$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft File: 8A05255B735973D13F97609E45A6D000FBCD953B.mft (raw, json) Hash identifier: JMKLcgtINcDYWabn/n2eYCgaHlZw3PifkgSsyoMDefc= Subject key identifier: B4:01:A3:8A:08:BE:32:9F:A9:F1:16:1B:C5:80:B1:D0:50:F2:D4:D0 Authority key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B Certificate issuer: /CN=8A05255B735973D13F97609E45A6D000FBCD953B Certificate serial: 4205E280E630ADA5F1F9F6676681819161AF4398 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft Manifest number: 04 Signing time: Sat 18 Apr 2026 16:19:56 +0000 Manifest this update: Sat 18 Apr 2026 16:14:56 +0000 Manifest next update: Sun 19 Apr 2026 18:15:56 +0000 Files and hashes: 1: 8A05255B735973D13F97609E45A6D000FBCD953B.crl (hash: GDfClNPtWaCOjzyW28aZUq7/5xJBHzcoVkhs8sAuzqE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:05:e2:80:e6:30:ad:a5:f1:f9:f6:67:66:81:81:91:61:af:43:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05255B735973D13F97609E45A6D000FBCD953B Validity Not Before: Apr 18 16:14:56 2026 GMT Not After : Apr 19 18:15:56 2026 GMT Subject: CN=B401A38A08BE329FA9F1161BC580B1D050F2D4D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:5a:7a:b3:ec:4d:12:3b:b0:92:f0:00:d3: ee:8a:17:e5:fd:68:30:b9:c6:d9:90:6e:88:c8:fa: 09:2e:00:3e:27:69:a6:04:60:d2:58:62:95:06:78: a1:35:0a:d0:3e:ee:d6:f7:42:0a:75:94:e1:a4:fb: e8:7f:03:38:f1:ca:31:bc:32:75:b0:ff:ce:2e:6c: 1c:96:ba:3b:6d:fc:bb:c5:9c:6a:46:49:c2:20:ab: 70:31:12:ad:f7:40:7d:0b:5e:f8:50:9c:19:4d:7f: 3b:a7:3b:61:67:2f:dc:ea:e2:a7:30:68:d4:b0:7e: 91:c8:c2:4b:de:4a:ff:c5:9a:af:93:ca:27:ff:1a: f4:96:c9:b8:56:06:d6:8a:ae:c4:f5:02:67:01:7b: 19:c5:97:2e:a0:b5:67:3c:51:5a:3f:d4:3e:3a:55: 54:cf:7f:b6:59:80:86:8d:48:71:8b:02:da:28:a7: b7:90:48:4b:6a:20:ee:52:5b:79:53:b5:ed:70:e0: 47:48:4f:4c:b0:bb:04:1b:9a:8f:c1:21:62:63:2a: ff:a7:67:0a:d4:df:e5:81:68:21:66:68:c6:aa:f7: f1:3d:8b:b1:20:35:7c:78:5b:ae:e9:50:0f:94:68: 4e:01:60:c7:6b:3e:19:a7:8c:a5:81:8f:ab:36:c6: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:01:A3:8A:08:BE:32:9F:A9:F1:16:1B:C5:80:B1:D0:50:F2:D4:D0 X509v3 Authority Key Identifier: keyid:8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:1f:ef:a1:ca:36:2c:08:a3:29:d9:f7:a2:6e:1c:b1:fe:06: 20:68:fb:35:18:c3:70:fc:23:a3:f3:a5:4a:1d:62:89:c2:76: f3:c3:2e:2e:e5:98:4c:6f:99:8e:e2:d6:86:ff:67:f7:57:bb: 62:1c:c0:52:2c:12:eb:11:ec:c3:74:9b:f4:9b:8b:97:2a:92: 37:b8:fd:90:ee:12:5c:56:e9:93:ba:03:48:a8:05:d0:78:00: bb:98:1b:3e:58:81:ac:b4:18:f9:5c:ae:f7:cd:e8:dd:9b:a0: c4:73:be:b1:7e:90:fb:09:54:18:d6:ec:4e:72:ad:5a:5b:82: 99:8a:73:a7:61:a9:c3:ad:98:9b:ae:71:50:89:47:91:2a:86: 1e:07:6d:aa:c2:d1:8f:15:31:20:7d:6f:2d:43:41:ce:df:26: 13:61:cc:4b:8a:ff:93:7e:09:61:c9:da:d4:e9:9f:7e:4e:78: 85:44:22:99:61:f8:0a:ff:bb:d9:b4:28:13:cc:64:19:a4:e5: 2a:d6:00:e2:ad:0d:13:9f:7d:f6:63:e6:72:77:ab:77:ec:49: e8:5b:2e:b2:76:b1:42:7f:7b:78:ee:04:ae:ee:3d:df:f9:8e: c8:43:ab:dc:36:0d:d8:73:f0:c2:09:94:86:41:7e:a7:ba:95: 25:45:e7:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQgXigOYwraXx+fZnZoGBkWGvQ5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBG QkNEOTUzQjAeFw0yNjA0MTgxNjE0NTZaFw0yNjA0MTkxODE1NTZaMDMxMTAvBgNV BAMTKEI0MDFBMzhBMDhCRTMyOUZBOUYxMTYxQkM1ODBCMUQwNTBGMkQ0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLs1p6s+xNEjuwkvAA0+6KF+X9 aDC5xtmQbojI+gkuAD4naaYEYNJYYpUGeKE1CtA+7tb3Qgp1lOGk++h/AzjxyjG8 MnWw/84ubByWujtt/LvFnGpGScIgq3AxEq33QH0LXvhQnBlNfzunO2FnL9zq4qcw aNSwfpHIwkveSv/Fmq+Tyif/GvSWybhWBtaKrsT1AmcBexnFly6gtWc8UVo/1D46 VVTPf7ZZgIaNSHGLAtoop7eQSEtqIO5SW3lTte1w4EdIT0ywuwQbmo/BIWJjKv+n ZwrU3+WBaCFmaMaq9/E9i7EgNXx4W67pUA+UaE4BYMdrPhmnjKWBj6s2xjdvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtAGjigi+Mp+p8RYbxYCx0FDy1NAwHwYDVR0j BBgwFoAUigUlW3NZc9E/l2CeRabQAPvNlTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MTgxMjE1NzcwMjE0NS8wLzhBMDUyNTVCNzM1OTczRDEzRjk3NjA5RTQ1QTZE MDAwRkJDRDk1M0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzE4MTIxNTc3MDIxNDUvMC84QTA1MjU1QjczNTk3 M0QxM0Y5NzYwOUU0NUE2RDAwMEZCQ0Q5NTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyR/voco2LAij Kdn3om4csf4GIGj7NRjDcPwjo/OlSh1iicJ288MuLuWYTG+ZjuLWhv9n91e7YhzA UiwS6xHsw3Sb9JuLlyqSN7j9kO4SXFbpk7oDSKgF0HgAu5gbPliBrLQY+Vyu983o 3ZugxHO+sX6Q+wlUGNbsTnKtWluCmYpzp2Gpw62Ym65xUIlHkSqGHgdtqsLRjxUx IH1vLUNBzt8mE2HMS4r/k34JYcna1Omffk54hUQimWH4Cv+72bQoE8xkGaTlKtYA 4q0NE5999mPmcnerd+xJ6FsusnaxQn97eO4Eru493/mOyEOr3DYN2HPwwgmUhkF+ p7qVJUXnmA== -----END CERTIFICATE-----Generated at Sun Apr 19 01:11:28 2026 by rpki-client