$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft File: 92BE3D6E46236FC37D6006D602F1002225EABE46.mft (raw, json) Hash identifier: uIQ3vtm77HeeGoQSu/5z6i4u59kcS9zdPgwyRex1sAY= Subject key identifier: 81:A0:54:49:18:15:D7:FA:79:A7:7C:03:71:39:FA:06:EC:91:47:24 Authority key identifier: 92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46 Certificate issuer: /CN=92BE3D6E46236FC37D6006D602F1002225EABE46 Certificate serial: 716851427B7135326FE9F314E60EF275C84E5904 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft Manifest number: 10 Signing time: Mon 27 Apr 2026 04:18:40 +0000 Manifest this update: Mon 27 Apr 2026 04:13:40 +0000 Manifest next update: Tue 28 Apr 2026 05:33:40 +0000 Files and hashes: 1: 92BE3D6E46236FC37D6006D602F1002225EABE46.crl (hash: MU+HWS/b3CAek89UsRgGwG+oqFNu1ArEIAx7FQqNl8M=) 2: 3130332e3136342e33322e302f32342d3234203d3e203137363231.roa (hash: +rL++UMhSg5p47ORwwdTADe44ENBYq7EPXO17vkQoiQ=) 3: 3130332e3136342e33332e302f32342d3234203d3e2030.roa (hash: 5/G9aQdoU9G0ysVYae+vwOznLyG3KHsIuIIEyt2t9ak=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 05:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:68:51:42:7b:71:35:32:6f:e9:f3:14:e6:0e:f2:75:c8:4e:59:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92BE3D6E46236FC37D6006D602F1002225EABE46 Validity Not Before: Apr 27 04:13:40 2026 GMT Not After : Apr 28 05:33:40 2026 GMT Subject: CN=81A054491815D7FA79A77C037139FA06EC914724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:c7:e8:d0:17:01:10:2e:53:dd:33:96:7e: 05:0c:de:5e:3f:d4:40:3d:8a:a6:c1:79:db:fc:eb: f8:5b:4a:7b:66:a2:94:16:76:a6:d6:1a:53:cc:c0: f6:7b:1c:e8:79:35:f1:d3:a0:29:76:5e:48:a9:30: 10:eb:5e:ed:3f:4a:ed:05:6f:c2:cf:9f:b3:8f:f6: f3:36:e5:65:b4:e4:a2:57:33:9a:85:bb:69:30:82: a3:c0:8f:92:ac:f5:4c:f6:4b:60:89:46:f3:65:7f: e5:67:8a:14:3f:50:db:6c:78:5a:86:c7:db:e0:0b: 90:57:b2:cb:d1:c3:96:e9:d4:a7:49:d0:7e:d5:59: 72:57:b5:57:a5:aa:73:17:53:95:1c:04:82:70:36: 5b:6a:50:d9:29:22:0b:21:a3:87:78:f3:e3:50:cc: 6b:47:ad:1d:80:76:ae:29:e9:9c:b5:5a:f1:84:e2: d4:b0:be:74:d0:1f:e2:1b:0e:66:52:0a:78:09:7e: e1:a7:f1:a8:12:07:57:3e:4d:7a:22:bf:1c:20:34: ee:b0:83:dc:ee:1b:51:68:61:16:0d:57:0e:02:9d: 50:a5:bd:c3:c2:7d:fc:8b:32:29:75:01:f5:8e:1b: 92:f7:ef:d2:17:48:0d:f1:09:5d:97:ec:f4:fe:f1: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A0:54:49:18:15:D7:FA:79:A7:7C:03:71:39:FA:06:EC:91:47:24 X509v3 Authority Key Identifier: keyid:92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1a:ff:94:cf:23:a8:d8:b9:19:8e:7d:01:4a:d3:4c:e7:db: 8a:b7:5d:2a:0f:dc:ae:ae:a7:4a:39:ff:fc:49:b6:f3:35:15: d5:43:53:11:04:80:03:74:73:44:22:cb:b7:c2:85:e2:09:4e: 94:5d:8b:03:1e:9c:c0:83:89:a1:cd:94:87:17:33:9b:3b:b1: 6c:0c:30:38:25:00:5e:14:1a:b2:55:dd:0c:d3:ce:52:04:fd: 65:cd:4b:b3:79:b9:8a:b5:d8:8b:90:0d:ab:17:bf:da:e7:55: 4c:9a:87:6d:21:b7:a7:8d:f1:93:e3:1c:1b:2e:43:aa:65:11: 39:90:65:f8:4b:5b:3f:e7:72:2f:e1:50:8b:91:d8:43:5c:bd: 65:4d:34:f2:ec:47:c9:9e:42:b8:f7:da:6c:fe:d2:dc:52:18: ab:db:95:aa:53:4f:1d:02:d4:74:33:6d:f0:1d:a2:af:9b:30: e3:d5:de:aa:4b:28:da:d5:b7:41:17:9c:41:02:cb:2a:c8:df: ac:4f:12:59:d2:82:79:6a:2d:7a:70:44:87:df:80:8f:1f:95: 99:55:5f:a3:17:7d:cc:bf:c4:fa:f6:94:19:7e:a8:12:b5:72: 4f:b4:8b:00:64:9d:a6:58:29:49:29:a1:76:10:1c:b7:22:5e: 39:0a:60:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcWhRQntxNTJv6fMU5g7ydchOWQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJCRTNENkU0NjIzNkZDMzdENjAwNkQ2MDJGMTAwMjIy NUVBQkU0NjAeFw0yNjA0MjcwNDEzNDBaFw0yNjA0MjgwNTMzNDBaMDMxMTAvBgNV BAMTKDgxQTA1NDQ5MTgxNUQ3RkE3OUE3N0MwMzcxMzlGQTA2RUM5MTQ3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXksfo0BcBEC5T3TOWfgUM3l4/ 1EA9iqbBedv86/hbSntmopQWdqbWGlPMwPZ7HOh5NfHToCl2XkipMBDrXu0/Su0F b8LPn7OP9vM25WW05KJXM5qFu2kwgqPAj5Ks9Uz2S2CJRvNlf+VnihQ/UNtseFqG x9vgC5BXssvRw5bp1KdJ0H7VWXJXtVelqnMXU5UcBIJwNltqUNkpIgsho4d48+NQ zGtHrR2Adq4p6Zy1WvGE4tSwvnTQH+IbDmZSCngJfuGn8agSB1c+TXoivxwgNO6w g9zuG1FoYRYNVw4CnVClvcPCffyLMil1AfWOG5L379IXSA3xCV2X7PT+8cztAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgaBUSRgV1/p5p3wDcTn6BuyRRyQwHwYDVR0j BBgwFoAUkr49bkYjb8N9YAbWAvEAIiXqvkYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM0NzIzNjIzMDA3MDI3NC8wLzkyQkUzRDZFNDYyMzZGQzM3RDYwMDZENjAyRjEw MDIyMjVFQUJFNDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTJCRTNENkU0NjIzNkZDMzdENjAwNkQ2MDJGMTAwMjIyNUVBQkU0Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNDcyMzYyMzAwNzAyNzQvMC85MkJFM0Q2RTQ2MjM2 RkMzN0Q2MDA2RDYwMkYxMDAyMjI1RUFCRTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRr/lM8jqNi5 GY59AUrTTOfbirddKg/crq6nSjn//Em28zUV1UNTEQSAA3RzRCLLt8KF4glOlF2L Ax6cwIOJoc2UhxczmzuxbAwwOCUAXhQaslXdDNPOUgT9Zc1Ls3m5irXYi5ANqxe/ 2udVTJqHbSG3p43xk+McGy5DqmUROZBl+EtbP+dyL+FQi5HYQ1y9ZU008uxHyZ5C uPfabP7S3FIYq9uVqlNPHQLUdDNt8B2ir5sw49Xeqkso2tW3QRecQQLLKsjfrE8S WdKCeWotenBEh9+Ajx+VmVVfoxd9zL/E+vaUGX6oErVyT7SLAGSdplgpSSmhdhAc tyJeOQpgTw== -----END CERTIFICATE-----Generated at Mon Apr 27 14:55:03 2026 by rpki-client