:28:35:01:bc:35:50:f3:2c:ab:07:dc:af:9d:97: 5d:34:a0:7b:81:16:71:9f:b5:a3:40:c8:d1:b6:23: 89:73:4c:d5:fa:ee:a4:fd:6a:d6:24:32:61:6c:22: 03:9f:60:2e:67:8d:14:f6:72:b4:6a:65:3f:c9:6e: bc:09:45:b6:0a:f6:d2:b2:ed:ff:ef:46:64:e9:e7: 2f:fe:7f:ba:e7:69:dd:87:d7:89:8c:bb:52:53:22: bd:ff:f8:ed:55:49:6a:93:8d:98:84:3b:db:61:13: c3:e5:ac:3e:9b:66:1f:c8:f5:96:c6:5d:8b:28:57: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:41:B9:53:08:4B:E3:01:60:50:38:D6:6A:5D:2D:4F:11:CC:39:77 X509v3 Authority Key Identifier: keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3b:37:b6:79:d6:a0:37:bd:d8:96:9c:02:65:8e:74:3c:7d: bf:e1:3b:4b:93:e0:0b:a6:d9:df:6e:d0:d9:e5:a5:ec:7e:30: aa:5a:74:c6:45:13:89:23:d4:31:e5:1b:9f:3c:06:f6:45:d7: 43:b1:d6:c0:7e:d5:82:68:3c:a9:64:98:1f:83:44:22:37:b2: 8f:50:7e:92:61:03:72:f5:63:5a:2c:f8:ce:6d:84:1b:97:c1: ef:a1:0d:2d:7f:bf:13:f3:5a:15:dd:a8:3d:32:02:04:3b:15: c5:fe:d7:17:08:6d:0d:a7:9b:ef:71:cd:7e:c0:76:ba:e2:23: b9:9e:39:3f:ed:e2:61:b5:9d:4d:24:37:87:26:bd:f3:7d:37: cf:62:2e:8a:b8:d1:61:6d:13:ca:2b:bb:7e:43:39:e8:c6:7c: 18:a1:2f:7f:a4:89:5d:d4:3d:d2:b2:15:de:4e:56:b9:19:54: 43:06:b7:61:e1:22:9f:ce:8e:d6:6e:c9:99:43:81:f4:06:67: da:eb:11:53:9a:44:1c:8d:a8:64:0a:20:03:c7:71:34:e5:39: d9:1b:be:f6:d3:f6:bb:41:54:2d:e8:f4:f2:9d:e1:60:29:11: 49:36:69:f9:03:a6:30:93:bc:d3:d1:82:f8:e2:89:c7:9e:52: 46:f5:7b:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFTB/uggktwaPomdoc2KWTQfp2QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFB OTQ3NUFFODAeFw0yNjA0MTMwMTE2NTZaFw0yNjA0MTQwNDU2NTZaMDMxMTAvBgNV BAMTKDQwNDFCOTUzMDg0QkUzMDE2MDUwMzhENjZBNUQyRDRGMTFDQzM5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjO8Yqtq7yW4hKBJrIalkm4lUL xgnSuyDH0VoZmLUdqrdmaHXQ01rMEvJT0+OHggfaxoTt6zr1VTIchp96GrFHifJ8 HWIn/zNYAsaf2t4uST9W5w0jSaNXPR5YeiUXZ3mGDSk6QZTGYFI8bEHdV/AxqKBd yL7IESuotMw/JUkzoUEUcCnjIIMoNQG8NVDzLKsH3K+dl100oHuBFnGftaNAyNG2 I4lzTNX67qT9atYkMmFsIgOfYC5njRT2crRqZT/JbrwJRbYK9tKy7f/vRmTp5y/+ f7rnad2H14mMu1JTIr3/+O1VSWqTjZiEO9thE8PlrD6bZh/I9ZbGXYsoV07VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQEG5UwhL4wFgUDjWal0tTxHMOXcwHwYDVR0j BBgwFoAUXwAUD2ctAx0GB0k6AhpG8alHWugwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4MTIxNTA2NTQ1NjY0Mi8wLzVGMDAxNDBGNjcyRDAzMUQwNjA3NDkzQTAyMUE0 NkYxQTk0NzVBRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFBOTQ3NUFFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODEyMTUwNjU0NTY2NDIvMC81RjAwMTQwRjY3MkQw MzFEMDYwNzQ5M0EwMjFBNDZGMUE5NDc1QUU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDs3tnnWoDe9 2JacAmWOdDx9v+E7S5PgC6bZ327Q2eWl7H4wqlp0xkUTiSPUMeUbnzwG9kXXQ7HW wH7Vgmg8qWSYH4NEIjeyj1B+kmEDcvVjWiz4zm2EG5fB76ENLX+/E/NaFd2oPTIC BDsVxf7XFwhtDaeb73HNfsB2uuIjuZ45P+3iYbWdTSQ3hya98303z2IuirjRYW0T yiu7fkM56MZ8GKEvf6SJXdQ90rIV3k5WuRlUQwa3YeEin86O1m7JmUOB9AZn2usR U5pEHI2oZAogA8dxNOU52Ru+9tP2u0FULej08p3hYCkRSTZp+QOmMJO809GC+OKJ x55SRvV7qA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:01:43 2026 by rpki-client