$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft File: 4E7B315B0F1461798439074524DE185E057B324F.mft (raw, json) Hash identifier: WUa0quoKe1Zb6vi5ZJEfe9KPEV0o7N7BHimZ+LKYrqo= Subject key identifier: 56:77:22:46:45:2C:9F:F0:EE:A5:9F:C8:59:7C:0C:6E:25:1B:6C:EC Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F Certificate serial: 36DCD8F74B655E33431DD8BF0A682128B1D8366B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft Manifest number: 04 Signing time: Sat 18 Apr 2026 19:44:57 +0000 Manifest this update: Sat 18 Apr 2026 19:39:57 +0000 Manifest next update: Sun 19 Apr 2026 21:40:57 +0000 Files and hashes: 1: 4E7B315B0F1461798439074524DE185E057B324F.crl (hash: z81ov7tx3oCsau18g+z6qaGhsSundjfSokdDKZTvnnI=) 2: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (hash: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:dc:d8:f7:4b:65:5e:33:43:1d:d8:bf:0a:68:21:28:b1:d8:36:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F Validity Not Before: Apr 18 19:39:57 2026 GMT Not After : Apr 19 21:40:57 2026 GMT Subject: CN=56772246452C9FF0EEA59FC8597C0C6E251B6CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:07:ce:0d:4f:c4:d2:b1:bc:ad:ba:08:13: 59:d9:7d:9d:3e:5d:93:c6:c1:98:20:e6:37:66:b1: 23:9c:85:0c:91:37:4d:ed:3b:e2:a9:8a:f0:9b:8d: 53:b2:84:ac:e2:8a:6a:91:d6:1a:46:87:b7:88:70: 76:84:b3:24:21:2e:13:24:32:9e:a0:2f:cf:b8:7e: a2:b1:be:71:e4:6d:b5:0b:26:77:39:f2:f5:3a:43: 8d:60:ac:b6:e6:d6:a6:82:c9:35:8d:ee:b5:95:60: e5:52:32:68:d3:bb:23:4d:88:a7:64:7a:84:a2:58: e4:66:e1:45:ec:be:c6:94:69:79:5a:fc:de:59:ca: 49:a5:61:7a:4b:2e:f6:6e:22:23:0b:ef:d7:c7:5d: bd:12:d6:fe:bf:98:66:ea:cf:9e:b4:d1:96:8e:dd: 8c:4b:2f:cb:d0:72:53:1e:f1:60:db:a7:fe:94:5f: 92:06:3a:58:b0:82:a9:01:4d:a1:f1:b9:f9:2e:57: d8:3f:d6:70:1e:07:5a:db:95:7d:64:c2:6e:00:97: 29:df:1d:d9:83:e1:f1:fe:1e:a5:fa:53:6b:db:4e: 09:8c:b5:7d:78:cb:4f:dc:99:00:e9:02:bb:a6:cc: 76:c0:b3:2e:9d:50:84:d3:71:38:b7:cd:9d:a7:14: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:77:22:46:45:2C:9F:F0:EE:A5:9F:C8:59:7C:0C:6E:25:1B:6C:EC X509v3 Authority Key Identifier: keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bd:74:86:a8:4e:c7:73:73:01:f7:63:ef:dc:71:84:83:fb: 22:d1:b7:79:f9:fd:16:44:96:41:94:08:fc:f5:d2:0f:b1:95: 87:1c:c7:69:fd:94:ce:ab:96:6b:66:dc:e6:b8:f4:50:ed:1d: 6e:a8:b2:b2:a0:9d:61:52:04:7a:25:d0:85:61:f9:1d:16:aa: 82:61:9c:ce:38:85:e4:c7:09:bd:2b:2d:5a:ef:30:e7:43:71: 85:15:94:fe:c1:4d:29:76:ab:6c:c0:28:d3:34:7f:32:22:f6: e1:71:e9:a7:50:12:aa:4e:6c:54:01:fc:66:a8:41:56:0b:93: 7e:94:e5:8a:a0:e2:af:fb:02:05:f8:39:f9:13:e9:c0:18:bb: dc:6e:70:1b:d0:39:09:42:36:b2:7d:7c:86:5c:f3:c4:1c:02: 0f:6a:23:71:41:37:46:80:b0:b2:b0:26:18:97:cc:59:d9:6e: fd:ad:9d:6a:5b:f0:33:35:d1:6d:c8:ab:f5:4a:81:c3:3c:85: 79:a0:f1:70:3d:fa:40:25:90:82:c2:9f:45:83:c6:b7:6e:b7: 08:1f:f7:8f:65:8d:9d:42:6e:72:98:1e:13:6e:37:e3:6e:f7: 07:31:21:bf:fd:0f:e0:66:32:ba:2d:9d:14:73:ea:4f:b7:8b: 27:7f:ee:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNtzY90tlXjNDHdi/CmghKLHYNmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUw NTdCMzI0RjAeFw0yNjA0MTgxOTM5NTdaFw0yNjA0MTkyMTQwNTdaMDMxMTAvBgNV BAMTKDU2NzcyMjQ2NDUyQzlGRjBFRUE1OUZDODU5N0MwQzZFMjUxQjZDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dAfODU/E0rG8rboIE1nZfZ0+ XZPGwZgg5jdmsSOchQyRN03tO+KpivCbjVOyhKziimqR1hpGh7eIcHaEsyQhLhMk Mp6gL8+4fqKxvnHkbbULJnc58vU6Q41grLbm1qaCyTWN7rWVYOVSMmjTuyNNiKdk eoSiWORm4UXsvsaUaXla/N5ZykmlYXpLLvZuIiML79fHXb0S1v6/mGbqz5600ZaO 3YxLL8vQclMe8WDbp/6UX5IGOliwgqkBTaHxufkuV9g/1nAeB1rblX1kwm4Alynf HdmD4fH+HqX6U2vbTgmMtX14y0/cmQDpArumzHbAsy6dUITTcTi3zZ2nFFe3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVnciRkUsn/DupZ/IWXwMbiUbbOwwHwYDVR0j BBgwFoAUTnsxWw8UYXmEOQdFJN4YXgV7Mk8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQxMjg2NTMwNTg3MDMzNy8wLzRFN0IzMTVCMEYxNDYxNzk4NDM5MDc0NTI0REUx ODVFMDU3QjMyNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUwNTdCMzI0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MTI4NjUzMDU4NzAzMzcvMC80RTdCMzE1QjBGMTQ2 MTc5ODQzOTA3NDUyNERFMTg1RTA1N0IzMjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADL10hqhOx3Nz Afdj79xxhIP7ItG3efn9FkSWQZQI/PXSD7GVhxzHaf2UzquWa2bc5rj0UO0dbqiy sqCdYVIEeiXQhWH5HRaqgmGczjiF5McJvSstWu8w50NxhRWU/sFNKXarbMAo0zR/ MiL24XHpp1ASqk5sVAH8ZqhBVguTfpTliqDir/sCBfg5+RPpwBi73G5wG9A5CUI2 sn18hlzzxBwCD2ojcUE3RoCwsrAmGJfMWdlu/a2dalvwMzXRbcir9UqBwzyFeaDx cD36QCWQgsKfRYPGt263CB/3j2WNnUJucpgeE2434273BzEhv/0P4GYyui2dFHPq T7eLJ3/uMA== -----END CERTIFICATE-----Generated at Sun Apr 19 01:05:39 2026 by rpki-client