$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft File: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json) Hash identifier: D9XMqVmsuT2HqeZdrHH3yx8cS9QQONlTgyk6aXJIGVk= Subject key identifier: 5B:77:22:5D:B6:41:72:B6:C2:4F:BE:26:57:EB:1C:05:F0:DC:BD:EF Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 Certificate issuer: /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Certificate serial: 0622A992E05D42328B1C86BCA82F98CA6D4740A3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft Manifest number: 27 Signing time: Mon 27 Apr 2026 17:58:50 +0000 Manifest this update: Mon 27 Apr 2026 17:53:50 +0000 Manifest next update: Tue 28 Apr 2026 21:11:50 +0000 Files and hashes: 1: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=) 2: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: JJYq5RSZC14A/WsYja+pSTowURu/pdBZh+bgYFSKiIk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:22:a9:92:e0:5d:42:32:8b:1c:86:bc:a8:2f:98:ca:6d:47:40:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254 Validity Not Before: Apr 27 17:53:50 2026 GMT Not After : Apr 28 21:11:50 2026 GMT Subject: CN=5B77225DB64172B6C24FBE2657EB1C05F0DCBDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:d2:26:10:69:78:81:3c:0e:7c:39:9f:49: 2d:c1:36:9b:29:09:f8:f8:e7:48:0a:fb:d5:93:a9: 99:ae:d7:f2:07:f9:fe:5c:33:68:ec:69:ae:02:e5: 15:fb:c1:81:e5:15:db:79:d7:c2:25:2f:ce:22:02: 40:13:e1:03:cf:d4:0a:99:b6:9f:eb:1b:92:95:e1: 83:fe:8e:90:8e:a1:15:80:e6:35:47:6a:b7:f8:af: 36:86:a0:33:bc:13:d6:45:cd:63:7a:79:20:0b:f1: 05:bf:a4:20:37:3c:17:64:fd:25:11:f7:ee:4b:cd: 84:a8:8a:6c:6a:8c:fe:63:07:47:f8:13:53:01:c9: e7:7d:f2:6d:b5:72:0f:8d:43:24:ab:08:97:6c:fd: 80:ad:ed:f4:91:fb:c0:ca:72:57:d5:ec:d2:e0:6d: 75:ea:0c:fb:bd:f3:55:a4:03:42:e6:b1:29:94:fb: 7e:d2:fe:43:22:56:46:f6:e9:ca:88:7e:18:80:d1: b8:91:44:41:cc:8c:16:5f:f2:bd:59:be:86:64:c0: 8d:5b:0e:ad:96:ef:42:30:a3:08:b6:e2:4e:bd:2c: 38:fe:5f:38:c7:cc:ba:7d:ff:f8:ed:ae:0c:57:2a: ce:1c:02:6d:8a:b4:8c:21:cd:c0:48:24:ad:30:2c: c2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:77:22:5D:B6:41:72:B6:C2:4F:BE:26:57:EB:1C:05:F0:DC:BD:EF X509v3 Authority Key Identifier: keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:70:1a:c5:4f:7f:d9:4a:9e:e0:87:ae:b0:1a:07:87:8a:96: 3f:b0:34:2d:a5:38:4f:7c:23:8b:18:be:95:0a:39:40:ac:08: 36:70:da:4a:60:c8:84:79:83:01:54:b2:f3:ee:58:5c:97:b1: fb:ea:f1:2a:a8:38:ff:b8:02:93:55:ec:3b:dd:b4:7b:2c:4c: bd:53:39:d4:77:62:8e:39:75:5d:1b:8d:7e:ea:c4:fe:42:5b: b5:a1:e7:a0:ce:fd:10:73:fa:b6:e0:d1:35:9a:5d:40:aa:24: f4:3a:22:bd:63:b1:2f:c1:39:c3:b8:e7:8d:9f:43:9f:51:64: f6:8b:d0:50:ed:e4:cb:0e:dc:dd:63:a6:d7:7b:66:d8:5c:af: 3e:f1:b0:fb:61:87:97:9d:b0:b9:3a:bc:34:56:f9:39:15:90: a7:d7:e6:4d:20:8e:a5:d5:0b:e4:71:a7:15:11:47:c3:e8:6f: 7f:84:05:40:b0:d2:8f:9d:9a:4c:54:40:9f:bf:4f:7f:26:9c: a1:ec:0c:bc:c1:54:29:ed:ea:88:07:76:b0:e9:de:a7:c7:40: 4e:59:12:f7:d9:93:8b:fc:a8:27:d3:d4:81:18:cb:ae:7e:f3: 6f:e3:eb:41:b8:e2:1a:f8:d1:df:cc:d0:b9:d0:cb:44:d6:9b: 68:4c:27:1d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBiKpkuBdQjKLHIa8qC+Yym1HQKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0Ey NDAxQzI1NDAeFw0yNjA0MjcxNzUzNTBaFw0yNjA0MjgyMTExNTBaMDMxMTAvBgNV BAMTKDVCNzcyMjVEQjY0MTcyQjZDMjRGQkUyNjU3RUIxQzA1RjBEQ0JERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2OdImEGl4gTwOfDmfSS3BNpsp Cfj450gK+9WTqZmu1/IH+f5cM2jsaa4C5RX7wYHlFdt518IlL84iAkAT4QPP1AqZ tp/rG5KV4YP+jpCOoRWA5jVHarf4rzaGoDO8E9ZFzWN6eSAL8QW/pCA3PBdk/SUR 9+5LzYSoimxqjP5jB0f4E1MByed98m21cg+NQySrCJds/YCt7fSR+8DKclfV7NLg bXXqDPu981WkA0LmsSmU+37S/kMiVkb26cqIfhiA0biRREHMjBZf8r1ZvoZkwI1b Dq2W70Iwowi24k69LDj+XzjHzLp9//jtrgxXKs4cAm2KtIwhzcBIJK0wLMJtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW3ciXbZBcrbCT74mV+scBfDcve8wHwYDVR0j BBgwFoAU6cQTxZb7Fm0GJfr3tKnXyiQBwlQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1NjQ2Mzc0OTI1MTA3NC8wL0U5QzQxM0M1OTZGQjE2NkQwNjI1RkFGN0I0QTlE N0NBMjQwMUMyNTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTlDNDEzQzU5NkZCMTY2RDA2MjVGQUY3QjRBOUQ3Q0EyNDAxQzI1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTY0NjM3NDkyNTEwNzQvMC9FOUM0MTNDNTk2RkIx NjZEMDYyNUZBRjdCNEE5RDdDQTI0MDFDMjU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnAaxU9/2Uqe 4IeusBoHh4qWP7A0LaU4T3wjixi+lQo5QKwINnDaSmDIhHmDAVSy8+5YXJex++rx Kqg4/7gCk1XsO920eyxMvVM51Hdijjl1XRuNfurE/kJbtaHnoM79EHP6tuDRNZpd QKok9DoivWOxL8E5w7jnjZ9Dn1Fk9ovQUO3kyw7c3WOm13tm2FyvPvGw+2GHl52w uTq8NFb5ORWQp9fmTSCOpdUL5HGnFRFHw+hvf4QFQLDSj52aTFRAn79PfyacoewM vMFUKe3qiAd2sOnep8dATlkS99mTi/yoJ9PUgRjLrn7zb+PrQbjiGvjR38zQudDL RNabaEwnHQ== -----END CERTIFICATE-----Generated at Mon Apr 27 21:50:31 2026 by rpki-client