$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json) Hash identifier: kvJieSlZYqlpgBaKsBTMY0RNYDFTYuAibv+nBBUjptY= Subject key identifier: 24:60:62:96:98:E2:45:F4:F9:F4:65:2B:69:37:C4:BF:96:98:7D:0C Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 05D7A91F28F593435328E6972FABFFE4DD9409D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:38:28 +0000 Manifest this update: Thu 26 Mar 2026 12:33:28 +0000 Manifest next update: Fri 27 Mar 2026 14:31:28 +0000 Files and hashes: 1: 3138322e36312e3230302e302f32312d3234203d3e203338333635.roa (hash: WgV1yeo5WF52dTxG62HFDsVXOy6MY22rby9YB14g5EM=) 2: 34322e3139392e302e302f31362d3234203d3e203338333635.roa (hash: 7KEjERmB4Z/A9sqOzm5s/N9mbMV9i8uoubqBMFMghAM=) 3: 3131372e35382e302e302f31372d3234203d3e203338333635.roa (hash: VfFusDOOP1s8pzFyN3+E2jV1enMlvrNxUhUAZ+Dvbm4=) 4: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: WOsMBtN5sdjUdAYzdzdX9F+lOCIRgKLaGjEXYsbZGeA=) 5: 3130312e3234372e302e302f31372d3234203d3e203338333635.roa (hash: qz7UatHFJqPS4ZsqhU/SG7lARONSPfeJMor5+B2g+QI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d7:a9:1f:28:f5:93:43:53:28:e6:97:2f:ab:ff:e4:dd:94:09:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Mar 26 12:33:28 2026 GMT Not After : Mar 27 14:31:28 2026 GMT Subject: CN=2460629698E245F4F9F4652B6937C4BF96987D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:a1:8d:08:7d:09:94:7f:77:11:77:7f:e6: d8:93:d1:0a:3f:3c:a5:b1:33:b6:a6:3f:40:37:69: 60:bd:03:93:92:68:67:6e:c4:ed:0e:a8:08:b0:11: ca:b9:10:95:16:31:2a:64:3d:af:d2:60:ba:26:b7: 68:e4:ab:f7:97:ca:09:7e:9c:b9:c8:2c:d5:67:ee: 6a:3a:c7:94:a4:2e:42:15:e6:73:0f:7f:b9:7e:0a: 6a:33:06:a0:02:84:00:61:e9:29:57:b9:c0:fc:24: c8:1a:98:8f:f2:6b:62:bb:10:9d:cd:04:ee:b4:f5: 70:2f:8a:46:9a:7a:d6:6e:ca:2d:4f:3d:32:52:be: 5d:dc:f2:0a:71:b2:96:8c:4d:1b:7a:d7:52:83:e5: 89:ba:cc:28:3b:fe:19:8d:c5:7d:33:16:72:01:74: 80:6b:24:1f:df:27:7a:f7:67:c7:6f:03:8b:f7:61: aa:5c:51:c2:1f:9c:e9:5b:bf:21:d4:15:0c:a2:f0: 9a:09:74:57:4f:18:23:55:a0:43:2b:c1:d7:e7:38: 96:79:ec:21:d3:e5:d2:c6:18:21:b1:9e:f5:f4:33: ed:bc:e7:83:c8:6f:dc:68:24:93:9b:46:7a:a6:5c: e2:d2:b5:1e:03:c4:68:2d:8c:6a:46:f3:3f:dd:e2: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:60:62:96:98:E2:45:F4:F9:F4:65:2B:69:37:C4:BF:96:98:7D:0C X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ae:e2:a0:38:92:9a:e9:5f:79:6e:d7:d4:09:b0:5c:7d:6b: b9:ae:df:dd:13:e8:bd:8f:91:37:1b:fc:d8:26:2b:49:9c:14: ff:f2:ff:af:1b:58:2d:9a:4f:e9:cb:4c:fd:87:7b:7f:9f:11: c1:96:6f:7a:9a:78:93:18:0e:3c:e2:5d:60:a0:33:fd:6b:fc: 9a:13:4e:a3:b1:f8:32:b4:db:9e:f2:e4:f8:fd:95:04:0f:ad: 96:de:17:b7:a1:8d:c2:f3:a8:e0:ee:93:54:24:12:39:69:74: 49:05:e9:9b:98:0d:81:ae:ca:8b:6c:c0:53:b3:ce:db:de:3a: 57:13:9f:4a:07:96:02:17:93:f4:7f:26:78:38:b1:5b:1c:0e: 19:a5:32:7d:fe:16:b9:46:ac:8e:d0:5e:17:cc:de:93:30:06: 5a:4a:b9:40:a5:8d:51:f5:5a:24:73:0d:91:dc:b4:85:f2:71: 31:46:75:b5:b6:fa:1b:a2:36:52:c8:69:4f:a3:a7:0f:9a:f9: ad:a8:d9:fe:78:f9:6e:b8:63:ae:29:35:75:d1:0d:43:80:45: 8f:87:5f:60:4d:6d:c4:9c:23:d0:91:e5:f1:46:8d:24:36:aa: 2c:ad:67:d8:fe:70:90:fd:29:8a:fa:ee:06:e9:06:34:1c:09: 44:66:34:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBdepHyj1k0NTKOaXL6v/5N2UCdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjAzMjYxMjMzMjhaFw0yNjAzMjcxNDMxMjhaMDMxMTAvBgNV BAMTKDI0NjA2Mjk2OThFMjQ1RjRGOUY0NjUyQjY5MzdDNEJGOTY5ODdEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxqGNCH0JlH93EXd/5tiT0Qo/ PKWxM7amP0A3aWC9A5OSaGduxO0OqAiwEcq5EJUWMSpkPa/SYLomt2jkq/eXygl+ nLnILNVn7mo6x5SkLkIV5nMPf7l+CmozBqAChABh6SlXucD8JMgamI/ya2K7EJ3N BO609XAvikaaetZuyi1PPTJSvl3c8gpxspaMTRt611KD5Ym6zCg7/hmNxX0zFnIB dIBrJB/fJ3r3Z8dvA4v3YapcUcIfnOlbvyHUFQyi8JoJdFdPGCNVoEMrwdfnOJZ5 7CHT5dLGGCGxnvX0M+2854PIb9xoJJObRnqmXOLStR4DxGgtjGpG8z/d4kyVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJGBilpjiRfT59GUraTfEv5aYfQwwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALa7ioDiSmulf eW7X1AmwXH1rua7f3RPovY+RNxv82CYrSZwU//L/rxtYLZpP6ctM/Yd7f58RwZZv epp4kxgOPOJdYKAz/Wv8mhNOo7H4MrTbnvLk+P2VBA+tlt4Xt6GNwvOo4O6TVCQS OWl0SQXpm5gNga7Ki2zAU7PO2946VxOfSgeWAheT9H8meDixWxwOGaUyff4WuUas jtBeF8zekzAGWkq5QKWNUfVaJHMNkdy0hfJxMUZ1tbb6G6I2UshpT6OnD5r5rajZ /nj5brhjrik1ddENQ4BFj4dfYE1txJwj0JHl8UaNJDaqLK1n2P5wkP0pivruBukG NBwJRGY0qA== -----END CERTIFICATE-----Generated at Fri Mar 27 02:00:57 2026 by rpki-client