$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft File: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json) Hash identifier: 5GIbieKhiwcLB/b2xhuZdJrXAHmFPj0f0/1hrjR4FP4= Subject key identifier: C3:D9:57:FF:C0:93:89:99:F8:C0:67:67:45:65:E7:92:39:8D:CD:5F Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 Certificate issuer: /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Certificate serial: 463E343F5D1F6CCADA529C93BD0D3C9047FB264D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft Manifest number: 0C Signing time: Mon 27 Apr 2026 09:06:01 +0000 Manifest this update: Mon 27 Apr 2026 09:01:01 +0000 Manifest next update: Tue 28 Apr 2026 09:52:01 +0000 Files and hashes: 1: 3232332e32372e3138352e302f32342d3332203d3e203137363232.roa (hash: u5UXUe1gd5zL4uM/f36b5yYRCmNkN8QDkMKwvtQ/odg=) 2: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: 3whdiXkmGkQcjm/hy427cryd1KfAG1H0fGxtnYoSDto=) 3: 3232332e32372e3138342e302f32342d3332203d3e203137363232.roa (hash: eUIKT8kQjRrNxwg18snwM5Babeyv0hxbM26TJtQTSr0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3e:34:3f:5d:1f:6c:ca:da:52:9c:93:bd:0d:3c:90:47:fb:26:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Validity Not Before: Apr 27 09:01:01 2026 GMT Not After : Apr 28 09:52:01 2026 GMT Subject: CN=C3D957FFC0938999F8C067674565E792398DCD5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:55:c2:89:ba:82:42:0f:e8:e1:d1:93:72: be:dd:b1:56:7a:90:57:af:15:c6:4e:05:91:fa:c1: 1d:ad:73:f2:4f:66:ba:37:84:d4:ad:4b:0a:23:0c: 18:9d:55:01:77:a6:21:80:46:0d:5d:fb:f9:7d:b6: bf:fb:e7:b6:b2:53:3f:dc:60:dc:80:19:6b:08:0a: 71:02:53:6c:2f:92:45:a9:13:42:f4:ef:d2:25:1f: bd:fb:56:5b:12:de:b6:d7:bf:88:01:26:52:f7:13: e7:16:6b:fe:5f:56:c6:b8:93:fe:08:ea:40:f6:ce: a6:22:0c:ae:f9:55:39:35:35:64:25:68:96:83:5a: 8f:ed:78:47:0a:8d:04:66:d2:f2:e3:e6:1f:66:67: 97:ba:e3:6b:e8:4d:51:6a:33:a4:6c:90:32:4a:1a: 8e:ff:7f:5c:21:40:a0:62:3e:1c:8f:31:20:54:4b: 4f:51:a1:da:96:17:48:43:0a:47:da:d0:54:a8:59: e5:18:2b:a9:7d:4c:e9:1d:38:70:20:c6:10:0e:1e: bf:17:b4:bf:3f:c1:e7:30:9a:6e:d1:cc:af:65:0d: 3c:31:21:5e:88:64:36:32:01:13:3a:76:02:b7:62: 29:3f:50:05:c4:ce:d9:88:4e:29:2b:10:68:e4:8a: cd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D9:57:FF:C0:93:89:99:F8:C0:67:67:45:65:E7:92:39:8D:CD:5F X509v3 Authority Key Identifier: keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c9:21:02:23:40:3a:60:10:9f:5f:ec:23:fe:e9:ef:86:c2: 91:ab:8b:d6:cd:9d:28:7a:4a:07:e8:34:67:04:53:45:d6:46: a3:8b:8a:c2:1a:16:d8:cc:22:ba:20:35:80:a4:7d:1a:01:a7: 74:41:d2:30:8f:8c:56:9f:3b:86:bd:0b:ec:4a:25:cf:eb:bd: 90:4a:11:ba:b5:ae:e9:0c:6b:c7:ea:e6:11:c5:48:00:4a:76: 96:c2:0c:f2:99:74:6c:1f:2e:c2:af:07:27:0d:a1:52:87:cc: ed:5c:a7:a8:36:8f:1e:e2:d6:45:81:91:4d:69:8b:86:e9:63: ea:7f:03:47:70:2b:b0:5f:54:da:7b:df:4b:33:67:1a:64:77: e1:c7:0f:01:bb:98:de:be:9c:f8:7c:b2:5b:c8:c5:69:06:10: e8:70:b5:33:84:7e:c7:74:cf:97:9f:c9:a4:13:54:af:e5:64: a0:7f:9d:53:a3:63:d4:1d:62:e4:49:bc:15:1b:07:0a:b0:a4: fe:ab:19:c4:ed:fd:e4:2b:f8:4c:c9:26:81:85:e3:8a:23:1c: b6:41:7b:25:ce:ea:da:33:47:68:17:80:cd:64:72:f8:5e:9b: cf:a5:a9:52:64:4c:43:cb:39:9c:64:04:7e:79:72:a8:ce:0d: ce:83:02:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURj40P10fbMraUpyTvQ08kEf7Jk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEz QTUyODA5ODAeFw0yNjA0MjcwOTAxMDFaFw0yNjA0MjgwOTUyMDFaMDMxMTAvBgNV BAMTKEMzRDk1N0ZGQzA5Mzg5OTlGOEMwNjc2NzQ1NjVFNzkyMzk4RENENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZTVXCibqCQg/o4dGTcr7dsVZ6 kFevFcZOBZH6wR2tc/JPZro3hNStSwojDBidVQF3piGARg1d+/l9tr/757ayUz/c YNyAGWsICnECU2wvkkWpE0L079IlH737VlsS3rbXv4gBJlL3E+cWa/5fVsa4k/4I 6kD2zqYiDK75VTk1NWQlaJaDWo/teEcKjQRm0vLj5h9mZ5e642voTVFqM6RskDJK Go7/f1whQKBiPhyPMSBUS09RodqWF0hDCkfa0FSoWeUYK6l9TOkdOHAgxhAOHr8X tL8/wecwmm7RzK9lDTwxIV6IZDYyARM6dgK3Yik/UAXEztmITikrEGjkis2tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUw9lX/8CTiZn4wGdnRWXnkjmNzV8wHwYDVR0j BBgwFoAURAlJSMbj0yoaWb5nlc2KKjpSgJgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5MjA3NTE3Mzc3MzMxNS8wLzQ0MDk0OTQ4QzZFM0QzMkExQTU5QkU2Nzk1Q0Q4 QTJBM0E1MjgwOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTIwNzUxNzM3NzMzMTUvMC80NDA5NDk0OEM2RTNE MzJBMUE1OUJFNjc5NUNEOEEyQTNBNTI4MDk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhskhAiNAOmAQ n1/sI/7p74bCkauL1s2dKHpKB+g0ZwRTRdZGo4uKwhoW2MwiuiA1gKR9GgGndEHS MI+MVp87hr0L7Eolz+u9kEoRurWu6Qxrx+rmEcVIAEp2lsIM8pl0bB8uwq8HJw2h UofM7VynqDaPHuLWRYGRTWmLhulj6n8DR3ArsF9U2nvfSzNnGmR34ccPAbuY3r6c +HyyW8jFaQYQ6HC1M4R+x3TPl5/JpBNUr+VkoH+dU6Nj1B1i5Em8FRsHCrCk/qsZ xO395Cv4TMkmgYXjiiMctkF7Jc7q2jNHaBeAzWRy+F6bz6WpUmRMQ8s5nGQEfnly qM4NzoMC3g== -----END CERTIFICATE-----Generated at Mon Apr 27 15:09:25 2026 by rpki-client