$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json) Hash identifier: mLs7PUT+XvIEE0CpJCIGYC+nhDWMrvvyQjabks4Zzbk= Subject key identifier: 8B:90:75:8D:C5:86:9A:7B:92:81:EA:2D:B7:D4:76:6D:45:FC:DD:D5 Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Certificate serial: 6C14496C517705C2DDED831064EA52F4B7253D90 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:33:28 +0000 Manifest this update: Thu 26 Mar 2026 12:28:28 +0000 Manifest next update: Fri 27 Mar 2026 15:29:28 +0000 Files and hashes: 1: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: CoaDHu0wtoNbYqXtUzQW/ysIoNZjEJGSkpinjiCE0h4=) 2: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=) 3: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=) 4: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=) 5: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:14:49:6c:51:77:05:c2:dd:ed:83:10:64:ea:52:f4:b7:25:3d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Validity Not Before: Mar 26 12:28:28 2026 GMT Not After : Mar 27 15:29:28 2026 GMT Subject: CN=8B90758DC5869A7B9281EA2DB7D4766D45FCDDD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:3c:38:15:de:86:45:26:a4:8d:d1:8f:4a: 6a:1c:d0:5b:ad:c6:0d:3f:c6:cb:31:d8:e9:fb:d1: 2d:a2:a2:18:32:2c:24:66:1a:96:29:1b:0a:d3:77: f0:0e:b5:5c:ac:5e:f1:37:f1:27:92:5c:0d:a9:0d: b5:c3:80:d0:a7:13:05:51:78:a2:3b:8a:6b:3b:91: 44:d0:6e:34:72:8c:50:5b:1c:d2:6f:c9:a5:bf:b6: 2e:a9:0e:84:19:db:b8:5b:dc:eb:5f:e0:37:9e:e3: ca:c9:7c:1d:b5:77:28:21:29:38:e3:57:ed:3e:d7: 1a:5d:46:69:51:12:65:79:82:f9:46:19:63:df:1c: 03:4f:b9:b2:73:dd:8c:7d:2d:53:0a:fb:48:52:12: e9:b2:02:b9:13:62:1a:3f:bc:78:15:82:cc:17:d1: 29:41:c6:f9:2e:25:79:5a:bb:c6:e9:96:3d:d7:96: a1:96:22:0b:88:ba:27:8d:8c:4b:14:cf:dd:e3:4d: fe:d4:b0:45:60:83:19:82:d9:19:99:6e:2e:ce:a1: 49:f9:d5:1f:21:68:1c:c2:cb:96:a3:84:ee:64:04: 39:17:a5:c2:93:d6:db:66:e4:e4:08:e4:91:1e:44: f7:94:c9:9e:1d:38:ba:5e:15:7d:f1:a4:56:9b:98: 36:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:90:75:8D:C5:86:9A:7B:92:81:EA:2D:B7:D4:76:6D:45:FC:DD:D5 X509v3 Authority Key Identifier: keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ed:12:fc:5f:76:38:c2:9b:24:8e:10:1d:3c:b8:3f:f8:64: 01:9e:bf:48:81:9a:1d:b5:4d:10:8e:2e:ce:51:50:a0:75:f0: e7:4d:86:12:3b:2b:1d:5b:83:dc:f0:fa:86:33:7f:7b:f6:dc: 88:46:42:86:45:40:3b:8d:12:06:c2:0e:01:53:66:a3:e8:8a: b4:da:ab:06:ba:bc:15:d1:ff:3a:a1:4c:9f:d3:b8:72:f7:75: 95:f2:16:6b:90:86:0e:db:1f:b6:76:23:96:39:09:77:b9:b9: a8:ec:e1:38:76:5e:61:b2:72:12:68:8b:2d:cc:d6:8a:2d:68: eb:ee:6e:8f:d3:a2:e1:16:5b:84:45:5f:62:37:7e:ea:19:48: fd:79:ca:68:ca:95:a4:f3:21:25:94:f3:6e:d4:45:78:2c:c8: 3c:02:4c:22:7a:02:ac:e4:26:92:ac:67:57:cd:64:46:c0:6b: 9b:be:50:c2:94:b9:e7:16:2d:e6:a1:1a:63:e3:10:ff:54:50: 9a:5d:3c:57:94:5d:c2:3c:ad:5f:23:6c:a7:a8:49:3b:41:d7: d1:e1:a0:c6:7b:32:4f:44:d7:ee:2a:cd:05:6b:1f:5d:f8:e7: d8:06:9b:f8:26:28:e9:55:14:32:44:42:cf:46:df:34:72:a1: b7:e1:af:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbBRJbFF3BcLd7YMQZOpS9LclPZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3 NkVFMUU3NjAeFw0yNjAzMjYxMjI4MjhaFw0yNjAzMjcxNTI5MjhaMDMxMTAvBgNV BAMTKDhCOTA3NThEQzU4NjlBN0I5MjgxRUEyREI3RDQ3NjZENDVGQ0RERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXzw4Fd6GRSakjdGPSmoc0Fut xg0/xssx2On70S2iohgyLCRmGpYpGwrTd/AOtVysXvE38SeSXA2pDbXDgNCnEwVR eKI7ims7kUTQbjRyjFBbHNJvyaW/ti6pDoQZ27hb3Otf4Dee48rJfB21dyghKTjj V+0+1xpdRmlREmV5gvlGGWPfHANPubJz3Yx9LVMK+0hSEumyArkTYho/vHgVgswX 0SlBxvkuJXlau8bplj3XlqGWIguIuieNjEsUz93jTf7UsEVggxmC2RmZbi7OoUn5 1R8haBzCy5ajhO5kBDkXpcKT1ttm5OQI5JEeRPeUyZ4dOLpeFX3xpFabmDYFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi5B1jcWGmnuSgeott9R2bUX83dUwHwYDVR0j BBgwFoAU4M+ccxgXDilJrWNeO/Rw4nbuHnYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODIwNjA4My8wL0UwQ0Y5QzczMTgxNzBFMjk0OUFENjM1RTNCRjQ3 MEUyNzZFRTFFNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3NkVFMUU3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyMDYwODMvMC9FMENGOUM3MzE4MTcw RTI5NDlBRDYzNUUzQkY0NzBFMjc2RUUxRTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+0S/F92OMKb JI4QHTy4P/hkAZ6/SIGaHbVNEI4uzlFQoHXw502GEjsrHVuD3PD6hjN/e/bciEZC hkVAO40SBsIOAVNmo+iKtNqrBrq8FdH/OqFMn9O4cvd1lfIWa5CGDtsftnYjljkJ d7m5qOzhOHZeYbJyEmiLLczWii1o6+5uj9Oi4RZbhEVfYjd+6hlI/XnKaMqVpPMh JZTzbtRFeCzIPAJMInoCrOQmkqxnV81kRsBrm75QwpS55xYt5qEaY+MQ/1RQml08 V5RdwjytXyNsp6hJO0HX0eGgxnsyT0TX7irNBWsfXfjn2Aab+CYo6VUUMkRCz0bf NHKht+Gvmg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:38 2026 by rpki-client