$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft (raw, json) Hash identifier: oddiaCEcHgG/j9E3nW9lO1frB0my/vf3jjYAGVrUUkg= Subject key identifier: 0C:57:FA:28:12:34:32:94:0A:0A:DF:BE:63:9B:61:9C:0F:9F:B0:44 Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 55456A030D704F9962FEE15BB4BBC442DA1FF1BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 20:18:28 +0000 Manifest this update: Thu 26 Mar 2026 20:13:28 +0000 Manifest next update: Fri 27 Mar 2026 23:03:28 +0000 Files and hashes: 1: 3230332e3230352e3133362e302f32342d3234203d3e20313332323033.roa (hash: OfnF9Xhfcn05Z9Vv2YxArhdpQfnFDoeeAVwy6VGNRqY=) 2: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl (hash: X6/xZgk60r0aK41hqReAdOVS06zqilA4HxEwFfjTaF8=) 3: 3230332e3230352e3135352e302f32342d3234203d3e20313332323033.roa (hash: x6F31DYBvz5A5hQozeg0Spg5N0VoLFM0D7Uq4YpU5sU=) 4: 3230332e3230352e3133372e302f32342d3234203d3e20313332323033.roa (hash: Nclm7ktkTy+McaXaSR6ks6HcCvvsvvhBJnKPOTQah54=) 5: 3230332e3230352e3135392e302f32342d3234203d3e20313332323033.roa (hash: bMdixgOplBdURY+Qu1EbPIFeV69TxZq/l4CfYtJ13zQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:45:6a:03:0d:70:4f:99:62:fe:e1:5b:b4:bb:c4:42:da:1f:f1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Mar 26 20:13:28 2026 GMT Not After : Mar 27 23:03:28 2026 GMT Subject: CN=0C57FA28123432940A0ADFBE639B619C0F9FB044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:28:e5:d2:71:4e:5b:16:2e:f8:d5:04:af:85: 14:0a:f5:63:54:8f:34:dc:d5:5a:a7:05:54:28:a5: d2:b6:dc:43:df:48:55:42:4c:76:f2:23:61:d7:a3: 75:28:2a:0b:e2:e5:9f:5b:bf:9f:92:b5:a1:b6:f4: 8c:93:1f:62:1e:dc:ff:6f:4a:0e:03:53:28:75:c1: b1:84:75:d2:61:b4:5b:14:6c:60:bf:1c:de:aa:05: eb:a4:eb:cb:1d:02:f4:23:cd:67:28:a8:3d:ce:a1: 13:70:88:dc:29:61:45:59:40:9e:77:4a:65:df:65: 1a:77:82:98:1e:26:15:38:6d:8e:39:f3:c8:0b:e8: 72:d7:cb:60:0e:38:6c:74:3f:bf:af:08:12:ca:4c: 51:a9:72:35:bd:bc:e8:de:5c:f3:14:18:14:92:28: 28:b9:a0:e8:4b:5b:50:f8:cb:9a:68:df:4c:10:23: 7e:7a:47:65:e0:28:95:ab:9f:48:d2:f2:54:9b:34: 7e:00:3d:08:d3:89:62:65:b5:54:d7:b6:21:12:bb: 79:9d:db:f5:17:7f:f2:86:30:f3:39:d0:8e:82:a2: 4e:a0:66:99:76:21:40:f4:fa:05:72:63:32:06:2a: b1:7d:c3:8f:32:91:87:46:f0:74:97:0e:bc:3d:80: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:FA:28:12:34:32:94:0A:0A:DF:BE:63:9B:61:9C:0F:9F:B0:44 X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9e:71:1d:11:d9:ae:73:5a:6a:82:dd:24:9d:84:ff:a0:f0: 41:71:3f:1c:24:5a:5a:5b:7c:70:1f:a1:bb:df:d7:30:fd:f5: 4d:1c:69:6e:96:25:e0:f4:47:a0:62:61:23:d6:fd:47:e8:e2: da:7d:bf:85:19:13:f2:8b:b9:6d:13:dd:27:56:37:17:08:46: ef:98:27:03:32:1b:c6:5d:3c:f9:b8:1e:7b:dd:40:97:c1:0d: e9:12:0f:86:9b:59:f5:60:ab:a8:80:c5:22:b1:75:4b:8f:44: ee:0e:10:78:f2:a5:e7:68:d7:49:26:a6:3c:c6:d5:16:1e:2a: b2:e9:fc:a6:48:dd:d8:58:55:67:de:1e:56:98:a9:37:8f:89: ec:aa:fb:6f:45:cc:39:f7:cc:6a:21:16:63:81:5b:ac:43:cd: 1a:51:c1:66:77:c2:0a:1c:fa:34:d6:16:99:06:95:7b:8c:50: 25:f1:32:a7:23:50:fa:a2:81:55:59:fc:dc:d7:51:02:eb:c7: 46:1a:cb:07:f9:a8:00:16:cf:a4:8c:30:10:3a:e4:81:76:70: 68:ad:01:66:3d:a4:bc:ca:9a:4e:6d:bb:07:db:cd:e8:30:8f: 6e:74:b3:6c:fd:ce:ef:a3:e2:7f:4b:b8:ff:2d:7a:78:06:7e: ed:38:4f:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVUVqAw1wT5li/uFbtLvEQtof8b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjAzMjYyMDEzMjhaFw0yNjAzMjcyMzAzMjhaMDMxMTAvBgNV BAMTKDBDNTdGQTI4MTIzNDMyOTQwQTBBREZCRTYzOUI2MTlDMEY5RkIwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsKOXScU5bFi741QSvhRQK9WNU jzTc1VqnBVQopdK23EPfSFVCTHbyI2HXo3UoKgvi5Z9bv5+StaG29IyTH2Ie3P9v Sg4DUyh1wbGEddJhtFsUbGC/HN6qBeuk68sdAvQjzWcoqD3OoRNwiNwpYUVZQJ53 SmXfZRp3gpgeJhU4bY4588gL6HLXy2AOOGx0P7+vCBLKTFGpcjW9vOjeXPMUGBSS KCi5oOhLW1D4y5po30wQI356R2XgKJWrn0jS8lSbNH4APQjTiWJltVTXtiESu3md 2/UXf/KGMPM50I6Cok6gZpl2IUD0+gVyYzIGKrF9w48ykYdG8HSXDrw9gOqDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDFf6KBI0MpQKCt++Y5thnA+fsEQwHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BOTJCODE5QTJDRDVD QjEzNTlCNzA3NzZCNThFMkNGREVFNDZBRjY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM55xHRHZrnNa aoLdJJ2E/6DwQXE/HCRaWlt8cB+hu9/XMP31TRxpbpYl4PRHoGJhI9b9R+ji2n2/ hRkT8ou5bRPdJ1Y3FwhG75gnAzIbxl08+bgee91Al8EN6RIPhptZ9WCrqIDFIrF1 S49E7g4QePKl52jXSSamPMbVFh4qsun8pkjd2FhVZ94eVpipN4+J7Kr7b0XMOffM aiEWY4FbrEPNGlHBZnfCChz6NNYWmQaVe4xQJfEypyNQ+qKBVVn83NdRAuvHRhrL B/moABbPpIwwEDrkgXZwaK0BZj2kvMqaTm27B9vN6DCPbnSzbP3O76Pif0u4/y16 eAZ+7ThPjA== -----END CERTIFICATE-----Generated at Fri Mar 27 03:38:01 2026 by rpki-client