$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json) Hash identifier: lCRHf9jwr87m3kbkjc0UDeTWBrB+KgzxWpUtflfOZgI= Subject key identifier: 55:5A:96:11:4B:EC:E7:82:C9:B6:3F:98:60:2A:CE:60:89:1C:95:6D Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Certificate serial: 32D066DF8EC87F9B7EE27E3AF9CE130D8EC42736 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:58:28 +0000 Manifest this update: Thu 26 Mar 2026 12:53:28 +0000 Manifest next update: Fri 27 Mar 2026 16:07:28 +0000 Files and hashes: 1: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: CqvGRx783KHNCjgufmVp4SAtPstHMAdSychCy8BCVp4=) 2: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=) 3: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=) 4: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=) 5: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=) 6: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=) 7: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d0:66:df:8e:c8:7f:9b:7e:e2:7e:3a:f9:ce:13:0d:8e:c4:27:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Validity Not Before: Mar 26 12:53:28 2026 GMT Not After : Mar 27 16:07:28 2026 GMT Subject: CN=555A96114BECE782C9B63F98602ACE60891C956D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:2c:7d:fe:30:32:39:54:9b:35:31:c0:49: 73:1e:be:6c:a2:5f:a5:6e:99:56:7e:9a:41:91:84: 8b:41:3e:5d:56:38:56:c1:68:7b:e5:ba:1c:97:ef: 96:a6:59:15:b9:ce:4b:73:fd:50:a4:41:22:e6:bd: f9:36:82:a1:7c:13:72:0a:60:35:e4:d0:5f:38:89: 1c:60:b7:d1:da:2c:13:50:c4:6f:49:8a:ad:20:4b: 6b:9b:cb:21:39:ad:24:2a:69:1a:c9:1a:f1:dd:89: 59:6e:b5:37:ac:c1:b3:42:d9:3d:a0:14:f4:50:aa: 40:c9:bb:f8:fa:55:3b:1b:7a:e0:06:b4:4d:d5:37: 8f:95:b3:3f:c7:3f:12:0a:eb:b2:6f:30:0a:75:14: 4f:d3:ec:35:a7:e7:a4:b2:c5:1e:fe:51:3c:e1:75: dd:44:6f:a9:57:7a:e1:27:b5:83:85:f8:95:4c:75: 2e:e2:7a:af:2a:26:4c:87:70:07:b1:8d:41:5d:f3: b2:c0:bf:da:40:ed:3c:02:85:74:e8:e4:90:e2:f7: 2e:aa:79:59:66:79:83:83:50:8b:64:4f:fe:05:a2: 53:f8:f4:c8:86:d5:c6:72:fd:98:80:91:39:35:e5: 44:ac:67:15:98:74:12:ea:51:98:a2:ad:dd:18:f6: a4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5A:96:11:4B:EC:E7:82:C9:B6:3F:98:60:2A:CE:60:89:1C:95:6D X509v3 Authority Key Identifier: keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:77:56:38:16:c8:ca:d1:e3:c2:3f:d0:07:51:10:a2:69:3a: f9:d3:b2:37:87:a4:81:b6:90:42:f2:4a:10:7b:bb:36:f1:6e: e7:03:ff:db:21:97:9b:24:be:6c:2d:57:dc:41:81:37:3f:bd: 10:b0:9c:ef:6b:2d:53:3c:11:b9:18:b2:ad:14:ed:21:d0:ca: 43:19:a0:cd:7b:cd:c2:78:9a:2b:4b:18:70:50:55:54:d2:9b: 3e:67:38:13:84:96:70:7f:ce:0d:c4:36:e7:9b:a5:a4:74:02: b9:cd:5f:94:34:fe:3a:7e:62:0d:7b:58:97:c3:a8:b5:09:20: f7:3c:e8:c6:44:22:08:fe:d8:af:46:d2:e7:3d:81:a0:64:5d: ff:69:51:e3:77:d2:b3:c9:2f:96:8a:ad:f9:b5:b6:99:34:54: f8:fe:e3:a4:c6:8b:9f:f8:5b:85:86:09:8a:8e:90:5f:80:3b: 3b:5a:7c:b9:0f:d6:25:c8:8b:db:ea:ed:86:6e:5b:64:df:b2: de:81:85:d7:3c:bb:a2:13:7b:8e:a9:4c:d2:d0:3d:5f:fb:aa: a1:6d:1c:db:b5:f4:9e:59:c2:99:1a:eb:7a:fc:8a:0f:36:25: 57:09:23:5d:ae:af:a4:c9:89:d9:ee:12:dc:2d:db:f6:f1:15: 49:b4:7d:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMtBm347If5t+4n46+c4TDY7EJzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw N0YxRDhCMDAeFw0yNjAzMjYxMjUzMjhaFw0yNjAzMjcxNjA3MjhaMDMxMTAvBgNV BAMTKDU1NUE5NjExNEJFQ0U3ODJDOUI2M0Y5ODYwMkFDRTYwODkxQzk1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQix9/jAyOVSbNTHASXMevmyi X6VumVZ+mkGRhItBPl1WOFbBaHvluhyX75amWRW5zktz/VCkQSLmvfk2gqF8E3IK YDXk0F84iRxgt9HaLBNQxG9Jiq0gS2ubyyE5rSQqaRrJGvHdiVlutTeswbNC2T2g FPRQqkDJu/j6VTsbeuAGtE3VN4+Vsz/HPxIK67JvMAp1FE/T7DWn56SyxR7+UTzh dd1Eb6lXeuEntYOF+JVMdS7ieq8qJkyHcAexjUFd87LAv9pA7TwChXTo5JDi9y6q eVlmeYODUItkT/4FolP49MiG1cZy/ZiAkTk15USsZxWYdBLqUZiird0Y9qSpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVVqWEUvs54LJtj+YYCrOYIkclW0wHwYDVR0j BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0 Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHdWOBbIytHj wj/QB1EQomk6+dOyN4ekgbaQQvJKEHu7NvFu5wP/2yGXmyS+bC1X3EGBNz+9ELCc 72stUzwRuRiyrRTtIdDKQxmgzXvNwniaK0sYcFBVVNKbPmc4E4SWcH/ODcQ255ul pHQCuc1flDT+On5iDXtYl8OotQkg9zzoxkQiCP7Yr0bS5z2BoGRd/2lR43fSs8kv loqt+bW2mTRU+P7jpMaLn/hbhYYJio6QX4A7O1p8uQ/WJciL2+rthm5bZN+y3oGF 1zy7ohN7jqlM0tA9X/uqoW0c27X0nlnCmRrrevyKDzYlVwkjXa6vpMmJ2e4S3C3b 9vEVSbR9Bg== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:20 2026 by rpki-client