$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json) Hash identifier: 8MrkGWNuKsQZMiw1f3qzX6ST6erphc9MrEZuEHgyS/Q= Subject key identifier: 07:DA:B4:4B:E3:17:85:08:D5:B7:83:E0:BB:AE:64:AF:65:C2:39:C1 Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Certificate serial: 64A245A72ACB428719C2462F881FD04FB2129C4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft Manifest number: 09 Signing time: Sat 18 Apr 2026 14:54:56 +0000 Manifest this update: Sat 18 Apr 2026 14:49:56 +0000 Manifest next update: Sun 19 Apr 2026 18:23:56 +0000 Files and hashes: 1: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: NotVg+ZBiZvMJSGc2lZOPWbbcauzqxChLFWZT5LcQIs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a2:45:a7:2a:cb:42:87:19:c2:46:2f:88:1f:d0:4f:b2:12:9c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Validity Not Before: Apr 18 14:49:56 2026 GMT Not After : Apr 19 18:23:56 2026 GMT Subject: CN=07DAB44BE3178508D5B783E0BBAE64AF65C239C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:fd:ea:88:78:01:47:f5:cd:04:e5:19:8f: c1:ca:b1:c0:32:16:df:ad:a0:0a:b7:db:11:90:e6: a7:5b:7f:05:6e:95:b8:5d:a4:d4:c9:cf:99:13:74: e2:bf:95:a7:0a:25:8a:b8:c8:8a:ab:52:24:d8:63: 96:51:e3:4f:3b:74:13:10:91:9f:ef:ad:39:d7:46: 3b:76:da:a4:53:95:32:a3:08:24:89:0c:ee:12:b8: 27:e9:82:11:8d:59:33:0d:f5:18:ad:0f:bd:86:86: f5:9c:f8:bc:c1:b9:57:71:39:23:22:d9:81:d6:7a: 2f:7a:fe:10:bf:8b:8c:72:0c:e9:37:05:4a:43:6c: e7:08:e9:61:15:b1:19:63:c0:35:dc:ea:2b:23:f7: 97:31:9c:e1:63:07:f0:d0:2e:9b:ec:8c:61:a4:67: c0:f3:a3:db:6a:62:b6:b1:5e:5e:c6:b4:46:a4:5d: a7:5f:c6:d5:6e:7e:0a:d5:95:7f:c9:a2:87:d8:5e: 4a:f7:67:03:0f:63:59:7e:2b:3f:84:b4:a4:50:e5: af:79:1b:4a:31:ed:6d:c5:ed:e0:0f:e0:28:5c:24: d0:1d:49:27:24:98:d5:46:31:ee:d7:06:70:b0:fe: 3b:9b:1f:cb:28:37:f5:b0:3b:96:45:05:e0:4b:e6: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DA:B4:4B:E3:17:85:08:D5:B7:83:E0:BB:AE:64:AF:65:C2:39:C1 X509v3 Authority Key Identifier: keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a8:d2:30:d7:52:ad:48:7c:a0:b7:8f:45:de:b6:5c:a3:f2: 03:72:9d:e2:62:45:e8:ce:f9:9a:5c:2e:25:a8:20:db:5b:a6: 22:74:99:e8:49:6d:5b:7b:94:1c:95:77:d4:69:3a:be:57:3a: 77:f4:0a:da:4a:9d:09:51:7c:e7:b2:a7:1a:b9:8e:2f:93:4c: 19:cc:71:63:43:8d:08:49:c2:b5:aa:10:f0:2a:21:b2:1c:fc: 2e:ab:20:5d:92:a5:12:2d:d5:27:6f:86:8c:7e:94:f5:c2:3e: 7c:0f:80:51:54:a5:9f:d3:c7:17:53:5e:76:80:8d:80:44:2a: 6f:56:e3:4d:eb:ee:6e:0f:69:bf:7f:56:08:42:d2:35:d9:87: 96:35:3b:0b:b4:37:75:3e:84:84:9b:81:8e:28:63:16:72:8e: 0c:b7:31:c5:e9:5a:11:66:90:fe:95:f8:04:43:60:3f:03:a2: 00:18:c5:48:2c:6f:56:c5:7e:e8:36:7d:fe:e8:92:65:af:b8: d1:cf:eb:c3:b5:cf:ca:4f:31:2b:4b:ed:dc:e8:70:55:37:d8: aa:ab:01:79:b3:d2:4f:41:1b:c8:3b:60:fd:47:d6:65:c9:ff: dd:4f:9b:9b:69:9c:18:59:ae:54:a3:ba:7b:b0:b0:cf:a2:71: 74:d1:b6:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZKJFpyrLQocZwkYviB/QT7ISnE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJE MkVENjlBRjAeFw0yNjA0MTgxNDQ5NTZaFw0yNjA0MTkxODIzNTZaMDMxMTAvBgNV BAMTKDA3REFCNDRCRTMxNzg1MDhENUI3ODNFMEJCQUU2NEFGNjVDMjM5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3f3qiHgBR/XNBOUZj8HKscAy Ft+toAq32xGQ5qdbfwVulbhdpNTJz5kTdOK/lacKJYq4yIqrUiTYY5ZR4087dBMQ kZ/vrTnXRjt22qRTlTKjCCSJDO4SuCfpghGNWTMN9RitD72GhvWc+LzBuVdxOSMi 2YHWei96/hC/i4xyDOk3BUpDbOcI6WEVsRljwDXc6isj95cxnOFjB/DQLpvsjGGk Z8Dzo9tqYraxXl7GtEakXadfxtVufgrVlX/JoofYXkr3ZwMPY1l+Kz+EtKRQ5a95 G0ox7W3F7eAP4ChcJNAdSSckmNVGMe7XBnCw/jubH8soN/WwO5ZFBeBL5qFVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUB9q0S+MXhQjVt4Pgu65kr2XCOcEwHwYDVR0j BBgwFoAUfFWaAIQNADJbRdf2p8EO29Ltaa8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8wLzdDNTU5QTAwODQwRDAwMzI1QjQ1RDdGNkE3QzEw RURCRDJFRDY5QUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMC83QzU1OUEwMDg0MEQw MDMyNUI0NUQ3RjZBN0MxMEVEQkQyRUQ2OUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqjSMNdSrUh8 oLePRd62XKPyA3Kd4mJF6M75mlwuJagg21umInSZ6EltW3uUHJV31Gk6vlc6d/QK 2kqdCVF857KnGrmOL5NMGcxxY0ONCEnCtaoQ8Cohshz8LqsgXZKlEi3VJ2+GjH6U 9cI+fA+AUVSln9PHF1NedoCNgEQqb1bjTevubg9pv39WCELSNdmHljU7C7Q3dT6E hJuBjihjFnKODLcxxelaEWaQ/pX4BENgPwOiABjFSCxvVsV+6DZ9/uiSZa+40c/r w7XPyk8xK0vt3OhwVTfYqqsBebPST0EbyDtg/UfWZcn/3U+bm2mcGFmuVKO6e7Cw z6JxdNG2JQ== -----END CERTIFICATE-----Generated at Sun Apr 19 01:11:13 2026 by rpki-client