$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft File: F329F518724FAC695E33F5C78532CBF56BF4243D.mft (raw, json) Hash identifier: GysmusfV9y9HL7IgApW+CnZtYx+Ybw2JTkyMqC6zm7M= Subject key identifier: 3C:DE:18:A0:75:3C:AC:C9:23:AE:A9:CA:41:B4:93:D2:B2:0E:EA:C6 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 3F98051EB340938E687C21B2556ECF51458E7161 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 12:53:28 +0000 Manifest this update: Thu 26 Mar 2026 12:48:28 +0000 Manifest next update: Fri 27 Mar 2026 16:40:28 +0000 Files and hashes: 1: F329F518724FAC695E33F5C78532CBF56BF4243D.crl (hash: xjWcfeDjZslQJzYSFitQqWo+3NxY+kPtTv6iObfJmoE=) 2: 35392e3130372e36342e302f31382d3234203d3e20313334373733.roa (hash: 0zY22v6zj7Va/jjar+sQq7kCtTDD22I+jvz/eJrNkW8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:98:05:1e:b3:40:93:8e:68:7c:21:b2:55:6e:cf:51:45:8e:71:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Mar 26 12:48:28 2026 GMT Not After : Mar 27 16:40:28 2026 GMT Subject: CN=3CDE18A0753CACC923AEA9CA41B493D2B20EEAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:4b:51:88:4c:85:cf:21:fd:97:4f:9c:d9: 1b:49:dd:a2:e0:34:83:14:72:09:5f:da:8a:fd:de: eb:24:17:d9:7e:e1:85:de:d0:41:7c:2f:12:8b:b8: 79:66:4f:14:80:3e:73:69:5b:52:fb:f3:6a:88:e2: 6a:a6:87:c7:6c:5b:7b:cf:8f:8a:e6:00:09:86:68: 7a:78:a0:f0:84:ac:5d:c2:16:d1:5d:27:13:9c:20: 27:a4:88:43:9a:fb:7c:df:68:29:a1:15:ab:69:e9: 80:d4:79:20:7c:7c:86:af:dd:b1:61:ef:04:d6:6f: 22:78:76:c1:6f:22:0e:97:f8:df:db:3c:ef:79:34: 15:6b:c8:2a:61:77:08:9b:d7:9f:25:bd:93:68:96: 62:90:cc:ee:dc:e9:51:65:b1:b6:1d:4c:4a:36:29: 57:c9:22:62:b0:f9:77:3a:b4:2a:77:ed:4e:03:a8: d7:a0:ab:37:d8:b7:7b:ee:73:d7:88:0f:52:0b:6f: 4b:05:b8:6e:84:f4:ab:b6:00:d2:06:96:1a:f8:f5: 3e:cb:f7:8b:28:9f:95:b7:25:d3:9d:ef:9e:0e:77: 3f:7e:90:ee:da:47:bb:d1:aa:b1:ee:22:f3:1a:6e: df:d9:76:9f:bf:2c:e0:ef:e1:c1:08:4d:30:7a:13: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DE:18:A0:75:3C:AC:C9:23:AE:A9:CA:41:B4:93:D2:B2:0E:EA:C6 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5e:cd:c1:d1:8c:e0:16:b1:dd:f1:b3:be:20:a9:df:ec:e8: 50:37:df:78:8d:c9:9a:d8:7f:4b:50:a0:17:d5:e8:8e:07:77: 39:d6:f5:be:07:84:32:c6:f4:de:91:b9:b1:74:a4:02:b6:46: 67:a6:c3:60:28:6a:3c:4d:d5:06:05:c7:7e:ba:fb:cc:c8:af: e5:f6:36:49:72:a0:ef:69:f8:57:c0:87:93:73:f3:7f:38:2a: f3:fa:82:64:aa:75:c8:40:41:74:c4:52:7f:60:d7:a5:a6:bc: 7e:fe:f3:e0:62:61:4c:1a:5d:c7:d7:0f:4b:e7:0e:e3:ec:9b: 0d:7e:f3:ac:2b:70:03:9c:9a:03:b8:ec:b3:07:32:1d:87:91: b8:f2:be:56:27:51:94:80:e1:41:7d:39:00:e5:17:91:a0:a3: 69:8a:0f:4d:ea:0e:85:e7:f6:0a:54:80:bd:66:a2:bf:8b:31: 09:a1:da:c9:46:8e:fb:1b:d0:ee:7a:a7:6d:3a:c9:bd:bd:c3: 4d:af:e0:9b:b5:0b:fb:38:d9:df:38:8a:1c:69:c7:9b:c2:80: 3b:8c:70:f4:92:ea:5e:21:99:0b:f3:f5:6e:0a:8b:65:28:3e: 91:b2:88:0d:33:e6:53:f7:af:56:08:3b:fb:dc:16:17:34:7a: d2:04:95:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP5gFHrNAk45ofCGyVW7PUUWOcWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjAzMjYxMjQ4MjhaFw0yNjAzMjcxNjQwMjhaMDMxMTAvBgNV BAMTKDNDREUxOEEwNzUzQ0FDQzkyM0FFQTlDQTQxQjQ5M0QyQjIwRUVBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEEtRiEyFzyH9l0+c2RtJ3aLg NIMUcglf2or93uskF9l+4YXe0EF8LxKLuHlmTxSAPnNpW1L782qI4mqmh8dsW3vP j4rmAAmGaHp4oPCErF3CFtFdJxOcICekiEOa+3zfaCmhFatp6YDUeSB8fIav3bFh 7wTWbyJ4dsFvIg6X+N/bPO95NBVryCphdwib158lvZNolmKQzO7c6VFlsbYdTEo2 KVfJImKw+Xc6tCp37U4DqNegqzfYt3vuc9eID1ILb0sFuG6E9Ku2ANIGlhr49T7L 94son5W3JdOd754Odz9+kO7aR7vRqrHuIvMabt/Zdp+/LODv4cEITTB6E3/zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPN4YoHU8rMkjrqnKQbST0rIO6sYwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC9GMzI5RjUxODcyNEZB QzY5NUUzM0Y1Qzc4NTMyQ0JGNTZCRjQyNDNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsF7NwdGM4Bax 3fGzviCp3+zoUDffeI3Jmth/S1CgF9Xojgd3Odb1vgeEMsb03pG5sXSkArZGZ6bD YChqPE3VBgXHfrr7zMiv5fY2SXKg72n4V8CHk3Pzfzgq8/qCZKp1yEBBdMRSf2DX paa8fv7z4GJhTBpdx9cPS+cO4+ybDX7zrCtwA5yaA7jsswcyHYeRuPK+VidRlIDh QX05AOUXkaCjaYoPTeoOhef2ClSAvWaiv4sxCaHayUaO+xvQ7nqnbTrJvb3DTa/g m7UL+zjZ3ziKHGnHm8KAO4xw9JLqXiGZC/P1bgqLZSg+kbKIDTPmU/evVgg7+9wW FzR60gSVjw== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:48 2026 by rpki-client