$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json) Hash identifier: c+XWwoZNvlHSoNS/8a51GgrTAJh+3Ot9Dedw/efSZp4= Subject key identifier: 03:D9:5C:46:34:06:69:74:07:B2:C3:A1:DB:EA:81:26:FB:7F:A3:BF Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Certificate serial: 31E8A2468D0D72CE21DC4A368AA5D0839E38EED4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft Manifest number: 13 Signing time: Mon 27 Apr 2026 17:08:49 +0000 Manifest this update: Mon 27 Apr 2026 17:03:49 +0000 Manifest next update: Tue 28 Apr 2026 18:37:49 +0000 Files and hashes: 1: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=) 2: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=) 3: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=) 4: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: VUrxwDUpLG1BECHMItWKC+mrEk60ZlM2p3auQHRU6AA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e8:a2:46:8d:0d:72:ce:21:dc:4a:36:8a:a5:d0:83:9e:38:ee:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Validity Not Before: Apr 27 17:03:49 2026 GMT Not After : Apr 28 18:37:49 2026 GMT Subject: CN=03D95C463406697407B2C3A1DBEA8126FB7FA3BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:bb:3c:cf:cb:e6:45:af:78:29:76:65:9a: 54:29:e4:5b:82:35:b7:63:5a:31:e7:f6:69:1a:39: a2:ea:56:36:36:fc:9e:d7:fb:16:7e:fd:67:de:61: 87:42:15:e4:bf:b3:d6:28:f2:8e:f0:d1:6c:cb:05: 4c:1a:87:1a:f1:0d:d2:ed:76:08:d7:0e:b0:2f:9b: 3b:05:d4:cb:b6:08:60:65:f1:cd:a4:1f:90:30:30: d6:09:6d:2b:1a:76:ab:39:9c:6b:89:ba:47:f0:27: ed:e6:2a:c3:2d:0a:df:f6:e0:31:e2:2c:2b:19:9b: bd:7d:53:a6:7c:43:3b:87:04:5d:c3:a6:39:5a:6b: ee:02:a9:de:e7:0b:34:c7:c3:21:bd:34:7f:8f:90: 3b:78:ac:3f:e9:9c:dc:ae:a6:93:e5:2a:66:d0:e3: 59:5e:1d:1c:2b:c8:18:6d:38:cb:a4:ec:96:86:74: af:00:b1:e2:95:a2:00:fa:16:a1:00:a0:a3:e7:b1: 95:ea:fd:95:c9:ac:dc:aa:1c:f1:20:ad:0c:94:97: 01:92:14:b4:38:f5:9c:13:13:fb:00:dd:63:77:9c: 63:12:bd:e6:aa:76:55:9b:de:90:97:c7:0f:f8:46: c3:ce:3c:3f:03:c0:86:06:6b:07:38:3b:41:56:6a: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D9:5C:46:34:06:69:74:07:B2:C3:A1:DB:EA:81:26:FB:7F:A3:BF X509v3 Authority Key Identifier: keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:bc:0a:4f:6a:f1:b6:3a:40:d4:63:ed:c9:2b:23:74:55:5d: 2e:b7:d2:0f:5c:b8:9c:d3:09:73:9a:f6:21:58:d3:f0:76:f0: 73:0a:7e:a3:c5:16:66:5c:15:ca:4d:ea:17:76:31:96:e3:c1: 9c:62:65:02:c2:26:12:ef:24:94:02:3b:b1:4c:9f:b1:81:27: 25:8e:00:04:41:b9:2a:4a:06:1b:5c:a5:13:c2:16:d3:51:31: 3d:14:a3:9c:4a:4f:5c:0b:be:3d:d2:9a:62:e0:a9:e7:dc:05: 0e:83:6e:a6:dc:43:f0:88:c7:60:b2:da:f4:b4:16:04:7e:1e: ed:0f:7d:f4:26:1c:b2:49:bc:8e:5a:4e:a1:11:34:9f:15:ee: 03:d9:98:df:d3:0a:4f:17:65:c8:92:bc:ca:c7:7a:1a:57:dd: 04:4c:c6:c9:03:fe:7d:89:a6:c3:6d:9a:19:6d:2c:81:6e:26: 44:c9:d7:7e:f1:f3:9f:c5:03:c0:6b:9a:21:10:19:a2:73:f9: b1:b6:c7:38:b5:c5:5f:6f:6c:de:25:d5:1a:b6:0b:91:3a:f1: 0c:1d:57:0c:a2:be:29:d8:33:2f:28:91:31:ac:f6:1a:1b:1f: 5e:a2:cf:eb:b3:d0:5c:28:33:f3:c9:0d:13:ca:e2:0b:bf:c4: 3d:4d:55:10 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMeiiRo0Ncs4h3Eo2iqXQg5447tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdB N0EwOEY2MzAeFw0yNjA0MjcxNzAzNDlaFw0yNjA0MjgxODM3NDlaMDMxMTAvBgNV BAMTKDAzRDk1QzQ2MzQwNjY5NzQwN0IyQzNBMURCRUE4MTI2RkI3RkEzQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuU7s8z8vmRa94KXZlmlQp5FuC NbdjWjHn9mkaOaLqVjY2/J7X+xZ+/WfeYYdCFeS/s9Yo8o7w0WzLBUwahxrxDdLt dgjXDrAvmzsF1Mu2CGBl8c2kH5AwMNYJbSsadqs5nGuJukfwJ+3mKsMtCt/24DHi LCsZm719U6Z8QzuHBF3Dpjlaa+4Cqd7nCzTHwyG9NH+PkDt4rD/pnNyuppPlKmbQ 41leHRwryBhtOMuk7JaGdK8AseKVogD6FqEAoKPnsZXq/ZXJrNyqHPEgrQyUlwGS FLQ49ZwTE/sA3WN3nGMSveaqdlWb3pCXxw/4RsPOPD8DwIYGawc4O0FWap0lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUA9lcRjQGaXQHssOh2+qBJvt/o78wHwYDVR0j BBgwFoAUY0WB8blfuiBLHI0CcbuBx6egj2MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjAwMzE5OTA0MTUzOC8wLzYzNDU4MUYxQjk1RkJBMjA0QjFDOEQwMjcxQkI4 MUM3QTdBMDhGNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwMDMxOTkwNDE1MzgvMC82MzQ1ODFGMUI5NUZC QTIwNEIxQzhEMDI3MUJCODFDN0E3QTA4RjYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbwKT2rxtjpA 1GPtySsjdFVdLrfSD1y4nNMJc5r2IVjT8Hbwcwp+o8UWZlwVyk3qF3YxluPBnGJl AsImEu8klAI7sUyfsYEnJY4ABEG5KkoGG1ylE8IW01ExPRSjnEpPXAu+PdKaYuCp 59wFDoNuptxD8IjHYLLa9LQWBH4e7Q999CYcskm8jlpOoRE0nxXuA9mY39MKTxdl yJK8ysd6GlfdBEzGyQP+fYmmw22aGW0sgW4mRMnXfvHzn8UDwGuaIRAZonP5sbbH OLXFX29s3iXVGrYLkTrxDB1XDKK+KdgzLyiRMaz2GhsfXqLP67PQXCgz88kNE8ri C7/EPU1VEA== -----END CERTIFICATE-----Generated at Mon Apr 27 21:50:25 2026 by rpki-client