$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json) Hash identifier: qaLw64tuQ64YwBBjargX096I+dGpJjTvAzbYZoPysPU= Subject key identifier: 01:94:62:24:48:C1:87:64:69:72:7D:CD:A9:E7:80:A3:1A:0E:B1:33 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 69FA13E97E29DE428AFC124D0701A7AAB70C81E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft Manifest number: 1A Signing time: Mon 20 Apr 2026 05:08:23 +0000 Manifest this update: Mon 20 Apr 2026 05:03:23 +0000 Manifest next update: Tue 21 Apr 2026 05:32:23 +0000 Files and hashes: 1: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=) 2: AS138421.roa (hash: dWv3A+njXqrUE8Mw7JZqCmOo2ZGwskZ3TQPEph8P4JE=) 3: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=) 4: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=) 5: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: Vsu2X23z+tWKl4I524oGWegkuRnAZD/2mVJnO4J2cuQ=) 6: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=) 7: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=) 8: AS4811.roa (hash: La8pyBLohCLOnHuC7bKjsqecZGznH+d59D+6nUVy/2k=) 9: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=) 10: AS17621.roa (hash: X5hynUmFKe2yevUmf6exkuQLOdMg14WL5pJJXOTNEZI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fa:13:e9:7e:29:de:42:8a:fc:12:4d:07:01:a7:aa:b7:0c:81:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 20 05:03:23 2026 GMT Not After : Apr 21 05:32:23 2026 GMT Subject: CN=0194622448C1876469727DCDA9E780A31A0EB133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:b4:3b:bd:c7:05:07:15:40:43:78:49:9f: 34:01:c9:fb:a0:d6:cc:81:59:ba:00:40:a7:65:35: 66:d6:20:a8:88:cb:5b:dc:f3:c3:0f:f3:8f:de:d3: 63:7b:16:4e:26:fa:87:37:ff:7e:36:af:10:0a:e5: 27:41:a8:23:16:ff:50:87:cc:6e:e4:43:88:88:09: 7d:94:93:de:cb:2d:ea:14:9e:65:54:6c:73:c8:9d: b8:e2:ad:18:ae:81:e5:a9:b1:a8:2f:f2:7d:6c:e2: 80:92:3b:82:e8:e7:ca:58:a3:ba:b3:d1:45:e5:7b: 74:23:e2:c4:60:87:d4:05:a3:63:d1:3b:5a:7f:ca: a5:b7:a9:dc:4b:5f:6d:1e:9b:a4:f3:1a:86:e5:7b: b5:5e:43:3e:fb:95:d5:c8:5e:0c:62:6b:d2:47:c1: e7:ca:55:fe:7f:0b:a4:e6:bb:7f:3a:27:a2:2d:32: 6c:e7:e9:a9:40:24:95:ff:62:80:a6:c4:04:66:78: 93:f0:04:aa:bc:d9:6a:e7:37:6e:2b:07:bd:61:1e: 1a:1d:fc:76:ea:86:76:1e:37:07:cd:7f:27:6d:15: 47:3d:51:fb:68:8f:6d:2a:b4:c7:6d:ab:cc:10:e6: 89:76:02:d1:27:c0:f5:a9:59:41:c3:98:1a:c4:b6: 56:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:94:62:24:48:C1:87:64:69:72:7D:CD:A9:E7:80:A3:1A:0E:B1:33 X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:07:46:66:1c:16:1b:d9:df:bc:28:70:71:c1:ea:30:54:36: 61:74:53:81:7a:e2:73:54:13:fe:a8:bd:7f:c0:8d:fe:4d:ff: 33:84:da:05:b8:9c:47:7c:fa:e8:dc:15:64:0f:46:8f:ae:5c: 47:07:c4:51:68:06:d6:61:65:ec:92:77:7a:11:dc:af:dc:0a: 09:ae:fb:f0:e0:90:86:1a:6f:cf:44:75:84:cf:51:d3:f9:44: 3d:e7:6e:4f:cb:4b:98:c1:31:0d:12:45:33:ed:f7:63:a0:50: f7:e1:55:b2:35:d1:dd:ba:2b:3a:45:25:40:05:4a:1b:67:38: 06:da:b6:65:2a:38:a6:d8:77:f6:69:29:89:38:55:a3:77:2b: d9:2e:2b:b1:dc:d0:e5:19:f2:5c:58:c3:32:48:cc:3d:2b:e7: 29:af:61:da:69:da:62:45:0a:2b:90:92:fc:fa:6c:5d:af:ac: 01:af:4b:bd:5e:18:9a:76:5f:28:04:0a:3f:3a:f7:f8:45:50: 0b:45:28:b1:b3:8a:90:0e:e3:a2:74:92:2d:48:dc:45:f0:a8: b7:1f:8f:09:fe:48:0d:a7:72:31:e3:91:d8:ea:36:8a:7f:89: 28:04:27:bb:89:b8:85:a9:14:c6:37:34:e3:fa:e9:eb:39:6d: 0d:3d:d2:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUafoT6X4p3kKK/BJNBwGnqrcMgekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MjAwNTAzMjNaFw0yNjA0MjEwNTMyMjNaMDMxMTAvBgNV BAMTKDAxOTQ2MjI0NDhDMTg3NjQ2OTcyN0RDREE5RTc4MEEzMUEwRUIxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g7Q7vccFBxVAQ3hJnzQByfug 1syBWboAQKdlNWbWIKiIy1vc88MP84/e02N7Fk4m+oc3/342rxAK5SdBqCMW/1CH zG7kQ4iICX2Uk97LLeoUnmVUbHPInbjirRiugeWpsagv8n1s4oCSO4Lo58pYo7qz 0UXle3Qj4sRgh9QFo2PRO1p/yqW3qdxLX20em6TzGoble7VeQz77ldXIXgxia9JH wefKVf5/C6Tmu386J6ItMmzn6alAJJX/YoCmxARmeJPwBKq82WrnN24rB71hHhod /HbqhnYeNwfNfydtFUc9Uftoj20qtMdtq8wQ5ol2AtEnwPWpWUHDmBrEtlZXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAZRiJEjBh2Rpcn3NqeeAoxoOsTMwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9DODk4ODFCMzE1RjdF MjFCQTk0OENGOUNCMTFEMUFDNDIyMTA2NDI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAdGZhwWG9nf vChwccHqMFQ2YXRTgXric1QT/qi9f8CN/k3/M4TaBbicR3z66NwVZA9Gj65cRwfE UWgG1mFl7JJ3ehHcr9wKCa778OCQhhpvz0R1hM9R0/lEPeduT8tLmMExDRJFM+33 Y6BQ9+FVsjXR3borOkUlQAVKG2c4Btq2ZSo4pth39mkpiThVo3cr2S4rsdzQ5Rny XFjDMkjMPSvnKa9h2mnaYkUKK5CS/PpsXa+sAa9LvV4YmnZfKAQKPzr3+EVQC0Uo sbOKkA7jonSSLUjcRfCotx+PCf5IDadyMeOR2Oo2in+JKAQnu4m4hakUxjc04/rp 6zltDT3Spg== -----END CERTIFICATE-----Generated at Mon Apr 20 13:41:01 2026 by rpki-client