$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: j2ifvmzHlXO5Xi/YH2y9UJr9wOt0pQDIWu48PP9ITQM= Subject key identifier: 54:E4:28:D1:CC:4A:6E:FE:F6:A4:BF:E2:89:3E:D5:73:27:C5:B2:45 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 1663E797C2228F911148A9319ADC8E33F7BBBD5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 12:48:28 +0000 Manifest this update: Thu 26 Mar 2026 12:43:28 +0000 Manifest next update: Fri 27 Mar 2026 13:25:28 +0000 Files and hashes: 1: 34332e3234372e3233362e302f32322d3234203d3e203137343239.roa (hash: OkspnUQvKjtS72CeXZeKKyXqfiA+KxT6HHhEv5NC4NQ=) 2: 3130332e3233382e34382e302f32322d3234203d3e203137343239.roa (hash: rttDeHAFBcC/FYTbFPRn/BAotSmLlX3DE6v6zoY9hhg=) 3: 323430333a343330303a3a2f33322d3438203d3e203137343239.roa (hash: BxtN59vqgBZxPoERk/JYSA/midP2NXeRF93I1z+oqtg=) 4: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: /2II5jjMBbKihVATKoTwxtb1mCpl+gn11rD/scyjzks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:63:e7:97:c2:22:8f:91:11:48:a9:31:9a:dc:8e:33:f7:bb:bd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Mar 26 12:43:28 2026 GMT Not After : Mar 27 13:25:28 2026 GMT Subject: CN=54E428D1CC4A6EFEF6A4BFE2893ED57327C5B245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:4e:39:2c:1f:4d:43:aa:f8:4f:2d:69:4e: c8:1a:d9:19:18:09:24:0c:2d:e4:e4:2b:dd:4c:e9: 72:76:8b:72:57:3c:5e:b1:e9:80:4a:91:b4:28:7b: dd:83:7e:3b:84:45:da:8e:ab:b8:75:41:b1:2c:f5: e1:55:ce:72:14:16:0c:6a:66:07:91:b7:7e:b9:72: 13:94:ad:d3:c8:67:32:d1:d5:17:dd:bf:cd:f3:96: ff:5d:41:44:34:30:8d:6b:1e:8e:b0:b0:fa:5c:08: 48:6b:cb:62:80:47:83:85:33:30:9c:1a:2f:a6:71: 3c:b1:8f:d1:5a:dd:46:4a:c4:61:d2:80:a2:b1:30: 94:c9:63:6d:3a:a4:23:62:37:cb:03:f0:91:8b:b3: 04:0e:a3:c7:b4:a6:11:55:e3:2d:82:b3:7e:87:6c: 76:da:f6:8b:d3:dc:86:80:5f:db:af:ea:b3:54:2b: 36:76:4e:55:7d:90:50:83:26:6e:80:56:93:19:2c: 07:70:db:e3:5a:fe:cd:1e:e4:33:e1:07:5f:bf:01: d4:70:88:fd:68:ce:c5:77:8d:95:79:5f:5e:2b:35: bd:7b:50:d9:2f:c7:53:8f:66:bd:26:b2:ee:ce:32: 37:8f:32:01:2f:9f:d1:9a:60:c4:cc:d2:dc:b6:0b: 80:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E4:28:D1:CC:4A:6E:FE:F6:A4:BF:E2:89:3E:D5:73:27:C5:B2:45 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d8:60:a4:78:af:19:55:8a:a2:16:69:44:0c:17:26:69:fd: 62:9c:05:8c:18:04:3b:ba:f0:8e:a5:00:24:fe:6d:e6:46:cf: 7b:8a:f2:de:0c:cb:a5:7e:a2:85:d5:f7:31:24:3d:a6:e8:06: a0:83:c0:68:34:20:3d:cc:3e:42:46:63:e5:bd:4f:01:3c:88: 02:f9:9a:31:6b:2a:74:07:f7:c9:8f:f4:20:8c:db:f5:5d:c6: 89:c3:f1:83:d6:38:f3:ea:b2:41:db:d8:43:58:9d:48:70:8a: be:84:89:e2:1e:ff:e8:5b:5b:7c:ed:44:18:fd:b6:17:29:9d: ea:79:0a:13:3a:6a:fd:77:c5:d2:39:08:e4:2b:bb:b8:84:33: 23:31:d0:53:fc:bd:28:f5:17:b0:d1:2b:3e:0b:db:ba:40:c6: cd:f5:9a:45:b4:a2:8e:89:8e:3c:ee:7d:e1:60:b4:3d:10:6a: 12:3b:9b:34:bc:5a:67:dd:dd:e3:d2:f4:20:4c:7a:8b:98:a0: 10:31:8d:3d:ce:d1:ac:94:6b:71:79:9b:f9:97:8f:1a:65:ef: 85:27:75:3d:90:b7:a9:ef:b7:8c:d1:72:7b:17:72:7c:e3:ff: 4a:46:32:ce:c4:ec:58:c8:04:31:f0:14:5f:95:9c:dc:ab:45: 28:ad:86:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFmPnl8Iij5ERSKkxmtyOM/e7vV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjAzMjYxMjQzMjhaFw0yNjAzMjcxMzI1MjhaMDMxMTAvBgNV BAMTKDU0RTQyOEQxQ0M0QTZFRkVGNkE0QkZFMjg5M0VENTczMjdDNUIyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S045LB9NQ6r4Ty1pTsga2RkY CSQMLeTkK91M6XJ2i3JXPF6x6YBKkbQoe92DfjuERdqOq7h1QbEs9eFVznIUFgxq ZgeRt365chOUrdPIZzLR1Rfdv83zlv9dQUQ0MI1rHo6wsPpcCEhry2KAR4OFMzCc Gi+mcTyxj9Fa3UZKxGHSgKKxMJTJY206pCNiN8sD8JGLswQOo8e0phFV4y2Cs36H bHba9ovT3IaAX9uv6rNUKzZ2TlV9kFCDJm6AVpMZLAdw2+Na/s0e5DPhB1+/AdRw iP1ozsV3jZV5X14rNb17UNkvx1OPZr0msu7OMjePMgEvn9GaYMTM0ty2C4DZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVOQo0cxKbv72pL/iiT7VcyfFskUwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNhgpHivGVWK ohZpRAwXJmn9YpwFjBgEO7rwjqUAJP5t5kbPe4ry3gzLpX6ihdX3MSQ9pugGoIPA aDQgPcw+QkZj5b1PATyIAvmaMWsqdAf3yY/0IIzb9V3GicPxg9Y48+qyQdvYQ1id SHCKvoSJ4h7/6FtbfO1EGP22Fymd6nkKEzpq/XfF0jkI5Cu7uIQzIzHQU/y9KPUX sNErPgvbukDGzfWaRbSijomOPO594WC0PRBqEjubNLxaZ93d49L0IEx6i5igEDGN Pc7RrJRrcXmb+ZePGmXvhSd1PZC3qe+3jNFyexdyfOP/SkYyzsTsWMgEMfAUX5Wc 3KtFKK2GVw== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:25 2026 by rpki-client