$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json) Hash identifier: aEOyqobqvoSabbLwugW52sr634T2tpPm8iPf+F2Fq1k= Subject key identifier: 68:A3:5D:D1:1E:58:E8:67:A5:05:92:F6:50:F1:FF:90:AA:B7:B1:CD Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Certificate serial: 53BB0A3DA20083D9A2A8DD7D9E2C3F0073DCC55F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft Manifest number: 07 Signing time: Sat 18 Apr 2026 20:54:58 +0000 Manifest this update: Sat 18 Apr 2026 20:49:58 +0000 Manifest next update: Mon 20 Apr 2026 00:26:58 +0000 Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: WTKT9rccDnifxf9m424nfDYtNo4vkz4wla0Rkkwefg0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:bb:0a:3d:a2:00:83:d9:a2:a8:dd:7d:9e:2c:3f:00:73:dc:c5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Validity Not Before: Apr 18 20:49:58 2026 GMT Not After : Apr 20 00:26:58 2026 GMT Subject: CN=68A35DD11E58E867A50592F650F1FF90AAB7B1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:d3:de:b9:eb:e9:11:89:64:21:e4:a2:02: e5:98:3b:d8:29:f8:b1:dd:ef:c8:ba:86:bf:93:c2: d4:2a:95:a8:e9:e6:dd:19:0a:a9:9f:31:23:96:55: 0e:63:21:38:96:ec:94:e8:e9:d6:52:18:94:e9:33: d4:46:a1:8a:e8:f4:06:c7:dd:67:2e:3c:0d:ba:7b: d9:63:f1:04:e4:90:07:8a:38:ce:ea:73:d9:56:cb: 11:c3:8e:18:96:eb:b7:ad:78:75:83:c3:87:39:97: 00:c8:93:f8:7a:cb:39:3b:2a:95:a5:8a:76:ed:a9: ef:66:57:2b:66:7f:10:d7:dc:c0:20:9c:52:1c:95: 8a:3b:8a:bf:0a:ea:8f:a1:68:b8:82:c8:fc:f3:f1: 15:f2:bd:a9:0b:40:02:a6:cb:34:88:1c:fa:92:63: 79:0c:d7:6f:b8:1f:21:b6:47:8a:e1:97:17:95:c2: d9:d3:bd:6c:90:be:ae:63:7b:a0:a8:b2:09:2f:82: c5:23:9e:6c:49:26:7b:f1:d1:12:c4:b5:d9:0e:78: 68:07:85:3a:04:50:66:ba:81:bd:4d:bd:d9:21:09: 06:20:90:bd:8a:8d:38:62:1e:09:7b:90:80:1d:54: 3b:f8:f4:37:89:69:e0:c7:72:98:33:b4:d1:49:04: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:5D:D1:1E:58:E8:67:A5:05:92:F6:50:F1:FF:90:AA:B7:B1:CD X509v3 Authority Key Identifier: keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d7:9a:37:29:7e:47:06:72:46:5d:ed:d7:37:e4:27:d8:b4: 4e:0a:cc:ad:02:ed:03:6e:05:db:de:1a:c5:8e:f9:12:fb:90: d1:5a:bf:8a:8a:da:5d:2a:88:5e:13:f0:12:d4:c1:01:94:6a: db:bb:61:28:96:c0:40:26:9e:22:0a:ac:cb:56:33:f4:d5:b2: f9:fb:66:51:89:e4:39:1d:7f:ee:4e:59:e3:cb:8f:92:c9:b6: aa:ff:c4:96:87:4b:6c:c6:bb:ce:93:3d:1d:3c:47:f6:57:13: d3:c8:e8:30:c2:b0:f0:ae:41:d8:d1:b6:4f:16:b7:1e:a3:9f: b3:20:e2:0e:c3:b5:48:7e:da:76:f4:1a:f1:0a:11:6c:cc:3e: 0b:b4:ff:b8:69:e7:97:c4:a5:e1:8f:d0:57:45:58:55:d1:8e: 54:c0:82:69:5c:a8:32:61:da:d3:cd:04:94:60:07:91:4c:8a: 5d:20:f5:82:bc:8c:b5:23:9e:75:83:09:9b:14:5a:1b:bc:b2: 04:ec:82:13:0c:35:82:4f:fc:85:df:9e:0b:af:a3:29:95:94: 2c:8c:4e:4e:3a:65:e3:d2:85:74:5b:d0:b2:be:02:a5:d9:c1: 78:29:92:a5:aa:51:c3:11:1d:0e:4a:6d:aa:2b:0b:5d:b4:d6: 7f:97:c7:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU7sKPaIAg9miqN19niw/AHPcxV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNG Mjk0MjVBRDAeFw0yNjA0MTgyMDQ5NThaFw0yNjA0MjAwMDI2NThaMDMxMTAvBgNV BAMTKDY4QTM1REQxMUU1OEU4NjdBNTA1OTJGNjUwRjFGRjkwQUFCN0IxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkW9PeuevpEYlkIeSiAuWYO9gp +LHd78i6hr+TwtQqlajp5t0ZCqmfMSOWVQ5jITiW7JTo6dZSGJTpM9RGoYro9AbH 3WcuPA26e9lj8QTkkAeKOM7qc9lWyxHDjhiW67eteHWDw4c5lwDIk/h6yzk7KpWl inbtqe9mVytmfxDX3MAgnFIclYo7ir8K6o+haLiCyPzz8RXyvakLQAKmyzSIHPqS Y3kM12+4HyG2R4rhlxeVwtnTvWyQvq5je6CosgkvgsUjnmxJJnvx0RLEtdkOeGgH hToEUGa6gb1NvdkhCQYgkL2KjThiHgl7kIAdVDv49DeJaeDHcpgztNFJBDYtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaKNd0R5Y6GelBZL2UPH/kKq3sc0wHwYDVR0j BBgwFoAUBQPA3PI1mmOTXKQpePfpXPKUJa0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8wLzA1MDNDMERDRjIzNTlBNjM5MzVDQTQyOTc4RjdF OTVDRjI5NDI1QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMC8wNTAzQzBEQ0YyMzU5 QTYzOTM1Q0E0Mjk3OEY3RTk1Q0YyOTQyNUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdeaNyl+RwZy Rl3t1zfkJ9i0TgrMrQLtA24F294axY75EvuQ0Vq/ioraXSqIXhPwEtTBAZRq27th KJbAQCaeIgqsy1Yz9NWy+ftmUYnkOR1/7k5Z48uPksm2qv/ElodLbMa7zpM9HTxH 9lcT08joMMKw8K5B2NG2Txa3HqOfsyDiDsO1SH7advQa8QoRbMw+C7T/uGnnl8Sl 4Y/QV0VYVdGOVMCCaVyoMmHa080ElGAHkUyKXSD1gryMtSOedYMJmxRaG7yyBOyC Eww1gk/8hd+eC6+jKZWULIxOTjpl49KFdFvQsr4CpdnBeCmSpapRwxEdDkptqisL XbTWf5fHUQ== -----END CERTIFICATE-----Generated at Sun Apr 19 01:05:39 2026 by rpki-client