$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: vZC0cfiVbKMyjMqJoRIULqNEeY1Reiu+aZ+bw3Y4KoA= Subject key identifier: 85:91:EC:0E:6C:13:1A:F9:74:D4:DA:A5:5D:84:DA:A8:B1:19:B8:F0 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 798C0FB25E6C46A47B2348B8902F43A68A42D751 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 01:43:28 +0000 Manifest this update: Thu 26 Mar 2026 01:38:28 +0000 Manifest next update: Fri 27 Mar 2026 02:57:28 +0000 Files and hashes: 1: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) 2: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: QNlpKsx3+PAPHwobIXAXNh8q4r7xW18K96pXKorEuc8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 02:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8c:0f:b2:5e:6c:46:a4:7b:23:48:b8:90:2f:43:a6:8a:42:d7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Mar 26 01:38:28 2026 GMT Not After : Mar 27 02:57:28 2026 GMT Subject: CN=8591EC0E6C131AF974D4DAA55D84DAA8B119B8F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:48:7e:21:c5:91:1c:6a:4e:31:58:26:c3: 8a:50:92:8b:86:26:e2:f3:e2:9e:3a:0e:bb:70:f1: 00:a3:cf:a0:ad:8e:47:ed:6b:2d:1a:ff:b4:f3:6d: d7:d8:c5:bd:36:02:ea:67:ad:62:ad:34:fb:5e:04: f9:82:95:83:83:f9:06:b3:fa:82:52:5d:5f:6a:9c: eb:bd:b2:87:b7:dc:40:8c:83:5a:fa:af:30:80:b9: be:13:15:3b:20:e9:98:f6:9d:86:d1:69:4d:cd:24: 67:3e:9b:fa:e2:c7:9f:6a:f7:ee:31:95:2a:c8:64: 07:6d:3f:e9:91:3f:82:fd:0d:63:07:f8:86:5e:df: 07:4e:6b:d7:d6:f5:ed:67:a8:6c:a6:7c:8e:e1:41: cd:65:e5:54:0a:df:97:fb:04:dd:6f:30:bb:c7:de: 20:e0:49:c1:c2:50:bf:25:4a:2d:27:b6:ed:aa:d5: f4:10:ec:f3:b8:27:90:55:00:7e:70:0c:01:35:fc: 96:88:5f:a4:fd:ce:8d:16:65:31:08:60:25:dc:f6: f5:eb:53:2e:ca:45:f1:2e:5e:09:5f:f9:37:1a:ea: c1:fe:fe:9c:2e:d5:a2:6b:b7:64:e0:04:e2:05:d6: 55:1f:81:13:04:3c:e7:51:6a:78:6c:ad:11:2c:e4: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:91:EC:0E:6C:13:1A:F9:74:D4:DA:A5:5D:84:DA:A8:B1:19:B8:F0 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c2:73:ba:22:f8:4e:e0:a2:b0:42:22:88:ff:00:4a:ae:76: 55:ce:a0:1f:32:fb:56:a5:d0:66:6b:1b:a0:a2:48:80:e0:26: e5:f2:9f:fa:5a:11:b7:b3:f2:ab:41:95:0c:38:c3:33:87:2d: 52:e5:98:9b:3e:f8:a9:56:5a:3f:9b:95:c4:6a:bc:d0:1d:e3: 2c:57:ae:04:ac:13:df:c4:c5:46:f2:e7:31:c5:50:81:1f:ba: 04:d0:18:f1:ab:90:e5:83:84:67:b0:7d:21:a2:22:32:72:17: f5:01:fb:85:0b:b8:c2:54:06:7f:9b:89:ee:97:ff:80:2b:91: e1:da:72:78:6c:1d:c7:84:93:06:0d:d0:59:2a:5e:58:49:bc: 3b:87:f1:d4:ae:9c:69:6f:a1:0a:61:66:6f:fe:56:4b:69:b7: c0:22:da:4e:2c:29:83:bf:c9:1e:fc:a0:81:cd:79:03:b2:50: 3a:d6:fe:ea:31:8b:8f:e2:46:53:8b:b2:92:c4:2c:c8:91:93: fa:f9:2a:87:d1:ce:d4:c0:62:a0:63:b9:50:9e:61:d9:7d:b0: 92:d5:15:75:eb:5d:a7:e1:76:65:ae:2d:c7:6c:2c:7d:92:9d: 07:67:61:80:fb:63:1a:1d:e3:4c:73:b9:8c:95:c4:01:fc:fa: 86:1c:b8:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeYwPsl5sRqR7I0i4kC9DpopC11EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjAzMjYwMTM4MjhaFw0yNjAzMjcwMjU3MjhaMDMxMTAvBgNV BAMTKDg1OTFFQzBFNkMxMzFBRjk3NEQ0REFBNTVEODREQUE4QjExOUI4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vUh+IcWRHGpOMVgmw4pQkouG JuLz4p46Drtw8QCjz6Ctjkftay0a/7TzbdfYxb02AupnrWKtNPteBPmClYOD+Qaz +oJSXV9qnOu9soe33ECMg1r6rzCAub4TFTsg6Zj2nYbRaU3NJGc+m/rix59q9+4x lSrIZAdtP+mRP4L9DWMH+IZe3wdOa9fW9e1nqGymfI7hQc1l5VQK35f7BN1vMLvH 3iDgScHCUL8lSi0ntu2q1fQQ7PO4J5BVAH5wDAE1/JaIX6T9zo0WZTEIYCXc9vXr Uy7KRfEuXglf+Tca6sH+/pwu1aJrt2TgBOIF1lUfgRMEPOdRanhsrREs5C3XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhZHsDmwTGvl01NqlXYTaqLEZuPAwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsJzuiL4TuCi sEIiiP8ASq52Vc6gHzL7VqXQZmsboKJIgOAm5fKf+loRt7Pyq0GVDDjDM4ctUuWY mz74qVZaP5uVxGq80B3jLFeuBKwT38TFRvLnMcVQgR+6BNAY8auQ5YOEZ7B9IaIi MnIX9QH7hQu4wlQGf5uJ7pf/gCuR4dpyeGwdx4STBg3QWSpeWEm8O4fx1K6caW+h CmFmb/5WS2m3wCLaTiwpg7/JHvyggc15A7JQOtb+6jGLj+JGU4uyksQsyJGT+vkq h9HO1MBioGO5UJ5h2X2wktUVdetdp+F2Za4tx2wsfZKdB2dhgPtjGh3jTHO5jJXE Afz6hhy4uA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:00 2026 by rpki-client