$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json) Hash identifier: JNZud+2H3ZJk53ko9fRESCfkxB78cTAoJrS2LlQ346A= Subject key identifier: FE:0F:52:CC:29:6C:2F:D3:23:1F:7A:F1:D3:E7:95:F3:A5:74:B1:97 Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Certificate serial: 524951B6A8D14D955CBE114B68C24F4E15EF966E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 09:03:28 +0000 Manifest this update: Thu 26 Mar 2026 08:58:28 +0000 Manifest next update: Fri 27 Mar 2026 09:03:28 +0000 Files and hashes: 1: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=) 2: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=) 3: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: 1rKU0LwglnpN276pTMLlJS7eMJuBnukWhozQF3/Bcuk=) 4: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=) 5: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=) 6: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=) 7: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=) 8: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=) 9: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:49:51:b6:a8:d1:4d:95:5c:be:11:4b:68:c2:4f:4e:15:ef:96:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Validity Not Before: Mar 26 08:58:28 2026 GMT Not After : Mar 27 09:03:28 2026 GMT Subject: CN=FE0F52CC296C2FD3231F7AF1D3E795F3A574B197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:6e:f1:6e:a6:16:81:46:83:46:ea:fb:4b: b3:91:dc:23:80:da:40:a3:fe:44:3a:a7:ed:4b:5c: 03:74:72:58:28:23:a6:6b:83:1b:33:a4:d3:75:33: 98:66:a3:c0:20:89:12:d4:41:78:7f:f6:9e:a7:e5: 34:70:cf:73:52:6a:0a:16:fe:2d:66:d9:59:de:a0: 78:21:e4:5a:24:e2:f1:27:cf:5d:1c:59:7c:f5:c5: f8:fd:b6:05:5a:34:8d:60:83:c4:69:c5:0a:e6:e5: d9:58:20:55:27:ed:ea:f2:4d:c5:58:3d:66:4b:47: e7:63:78:5c:78:3b:5e:38:a1:98:9e:f8:db:c4:38: a9:93:28:e4:07:27:a7:0c:6b:81:8e:5e:33:f8:8d: d2:21:ef:96:1e:ab:e7:26:9e:59:60:2f:e5:3b:cc: 59:5c:68:b2:b5:65:90:da:33:8a:93:88:76:29:e3: c1:a9:11:30:8b:bd:2b:18:88:50:a1:d6:d4:2b:2e: 37:e4:f1:55:e4:d7:1d:c9:1f:5c:dd:e5:22:1a:8f: dc:99:7e:ef:c6:e7:cc:ff:29:f5:35:70:fd:47:94: 74:e9:26:88:4b:e9:ca:2f:3d:d3:12:10:07:fc:51: bd:d3:12:5d:cc:e4:2a:5b:bf:42:d4:21:91:cf:04: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0F:52:CC:29:6C:2F:D3:23:1F:7A:F1:D3:E7:95:F3:A5:74:B1:97 X509v3 Authority Key Identifier: keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e6:d0:a1:33:58:0a:05:81:df:ce:79:62:ac:2f:61:48:a8: 01:b2:6d:ff:46:5f:0d:c1:bf:8a:3b:ab:95:b1:65:79:b6:d9: c8:98:ac:e3:2f:44:23:96:6f:19:b8:35:61:3e:9c:cc:e8:7a: 19:df:de:c7:e4:76:08:cf:a1:7e:d2:55:ec:5a:09:f5:3d:9f: 55:e5:07:ab:a0:aa:5d:f6:09:e7:6e:ea:b9:e6:a8:0a:48:36: 27:b9:d7:4b:f6:96:61:22:1c:8d:5a:33:c5:0e:07:7b:ab:da: 1e:fe:36:31:45:f5:f6:05:3b:ec:ba:12:00:5d:d9:a7:23:f4: c5:dd:fc:dc:13:a4:06:76:73:b6:a4:67:79:ba:81:a5:17:12: 3c:7c:8c:c0:41:f1:27:2d:52:64:99:10:95:dd:32:80:da:c0: ee:ad:0a:ce:e6:c4:7f:37:ac:09:cb:2a:6e:88:b8:7f:5a:df: ee:84:f0:cf:d2:e2:7c:16:e8:30:8e:c1:cc:7d:79:e4:84:67: 39:86:91:44:e0:12:48:37:fa:0b:29:b1:23:4c:6a:fc:b6:79: 0c:d5:18:60:be:9c:4f:33:13:80:6c:28:d4:97:ff:2f:81:37: 5b:c2:ab:2e:e0:1d:98:28:1d:0e:45:ed:53:36:1e:c6:60:8e: 0d:d4:5c:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUklRtqjRTZVcvhFLaMJPThXvlm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0 NjczREFDMDAeFw0yNjAzMjYwODU4MjhaFw0yNjAzMjcwOTAzMjhaMDMxMTAvBgNV BAMTKEZFMEY1MkNDMjk2QzJGRDMyMzFGN0FGMUQzRTc5NUYzQTU3NEIxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3W7xbqYWgUaDRur7S7OR3COA 2kCj/kQ6p+1LXAN0clgoI6ZrgxszpNN1M5hmo8AgiRLUQXh/9p6n5TRwz3NSagoW /i1m2VneoHgh5Fok4vEnz10cWXz1xfj9tgVaNI1gg8RpxQrm5dlYIFUn7eryTcVY PWZLR+djeFx4O144oZie+NvEOKmTKOQHJ6cMa4GOXjP4jdIh75Yeq+cmnllgL+U7 zFlcaLK1ZZDaM4qTiHYp48GpETCLvSsYiFCh1tQrLjfk8VXk1x3JH1zd5SIaj9yZ fu/G58z/KfU1cP1HlHTpJohL6covPdMSEAf8Ub3TEl3M5Cpbv0LUIZHPBJx3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/g9SzClsL9MjH3rx0+eV86V0sZcwHwYDVR0j BBgwFoAUCtNMBeiNEsMO1/4d0qvqVkZz2sAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8wLzBBRDM0QzA1RTg4RDEyQzMwRUQ3RkUxREQyQUJF QTU2NDY3M0RBQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0NjczREFDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMC8wQUQzNEMwNUU4OEQx MkMzMEVEN0ZFMUREMkFCRUE1NjQ2NzNEQUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+bQoTNYCgWB 3855YqwvYUioAbJt/0ZfDcG/ijurlbFlebbZyJis4y9EI5ZvGbg1YT6czOh6Gd/e x+R2CM+hftJV7FoJ9T2fVeUHq6CqXfYJ527queaoCkg2J7nXS/aWYSIcjVozxQ4H e6vaHv42MUX19gU77LoSAF3ZpyP0xd383BOkBnZztqRnebqBpRcSPHyMwEHxJy1S ZJkQld0ygNrA7q0KzubEfzesCcsqboi4f1rf7oTwz9LifBboMI7BzH155IRnOYaR ROASSDf6CymxI0xq/LZ5DNUYYL6cTzMTgGwo1Jf/L4E3W8KrLuAdmCgdDkXtUzYe xmCODdRcPA== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:32 2026 by rpki-client