$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft File: B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft (raw, json) Hash identifier: A3A2p36dUzJpq0eynXxb7yTu1jNNoOE/nPP3kedgc0Q= Subject key identifier: 57:6D:8A:DC:1E:62:BE:B0:B0:62:3A:91:95:32:2A:6B:B6:7C:22:AB Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Certificate serial: 13C374E8385FFDC3E343BA1691C28BF418DC744B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft Manifest number: 0B Signing time: Mon 27 Apr 2026 02:33:40 +0000 Manifest this update: Mon 27 Apr 2026 02:28:40 +0000 Manifest next update: Tue 28 Apr 2026 03:56:40 +0000 Files and hashes: 1: 3231302e31362e3138352e302f32342d3234203d3e2034383132.roa (hash: bXqNYBH6dqp3XhjyABQOELGhYbAAx/VDEKU/yFMCeZM=) 2: 3231302e31362e3139302e302f32332d3233203d3e2034383131.roa (hash: 2XbC/CUrdrlSv7pBB2C4Ttv+wtm+9ZIR2uM6HjETEdI=) 3: B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl (hash: mrrY/R+boWEMH/AWCwOsfyNXyOgRIFlIfuTKjgAmgY8=) 4: 3130332e32312e3134322e302f32332d3233203d3e2034383131.roa (hash: zeQy36951EhzMb9y4+nhGStpafM9i+ny55leHQjqlo4=) 5: 3130332e32312e3134302e302f32322d3232203d3e2034383132.roa (hash: yl0VnVjOJBB11Ksw/l6MI8tE6HFSWJZk+mBrBZTIapM=) 6: 3231302e31362e3138362e302f32332d3233203d3e2034383131.roa (hash: b4O2YO4xELxbphJVo2XTIR7dTO1KnPDV5e00+BSpHO8=) 7: 3231302e31362e3138382e302f32332d3233203d3e2034383131.roa (hash: I/skHLzMxhJEW53hMQb4kjDQldjO0bhyqUNU6juFZXk=) 8: 3231302e31362e3138302e302f32342d3234203d3e2034383132.roa (hash: pVbEirpbRHZqbSynsD8vPGMaGo+q4kutYI9/gkSkdY8=) 9: 3130332e32312e3134302e302f32332d3233203d3e2034383131.roa (hash: tcwtXl101EjdJnvoeZCk6mNf34pYvQGTfA6kEOpTAGA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 03:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c3:74:e8:38:5f:fd:c3:e3:43:ba:16:91:c2:8b:f4:18:dc:74:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Validity Not Before: Apr 27 02:28:40 2026 GMT Not After : Apr 28 03:56:40 2026 GMT Subject: CN=576D8ADC1E62BEB0B0623A9195322A6BB67C22AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:cc:08:a8:ff:05:67:db:0e:18:8e:e0:d0: a2:e8:1f:d2:09:ec:8b:e0:2c:34:20:bc:df:b6:33: 2b:33:3b:4d:bd:d0:ae:ae:ee:41:61:a8:97:a8:7c: a4:01:57:03:ff:8b:a3:c7:24:0b:01:0a:58:d8:3c: c7:0d:90:38:c4:17:2f:26:3a:60:a7:5b:4d:94:97: c5:1a:0d:24:bb:76:b9:ba:93:27:31:2a:5c:64:e1: 8f:dc:3b:e9:90:b1:67:2b:4e:b2:61:aa:18:d3:de: 29:cc:66:37:15:f8:55:ed:7f:24:d9:88:0d:3c:86: 86:93:4b:e2:36:f5:1a:6f:14:18:c1:4d:e7:b5:c1: 61:52:9d:37:2f:6c:c2:40:37:7d:38:cc:98:b3:8e: dc:95:75:5e:d0:f0:63:7a:dc:6b:58:d8:e0:29:fa: 00:72:b8:94:c5:93:a9:95:a9:47:fc:6d:38:9d:41: c4:0e:6a:17:50:2a:87:99:94:03:5b:90:fd:05:3c: 12:c9:29:83:e9:0b:30:35:a3:b7:e9:a2:65:a8:3f: b4:34:64:66:29:91:f8:d5:14:df:20:74:7d:01:10: f4:f6:e8:e1:14:d6:7c:38:a4:18:58:9b:8a:df:23: 2b:fb:c4:7f:97:5c:85:8a:44:ef:01:4a:ae:aa:33: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6D:8A:DC:1E:62:BE:B0:B0:62:3A:91:95:32:2A:6B:B6:7C:22:AB X509v3 Authority Key Identifier: keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:c8:68:67:9f:07:8a:82:cc:15:f0:aa:68:e6:45:4b:66:70: 71:41:c1:78:05:c4:4c:f7:6c:a0:37:0e:46:e3:97:ab:e9:c2: cd:3c:95:cd:35:14:84:8c:23:7d:26:9c:dc:7f:97:88:48:30: 85:42:e7:aa:d0:2b:9f:cd:e3:c3:bf:af:e5:c2:6e:38:da:21: a4:05:88:31:e4:55:69:f0:40:64:c8:3b:71:7e:ac:bf:18:a8: 83:40:a8:03:5b:65:5f:e8:80:36:b7:63:e8:ad:79:e9:2b:80: da:df:0a:ea:37:31:2d:6c:81:9f:71:7c:51:36:cb:44:87:81: 86:5b:34:86:62:a1:8e:aa:3f:4a:da:3a:09:55:f8:ab:11:7a: 6b:f2:ed:27:37:89:8d:c5:e6:66:e7:25:b3:48:4a:ef:12:85: 61:c2:eb:cd:80:1a:8c:f3:8e:c6:6d:d9:75:4c:50:2a:27:e7: 08:47:26:08:46:73:29:3e:3e:d9:67:63:d2:96:33:f9:9b:ca: 31:f4:d5:55:c8:e5:08:19:d7:2f:90:a0:99:53:ce:40:8c:e6: 31:6e:19:36:bb:a8:8b:68:e2:db:62:f7:a8:1b:41:83:e8:58: 7b:32:da:36:8d:ff:ec:bd:3d:03:7c:da:95:d1:cc:3f:35:d0: a8:5a:df:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE8N06Dhf/cPjQ7oWkcKL9BjcdEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkw NjdEMzVFQTAeFw0yNjA0MjcwMjI4NDBaFw0yNjA0MjgwMzU2NDBaMDMxMTAvBgNV BAMTKDU3NkQ4QURDMUU2MkJFQjBCMDYyM0E5MTk1MzIyQTZCQjY3QzIyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn98wIqP8FZ9sOGI7g0KLoH9IJ 7IvgLDQgvN+2MyszO0290K6u7kFhqJeofKQBVwP/i6PHJAsBCljYPMcNkDjEFy8m OmCnW02Ul8UaDSS7drm6kycxKlxk4Y/cO+mQsWcrTrJhqhjT3inMZjcV+FXtfyTZ iA08hoaTS+I29RpvFBjBTee1wWFSnTcvbMJAN304zJizjtyVdV7Q8GN63GtY2OAp +gByuJTFk6mVqUf8bTidQcQOahdQKoeZlANbkP0FPBLJKYPpCzA1o7fpomWoP7Q0 ZGYpkfjVFN8gdH0BEPT26OEU1nw4pBhYm4rfIyv7xH+XXIWKRO8BSq6qM5O5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV22K3B5ivrCwYjqRlTIqa7Z8IqswHwYDVR0j BBgwFoAUtHm5tH+K/BBiuNRp9ipmiQZ9NeowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTA5Mjk5My8wL0I0NzlCOUI0N0Y4QUZDMTA2MkI4RDQ2OUY2MkE2 Njg5MDY3RDM1RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkwNjdEMzVFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwOTI5OTMvMC9CNDc5QjlCNDdGOEFG QzEwNjJCOEQ0NjlGNjJBNjY4OTA2N0QzNUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA18hoZ58HioLM FfCqaOZFS2ZwcUHBeAXETPdsoDcORuOXq+nCzTyVzTUUhIwjfSac3H+XiEgwhULn qtArn83jw7+v5cJuONohpAWIMeRVafBAZMg7cX6svxiog0CoA1tlX+iANrdj6K15 6SuA2t8K6jcxLWyBn3F8UTbLRIeBhls0hmKhjqo/Sto6CVX4qxF6a/LtJzeJjcXm Zucls0hK7xKFYcLrzYAajPOOxm3ZdUxQKifnCEcmCEZzKT4+2Wdj0pYz+ZvKMfTV VcjlCBnXL5CgmVPOQIzmMW4ZNruoi2ji22L3qBtBg+hYezLaNo3/7L09A3zaldHM PzXQqFrfEg== -----END CERTIFICATE-----Generated at Mon Apr 27 09:39:08 2026 by rpki-client