$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft File: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json) Hash identifier: VCbiMwtZ/kyyyfUUPSd9GHiwxsMlssI0I50yH4xOqco= Subject key identifier: 6D:E5:D8:92:53:8E:9A:7C:89:0D:4A:EC:59:52:91:61:99:17:EE:E6 Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 6076BB2864CAA7D4340769D72FB66413C345AA94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 04:23:28 +0000 Manifest this update: Thu 26 Mar 2026 04:18:28 +0000 Manifest next update: Fri 27 Mar 2026 08:11:28 +0000 Files and hashes: 1: 3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa (hash: y6H54bzWpbbgzpsGKzSFZwssxd2MOGR7qkMWJLAw/ls=) 2: 3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa (hash: PGdlBkvIO8J6pjhNUuYTr3nEOg0TKMZhDugFcUldVRM=) 3: 3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa (hash: 0TeDafE41i2d4QLC5hOPZb7MUJrvUFIXOE/K9ScN3/I=) 4: 3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa (hash: HDVqXdA4D8OhtaouQqSuZCb+F1lHRss6pFhHi0qkluk=) 5: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: 9kN1uqIYaCZhkPj4n85u5eQjWsweflOgQa9qOBffzzE=) 6: 3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa (hash: 0lrHVMK2Zz6L13Vbn9041R65XWn4Q9Io4S10ZHxxpeE=) 7: 3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa (hash: XtA9p9+3iEqJl9oNL4XSEWEUSb6vE+lI29hPVM6jgl8=) 8: 3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa (hash: LJLHnynahTuEBARxNRPN8UwyfsQaRWudvGF9ghrX2DQ=) 9: 3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa (hash: c/V9C/LDSLsX3ipXcneziAHRUZXaaPLA6P0kk/Q1q+w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:76:bb:28:64:ca:a7:d4:34:07:69:d7:2f:b6:64:13:c3:45:aa:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Mar 26 04:18:28 2026 GMT Not After : Mar 27 08:11:28 2026 GMT Subject: CN=6DE5D892538E9A7C890D4AEC595291619917EEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:4d:36:11:3a:ab:7b:c5:81:77:0a:9e:6f: 6c:d7:f2:dc:e1:8a:82:7f:ff:e8:87:e7:b4:de:a0: a0:78:be:69:53:2d:d0:49:87:3c:ac:ea:cd:6f:20: 32:08:98:f1:5d:7f:8b:11:09:34:a6:53:00:20:7d: 1a:c2:79:a9:be:c5:a7:63:b7:d0:e6:0f:11:a5:d6: 9d:26:7f:42:34:13:18:96:8a:92:11:43:f7:8b:16: 63:9e:2d:da:f4:b8:88:aa:ab:bb:e5:d9:96:09:6e: 14:71:5b:27:ff:d3:0b:a8:63:5a:96:a4:a3:82:ae: 37:8b:5f:ab:47:5a:4c:ff:2e:c7:4c:fd:30:5d:51: be:cd:5a:9e:46:53:dd:7e:ed:75:68:ca:e2:0c:09: 61:70:44:1a:39:6d:61:4e:bd:35:83:c0:9d:c4:c2: 7a:8c:ed:d6:50:70:2f:f8:51:6b:eb:f1:fe:7a:c1: 89:1f:e3:24:24:68:e3:a6:39:8a:0b:f3:7f:ad:20: e4:05:42:ff:80:cd:7e:b6:f3:cc:6b:62:87:a8:05: b2:d7:c8:4c:4c:81:49:01:2a:40:7d:92:c9:a5:b0: d3:0f:8b:05:19:62:d7:a6:26:4d:f7:59:3d:a4:80: 2e:d0:cd:86:f6:eb:ce:fe:7f:10:f5:a9:93:7f:71: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E5:D8:92:53:8E:9A:7C:89:0D:4A:EC:59:52:91:61:99:17:EE:E6 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c0:dd:ea:27:ac:80:ec:75:8c:4b:a6:52:af:45:58:d1:ae: 9e:5e:34:18:44:59:63:a1:9e:6c:5a:52:ab:0a:6e:d2:4b:17: 8d:b4:9d:0a:0f:98:65:47:da:21:25:e0:71:ec:6d:a4:e6:57: f2:d7:0a:52:97:63:49:00:b6:df:ca:1e:a6:31:81:d8:44:12: d7:f1:40:f1:a6:87:1a:1b:11:14:ce:18:6a:8a:f3:37:e3:66: 10:d2:3a:ee:24:c6:15:e2:25:fc:a7:27:2e:2e:ea:f2:9e:7b: 4c:50:31:68:f8:63:c2:bc:15:0b:5f:10:b1:1d:56:50:4d:24: cc:40:e5:92:7d:6d:7f:94:fb:17:9c:a4:2f:e8:1f:81:08:66: cb:c2:8a:26:53:65:35:61:98:f3:8f:7d:ba:7e:51:7a:46:41: 21:2a:41:64:72:ae:b2:46:56:b3:ec:36:c2:9a:05:ea:4a:ae: a1:a1:21:56:71:31:eb:67:6d:e2:eb:cc:88:ee:b5:48:dc:58: bf:51:c0:95:ab:78:4b:0d:7d:d9:74:f6:5f:da:81:4d:6d:ed: 04:38:51:26:03:c7:6c:c5:97:72:80:84:6c:9c:f8:3d:8f:c2: 5e:1c:6e:20:d3:2e:20:3c:2f:d3:78:fe:3d:94:a3:ff:f9:1a: d8:92:34:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYHa7KGTKp9Q0B2nXL7ZkE8NFqpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjAzMjYwNDE4MjhaFw0yNjAzMjcwODExMjhaMDMxMTAvBgNV BAMTKDZERTVEODkyNTM4RTlBN0M4OTBENEFFQzU5NTI5MTYxOTkxN0VFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcok02ETqre8WBdwqeb2zX8tzh ioJ//+iH57TeoKB4vmlTLdBJhzys6s1vIDIImPFdf4sRCTSmUwAgfRrCeam+xadj t9DmDxGl1p0mf0I0ExiWipIRQ/eLFmOeLdr0uIiqq7vl2ZYJbhRxWyf/0wuoY1qW pKOCrjeLX6tHWkz/LsdM/TBdUb7NWp5GU91+7XVoyuIMCWFwRBo5bWFOvTWDwJ3E wnqM7dZQcC/4UWvr8f56wYkf4yQkaOOmOYoL83+tIOQFQv+AzX6288xrYoeoBbLX yExMgUkBKkB9ksmlsNMPiwUZYtemJk33WT2kgC7QzYb2687+fxD1qZN/cd2VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbeXYklOOmnyJDUrsWVKRYZkX7uYwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8yMzM5OTIxMzYzRjcw MDNDM0RFQjQ3RUQ4NTM0QUZFMUY0ODJEOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcDd6iesgOx1 jEumUq9FWNGunl40GERZY6GebFpSqwpu0ksXjbSdCg+YZUfaISXgcextpOZX8tcK UpdjSQC238oepjGB2EQS1/FA8aaHGhsRFM4YaorzN+NmENI67iTGFeIl/KcnLi7q 8p57TFAxaPhjwrwVC18QsR1WUE0kzEDlkn1tf5T7F5ykL+gfgQhmy8KKJlNlNWGY 8499un5RekZBISpBZHKuskZWs+w2wpoF6kquoaEhVnEx62dt4uvMiO61SNxYv1HA lat4Sw192XT2X9qBTW3tBDhRJgPHbMWXcoCEbJz4PY/CXhxuINMuIDwv03j+PZSj //ka2JI0Kw== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:33 2026 by rpki-client