$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json) Hash identifier: ebfvDp4OeDLgDZ3gPyZZMLBjKLdarVpbNQBC8ZRVdKw= Subject key identifier: 26:E9:97:AB:75:1A:3F:F8:8C:5A:F9:DD:CA:56:C6:59:43:4C:38:F0 Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Certificate issuer: /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Certificate serial: 26D70D4C2836C9F7AE675A1985D28C6C59FA9330 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft Manifest number: 24 Signing time: Wed 13 May 2026 07:51:02 +0000 Manifest this update: Wed 13 May 2026 07:46:02 +0000 Manifest next update: Thu 14 May 2026 11:38:02 +0000 Files and hashes: 1: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: OORJKJu931q1f5nnmqG/ixiopAtko7I7qOwRLYHBzUk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d7:0d:4c:28:36:c9:f7:ae:67:5a:19:85:d2:8c:6c:59:fa:93:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Validity Not Before: May 13 07:46:02 2026 GMT Not After : May 14 11:38:02 2026 GMT Subject: CN=26E997AB751A3FF88C5AF9DDCA56C659434C38F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:39:04:81:c5:e9:bc:b8:f2:54:8f:5c:33: 12:3c:fe:c0:cc:af:fd:c3:34:d4:1c:0e:5b:a1:de: 99:bb:eb:8d:65:58:ba:aa:45:7f:d4:4c:c2:fb:18: d6:61:59:bd:fa:a9:79:84:d0:ae:96:a1:dc:b3:34: 89:9f:69:3a:97:e7:bb:82:b0:d3:5e:d3:6b:e6:ea: 25:81:82:e9:87:b0:bf:fc:e3:01:11:1a:23:46:d8: de:a5:e1:55:a5:fe:1a:13:7c:82:67:fe:25:5e:17: e4:27:19:df:a9:60:aa:1b:20:9c:24:63:bc:a3:49: 12:8a:3c:32:2e:2e:81:bd:18:1a:ca:8a:21:4c:e1: c2:01:74:80:18:cf:d0:6f:a0:b9:20:da:35:81:d3: 5c:79:d3:95:d3:49:b0:64:43:68:aa:18:d4:00:12: cf:4e:8f:23:f0:5d:20:fe:c1:f8:17:17:56:fb:99: ad:45:df:5a:ff:a9:b2:0c:77:24:a3:d5:8c:ae:b8: ce:fc:8b:e7:72:ae:75:20:d5:aa:3e:86:f7:66:b0: 52:d3:e2:1f:68:3b:b7:4e:ce:83:07:11:5c:dc:5c: 6b:ae:4a:8d:d6:56:20:82:83:c0:75:cf:9c:72:3d: 2d:35:0e:c1:c2:8d:db:89:01:f1:aa:aa:98:31:d4: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E9:97:AB:75:1A:3F:F8:8C:5A:F9:DD:CA:56:C6:59:43:4C:38:F0 X509v3 Authority Key Identifier: keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:52:40:d2:9c:41:bb:e2:04:af:f3:f9:fd:74:f9:11:03:49: 34:0c:f5:66:de:36:38:2b:ae:f9:1a:94:0d:7a:53:a4:48:3b: 4c:ee:2a:2f:d3:d9:6c:45:00:91:4c:93:35:71:35:23:81:c9: 8b:c7:65:5a:ba:9d:1e:e4:2c:94:4f:8a:8b:6d:ca:35:38:e8: 5a:f3:aa:95:9c:15:9b:fb:ea:f5:44:0a:69:4c:1e:1d:b7:97: d5:50:89:3e:bf:ce:04:e8:5b:67:05:66:2e:67:78:40:5e:58: 1d:b9:aa:84:3f:cf:34:70:f7:51:e0:b8:a3:08:0d:2e:70:3c: ca:84:59:f8:b9:ad:e3:d4:7d:8d:9d:a2:69:a2:92:8d:73:f0: 18:93:59:a9:5f:09:53:66:a4:47:bc:b7:64:f8:70:20:90:a6: ec:f4:74:39:af:3c:88:7a:81:b3:7a:05:59:7f:27:36:e9:19: 00:0e:56:c9:d3:f9:75:c1:46:38:6f:4a:33:29:74:de:72:b5: 4b:04:67:3f:75:26:4c:6f:bc:0a:35:b2:a7:ab:e3:8f:e6:eb: ed:6c:28:1c:50:17:ff:bb:3f:53:16:2c:d1:ac:31:aa:77:26: de:99:0b:48:a1:3b:a3:c0:d9:75:41:ba:38:6f:ec:1e:45:d8: 28:47:f3:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJtcNTCg2yfeuZ1oZhdKMbFn6kzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZB QTQ3N0VENTAeFw0yNjA1MTMwNzQ2MDJaFw0yNjA1MTQxMTM4MDJaMDMxMTAvBgNV BAMTKDI2RTk5N0FCNzUxQTNGRjg4QzVBRjlERENBNTZDNjU5NDM0QzM4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCTkEgcXpvLjyVI9cMxI8/sDM r/3DNNQcDluh3pm7641lWLqqRX/UTML7GNZhWb36qXmE0K6WodyzNImfaTqX57uC sNNe02vm6iWBgumHsL/84wERGiNG2N6l4VWl/hoTfIJn/iVeF+QnGd+pYKobIJwk Y7yjSRKKPDIuLoG9GBrKiiFM4cIBdIAYz9BvoLkg2jWB01x505XTSbBkQ2iqGNQA Es9OjyPwXSD+wfgXF1b7ma1F31r/qbIMdySj1YyuuM78i+dyrnUg1ao+hvdmsFLT 4h9oO7dOzoMHEVzcXGuuSo3WViCCg8B1z5xyPS01DsHCjduJAfGqqpgx1H15AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJumXq3UaP/iMWvndylbGWUNMOPAwHwYDVR0j BBgwFoAUTwbsuFxPQ6I+eydjLpU/f6pHftUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMxMzY2Mzg3NTgwOTI4My8wLzRGMDZFQ0I4NUM0RjQzQTIzRTdCMjc2MzJFOTUz RjdGQUE0NzdFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMTM2NjM4NzU4MDkyODMvMC80RjA2RUNCODVDNEY0 M0EyM0U3QjI3NjMyRTk1M0Y3RkFBNDc3RUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVJA0pxBu+IE r/P5/XT5EQNJNAz1Zt42OCuu+RqUDXpTpEg7TO4qL9PZbEUAkUyTNXE1I4HJi8dl WrqdHuQslE+Ki23KNTjoWvOqlZwVm/vq9UQKaUweHbeX1VCJPr/OBOhbZwVmLmd4 QF5YHbmqhD/PNHD3UeC4owgNLnA8yoRZ+Lmt49R9jZ2iaaKSjXPwGJNZqV8JU2ak R7y3ZPhwIJCm7PR0Oa88iHqBs3oFWX8nNukZAA5WydP5dcFGOG9KMyl03nK1SwRn P3UmTG+8CjWyp6vjj+br7WwoHFAX/7s/UxYs0awxqncm3pkLSKE7o8DZdUG6OG/s HkXYKEfzww== -----END CERTIFICATE-----Generated at Wed May 13 20:55:04 2026 by rpki-client