$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: j+scZc3IdTbB4SRdDzVLlXnfh+jBRWTyozKlNNGSIr0= Subject key identifier: B3:60:39:8B:8C:25:02:81:72:83:4D:5D:05:97:CE:5C:9F:EA:32:0A Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 1953B95CB4171EF3F807AD24EE25505A6077C01F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 06:38:28 +0000 Manifest this update: Thu 26 Mar 2026 06:33:28 +0000 Manifest next update: Fri 27 Mar 2026 09:29:28 +0000 Files and hashes: 1: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: 7PwZl2ywfynGX55QyXERLH40F7QBiB2PyJBMq+c5U1Y=) 2: 3230332e3133302e36332e302f32342d3234203d3e203534393934.roa (hash: UBRqylYTLGDVfK3g4RFGUeCrUxzDzQEIc6ZZPYpaGWE=) 3: 3230332e3133302e35322e302f32342d3234203d3e203534393934.roa (hash: et7fLev1+45NO77skAOlV3NvfYmJj7KbgAsloiOQxpo=) 4: 3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa (hash: ktVeTgessk6xRjmQOhmm5CHyeA7OAmRW1PFH8DCbCvo=) 5: 3230332e3133302e35302e302f32342d3234203d3e203534393934.roa (hash: Ujrh8dXiv3ar3WusLzYw5/Zpebj94GN0ZVIqrzqX81U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:53:b9:5c:b4:17:1e:f3:f8:07:ad:24:ee:25:50:5a:60:77:c0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Mar 26 06:33:28 2026 GMT Not After : Mar 27 09:29:28 2026 GMT Subject: CN=B360398B8C25028172834D5D0597CE5C9FEA320A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0d:4b:4a:d6:53:2b:ef:78:d6:0b:f8:b3:63: 4f:a0:8f:3a:ee:27:6c:1a:08:97:9f:ed:49:a2:59: 49:ae:34:78:09:04:de:6e:9f:4e:e0:1f:d4:97:4f: 31:22:db:3c:c3:03:c6:3b:b1:81:ff:9c:05:6e:25: cb:d7:60:72:4c:ff:1c:9f:d0:dc:70:32:a3:fe:9a: fa:cc:13:ce:74:db:e5:c2:85:44:86:5c:79:21:35: 03:81:d1:19:4f:6d:59:2c:1b:c4:27:e9:9e:e6:77: 0f:31:81:0d:ba:52:23:f2:85:9d:32:08:ca:d6:48: ea:60:80:f1:37:7e:95:4c:72:15:78:2e:f5:22:a0: 8c:7c:df:3a:f3:da:32:44:f5:34:57:eb:04:c3:5b: 47:a0:b6:d6:ee:ed:da:99:bf:55:2b:cf:e6:86:10: 03:9c:c5:1c:04:06:f5:a3:4e:66:39:2e:d8:92:84: 94:e7:f4:9c:d2:e1:96:a9:9a:fd:3c:50:5c:12:97: 92:c9:67:81:55:a5:4f:15:a6:6d:15:71:04:60:43: 2a:08:f9:be:37:d8:76:e4:ea:fb:a7:ea:7e:22:fc: 5f:f6:95:80:20:ba:38:4e:f1:2f:19:09:6c:32:50: c1:da:40:d1:52:6a:40:44:d1:6f:2d:5c:df:17:54: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:60:39:8B:8C:25:02:81:72:83:4D:5D:05:97:CE:5C:9F:EA:32:0A X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ca:57:3c:76:54:dd:ce:69:fc:52:7c:dd:df:54:aa:4d:0b: f5:48:a9:e0:86:4d:ca:2b:a9:5d:10:10:bc:cb:bd:23:3c:90: 9d:9d:70:35:8f:dc:7a:9a:fd:1f:aa:e9:d2:09:f3:9d:c3:ed: d5:17:72:af:36:2e:f9:2f:62:07:e1:c3:b5:7f:ce:40:b9:02: 16:e8:c8:58:41:c7:a4:c9:3b:55:fa:20:0c:05:74:da:6d:ba: b3:73:ac:9b:d1:52:02:d7:20:c0:d7:18:ca:47:08:f4:98:16: 39:7a:27:b2:4e:0c:48:f5:ca:b7:4f:31:ba:80:6a:0f:3c:a8: ef:ea:5a:a5:33:57:4f:e3:32:97:d3:46:3e:11:0b:3e:6a:a6: 00:62:f6:69:95:56:b4:49:eb:f1:2d:f0:df:24:99:eb:03:d6: 0d:19:47:35:a3:49:d5:43:35:0a:a2:1e:87:89:10:ea:f0:b4: b6:f5:b7:a8:9e:c8:16:98:5e:32:af:28:dd:3c:dc:17:4b:9d: f2:31:9c:3a:78:a7:07:b6:b7:c6:d1:91:c2:74:0d:8a:6f:4c: 62:83:e2:01:05:63:e5:8b:5b:7e:67:a2:c8:3d:f2:3d:05:ae: c5:88:c9:8b:b5:7a:47:8c:9f:00:d4:87:18:1b:c9:a2:06:6e: 88:f1:3d:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGVO5XLQXHvP4B60k7iVQWmB3wB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjAzMjYwNjMzMjhaFw0yNjAzMjcwOTI5MjhaMDMxMTAvBgNV BAMTKEIzNjAzOThCOEMyNTAyODE3MjgzNEQ1RDA1OTdDRTVDOUZFQTMyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQDUtK1lMr73jWC/izY0+gjzru J2waCJef7UmiWUmuNHgJBN5un07gH9SXTzEi2zzDA8Y7sYH/nAVuJcvXYHJM/xyf 0NxwMqP+mvrME8502+XChUSGXHkhNQOB0RlPbVksG8Qn6Z7mdw8xgQ26UiPyhZ0y CMrWSOpggPE3fpVMchV4LvUioIx83zrz2jJE9TRX6wTDW0egttbu7dqZv1Urz+aG EAOcxRwEBvWjTmY5LtiShJTn9JzS4Zapmv08UFwSl5LJZ4FVpU8Vpm0VcQRgQyoI +b432Hbk6vun6n4i/F/2lYAgujhO8S8ZCWwyUMHaQNFSakBE0W8tXN8XVBNhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs2A5i4wlAoFyg01dBZfOXJ/qMgowHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnspXPHZU3c5p /FJ83d9Uqk0L9Uip4IZNyiupXRAQvMu9IzyQnZ1wNY/cepr9H6rp0gnzncPt1Rdy rzYu+S9iB+HDtX/OQLkCFujIWEHHpMk7VfogDAV02m26s3Osm9FSAtcgwNcYykcI 9JgWOXonsk4MSPXKt08xuoBqDzyo7+papTNXT+Myl9NGPhELPmqmAGL2aZVWtEnr 8S3w3ySZ6wPWDRlHNaNJ1UM1CqIeh4kQ6vC0tvW3qJ7IFpheMq8o3TzcF0ud8jGc OninB7a3xtGRwnQNim9MYoPiAQVj5YtbfmeiyD3yPQWuxYjJi7V6R4yfANSHGBvJ ogZuiPE96Q== -----END CERTIFICATE-----Generated at Thu Mar 26 23:06:08 2026 by rpki-client