$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: OgWpkZb0/fFI47KHmEiHdfdi53zmUoP/Dezltj6S6Ig= Subject key identifier: 5E:A6:F7:8F:C4:69:61:FB:99:FD:CC:8D:63:55:CE:C8:69:C0:31:B4 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 48DE5562B8B203E21767A958E94B7C6ED3E80962 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: 13 Signing time: Mon 27 Apr 2026 06:33:41 +0000 Manifest this update: Mon 27 Apr 2026 06:28:41 +0000 Manifest next update: Tue 28 Apr 2026 06:50:41 +0000 Files and hashes: 1: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 2: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 3: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: XYv7Stj/AWoOVWiWMF2XgmpuuKrTtwjbhosA/sXZHBI=) 4: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 5: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 6: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:de:55:62:b8:b2:03:e2:17:67:a9:58:e9:4b:7c:6e:d3:e8:09:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Apr 27 06:28:41 2026 GMT Not After : Apr 28 06:50:41 2026 GMT Subject: CN=5EA6F78FC46961FB99FDCC8D6355CEC869C031B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:f9:bf:fe:98:e6:36:2e:fe:20:fb:40:e6: ca:29:44:e2:e3:3e:46:96:db:87:a1:6f:dc:94:fc: dc:1c:10:61:85:0d:43:a9:f8:26:24:6c:9c:23:ab: 16:71:41:43:de:ed:fe:0c:54:85:ea:b3:08:e0:38: 88:5f:90:f7:cd:fb:f7:6a:c5:69:ea:f0:2e:03:20: 4d:51:06:44:a0:94:a2:2f:9b:d1:12:5d:e6:c4:c3: 0f:1a:79:af:17:76:46:1a:51:3b:55:5d:d0:7b:69: 6e:0c:54:06:5a:64:45:51:57:dd:d0:b3:e4:47:54: 55:f2:d6:3d:4c:db:30:04:2a:c4:e5:12:26:d5:cd: 9b:e8:91:6b:fc:86:0a:13:0b:f3:13:db:3d:d6:a7: fc:00:0e:d2:92:8a:ca:c0:19:50:59:6b:98:13:d3: a5:18:cd:29:b5:32:47:c6:3d:83:90:3d:2b:98:48: 00:73:f1:cc:52:c9:d5:88:c0:48:c0:c4:79:3b:13: e8:9b:fa:15:ee:3e:0c:78:ab:a2:a0:28:79:e4:bb: f9:49:b2:e7:f0:28:6d:3e:d3:68:3c:5c:a6:4a:01: 51:74:1b:b5:51:8f:69:67:0f:8d:77:5a:58:75:77: 9b:ba:59:fc:a8:6c:62:7a:80:2f:5d:96:27:6d:cb: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A6:F7:8F:C4:69:61:FB:99:FD:CC:8D:63:55:CE:C8:69:C0:31:B4 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:66:be:4c:4b:df:f5:df:38:b2:d1:de:50:81:a6:80:7a:1a: 21:80:f9:25:f4:07:92:27:fd:d2:c1:35:8a:94:c0:3c:4e:75: 00:00:2d:ac:bd:6c:b8:8a:6d:7e:19:a1:3b:e2:aa:b6:c5:5c: 9a:48:1b:9f:d0:99:b4:fb:02:75:8a:0e:6e:04:15:61:34:81: 5e:4b:e0:b2:ab:0d:3e:a9:cf:17:57:be:39:5e:ea:45:f3:06: 7e:f3:f7:5f:0c:9e:cb:5d:4d:b3:97:d3:77:a8:e6:b0:2b:29: 4a:25:df:3b:5c:2c:bb:89:1b:34:50:b8:06:f2:b4:c6:7d:b3: c8:37:17:96:1d:dc:8f:ae:98:34:c0:f4:b6:79:f5:2c:9a:4d: 33:36:62:1e:1c:fb:a2:02:75:c7:0c:b9:4f:d6:a1:e5:38:95: 88:5b:28:3b:2e:27:a1:59:f9:d5:d5:82:80:eb:6a:e9:4a:28: 54:44:47:91:2f:b8:c8:6f:8d:65:f4:13:fd:36:a3:44:28:64: 4a:18:bb:08:ef:10:63:a3:50:13:6f:7d:3a:3e:27:b9:13:e1: 1a:aa:00:96:1b:55:8c:28:73:73:fa:96:c7:44:09:45:08:5a: e2:1e:05:b0:ab:c4:d5:76:41:17:5a:a9:d1:7f:9f:bd:91:ab: b7:7f:4d:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSN5VYriyA+IXZ6lY6Ut8btPoCWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA0MjcwNjI4NDFaFw0yNjA0MjgwNjUwNDFaMDMxMTAvBgNV BAMTKDVFQTZGNzhGQzQ2OTYxRkI5OUZEQ0M4RDYzNTVDRUM4NjlDMDMxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Pvm//pjmNi7+IPtA5sopROLj PkaW24ehb9yU/NwcEGGFDUOp+CYkbJwjqxZxQUPe7f4MVIXqswjgOIhfkPfN+/dq xWnq8C4DIE1RBkSglKIvm9ESXebEww8aea8XdkYaUTtVXdB7aW4MVAZaZEVRV93Q s+RHVFXy1j1M2zAEKsTlEibVzZvokWv8hgoTC/MT2z3Wp/wADtKSisrAGVBZa5gT 06UYzSm1MkfGPYOQPSuYSABz8cxSydWIwEjAxHk7E+ib+hXuPgx4q6KgKHnku/lJ sufwKG0+02g8XKZKAVF0G7VRj2lnD413Wlh1d5u6WfyobGJ6gC9dlidty4yFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXqb3j8RpYfuZ/cyNY1XOyGnAMbQwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWa+TEvf9d84 stHeUIGmgHoaIYD5JfQHkif90sE1ipTAPE51AAAtrL1suIptfhmhO+KqtsVcmkgb n9CZtPsCdYoObgQVYTSBXkvgsqsNPqnPF1e+OV7qRfMGfvP3Xwyey11Ns5fTd6jm sCspSiXfO1wsu4kbNFC4BvK0xn2zyDcXlh3cj66YNMD0tnn1LJpNMzZiHhz7ogJ1 xwy5T9ah5TiViFsoOy4noVn51dWCgOtq6UooVERHkS+4yG+NZfQT/TajRChkShi7 CO8QY6NQE299Oj4nuRPhGqoAlhtVjChzc/qWx0QJRQha4h4FsKvE1XZBF1qp0X+f vZGrt39N5Q== -----END CERTIFICATE-----Generated at Mon Apr 27 21:51:41 2026 by rpki-client