$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft File: A4CF7F709E062849E6BF84E14474A0320EAB780E.mft (raw, json) Hash identifier: jKwlUUSGvg4Sp7f2jH9cyBqcY/6iIZIEg9JKeXxGg6c= Subject key identifier: B5:4B:42:B9:C7:90:7B:BD:68:BE:8A:0A:B8:50:43:4B:E6:01:C4:AE Authority key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E Certificate issuer: /CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Certificate serial: 64184F2767E153D05B94DF6478DB64D84F2F0439 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft Manifest number: 12 Signing time: Wed 13 May 2026 04:05:55 +0000 Manifest this update: Wed 13 May 2026 04:00:55 +0000 Manifest next update: Thu 14 May 2026 07:11:55 +0000 Files and hashes: 1: A4CF7F709E062849E6BF84E14474A0320EAB780E.crl (hash: /hOeyia01Fstl0W5Q3YpgJ2qQ/M89Qw3lcCjzT9bY68=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:18:4f:27:67:e1:53:d0:5b:94:df:64:78:db:64:d8:4f:2f:04:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Validity Not Before: May 13 04:00:55 2026 GMT Not After : May 14 07:11:55 2026 GMT Subject: CN=B54B42B9C7907BBD68BE8A0AB850434BE601C4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:a6:27:b1:e9:5d:39:bf:81:04:81:09:c2: 46:b1:24:ca:3f:e5:74:28:20:f9:83:6b:03:cd:e3: 5b:5b:57:8e:b3:42:20:84:40:a3:58:d8:77:df:a4: 58:55:fd:ac:0e:3e:82:2e:78:66:66:42:8a:12:53: 4a:2e:bf:e3:2c:4e:b8:cc:b6:b6:43:ad:03:f0:b2: e9:02:76:c5:28:58:40:ac:73:69:e7:3c:e8:21:6d: 6a:e3:78:7e:eb:64:e2:73:7b:3b:a3:74:83:6b:7b: b2:59:6e:43:54:70:46:47:52:25:e1:79:ac:c1:cc: db:74:63:bf:a5:36:cc:b2:85:50:1c:67:bf:c3:51: 41:a4:f2:a6:b6:44:01:f9:cc:f9:06:55:d0:3d:a4: ff:97:8a:18:86:57:95:b8:ea:8c:0c:2c:7d:9a:fe: b8:55:fb:4e:aa:b9:de:04:d6:d4:3a:75:e4:ce:be: 41:8d:1b:78:b0:24:18:3b:67:9e:f4:ed:69:aa:7e: 23:59:cc:b4:36:36:a3:3c:b0:03:79:4a:36:b6:d0: 0d:da:17:ff:63:1e:74:a5:27:89:17:95:79:6e:17: 4a:50:12:53:64:e2:03:d6:b7:2c:4b:db:5a:08:82: be:3f:16:39:1b:f3:72:1f:70:3f:67:4a:bf:b6:be: 7b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4B:42:B9:C7:90:7B:BD:68:BE:8A:0A:B8:50:43:4B:E6:01:C4:AE X509v3 Authority Key Identifier: keyid:A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1e:44:df:b2:68:63:22:8a:86:35:ee:7c:22:b5:68:5e:b7: 4e:38:d8:25:3b:8e:73:50:51:6d:61:2f:3b:51:8f:16:33:7e: 72:3d:b8:d9:f7:7d:57:11:bd:bd:22:4e:0a:d0:62:2b:c1:43: 94:72:df:7e:44:eb:fc:ca:79:92:86:3d:d2:4b:54:52:c8:fb: c7:47:15:76:43:36:b0:ce:8b:cd:b8:02:50:fe:37:79:66:91: 6d:29:b4:22:df:2e:a7:89:f0:ae:44:58:ce:e1:32:ec:ed:80: 6f:22:e2:35:6e:d3:b6:af:7b:90:e0:d0:5a:c4:4b:ee:3b:cc: e9:e4:70:77:55:e2:85:c4:7c:8b:85:c4:fa:d6:16:66:3b:59: e6:88:e3:62:48:67:df:9e:45:ae:5b:0b:07:ac:dc:d5:61:b5: 44:e3:59:40:b9:db:e4:e3:f2:03:64:82:19:93:0b:cb:55:8c: 55:02:f4:47:d6:8d:ec:67:37:53:36:5c:3e:1d:d9:b0:f4:ad: 42:8d:be:39:c6:fb:f3:14:62:a2:0a:49:7c:20:ad:40:6c:4e: 3d:88:05:3f:eb:11:84:7a:44:2d:b7:c7:c3:46:3d:88:eb:1f: 73:b1:79:27:35:04:80:30:a7:2b:d1:3c:4c:32:b9:7e:67:02: b1:e7:67:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZBhPJ2fhU9BblN9keNtk2E8vBDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIw RUFCNzgwRTAeFw0yNjA1MTMwNDAwNTVaFw0yNjA1MTQwNzExNTVaMDMxMTAvBgNV BAMTKEI1NEI0MkI5Qzc5MDdCQkQ2OEJFOEEwQUI4NTA0MzRCRTYwMUM0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzaYnseldOb+BBIEJwkaxJMo/ 5XQoIPmDawPN41tbV46zQiCEQKNY2HffpFhV/awOPoIueGZmQooSU0ouv+MsTrjM trZDrQPwsukCdsUoWECsc2nnPOghbWrjeH7rZOJzezujdINre7JZbkNUcEZHUiXh eazBzNt0Y7+lNsyyhVAcZ7/DUUGk8qa2RAH5zPkGVdA9pP+XihiGV5W46owMLH2a /rhV+06qud4E1tQ6deTOvkGNG3iwJBg7Z5707WmqfiNZzLQ2NqM8sAN5Sja20A3a F/9jHnSlJ4kXlXluF0pQElNk4gPWtyxL21oIgr4/Fjkb83IfcD9nSr+2vnslAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtUtCuceQe71ovooKuFBDS+YBxK4wHwYDVR0j BBgwFoAUpM9/cJ4GKEnmv4ThRHSgMg6reA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjE1NzY5MDI1MzA4MjYzMS8wL0E0Q0Y3RjcwOUUwNjI4NDlFNkJGODRFMTQ0NzRB MDMyMEVBQjc4MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIwRUFCNzgwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIxNTc2OTAyNTMwODI2MzEvMC9BNENGN0Y3MDlFMDYy ODQ5RTZCRjg0RTE0NDc0QTAzMjBFQUI3ODBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh5E37JoYyKK hjXufCK1aF63TjjYJTuOc1BRbWEvO1GPFjN+cj242fd9VxG9vSJOCtBiK8FDlHLf fkTr/Mp5koY90ktUUsj7x0cVdkM2sM6LzbgCUP43eWaRbSm0It8up4nwrkRYzuEy 7O2AbyLiNW7Ttq97kODQWsRL7jvM6eRwd1XihcR8i4XE+tYWZjtZ5ojjYkhn355F rlsLB6zc1WG1RONZQLnb5OPyA2SCGZMLy1WMVQL0R9aN7Gc3UzZcPh3ZsPStQo2+ Ocb78xRiogpJfCCtQGxOPYgFP+sRhHpELbfHw0Y9iOsfc7F5JzUEgDCnK9E8TDK5 fmcCsednVQ== -----END CERTIFICATE-----Generated at Wed May 13 20:17:11 2026 by rpki-client