$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft File: A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft (raw, json) Hash identifier: QhmHgJZnS7gbhQ0jaTDtscDtq3blTglUJkAQEnM+s84= Subject key identifier: 1B:CC:76:05:E0:67:0C:62:23:FD:9A:89:26:02:2F:82:88:FD:A2:FF Authority key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 Certificate issuer: /CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Certificate serial: 5CCDCD95D45129CBB2B1F5AD00C7BD7E6EF0F5EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft Manifest number: 20 Signing time: Wed 13 May 2026 16:01:05 +0000 Manifest this update: Wed 13 May 2026 15:56:05 +0000 Manifest next update: Thu 14 May 2026 18:30:05 +0000 Files and hashes: 1: A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl (hash: 4YFtBldXtJu5v/W+CEI4Df6Qwpp5iRCp+hxMUOT9Pao=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cd:cd:95:d4:51:29:cb:b2:b1:f5:ad:00:c7:bd:7e:6e:f0:f5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Validity Not Before: May 13 15:56:05 2026 GMT Not After : May 14 18:30:05 2026 GMT Subject: CN=1BCC7605E0670C6223FD9A8926022F8288FDA2FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:fb:01:76:14:12:e0:44:2d:d4:2b:6e:ea: 15:b8:87:a5:4a:6c:e9:72:a0:13:76:ce:d6:4e:02: 0e:09:90:5b:f3:3d:cf:6d:31:b5:03:ed:89:14:cd: fb:89:21:52:a1:51:97:df:42:c4:76:d7:f4:3b:27: 4c:a2:d5:e4:31:f3:85:84:97:9f:18:72:59:6a:a9: 81:d4:be:44:ee:74:f4:a4:1f:c8:2d:12:c2:f0:c4: e9:66:95:3d:cc:08:ec:40:93:68:86:70:46:5a:3c: 91:7b:29:71:87:4c:07:97:c7:81:5d:e8:f1:ba:dd: 23:9d:dc:0c:e5:bc:d2:7f:bc:58:e3:8e:f8:c0:ce: 0c:2f:00:76:6d:d8:60:14:02:98:55:4d:6d:f7:70: 66:b9:75:ac:29:a2:20:d3:12:e1:89:06:43:ef:45: f8:29:32:84:8b:6c:bb:de:a0:2e:80:45:df:eb:fb: 87:c4:87:21:cb:71:d9:8e:2a:36:88:3b:6b:de:b7: f5:a5:51:db:33:2b:be:17:95:7f:aa:9c:e0:2a:07: e2:15:e0:98:50:99:9d:6e:59:f3:a6:b8:e3:87:7f: 88:a4:36:d1:ba:85:d1:ff:df:b6:f6:60:f7:79:60: c3:43:7b:5d:6d:25:0c:f3:0e:15:16:2d:a3:f1:ed: cb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:76:05:E0:67:0C:62:23:FD:9A:89:26:02:2F:82:88:FD:A2:FF X509v3 Authority Key Identifier: keyid:A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d6:26:21:a3:a7:d5:41:5b:5d:14:be:f0:01:b7:8d:05:4a: 11:0f:04:40:14:91:86:71:0d:ad:6a:f6:8a:5e:f9:98:dd:90: cc:fe:8c:43:93:2e:a5:b1:01:a4:e3:48:7c:ac:96:81:e0:53: 73:bb:9d:7b:f3:80:6f:3e:79:98:93:cf:8d:12:49:8d:29:43: 95:47:e9:2d:52:18:25:eb:3a:ad:e3:42:da:f4:d7:32:97:8f: 66:19:08:a0:75:5e:6a:db:24:20:67:84:72:62:ed:37:0c:18: 0b:2a:09:05:99:0d:c3:d6:33:79:b3:82:ff:c9:bb:ba:20:21: d2:d2:31:24:48:f4:5d:18:6e:12:3c:ab:06:0a:1d:56:f1:d7: e0:0b:d3:39:53:e8:f2:a0:c1:b7:30:c9:c0:8c:0e:1a:d4:d2: ad:64:f3:86:68:e1:4c:7e:28:d3:f4:eb:92:bf:81:f4:3d:aa: 4a:31:a9:e3:85:13:c1:cc:69:42:c3:76:81:3b:f9:24:09:dd: a6:12:e6:b3:ea:d3:c9:ad:2d:25:33:c0:9f:2b:4d:20:98:a7: be:f4:d9:2a:81:8b:f5:bb:4d:bf:b3:75:03:54:3f:f4:54:73: e9:27:a9:06:6f:50:ce:f0:81:a1:de:2c:1d:f9:fd:1c:ea:de: 8d:8c:c3:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXM3NldRRKcuysfWtAMe9fm7w9ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0 RTJDODI3NzAeFw0yNjA1MTMxNTU2MDVaFw0yNjA1MTQxODMwMDVaMDMxMTAvBgNV BAMTKDFCQ0M3NjA1RTA2NzBDNjIyM0ZEOUE4OTI2MDIyRjgyODhGREEyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcMfsBdhQS4EQt1Ctu6hW4h6VK bOlyoBN2ztZOAg4JkFvzPc9tMbUD7YkUzfuJIVKhUZffQsR21/Q7J0yi1eQx84WE l58YcllqqYHUvkTudPSkH8gtEsLwxOlmlT3MCOxAk2iGcEZaPJF7KXGHTAeXx4Fd 6PG63SOd3AzlvNJ/vFjjjvjAzgwvAHZt2GAUAphVTW33cGa5dawpoiDTEuGJBkPv RfgpMoSLbLveoC6ARd/r+4fEhyHLcdmOKjaIO2vet/WlUdszK74XlX+qnOAqB+IV 4JhQmZ1uWfOmuOOHf4ikNtG6hdH/37b2YPd5YMNDe11tJQzzDhUWLaPx7ctlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG8x2BeBnDGIj/ZqJJgIvgoj9ov8wHwYDVR0j BBgwFoAUqWgEdPKYfJIOOiirzeXZSE4sgncwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ1MzI5NzYzNjkwMDg2Ny8wL0E5NjgwNDc0RjI5ODdDOTIwRTNBMjhBQkNERTVE OTQ4NEUyQzgyNzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0RTJDODI3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0NTMyOTc2MzY5MDA4NjcvMC9BOTY4MDQ3NEYyOTg3 QzkyMEUzQTI4QUJDREU1RDk0ODRFMkM4Mjc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9YmIaOn1UFb XRS+8AG3jQVKEQ8EQBSRhnENrWr2il75mN2QzP6MQ5MupbEBpONIfKyWgeBTc7ud e/OAbz55mJPPjRJJjSlDlUfpLVIYJes6reNC2vTXMpePZhkIoHVeatskIGeEcmLt NwwYCyoJBZkNw9YzebOC/8m7uiAh0tIxJEj0XRhuEjyrBgodVvHX4AvTOVPo8qDB tzDJwIwOGtTSrWTzhmjhTH4o0/Trkr+B9D2qSjGp44UTwcxpQsN2gTv5JAndphLm s+rTya0tJTPAnytNIJinvvTZKoGL9btNv7N1A1Q/9FRz6SepBm9QzvCBod4sHfn9 HOrejYzDvw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:29 2026 by rpki-client