$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft (raw, json) Hash identifier: a/h46CVxpOp7f/N+C4+OesC2h91w+lEESUoJoAZiYTA= Subject key identifier: EE:CA:B9:1B:19:5B:CA:6C:C1:45:EC:7C:EA:43:65:05:FD:1D:01:E4 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 487D2CABC7BCCDED520EC1947968F537BB118BDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 09:48:28 +0000 Manifest this update: Thu 26 Mar 2026 09:43:28 +0000 Manifest next update: Fri 27 Mar 2026 12:48:28 +0000 Files and hashes: 1: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl (hash: ijqLTTldnaCO155gTUC69eq2HIehUcrJfonsG0ut0NE=) 2: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (hash: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c=) 3: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (hash: B9+LIF0F2jOmyBOP5MaMAIvmuw1Q1Po92LV0UMNnbWk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7d:2c:ab:c7:bc:cd:ed:52:0e:c1:94:79:68:f5:37:bb:11:8b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Mar 26 09:43:28 2026 GMT Not After : Mar 27 12:48:28 2026 GMT Subject: CN=EECAB91B195BCA6CC145EC7CEA436505FD1D01E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:c5:07:b1:49:d3:58:09:92:e0:1a:91:9e: bc:f4:ef:f2:81:97:bf:cf:6a:54:71:f1:b9:7f:54: df:c6:1a:4a:f4:60:02:d1:34:1b:f8:41:3a:9d:13: a4:3d:62:14:0c:3f:e8:db:09:1e:58:8a:28:a1:fb: 4c:37:10:c0:b8:0c:f3:e0:81:fb:ee:6f:92:50:e0: c4:02:38:38:53:e9:ce:52:8e:60:6a:2a:ae:45:ed: c7:de:65:df:12:a6:50:da:9a:c3:a2:60:56:62:32: 95:c2:c3:81:fb:c8:5c:9b:78:63:40:c1:c8:cd:0e: 71:15:b7:9a:86:46:9f:38:01:04:aa:eb:0f:f9:79: 12:54:c2:49:9d:4e:d0:d8:9a:a7:6b:12:8c:c6:93: a8:ca:88:33:ec:98:4e:5c:36:da:e9:ca:11:5d:0a: 9d:6c:13:aa:fb:9a:d7:85:c2:24:59:47:3c:ea:cc: bf:d5:80:49:41:4a:12:fb:f9:df:83:ff:ec:9c:51: 3f:d6:d5:6d:7f:4b:22:33:7e:e7:6f:8b:f9:df:70: 55:53:c5:3c:5d:06:d0:36:ff:c1:d4:2b:02:6e:8d: 34:b0:74:f0:54:6a:3a:a3:8e:6b:1c:b7:1a:e4:b8: b9:5f:31:d7:51:5e:95:6c:67:c7:9f:a5:30:fe:85: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:B9:1B:19:5B:CA:6C:C1:45:EC:7C:EA:43:65:05:FD:1D:01:E4 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:65:58:79:2f:f3:9b:38:0c:6e:0c:34:cc:4f:ef:53:ee:9e: 78:81:44:a7:2f:15:49:3e:52:5e:34:99:06:80:74:5c:77:38: 9d:50:88:64:0e:43:1e:6c:87:41:39:9a:e9:d6:b1:c0:e0:39: dd:31:3e:4f:11:4a:29:ce:cc:86:92:4a:89:b4:54:74:ef:a6: b4:14:bc:09:11:66:cd:29:47:4e:a8:5e:2c:80:74:b7:69:eb: 6c:83:29:7e:f0:5d:6b:87:f9:ab:83:23:b5:91:50:b9:a5:99: 45:7e:ca:04:3e:ca:6a:09:1d:59:4f:13:2e:1a:f8:cb:18:e1: 59:69:b5:8d:33:56:2d:d6:e9:e8:2f:cb:75:84:b7:10:89:da: 4b:e6:f0:61:d0:a4:45:f9:ba:52:e8:81:cf:98:ce:ec:80:3b: 3a:9c:e7:07:f4:0b:f3:a5:ab:40:04:f8:e0:9e:8e:3f:db:47: 60:35:11:6d:1f:84:6a:bc:7e:6e:63:55:a9:18:53:ce:aa:95: 7a:f5:dd:35:f3:6c:b1:f0:67:c6:3a:60:4c:95:ad:50:63:2f: 55:f1:c1:49:ca:35:f2:6e:3c:25:60:6f:d6:09:ed:13:dc:bc: 69:7c:04:8d:32:46:5d:12:ed:d4:eb:1e:24:a7:48:92:f1:b8: da:c1:6b:ed -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSH0sq8e8ze1SDsGUeWj1N7sRi9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjAzMjYwOTQzMjhaFw0yNjAzMjcxMjQ4MjhaMDMxMTAvBgNV BAMTKEVFQ0FCOTFCMTk1QkNBNkNDMTQ1RUM3Q0VBNDM2NTA1RkQxRDAxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIsUHsUnTWAmS4BqRnrz07/KB l7/PalRx8bl/VN/GGkr0YALRNBv4QTqdE6Q9YhQMP+jbCR5Yiiih+0w3EMC4DPPg gfvub5JQ4MQCODhT6c5SjmBqKq5F7cfeZd8SplDamsOiYFZiMpXCw4H7yFybeGNA wcjNDnEVt5qGRp84AQSq6w/5eRJUwkmdTtDYmqdrEozGk6jKiDPsmE5cNtrpyhFd Cp1sE6r7mteFwiRZRzzqzL/VgElBShL7+d+D/+ycUT/W1W1/SyIzfudvi/nfcFVT xTxdBtA2/8HUKwJujTSwdPBUajqjjmsctxrkuLlfMddRXpVsZ8efpTD+hUwdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7sq5GxlbymzBRex86kNlBf0dAeQwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC81REY4MDg2RDNFRkEx NzY0ODdBMUMzNzZCN0JDQ0YzRTgzQUIyMzM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmVYeS/zmzgM bgw0zE/vU+6eeIFEpy8VST5SXjSZBoB0XHc4nVCIZA5DHmyHQTma6daxwOA53TE+ TxFKKc7MhpJKibRUdO+mtBS8CRFmzSlHTqheLIB0t2nrbIMpfvBda4f5q4MjtZFQ uaWZRX7KBD7KagkdWU8TLhr4yxjhWWm1jTNWLdbp6C/LdYS3EInaS+bwYdCkRfm6 UuiBz5jO7IA7OpznB/QL86WrQAT44J6OP9tHYDURbR+Earx+bmNVqRhTzqqVevXd NfNssfBnxjpgTJWtUGMvVfHBSco18m48JWBv1gntE9y8aXwEjTJGXRLt1OseJKdI kvG42sFr7Q== -----END CERTIFICATE-----Generated at Fri Mar 27 06:21:24 2026 by rpki-client