$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft File: 373B103C68D9B84455801815E437C49839794406.mft (raw, json) Hash identifier: YFh+U4V8vuE7GlGFSqHM+avHCMp9PMrzs1hlIYinl8c= Subject key identifier: 60:53:EF:2A:B3:83:36:A3:C5:FD:ED:40:93:96:3A:E9:35:7D:2F:CE Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406 Certificate serial: 1C0D2CD3218F79E91E59D5C082C9F2A2A8522D1F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:28:28 +0000 Manifest this update: Thu 26 Mar 2026 12:23:28 +0000 Manifest next update: Fri 27 Mar 2026 13:42:28 +0000 Files and hashes: 1: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=) 2: 373B103C68D9B84455801815E437C49839794406.crl (hash: TcQrZWPf/F3gMf9Qc5JmpiSN93lvfijRsyTmOM/VWfM=) 3: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=) 4: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0d:2c:d3:21:8f:79:e9:1e:59:d5:c0:82:c9:f2:a2:a8:52:2d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373B103C68D9B84455801815E437C49839794406 Validity Not Before: Mar 26 12:23:28 2026 GMT Not After : Mar 27 13:42:28 2026 GMT Subject: CN=6053EF2AB38336A3C5FDED4093963AE9357D2FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:56:c1:82:bc:8b:3d:b9:f1:85:d8:75:b2: 6c:f7:e3:1d:6b:1d:76:7e:79:5c:0f:56:4d:cb:4a: f7:ea:5b:4d:12:73:ef:de:74:e5:9c:49:de:fc:aa: 75:23:71:48:b4:13:79:04:82:fa:de:6b:ec:cf:5b: 94:10:f4:9d:59:35:ad:e1:17:bb:1a:47:8e:90:d3: 94:67:b3:77:23:49:e7:fe:78:24:61:49:42:db:98: a2:2c:35:fd:d1:f4:1c:50:bb:96:a1:cd:2e:64:8e: 24:44:d6:3a:67:da:e5:f0:b6:5f:31:cc:d7:8a:27: d3:39:fc:5f:59:dd:95:44:eb:e9:ca:c6:9c:be:5e: 90:4b:e7:f0:92:4d:43:7f:2c:82:77:f7:2a:86:a6: f3:1e:b8:df:78:f4:7f:c8:cf:69:5e:32:94:1c:bb: 9b:56:d9:bd:8a:dd:ec:fd:35:3c:74:53:85:43:a4: c1:2b:6f:d7:ca:c0:bb:52:e1:82:5c:57:50:5d:10: de:f8:cd:51:90:6d:45:70:46:d6:a2:1f:5d:cf:46: 49:c1:6f:f9:3f:f4:24:58:de:dd:54:78:13:86:3f: d7:90:da:f3:ea:dd:4b:18:90:10:ae:9f:ff:34:ef: 72:81:2a:39:b3:0b:aa:ae:56:4e:4c:5b:45:0a:09: b1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:53:EF:2A:B3:83:36:A3:C5:FD:ED:40:93:96:3A:E9:35:7D:2F:CE X509v3 Authority Key Identifier: keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:81:a5:43:39:b4:0c:c7:53:c1:dd:d7:87:34:4c:12:d6:0e: 5e:9b:ad:ac:f3:8c:1e:97:6d:c8:f3:58:49:72:04:20:6a:eb: 1f:fb:5b:c6:ce:de:35:79:3f:14:4c:80:4d:24:98:87:e9:92: 28:a2:2a:be:1e:45:2f:34:1c:e6:bf:c2:5d:a7:f5:ea:ee:e0: 5c:4e:19:8e:5a:cc:f5:58:7b:b6:cc:1c:e5:fc:95:b6:80:8d: 85:ce:ff:ea:3b:8b:64:cf:c9:d0:73:25:81:81:10:4b:b9:d9: 62:fe:19:1e:1f:04:7e:c8:c7:a7:87:ad:de:01:30:63:22:44: c8:37:7a:f9:35:55:c8:2c:27:4b:f1:99:79:91:2a:a8:37:ee: ad:3d:b2:f1:c6:7c:21:32:00:8e:a2:df:5a:91:3e:e0:93:c7: bf:01:5b:58:b6:91:73:07:9c:5c:8c:e0:43:2f:3c:ac:23:87: b2:ac:4d:d2:b5:a3:15:6a:2c:19:ff:38:55:7a:e0:80:c3:30: 19:9e:b7:7e:74:68:ab:26:7d:12:72:9d:56:b6:b4:3d:46:c1: 85:d2:ca:54:d8:5e:0b:be:c8:dc:0b:74:b7:ff:ed:1a:78:55: 52:29:e0:be:88:ea:42:40:46:0c:c4:46:c2:44:c1:aa:61:02: 72:f6:84:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHA0s0yGPeekeWdXAgsnyoqhSLR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz OTc5NDQwNjAeFw0yNjAzMjYxMjIzMjhaFw0yNjAzMjcxMzQyMjhaMDMxMTAvBgNV BAMTKDYwNTNFRjJBQjM4MzM2QTNDNUZERUQ0MDkzOTYzQUU5MzU3RDJGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMFbBgryLPbnxhdh1smz34x1r HXZ+eVwPVk3LSvfqW00Sc+/edOWcSd78qnUjcUi0E3kEgvrea+zPW5QQ9J1ZNa3h F7saR46Q05Rns3cjSef+eCRhSULbmKIsNf3R9BxQu5ahzS5kjiRE1jpn2uXwtl8x zNeKJ9M5/F9Z3ZVE6+nKxpy+XpBL5/CSTUN/LIJ39yqGpvMeuN949H/Iz2leMpQc u5tW2b2K3ez9NTx0U4VDpMErb9fKwLtS4YJcV1BdEN74zVGQbUVwRtaiH13PRknB b/k/9CRY3t1UeBOGP9eQ2vPq3UsYkBCun/8073KBKjmzC6quVk5MW0UKCbErAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYFPvKrODNqPF/e1Ak5Y66TV9L84wHwYDVR0j BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0NjgyMjcvMC8zNzNCMTAzQzY4RDlC ODQ0NTU4MDE4MTVFNDM3QzQ5ODM5Nzk0NDA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoGlQzm0DMdT wd3XhzRMEtYOXputrPOMHpdtyPNYSXIEIGrrH/tbxs7eNXk/FEyATSSYh+mSKKIq vh5FLzQc5r/CXaf16u7gXE4ZjlrM9Vh7tswc5fyVtoCNhc7/6juLZM/J0HMlgYEQ S7nZYv4ZHh8EfsjHp4et3gEwYyJEyDd6+TVVyCwnS/GZeZEqqDfurT2y8cZ8ITIA jqLfWpE+4JPHvwFbWLaRcwecXIzgQy88rCOHsqxN0rWjFWosGf84VXrggMMwGZ63 fnRoqyZ9EnKdVra0PUbBhdLKVNheC77I3At0t//tGnhVUingvojqQkBGDMRGwkTB qmECcvaEgg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:53 2026 by rpki-client