$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: IvfF/Lrx4ZvSJKOGkwyZl7r0ZrvtIJZsDNiwzaOqF78= Subject key identifier: 11:12:2E:DA:24:94:17:3D:EF:1C:38:B9:72:61:F9:AD:D3:07:42:82 Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 66C168D90852CA112A63BE26DC8FF48CDBAFC3E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: 10 Signing time: Mon 27 Apr 2026 01:30:52 +0000 Manifest this update: Mon 27 Apr 2026 01:25:52 +0000 Manifest next update: Tue 28 Apr 2026 03:14:52 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) 2: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) 3: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: PG+cQXI1XDbJSLxptm0N9a8etKuYx+zUC82OF6OX2eY=) 4: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 03:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c1:68:d9:08:52:ca:11:2a:63:be:26:dc:8f:f4:8c:db:af:c3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Apr 27 01:25:52 2026 GMT Not After : Apr 28 03:14:52 2026 GMT Subject: CN=11122EDA2494173DEF1C38B97261F9ADD3074282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:24:03:cb:19:5c:10:ee:07:94:b8:47:d7: b6:2d:8c:27:fa:73:88:2c:5f:db:0a:4d:79:41:dd: 48:ff:7f:32:f4:05:64:25:62:4c:04:05:a6:de:d0: ff:ce:04:33:0a:74:53:78:d5:9d:d5:2f:9b:b0:30: b1:1e:0c:33:a7:24:bd:a6:ba:f9:c5:8f:51:61:cb: 65:c4:da:fe:96:ea:4d:d6:09:1d:8e:79:55:64:a9: 22:d0:5d:08:5a:25:02:1d:9a:35:a9:bf:3b:f0:bf: 1a:98:a6:3c:15:12:8b:4d:11:af:04:34:d2:60:0f: 45:47:19:8c:89:59:f6:28:72:55:dc:09:e0:ef:93: d0:9a:85:e9:94:3b:22:1d:24:c9:67:f8:aa:0e:f5: 50:c6:97:ed:ee:32:82:90:36:db:0b:4d:b4:8b:07: f0:23:58:ca:14:c6:6a:d5:37:79:3d:88:c1:72:45: a3:42:e7:82:fd:b5:9b:af:e5:e2:a7:80:67:2c:2b: 36:df:9b:23:51:cc:7f:e7:52:a7:0b:cb:19:38:ee: c6:da:8c:a8:fc:08:37:1c:24:5f:3e:83:61:4d:b4: ee:d3:f6:70:b9:9f:12:63:75:1f:a9:97:17:95:36: 76:e0:4d:33:b7:48:9c:00:cb:16:92:ea:c3:19:b9: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:2E:DA:24:94:17:3D:EF:1C:38:B9:72:61:F9:AD:D3:07:42:82 X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f3:d4:9e:45:27:2f:1c:92:63:af:05:5a:6b:46:0d:c6:ce: b5:3c:11:34:6e:7f:74:ea:29:c4:96:c4:e1:2d:35:f2:b1:39: f7:15:d8:9e:c3:9e:e6:df:59:7e:c6:d4:44:0a:7d:6f:ca:75: a3:53:0d:9a:9f:fe:1f:b6:2e:f6:8c:c3:49:37:50:d5:53:3b: 0c:f2:ee:90:0e:8c:c4:0a:fc:41:ba:48:71:6c:ca:bd:99:00: 85:cf:4c:d5:43:24:4b:f4:b2:2d:75:f2:58:2e:f1:ff:53:f3: 7f:53:3f:77:e3:ca:ee:49:72:ae:2d:bd:3b:8d:97:fc:1f:eb: e2:35:f0:25:98:a3:fd:42:ed:fd:fb:f6:5e:70:ac:96:c2:5a: b5:b8:d8:75:15:64:23:a6:73:4f:28:6b:51:bd:c1:d1:ad:ae: a4:95:08:10:7d:9e:35:24:88:98:e3:c4:10:2a:73:60:1e:8c: fa:42:3f:fe:8a:54:06:2d:03:9d:92:95:6a:cf:fa:3b:32:92: 94:47:26:8d:78:fb:3f:a5:d2:03:36:40:6a:c5:4e:6a:9c:ad: 0b:18:ce:49:9b:a6:3c:42:74:79:db:51:5b:e4:c8:45:ee:aa: 0b:f9:e4:99:4a:0c:d9:e9:e6:dc:f8:11:9f:b4:4d:eb:f3:f8: 31:5a:c5:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZsFo2QhSyhEqY74m3I/0jNuvw+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA0MjcwMTI1NTJaFw0yNjA0MjgwMzE0NTJaMDMxMTAvBgNV BAMTKDExMTIyRURBMjQ5NDE3M0RFRjFDMzhCOTcyNjFGOUFERDMwNzQyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaviQDyxlcEO4HlLhH17YtjCf6 c4gsX9sKTXlB3Uj/fzL0BWQlYkwEBabe0P/OBDMKdFN41Z3VL5uwMLEeDDOnJL2m uvnFj1Fhy2XE2v6W6k3WCR2OeVVkqSLQXQhaJQIdmjWpvzvwvxqYpjwVEotNEa8E NNJgD0VHGYyJWfYoclXcCeDvk9CahemUOyIdJMln+KoO9VDGl+3uMoKQNtsLTbSL B/AjWMoUxmrVN3k9iMFyRaNC54L9tZuv5eKngGcsKzbfmyNRzH/nUqcLyxk47sba jKj8CDccJF8+g2FNtO7T9nC5nxJjdR+plxeVNnbgTTO3SJwAyxaS6sMZubbDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUERIu2iSUFz3vHDi5cmH5rdMHQoIwHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefPUnkUnLxyS Y68FWmtGDcbOtTwRNG5/dOopxJbE4S018rE59xXYnsOe5t9ZfsbURAp9b8p1o1MN mp/+H7Yu9ozDSTdQ1VM7DPLukA6MxAr8QbpIcWzKvZkAhc9M1UMkS/SyLXXyWC7x /1Pzf1M/d+PK7klyri29O42X/B/r4jXwJZij/ULt/fv2XnCslsJatbjYdRVkI6Zz TyhrUb3B0a2upJUIEH2eNSSImOPEECpzYB6M+kI//opUBi0DnZKVas/6OzKSlEcm jXj7P6XSAzZAasVOapytCxjOSZumPEJ0edtRW+TIRe6qC/nkmUoM2enm3PgRn7RN 6/P4MVrFEQ== -----END CERTIFICATE-----Generated at Mon Apr 27 17:15:22 2026 by rpki-client