$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: JTnQxxKe+SCZ8y8BBSTDmwU5enilosR9B0TCAIpA2FM= Subject key identifier: DC:3C:AE:55:3C:04:1A:BE:2C:5C:D2:4B:D1:7A:3F:19:3F:60:AD:A2 Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 04C9B796C2FE0223638B24CBF8EB76AE2A41204E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: 06 Signing time: Mon 27 Apr 2026 06:28:41 +0000 Manifest this update: Mon 27 Apr 2026 06:23:41 +0000 Manifest next update: Tue 28 Apr 2026 10:03:41 +0000 Files and hashes: 1: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: U5HhZ9xLsPEv5aSS8OjXfJ9BqhFxDwwUcvlmsbaS22c=) 2: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c9:b7:96:c2:fe:02:23:63:8b:24:cb:f8:eb:76:ae:2a:41:20:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: Apr 27 06:23:41 2026 GMT Not After : Apr 28 10:03:41 2026 GMT Subject: CN=DC3CAE553C041ABE2C5CD24BD17A3F193F60ADA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:c0:fa:e1:4e:df:49:c9:b1:e8:b5:cb:78: b8:52:b2:08:48:95:af:3c:0a:06:92:eb:ce:00:7d: 10:f5:72:6e:2e:fc:d4:63:12:82:01:4a:5e:e8:48: eb:c9:f5:1c:61:82:ae:dd:83:3a:37:89:bb:e9:9e: 25:f0:58:b1:4d:c7:c7:e1:5d:30:fc:27:91:76:0c: 34:53:f1:3d:51:c2:53:5b:62:fa:c0:1f:ff:e2:9a: 5f:8c:e8:a1:4b:38:f6:67:29:87:36:e3:b6:be:e5: 11:49:ce:0c:87:1f:d4:aa:b2:7f:dc:cc:1e:09:ae: 93:e4:1a:de:74:cf:42:43:f4:bb:b3:f2:4b:f2:bd: c8:f6:8a:9c:76:27:e6:ff:20:5e:9f:e2:e8:55:59: b6:66:ff:7f:5a:f5:33:3c:bc:9d:7c:95:33:fa:ee: 09:23:e3:54:d8:96:35:6a:63:e6:d2:41:68:90:4d: 7e:13:31:a1:38:2c:30:36:c4:56:62:73:0b:01:85: 13:a8:0d:51:94:3f:9b:27:9f:36:86:3f:c0:0a:40: 97:78:49:16:45:c1:c2:d1:0b:0e:e7:ed:b9:24:54: 97:a0:0f:db:39:e2:c7:a8:d3:de:7c:1d:59:cc:67: 30:f6:78:0d:cf:45:bb:a2:37:65:bd:a4:15:74:bb: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3C:AE:55:3C:04:1A:BE:2C:5C:D2:4B:D1:7A:3F:19:3F:60:AD:A2 X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:59:fb:6e:ed:30:f3:7c:36:90:9d:ea:91:95:29:85:1b:f4: d2:5d:eb:81:50:68:06:32:31:65:a6:41:06:7e:17:1a:8e:18: 16:86:43:84:17:b2:af:ed:4e:b9:c7:ed:db:54:8d:03:18:1d: 8f:c3:a0:f3:23:02:c8:16:e8:a4:82:db:1f:39:17:55:0d:01: 6c:f7:cf:a7:57:25:89:5f:61:14:ed:2b:be:18:53:98:53:77: 2a:0e:aa:e7:7b:b3:27:a7:17:50:d0:c3:1f:3e:a1:71:fc:e6: d6:d2:e4:31:79:b0:04:ce:a3:65:d6:73:6d:ad:88:64:b6:78: 36:13:8d:df:85:40:7e:66:7c:86:28:be:d0:c2:d1:ba:51:aa: 47:8f:f5:bb:d2:04:ad:33:b4:95:88:7b:dc:43:4d:61:08:47: 65:91:35:ae:1c:6e:42:51:31:1a:4d:1d:40:98:f3:54:9f:15: 8c:c5:a0:6d:c3:74:00:83:86:7e:f3:1e:65:f0:53:5c:e3:90: 40:db:da:60:df:f5:32:a1:8e:78:38:e5:b3:63:b6:54:76:98: 4e:b0:7a:f6:e5:86:0b:1b:5c:f5:4c:2d:9c:dd:ba:e3:f3:f2: 76:75:6d:5f:59:1f:54:85:c4:26:bf:4c:1f:0e:60:84:b2:59: 72:6d:42:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBMm3lsL+AiNjiyTL+Ot2ripBIE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjA0MjcwNjIzNDFaFw0yNjA0MjgxMDAzNDFaMDMxMTAvBgNV BAMTKERDM0NBRTU1M0MwNDFBQkUyQzVDRDI0QkQxN0EzRjE5M0Y2MEFEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFMD64U7fScmx6LXLeLhSsghI la88CgaS684AfRD1cm4u/NRjEoIBSl7oSOvJ9Rxhgq7dgzo3ibvpniXwWLFNx8fh XTD8J5F2DDRT8T1RwlNbYvrAH//iml+M6KFLOPZnKYc247a+5RFJzgyHH9Sqsn/c zB4JrpPkGt50z0JD9Luz8kvyvcj2ipx2J+b/IF6f4uhVWbZm/39a9TM8vJ18lTP6 7gkj41TYljVqY+bSQWiQTX4TMaE4LDA2xFZicwsBhROoDVGUP5snnzaGP8AKQJd4 SRZFwcLRCw7n7bkkVJegD9s54seo0958HVnMZzD2eA3PRbuiN2W9pBV0u2e/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3DyuVTwEGr4sXNJL0Xo/GT9graIwHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACln7bu0w83w2 kJ3qkZUphRv00l3rgVBoBjIxZaZBBn4XGo4YFoZDhBeyr+1Oucft21SNAxgdj8Og 8yMCyBbopILbHzkXVQ0BbPfPp1cliV9hFO0rvhhTmFN3Kg6q53uzJ6cXUNDDHz6h cfzm1tLkMXmwBM6jZdZzba2IZLZ4NhON34VAfmZ8hii+0MLRulGqR4/1u9IErTO0 lYh73ENNYQhHZZE1rhxuQlExGk0dQJjzVJ8VjMWgbcN0AIOGfvMeZfBTXOOQQNva YN/1MqGOeDjls2O2VHaYTrB69uWGCxtc9UwtnN264/PydnVtX1kfVIXEJr9MHw5g hLJZcm1Cuw== -----END CERTIFICATE-----Generated at Mon Apr 27 15:29:54 2026 by rpki-client