$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json) Hash identifier: khFSMp3FT6WQ1u1UcFt6tXncoSERaCixaQ6TVvR2RAc= Subject key identifier: E5:99:D0:82:4E:B5:CE:41:74:0D:F6:3C:B3:9A:3A:5B:CA:D4:BB:90 Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E Certificate serial: 027D03740D7AFD184001097DC295360E774FB09C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft Manifest number: 0A Signing time: Mon 27 Apr 2026 00:48:36 +0000 Manifest this update: Mon 27 Apr 2026 00:43:36 +0000 Manifest next update: Tue 28 Apr 2026 02:13:36 +0000 Files and hashes: 1: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: j6LdMjYsg1ltn/Yt1mv0TsvR9r4oZOuJcm8epqkfWQQ=) 2: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: pLyVnD95KJackAsggNptZxNXLQrqTtd2wos+fTuThJo=) 3: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 02:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7d:03:74:0d:7a:fd:18:40:01:09:7d:c2:95:36:0e:77:4f:b0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E Validity Not Before: Apr 27 00:43:36 2026 GMT Not After : Apr 28 02:13:36 2026 GMT Subject: CN=E599D0824EB5CE41740DF63CB39A3A5BCAD4BB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:14:a0:88:b5:ff:5f:fc:71:69:0b:48:f7: aa:b2:8a:7f:11:d5:70:c2:b6:61:46:db:23:81:be: c6:ee:75:87:d9:4c:c1:3f:19:e4:b6:82:db:93:3a: fe:eb:fa:4e:52:f6:cc:15:f2:7c:7c:3e:0b:e6:84: 03:43:78:8e:81:04:94:25:3f:07:c1:5a:ea:f0:6d: fe:c9:44:42:1e:ae:18:31:d8:5e:ac:6c:2e:c5:9b: 65:19:3a:a9:77:5a:8c:34:02:47:4b:7f:1d:26:81: 53:f6:76:61:29:8c:fd:e9:1f:db:30:fa:fe:bf:f7: 9d:0f:20:49:a9:29:c2:62:59:89:01:18:ff:6a:71: f4:5e:c1:2c:20:68:e0:82:b2:15:bd:56:7a:e6:ac: 95:20:c3:10:f1:54:be:ca:ea:69:07:e6:47:02:04: f8:ca:c3:56:0e:b0:c8:2d:61:31:67:c9:a9:ea:eb: 0a:b2:18:52:e8:0f:d5:54:a9:98:76:f4:fd:9d:f9: 69:07:ea:8d:f3:25:b5:1c:f5:3f:d2:17:d7:42:17: 4a:fe:c0:93:42:6a:d0:f1:b3:05:09:38:9d:75:b2: 34:68:1e:36:39:38:f7:30:59:27:ee:4e:d8:8d:9c: 27:ed:b7:b8:21:e3:11:f6:f3:4c:c3:93:42:46:e4: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:99:D0:82:4E:B5:CE:41:74:0D:F6:3C:B3:9A:3A:5B:CA:D4:BB:90 X509v3 Authority Key Identifier: keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:64:2a:9b:a4:13:79:92:c8:69:53:62:bb:ac:50:aa:7e:03: 64:b2:89:71:23:76:b9:b4:8c:98:cc:49:52:2f:bd:f5:40:39: 2d:c5:48:a8:a3:75:81:9d:f6:c4:44:0c:8f:dd:56:92:58:09: 49:e1:b7:0c:96:aa:bd:83:2f:9f:ae:e2:f2:37:52:1f:06:22: ab:1c:95:38:b5:26:d3:86:b8:09:50:6c:34:99:0d:c9:8b:aa: 7e:e4:29:47:0e:2d:40:d9:10:1a:e3:d4:4c:0e:f5:97:69:f8: ff:47:72:9c:17:9a:e1:73:ef:e0:93:29:80:21:af:76:12:3c: 91:7a:4b:5f:5d:7e:95:f1:fe:1e:df:e1:66:92:7f:31:a3:eb: 3d:32:e0:5b:d0:ab:1a:be:93:c9:71:4a:5c:de:b2:6e:6c:20: 5f:fe:f1:0c:eb:93:8d:f9:f3:05:3c:59:98:6c:5a:49:94:64: 29:a2:27:bd:57:f3:9b:06:13:a4:b6:0e:75:96:70:8e:ba:1c: 39:39:d2:ab:9a:fc:ae:8e:c9:6f:93:01:50:86:b6:83:4e:28: 7c:e7:53:55:5b:7a:f6:f1:ec:3d:e9:f4:f7:1e:c2:9f:f7:f0: d7:5a:b0:49:4c:b0:aa:fe:6d:c9:be:7d:dd:4b:b4:07:b4:a2: 07:ec:c3:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAn0DdA16/RhAAQl9wpU2DndPsJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4 Njk3RTU5RTAeFw0yNjA0MjcwMDQzMzZaFw0yNjA0MjgwMjEzMzZaMDMxMTAvBgNV BAMTKEU1OTlEMDgyNEVCNUNFNDE3NDBERjYzQ0IzOUEzQTVCQ0FENEJCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqhSgiLX/X/xxaQtI96qyin8R 1XDCtmFG2yOBvsbudYfZTME/GeS2gtuTOv7r+k5S9swV8nx8PgvmhANDeI6BBJQl PwfBWurwbf7JREIerhgx2F6sbC7Fm2UZOql3Wow0AkdLfx0mgVP2dmEpjP3pH9sw +v6/950PIEmpKcJiWYkBGP9qcfRewSwgaOCCshW9VnrmrJUgwxDxVL7K6mkH5kcC BPjKw1YOsMgtYTFnyanq6wqyGFLoD9VUqZh29P2d+WkH6o3zJbUc9T/SF9dCF0r+ wJNCatDxswUJOJ11sjRoHjY5OPcwWSfuTtiNnCftt7gh4xH280zDk0JG5FtxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5ZnQgk61zkF0DfY8s5o6W8rUu5AwHwYDVR0j BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3 MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTQ1Nzg1ODYxMDc5MDYvMC9DOTk5MzAyNTZCMjY4 MUI2NzZDM0Y5NjlCOUUwNzAyMDg2OTdFNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGQqm6QTeZLI aVNiu6xQqn4DZLKJcSN2ubSMmMxJUi+99UA5LcVIqKN1gZ32xEQMj91WklgJSeG3 DJaqvYMvn67i8jdSHwYiqxyVOLUm04a4CVBsNJkNyYuqfuQpRw4tQNkQGuPUTA71 l2n4/0dynBea4XPv4JMpgCGvdhI8kXpLX11+lfH+Ht/hZpJ/MaPrPTLgW9CrGr6T yXFKXN6ybmwgX/7xDOuTjfnzBTxZmGxaSZRkKaInvVfzmwYTpLYOdZZwjrocOTnS q5r8ro7Jb5MBUIa2g04ofOdTVVt69vHsPen09x7Cn/fw11qwSUywqv5tyb593Uu0 B7SiB+zDSg== -----END CERTIFICATE-----Generated at Mon Apr 27 15:03:30 2026 by rpki-client