$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft File: 4E7B315B0F1461798439074524DE185E057B324F.mft (raw, json) Hash identifier: pPCYciaBEXmyelgrxaJyhZBBB+vYLeqewzTtxJ1p0Kk= Subject key identifier: C5:8E:F4:2C:0F:DD:5D:88:8A:F4:C7:FD:B2:81:A7:21:EE:49:B2:BC Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F Certificate serial: 4145237C535398D4374886954786F7482FD6E7F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft Manifest number: 25 Signing time: Wed 13 May 2026 10:06:03 +0000 Manifest this update: Wed 13 May 2026 10:01:03 +0000 Manifest next update: Thu 14 May 2026 13:29:03 +0000 Files and hashes: 1: 4E7B315B0F1461798439074524DE185E057B324F.crl (hash: JUJw2k/dCEiuzWssA3jW6nrfhpliRV4gVO/S810wA8E=) 2: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (hash: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:23:7c:53:53:98:d4:37:48:86:95:47:86:f7:48:2f:d6:e7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F Validity Not Before: May 13 10:01:03 2026 GMT Not After : May 14 13:29:03 2026 GMT Subject: CN=C58EF42C0FDD5D888AF4C7FDB281A721EE49B2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:8d:dc:26:1d:a4:be:69:16:5c:a1:07:bb: 58:9e:52:ed:3f:ba:e8:51:bb:c8:67:c5:a1:68:00: 4e:1c:48:b4:60:ef:5d:c8:52:89:d0:56:24:94:15: 8e:d2:55:7d:85:c8:59:c6:06:46:e5:17:ba:96:03: 68:69:1b:4f:dd:16:67:23:c0:aa:e3:79:a1:fd:ec: 12:f2:04:b8:56:1c:2c:b9:43:1d:69:a0:07:23:7e: 23:73:2c:75:a1:95:b6:f2:82:63:70:e6:83:95:c3: c6:60:3e:c6:12:8b:dd:9d:01:61:11:51:57:b8:de: f8:5d:e5:2b:d8:a8:3a:82:96:3e:ca:06:6e:73:38: 84:d1:3f:81:27:67:3e:86:c9:87:fc:4b:50:53:74: 84:48:13:19:4a:a4:09:4d:66:b8:cc:78:4f:f6:7c: c4:54:19:de:b4:69:7d:51:ba:3f:7a:db:bc:de:4f: 1b:f2:1d:5c:76:6f:3e:52:a5:90:85:c3:b7:70:32: a6:71:9e:11:cc:78:99:ba:39:8a:0d:db:c4:df:ac: dc:c0:99:9e:25:5e:ea:00:6a:4d:4a:9b:64:df:85: e4:be:26:fb:78:85:8d:87:ec:b9:6f:b0:99:e4:28: 9f:61:8f:4b:4f:ab:e8:a8:7e:7e:eb:95:1e:cf:ba: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8E:F4:2C:0F:DD:5D:88:8A:F4:C7:FD:B2:81:A7:21:EE:49:B2:BC X509v3 Authority Key Identifier: keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:82:71:c9:0a:67:97:9a:2e:83:a0:20:b2:91:4b:e1:97:e6: 46:48:1f:ae:17:29:1a:38:29:65:2d:28:a1:ee:23:35:81:2c: a8:20:a9:f1:76:1c:00:5b:c3:63:0d:3d:10:90:3f:76:53:fa: 4c:90:db:c7:60:e0:f8:36:90:84:04:41:33:b4:19:70:e8:79: 04:7d:cd:d5:ad:e5:dc:eb:c5:e7:8a:27:ae:30:de:71:96:ce: 19:e3:89:54:f1:d4:8d:ba:5e:5f:72:e4:19:f0:58:9a:e6:c2: 87:fb:42:63:9b:e2:4f:75:e7:1f:a3:79:32:cc:4e:55:f1:7d: 42:23:e2:ad:cd:b7:b9:23:ac:56:b6:3a:35:8e:ea:72:6c:a7: 0b:9f:02:b2:d9:79:99:2c:72:9d:dd:d7:9c:e4:3d:a1:58:67: ee:74:1e:cf:3a:9d:e0:1f:b2:f8:4b:63:de:ad:d4:c9:6b:86: de:1d:24:04:a1:7c:77:03:86:db:c3:98:38:b3:6b:ea:41:34: 91:a2:f0:a1:6b:db:0b:1b:9e:0d:bb:2c:49:b9:52:c4:9c:49: ef:39:57:6e:5a:e2:12:85:70:a4:7d:98:69:1f:27:e5:58:4c: cb:8f:f5:5e:66:72:e9:26:5b:32:5e:02:26:e9:24:82:6f:99: 6e:67:60:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQUUjfFNTmNQ3SIaVR4b3SC/W5/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUw NTdCMzI0RjAeFw0yNjA1MTMxMDAxMDNaFw0yNjA1MTQxMzI5MDNaMDMxMTAvBgNV BAMTKEM1OEVGNDJDMEZERDVEODg4QUY0QzdGREIyODFBNzIxRUU0OUIyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4o3cJh2kvmkWXKEHu1ieUu0/ uuhRu8hnxaFoAE4cSLRg713IUonQViSUFY7SVX2FyFnGBkblF7qWA2hpG0/dFmcj wKrjeaH97BLyBLhWHCy5Qx1poAcjfiNzLHWhlbbygmNw5oOVw8ZgPsYSi92dAWER UVe43vhd5SvYqDqClj7KBm5zOITRP4EnZz6GyYf8S1BTdIRIExlKpAlNZrjMeE/2 fMRUGd60aX1Ruj9627zeTxvyHVx2bz5SpZCFw7dwMqZxnhHMeJm6OYoN28TfrNzA mZ4lXuoAak1Km2TfheS+Jvt4hY2H7LlvsJnkKJ9hj0tPq+iofn7rlR7PuhpzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxY70LA/dXYiK9Mf9soGnIe5JsrwwHwYDVR0j BBgwFoAUTnsxWw8UYXmEOQdFJN4YXgV7Mk8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQxMjg2NTMwNTg3MDMzNy8wLzRFN0IzMTVCMEYxNDYxNzk4NDM5MDc0NTI0REUx ODVFMDU3QjMyNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUwNTdCMzI0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MTI4NjUzMDU4NzAzMzcvMC80RTdCMzE1QjBGMTQ2 MTc5ODQzOTA3NDUyNERFMTg1RTA1N0IzMjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIJxyQpnl5ou g6AgspFL4ZfmRkgfrhcpGjgpZS0ooe4jNYEsqCCp8XYcAFvDYw09EJA/dlP6TJDb x2Dg+DaQhARBM7QZcOh5BH3N1a3l3OvF54onrjDecZbOGeOJVPHUjbpeX3LkGfBY mubCh/tCY5viT3XnH6N5MsxOVfF9QiPirc23uSOsVrY6NY7qcmynC58Cstl5mSxy nd3XnOQ9oVhn7nQezzqd4B+y+Etj3q3UyWuG3h0kBKF8dwOG28OYOLNr6kE0kaLw oWvbCxueDbssSblSxJxJ7zlXblriEoVwpH2YaR8n5VhMy4/1XmZy6SZbMl4CJukk gm+ZbmdgZQ== -----END CERTIFICATE-----Generated at Wed May 13 16:47:56 2026 by rpki-client