$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json) Hash identifier: lg/brmtibVx9PfrWOzx/uq39IwWNSfZu85PQbS9p50M= Subject key identifier: E8:DF:E6:35:AB:93:4B:7C:71:C2:D7:DA:45:F9:7A:C0:0B:28:17:7E Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A Certificate serial: 1499F8346898EE54968F467E82F2BCDDF1571C7E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft Manifest number: 16 Signing time: Mon 27 Apr 2026 06:38:41 +0000 Manifest this update: Mon 27 Apr 2026 06:33:41 +0000 Manifest next update: Tue 28 Apr 2026 09:48:41 +0000 Files and hashes: 1: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=) 2: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=) 3: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: k5HYdWD2Yz1j99aCNBYEWfGExQswWcKWTGboZF+Bl94=) 4: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:99:f8:34:68:98:ee:54:96:8f:46:7e:82:f2:bc:dd:f1:57:1c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Validity Not Before: Apr 27 06:33:41 2026 GMT Not After : Apr 28 09:48:41 2026 GMT Subject: CN=E8DFE635AB934B7C71C2D7DA45F97AC00B28177E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:c5:e2:fe:0d:87:77:c1:da:60:ba:51:9d: 7a:9f:59:4b:f1:39:cc:02:8f:e2:bd:98:6c:d3:39: 4e:07:9c:58:ef:73:a4:7e:9f:71:f5:46:99:29:34: ba:09:3e:56:48:08:8e:3e:22:7d:4a:f1:b3:d8:ad: 67:2a:74:3f:aa:80:a8:1c:47:09:c0:e3:d4:ed:c4: 3b:35:a0:86:a7:c5:2e:97:77:9d:d0:13:98:07:e4: c8:8b:a1:fa:0d:dd:50:38:d4:77:ce:97:47:f4:06: 55:c1:81:7a:68:8a:00:54:92:08:41:16:71:d8:62: e7:ab:85:71:a3:c3:c8:69:d3:0f:33:33:b0:c7:6b: 8f:db:21:c2:62:a7:10:7a:c2:94:46:b3:6f:97:13: b7:97:58:75:5a:9b:a6:2f:6c:15:aa:26:a9:73:93: 5a:b1:f7:8e:da:01:db:39:7f:27:46:b3:5a:6f:1e: 9b:90:31:5e:73:d8:6d:5c:3e:2a:29:04:e2:59:41: 5b:c0:a2:b0:93:c9:8e:71:40:38:74:0e:97:96:dc: 84:38:a0:62:42:20:66:d5:e1:4d:8f:71:d7:0b:fb: 0f:be:7a:11:6d:50:2c:b7:07:dc:c6:22:42:a6:84: 79:53:81:61:b2:c4:32:ea:14:2b:7c:17:50:d5:3b: 0b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DF:E6:35:AB:93:4B:7C:71:C2:D7:DA:45:F9:7A:C0:0B:28:17:7E X509v3 Authority Key Identifier: keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:87:e1:20:c6:6d:59:b4:97:e1:1e:a4:b6:f5:3e:e8:e6:8a: 01:55:48:d3:28:54:3c:8c:d7:f8:7e:e6:76:e0:13:bb:80:26: 20:54:a2:df:63:93:2f:65:c9:e3:d4:d7:ce:a7:ea:f7:0d:2e: 18:b3:43:f7:77:fb:6e:fc:7e:37:79:7e:2e:dd:a9:82:0c:11: 4c:21:4e:20:70:50:1a:c5:9c:f5:d7:3f:ef:82:a7:5c:94:19: 61:de:07:3a:36:8c:2b:d6:a8:1c:0b:5e:e6:6d:eb:02:c1:21: 0b:25:a8:bc:78:6a:e3:9f:c8:44:25:c2:79:0a:f9:d8:d3:dd: f9:0e:1b:58:7d:c8:34:5b:5d:d0:6c:17:ea:be:fd:73:dd:b4: ed:db:96:11:c5:69:55:31:ee:b1:8b:11:28:84:b2:ca:30:94: dc:34:78:f8:c9:31:e8:b6:45:59:ad:03:c9:0f:53:cd:bb:92: 03:af:92:96:f7:46:56:e0:8c:e8:c9:c6:e4:aa:ba:e5:25:4c: c4:24:ee:b4:35:b1:e1:04:db:13:de:39:10:00:50:36:96:93: dd:33:55:0c:c0:ff:13:e0:0a:c1:a4:73:e6:47:99:4f:d3:9f: 55:be:65:dc:b1:09:a5:57:56:51:cd:25:f0:05:f4:ef:6a:fa: 6e:5a:15:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFJn4NGiY7lSWj0Z+gvK83fFXHH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2 NDBGRDE3QTAeFw0yNjA0MjcwNjMzNDFaFw0yNjA0MjgwOTQ4NDFaMDMxMTAvBgNV BAMTKEU4REZFNjM1QUI5MzRCN0M3MUMyRDdEQTQ1Rjk3QUMwMEIyODE3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuk8Xi/g2Hd8HaYLpRnXqfWUvx OcwCj+K9mGzTOU4HnFjvc6R+n3H1RpkpNLoJPlZICI4+In1K8bPYrWcqdD+qgKgc RwnA49TtxDs1oIanxS6Xd53QE5gH5MiLofoN3VA41HfOl0f0BlXBgXpoigBUkghB FnHYYuerhXGjw8hp0w8zM7DHa4/bIcJipxB6wpRGs2+XE7eXWHVam6YvbBWqJqlz k1qx947aAds5fydGs1pvHpuQMV5z2G1cPiopBOJZQVvAorCTyY5xQDh0DpeW3IQ4 oGJCIGbV4U2PcdcL+w++ehFtUCy3B9zGIkKmhHlTgWGyxDLqFCt8F1DVOwvJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6N/mNauTS3xxwtfaRfl6wAsoF34wHwYDVR0j BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4 NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4fhIMZtWbSX 4R6ktvU+6OaKAVVI0yhUPIzX+H7mduATu4AmIFSi32OTL2XJ49TXzqfq9w0uGLND 93f7bvx+N3l+Lt2pggwRTCFOIHBQGsWc9dc/74KnXJQZYd4HOjaMK9aoHAte5m3r AsEhCyWovHhq45/IRCXCeQr52NPd+Q4bWH3INFtd0GwX6r79c9207duWEcVpVTHu sYsRKISyyjCU3DR4+Mkx6LZFWa0DyQ9TzbuSA6+SlvdGVuCM6MnG5Kq65SVMxCTu tDWx4QTbE945EABQNpaT3TNVDMD/E+AKwaRz5keZT9OfVb5l3LEJpVdWUc0l8AX0 72r6bloVDA== -----END CERTIFICATE-----Generated at Mon Apr 27 21:55:31 2026 by rpki-client