$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft File: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft (raw, json) Hash identifier: XTKOo1BP5umD1aZJ7NLq+/0bDbmaWDNoLwmi9Fs0jYs= Subject key identifier: 34:D4:0F:67:BE:90:D1:6C:15:1C:AD:78:D5:0F:56:27:D5:B2:9E:F5 Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 322261DAE4283C4E0F304026EC33A6ACF339ACBC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 14:58:28 +0000 Manifest this update: Thu 26 Mar 2026 14:53:28 +0000 Manifest next update: Fri 27 Mar 2026 17:03:28 +0000 Files and hashes: 1: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl (hash: ftJmLdq+hgLtPQIZpHH3V8fztVfQYFkOM48h8prnJAg=) 2: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (hash: kUBqxH2ZZ4TmBOKzWUD0brYEgK2iHz2LdszFr0mSBx0=) 3: 3138322e38302e302e302f31362d3136203d3e203233373731.roa (hash: CF+z33Rj2YhsOOEndNKmnOpnjbWukgLJhVN5L0N0Tvc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:22:61:da:e4:28:3c:4e:0f:30:40:26:ec:33:a6:ac:f3:39:ac:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Mar 26 14:53:28 2026 GMT Not After : Mar 27 17:03:28 2026 GMT Subject: CN=34D40F67BE90D16C151CAD78D50F5627D5B29EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:07:53:e0:5b:0c:71:c2:3e:ee:a0:bd:08: ab:d8:57:2e:6a:a5:33:e4:19:c7:54:68:b3:c1:c1: 15:72:31:d2:55:9a:2b:fb:fc:e1:6a:f8:9c:79:05: 9c:ff:d3:e4:8e:18:ef:cd:40:a6:36:74:3e:0a:be: 2a:d9:77:10:83:af:b3:95:f9:3a:26:e3:b1:02:01: 51:83:d8:6a:4d:27:91:e0:a0:bf:04:1c:92:6d:af: 85:45:05:8b:26:bb:e2:0f:ce:5e:65:55:4a:47:0c: 5a:ba:87:a9:68:54:68:3c:cf:bc:95:b2:c5:b9:2d: 28:19:95:08:52:e3:d1:e2:6d:f0:4d:57:f6:db:d9: a7:e6:1f:d1:75:12:24:a4:ec:f2:1b:54:1c:99:5d: 6f:42:ae:a5:6d:85:96:d5:40:7a:eb:82:1b:31:e1: 10:e2:7a:3f:1a:e5:c1:02:f7:c6:f2:ba:c7:dc:b6: b7:2b:51:7e:91:b8:97:8f:04:18:b5:04:88:9d:ab: b0:55:da:61:60:a0:ac:4c:c6:36:3b:04:f4:a3:f8: 35:82:0b:c3:72:c2:0d:a9:06:18:a9:f8:25:f2:fc: d7:f9:fa:e1:64:80:95:2a:3c:07:c5:ce:4d:7d:0a: 80:ea:2b:64:61:f1:ea:12:b6:d1:bc:e1:ae:58:cb: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D4:0F:67:BE:90:D1:6C:15:1C:AD:78:D5:0F:56:27:D5:B2:9E:F5 X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:64:76:ec:87:c9:6f:50:3c:79:b0:0f:89:3d:60:29:10:4d: a9:f9:d0:18:4d:a2:d7:fa:92:8c:cf:8a:4a:d9:37:17:d9:5e: 94:68:5d:21:c8:83:7a:46:3d:38:f2:45:c6:4e:ab:cc:1a:91: bc:b1:f2:4e:2e:0f:17:25:c8:d0:4f:11:eb:8f:80:74:b5:fa: c7:d6:7a:4a:7b:51:4f:fa:c5:ad:bf:6d:9e:61:4e:48:7b:97: 73:a6:2e:15:12:94:04:f9:66:0f:4d:bc:94:61:bc:b8:af:56: f9:61:15:4b:0c:bf:43:cd:4d:c9:64:cf:f7:5d:56:aa:70:95: 3b:3a:a8:47:fb:d0:0f:de:72:64:0b:a4:11:4a:32:bc:a4:bd: 6b:2e:10:c1:e1:f4:e8:b0:71:a5:39:59:7f:f5:ee:ae:fe:ad: c0:b0:82:40:92:a2:8e:ac:2e:4b:a9:32:ba:3c:e7:cb:f5:48: 28:66:bb:b4:e6:30:eb:87:c2:f5:d5:61:9f:8c:67:5a:78:e6: cd:78:c3:11:aa:44:a0:90:76:d6:63:95:46:85:0f:c7:5b:7c: 83:90:75:b8:86:61:09:22:8d:1f:06:2f:c2:1f:07:a5:f1:49: 6e:0c:02:7d:1a:88:28:b0:95:2a:59:29:86:49:fd:2a:1d:5b: a8:2d:e5:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMiJh2uQoPE4PMEAm7DOmrPM5rLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjAzMjYxNDUzMjhaFw0yNjAzMjcxNzAzMjhaMDMxMTAvBgNV BAMTKDM0RDQwRjY3QkU5MEQxNkMxNTFDQUQ3OEQ1MEY1NjI3RDVCMjlFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCQdT4FsMccI+7qC9CKvYVy5q pTPkGcdUaLPBwRVyMdJVmiv7/OFq+Jx5BZz/0+SOGO/NQKY2dD4KvirZdxCDr7OV +Tom47ECAVGD2GpNJ5HgoL8EHJJtr4VFBYsmu+IPzl5lVUpHDFq6h6loVGg8z7yV ssW5LSgZlQhS49HibfBNV/bb2afmH9F1EiSk7PIbVByZXW9CrqVthZbVQHrrghsx 4RDiej8a5cEC98byusfctrcrUX6RuJePBBi1BIidq7BV2mFgoKxMxjY7BPSj+DWC C8Nywg2pBhip+CXy/Nf5+uFkgJUqPAfFzk19CoDqK2Rh8eoSttG84a5Yy431AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNNQPZ76Q0WwVHK141Q9WJ9WynvUwHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMC9GQjdCNzk0RjEyMzcy NUZFODAwQTY0N0YzRjdFOEJFOTlCMUY1QjJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmR27IfJb1A8 ebAPiT1gKRBNqfnQGE2i1/qSjM+KStk3F9lelGhdIciDekY9OPJFxk6rzBqRvLHy Ti4PFyXI0E8R64+AdLX6x9Z6SntRT/rFrb9tnmFOSHuXc6YuFRKUBPlmD028lGG8 uK9W+WEVSwy/Q81NyWTP911WqnCVOzqoR/vQD95yZAukEUoyvKS9ay4QweH06LBx pTlZf/Xurv6twLCCQJKijqwuS6kyujzny/VIKGa7tOYw64fC9dVhn4xnWnjmzXjD EapEoJB21mOVRoUPx1t8g5B1uIZhCSKNHwYvwh8HpfFJbgwCfRqIKLCVKlkphkn9 Kh1bqC3l/w== -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:14 2026 by rpki-client