$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: l8jl51qW/widX+qpSWzdNzsyVaa+z88K0b74n2Cx7BE= Subject key identifier: F3:06:04:53:F1:FE:C7:2B:D1:5D:B0:DF:3F:B0:B5:B7:BC:F9:74:B2 Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 1835472F9CA5162E7135E7E762465A1A69B4916B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: 11 Signing time: Mon 27 Apr 2026 10:18:46 +0000 Manifest this update: Mon 27 Apr 2026 10:13:46 +0000 Manifest next update: Tue 28 Apr 2026 12:26:46 +0000 Files and hashes: 1: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: S1bmVdc/dNAbK+PVtBQgu3+rOrF80l2suFXKdb3kv2I=) 2: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:35:47:2f:9c:a5:16:2e:71:35:e7:e7:62:46:5a:1a:69:b4:91:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Apr 27 10:13:46 2026 GMT Not After : Apr 28 12:26:46 2026 GMT Subject: CN=F3060453F1FEC72BD15DB0DF3FB0B5B7BCF974B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:38:0e:9f:f0:a4:51:9b:2f:a3:a9:7a:49: 34:75:2a:f1:d2:3b:7e:6c:a4:ae:5a:15:cc:63:a2: 14:1b:c5:47:36:6b:99:b3:af:1e:c3:c0:ea:c7:2b: a1:26:bc:48:54:2b:b2:be:b7:57:1c:e9:79:db:dd: 8e:07:51:17:bc:63:72:bf:e6:f3:aa:22:51:d7:55: c7:c3:0f:60:d1:90:e8:39:26:f5:c4:76:b4:ec:79: 20:35:86:66:13:c7:18:16:b7:cb:ae:dc:3a:c9:bc: af:48:69:b0:20:52:d5:33:23:fa:c8:6c:63:cb:9e: 72:e1:9f:56:f2:6a:11:06:d4:8f:08:07:f9:37:d8: bb:e8:d5:7f:df:32:31:c2:09:7e:94:f6:b0:c0:ef: be:27:7d:f6:14:97:9c:c7:08:36:36:cf:2f:6b:78: 52:c4:11:c4:89:e6:7e:4b:e6:76:52:5d:45:6d:93: 78:c6:da:9d:fa:68:0e:81:9e:a8:98:d2:3e:ab:63: 0a:5b:71:5a:c5:ee:e1:0e:87:c1:a0:c1:98:dc:27: 2a:9c:ea:de:ae:be:6e:d4:17:87:7a:8b:97:2d:4e: ad:11:80:cf:f6:ce:4b:55:b8:97:18:60:7c:84:a0: 58:a5:b5:b6:97:f3:7e:23:d1:f3:a0:ce:b4:c4:73: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:06:04:53:F1:FE:C7:2B:D1:5D:B0:DF:3F:B0:B5:B7:BC:F9:74:B2 X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:78:76:d6:e2:a4:05:d3:59:ba:7d:6f:4a:14:82:61:7b:d3: 79:f8:79:d3:8c:8f:56:35:ac:d9:7b:83:78:ab:47:b1:a1:e4: 89:1f:20:b3:43:d6:27:a2:ef:50:58:da:9c:f4:b3:a8:21:5f: b8:11:b7:ee:6a:87:19:3d:3d:65:33:d5:50:67:27:69:b0:9d: 9b:2a:e5:25:13:ea:14:51:77:04:1c:4f:71:4c:ce:2b:e3:ed: c1:29:9c:f5:09:78:76:de:44:4e:41:85:4c:93:44:15:59:11: 3f:52:0a:94:a7:ea:e3:e6:71:c8:65:28:93:4b:59:37:27:26: f3:7f:4c:65:98:00:6c:61:c6:04:5f:88:48:bb:3d:65:ac:e2: f5:01:c0:67:bd:a9:e8:19:77:67:ef:39:49:94:c1:1c:48:09: 7d:8e:45:37:da:c6:73:cc:8e:8c:8d:92:8f:c7:2c:ad:20:3b: 25:44:56:f0:cf:b8:a5:10:54:77:c0:5a:cf:29:c0:3a:cd:7a: 47:9a:42:36:da:cd:01:25:47:08:88:7c:35:32:b9:15:11:a1: a4:d9:6e:c2:9e:c9:66:8a:81:d2:98:0a:32:cf:07:c3:b4:76: 7d:78:39:31:9d:8d:a1:a6:c7:68:f1:e0:b5:f9:6a:da:16:57: 0f:c8:92:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGDVHL5ylFi5xNefnYkZaGmm0kWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjA0MjcxMDEzNDZaFw0yNjA0MjgxMjI2NDZaMDMxMTAvBgNV BAMTKEYzMDYwNDUzRjFGRUM3MkJEMTVEQjBERjNGQjBCNUI3QkNGOTc0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HTgOn/CkUZsvo6l6STR1KvHS O35spK5aFcxjohQbxUc2a5mzrx7DwOrHK6EmvEhUK7K+t1cc6Xnb3Y4HURe8Y3K/ 5vOqIlHXVcfDD2DRkOg5JvXEdrTseSA1hmYTxxgWt8uu3DrJvK9IabAgUtUzI/rI bGPLnnLhn1byahEG1I8IB/k32Lvo1X/fMjHCCX6U9rDA774nffYUl5zHCDY2zy9r eFLEEcSJ5n5L5nZSXUVtk3jG2p36aA6BnqiY0j6rYwpbcVrF7uEOh8GgwZjcJyqc 6t6uvm7UF4d6i5ctTq0RgM/2zktVuJcYYHyEoFiltbaX834j0fOgzrTEcwGfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8wYEU/H+xyvRXbDfP7C1t7z5dLIwHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXh21uKkBdNZ un1vShSCYXvTefh504yPVjWs2XuDeKtHsaHkiR8gs0PWJ6LvUFjanPSzqCFfuBG3 7mqHGT09ZTPVUGcnabCdmyrlJRPqFFF3BBxPcUzOK+PtwSmc9Ql4dt5ETkGFTJNE FVkRP1IKlKfq4+ZxyGUok0tZNycm839MZZgAbGHGBF+ISLs9Zazi9QHAZ72p6Bl3 Z+85SZTBHEgJfY5FN9rGc8yOjI2Sj8csrSA7JURW8M+4pRBUd8BazynAOs16R5pC NtrNASVHCIh8NTK5FRGhpNluwp7JZoqB0pgKMs8Hw7R2fXg5MZ2NoabHaPHgtflq 2hZXD8iSSw== -----END CERTIFICATE-----Generated at Mon Apr 27 15:29:49 2026 by rpki-client