$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json) Hash identifier: 5mH50kHvYyZNC1xVHcFGoAkKUb06Q/ddEhrJKmvwViQ= Subject key identifier: 59:5C:13:E2:A1:A4:8A:9F:C4:CA:56:25:64:B0:27:C8:05:88:E9:54 Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Certificate serial: 2BF674E65C8B1A75DD30D1E186D55816F1A1C4DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft Manifest number: 0F Signing time: Mon 27 Apr 2026 18:53:50 +0000 Manifest this update: Mon 27 Apr 2026 18:48:50 +0000 Manifest next update: Tue 28 Apr 2026 21:13:50 +0000 Files and hashes: 1: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: fnIw6Mzqib456Ve4k0jDwwsQjGTURp3o1VD39Xg8hKU=) 2: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=) 3: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=) 4: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=) 5: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=) 6: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f6:74:e6:5c:8b:1a:75:dd:30:d1:e1:86:d5:58:16:f1:a1:c4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7 Validity Not Before: Apr 27 18:48:50 2026 GMT Not After : Apr 28 21:13:50 2026 GMT Subject: CN=595C13E2A1A48A9FC4CA562564B027C80588E954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:81:7e:40:47:00:47:56:05:b6:03:ce:f0: df:72:89:c0:1f:32:0f:ea:87:d1:45:8e:26:b7:5b: 38:68:c9:af:10:c8:be:90:28:ae:4b:ab:c6:a1:5d: 1d:3f:a1:4d:74:c3:a4:8d:24:71:90:13:50:44:b8: b9:6e:13:c8:60:b4:31:0a:06:e9:22:2a:4b:63:e4: c9:49:7c:a9:38:1a:0d:79:73:33:96:2d:bf:97:03: 40:c2:a5:a0:c9:96:1d:d1:b0:c3:b2:a6:cf:55:6b: 23:70:c5:d2:1e:1c:dc:78:db:15:ed:f2:77:bb:6e: a4:16:c8:2f:11:dd:34:79:44:d4:ec:12:b7:8e:5f: ab:ea:4d:f1:3d:ed:21:75:ed:34:a2:4e:c4:22:f7: f4:92:8f:d3:7a:29:3f:80:66:ac:60:bb:05:c7:0e: d5:70:4d:cd:0b:59:3e:4d:42:91:7e:3b:f0:b9:a5: ce:e8:05:4e:ba:05:24:61:97:f9:04:f2:67:0e:09: a3:0a:17:91:df:42:7a:bb:cf:b7:be:7c:fd:a7:90: 90:1a:d0:d8:3f:19:90:0c:09:53:de:55:9b:e9:8c: 9c:5b:3b:8e:d1:45:5e:60:53:1f:5a:0d:47:1e:69: 25:f5:af:aa:4c:0f:b6:98:77:fe:4e:c2:68:d0:08: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5C:13:E2:A1:A4:8A:9F:C4:CA:56:25:64:B0:27:C8:05:88:E9:54 X509v3 Authority Key Identifier: keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:17:d9:ce:68:df:ec:01:f0:7c:a1:02:db:74:b3:f7:f9:f5: bc:43:9f:14:30:9d:c5:05:32:fb:7a:43:1d:17:2a:b7:aa:dd: 3b:c5:4f:bf:8d:fd:28:2e:a5:9e:a1:cd:de:05:5e:42:b5:ef: ba:2c:83:bd:88:11:fe:71:aa:47:5b:32:9f:67:b6:52:da:e1: 4c:7f:b4:aa:b8:9f:b8:a4:00:28:5f:4b:08:06:b6:43:50:1a: e2:84:e4:12:86:ad:20:80:ee:4d:7e:3e:16:72:72:08:77:fc: 74:13:06:8a:40:7e:ca:7d:10:69:0b:be:71:1a:7a:3a:68:31: 40:df:9a:cc:25:7f:bc:54:6f:73:a5:f6:0e:fa:0f:b0:9e:cb: d6:6a:42:59:30:aa:c9:59:a8:05:e0:52:7c:82:98:3c:63:fc: 2d:cd:67:3a:d2:fb:5f:56:db:b2:5d:8f:48:16:82:b1:c7:2e: cd:08:b8:79:1a:d6:8b:c2:db:f2:d9:d6:98:86:8d:c3:d3:7c: fb:db:8a:77:32:f4:27:80:82:5c:0b:3b:6c:e2:f8:8d:ed:10: 1b:29:62:8b:d2:6e:02:4b:f6:4a:32:53:a4:96:34:c5:56:d8: 3c:c8:c2:3a:a4:17:2b:45:eb:91:57:d4:1c:1b:90:04:95:fb: c2:63:78:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK/Z05lyLGnXdMNHhhtVYFvGhxN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYw MjU3QkRDNzAeFw0yNjA0MjcxODQ4NTBaFw0yNjA0MjgyMTEzNTBaMDMxMTAvBgNV BAMTKDU5NUMxM0UyQTFBNDhBOUZDNENBNTYyNTY0QjAyN0M4MDU4OEU5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoIF+QEcAR1YFtgPO8N9yicAf Mg/qh9FFjia3Wzhoya8QyL6QKK5Lq8ahXR0/oU10w6SNJHGQE1BEuLluE8hgtDEK BukiKktj5MlJfKk4Gg15czOWLb+XA0DCpaDJlh3RsMOyps9VayNwxdIeHNx42xXt 8ne7bqQWyC8R3TR5RNTsEreOX6vqTfE97SF17TSiTsQi9/SSj9N6KT+AZqxguwXH DtVwTc0LWT5NQpF+O/C5pc7oBU66BSRhl/kE8mcOCaMKF5HfQnq7z7e+fP2nkJAa 0Ng/GZAMCVPeVZvpjJxbO47RRV5gUx9aDUceaSX1r6pMD7aYd/5OwmjQCOC3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWVwT4qGkip/EylYlZLAnyAWI6VQwHwYDVR0j BBgwFoAUtjJQLo1tI2nFGiNGy6Vp5gJXvccwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzUxNTgxMzkzMTMxOTI5OS8wL0I2MzI1MDJFOEQ2RDIzNjlDNTFBMjM0NkNCQTU2 OUU2MDI1N0JEQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc1MTU4MTM5MzEzMTkyOTkvMC9CNjMyNTAyRThENkQy MzY5QzUxQTIzNDZDQkE1NjlFNjAyNTdCREM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxfZzmjf7AHw fKEC23Sz9/n1vEOfFDCdxQUy+3pDHRcqt6rdO8VPv439KC6lnqHN3gVeQrXvuiyD vYgR/nGqR1syn2e2UtrhTH+0qrifuKQAKF9LCAa2Q1Aa4oTkEoatIIDuTX4+FnJy CHf8dBMGikB+yn0QaQu+cRp6OmgxQN+azCV/vFRvc6X2DvoPsJ7L1mpCWTCqyVmo BeBSfIKYPGP8Lc1nOtL7X1bbsl2PSBaCsccuzQi4eRrWi8Lb8tnWmIaNw9N8+9uK dzL0J4CCXAs7bOL4je0QGylii9JuAkv2SjJTpJY0xVbYPMjCOqQXK0XrkVfUHBuQ BJX7wmN4bQ== -----END CERTIFICATE-----Generated at Mon Apr 27 21:59:44 2026 by rpki-client