$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: P21gE3QN3Q0S/W0LTW2MKdAr3IycQLafKwsJMoNr8gs= Subject key identifier: 68:CC:08:66:16:E3:95:17:92:CF:0B:1B:BF:13:B2:F2:E2:E4:96:8D Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 1E43FB4D5B3DB59A1EDF8E524F18FBF708710480 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 03:28:28 +0000 Manifest this update: Thu 26 Mar 2026 03:23:28 +0000 Manifest next update: Fri 27 Mar 2026 04:49:28 +0000 Files and hashes: 1: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: igVSxIKEX7jvyswSHvelhQ+6Z5gml2r1ORbzEorb240=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:43:fb:4d:5b:3d:b5:9a:1e:df:8e:52:4f:18:fb:f7:08:71:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Mar 26 03:23:28 2026 GMT Not After : Mar 27 04:49:28 2026 GMT Subject: CN=68CC086616E3951792CF0B1BBF13B2F2E2E4968D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:43:b7:59:01:8b:1c:03:87:ba:ce:cd:e9: 6e:92:a1:90:13:e3:6c:cc:8d:05:14:9c:b1:7d:4c: d7:a5:3f:57:df:ff:bc:e3:00:3e:7a:08:26:e7:26: 3d:2b:77:e5:13:68:95:67:53:57:6a:d5:4a:5b:8b: 63:d0:68:a6:d3:bf:c5:d7:50:59:52:f9:4a:33:d4: 07:b1:bd:8e:0e:60:83:a4:b2:ec:b3:8c:c5:ab:44: 92:61:ac:3e:4a:17:b2:2d:6d:31:28:2f:9f:16:83: fd:46:7e:9d:70:b8:69:db:69:37:52:94:39:54:f3: b8:c1:0e:2b:10:90:34:47:93:74:70:4e:6c:9f:7c: b1:c5:13:1c:16:14:49:df:a5:77:ec:c7:a4:b4:3f: 4e:1e:28:91:c8:62:ed:26:33:b6:fa:88:41:9c:87: f9:68:75:f6:fa:63:97:2d:38:3b:33:3f:b6:f9:4a: 8a:0a:ec:08:97:61:73:6b:52:cc:2c:ab:7a:5e:55: 98:0f:bc:82:c1:dc:68:a6:7d:5d:47:79:d1:bc:bb: 50:f3:f9:c5:e5:ae:a3:91:f9:16:4e:57:bf:e5:5f: 71:c8:5b:8d:7b:1d:f6:9b:16:14:68:26:da:61:bd: 13:59:04:64:27:62:65:70:81:11:a3:a1:27:b7:5d: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CC:08:66:16:E3:95:17:92:CF:0B:1B:BF:13:B2:F2:E2:E4:96:8D X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9a:21:9d:7a:af:e4:20:f3:25:d5:f4:5e:32:45:43:76:65: 50:42:2b:34:14:62:78:a0:25:46:d6:20:5a:63:9e:76:e4:29: f6:b1:56:20:48:27:d0:bb:57:39:c7:18:a4:cd:1c:00:16:ed: cf:bf:9e:b9:08:48:02:9b:e6:95:13:55:f3:8b:93:2d:02:e1: e0:f2:8e:64:68:7d:45:2e:bb:ee:04:c2:3c:c5:ad:e6:81:8b: 63:f6:7b:ad:f3:1e:86:c6:2f:d5:8e:0c:00:c9:11:b6:2c:46: 9d:00:b6:76:ef:f6:2e:82:43:99:d9:32:03:31:d2:e4:0b:fa: 6a:b7:52:5b:b6:5f:8a:3d:18:a7:24:c4:20:7a:12:02:df:ec: 3f:98:30:e9:a4:5f:b6:76:22:b3:8d:c1:b9:55:38:67:3f:97: e8:6d:fe:53:16:da:6e:46:85:9e:6b:ca:9d:1f:38:7d:d6:b9: 7e:00:4d:53:ba:bb:d3:3d:50:1f:f6:4c:a2:99:b9:51:ce:d6: 0b:24:30:b6:e3:2a:45:2c:af:fc:ff:ed:52:da:29:5f:ba:3d: 34:14:0c:09:ed:23:2f:2e:ae:b4:8c:47:b9:e2:d8:c2:3f:32: 89:67:c2:40:c4:be:69:cb:39:98:9a:38:69:18:f0:30:d5:7a: af:88:f8:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHkP7TVs9tZoe345STxj79whxBIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjAzMjYwMzIzMjhaFw0yNjAzMjcwNDQ5MjhaMDMxMTAvBgNV BAMTKDY4Q0MwODY2MTZFMzk1MTc5MkNGMEIxQkJGMTNCMkYyRTJFNDk2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4UO3WQGLHAOHus7N6W6SoZAT 42zMjQUUnLF9TNelP1ff/7zjAD56CCbnJj0rd+UTaJVnU1dq1Upbi2PQaKbTv8XX UFlS+Uoz1AexvY4OYIOksuyzjMWrRJJhrD5KF7ItbTEoL58Wg/1Gfp1wuGnbaTdS lDlU87jBDisQkDRHk3RwTmyffLHFExwWFEnfpXfsx6S0P04eKJHIYu0mM7b6iEGc h/lodfb6Y5ctODszP7b5SooK7AiXYXNrUswsq3peVZgPvILB3GimfV1HedG8u1Dz +cXlrqOR+RZOV7/lX3HIW417HfabFhRoJtphvRNZBGQnYmVwgRGjoSe3Xd/FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaMwIZhbjlReSzwsbvxOy8uLklo0wHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5ohnXqv5CDz JdX0XjJFQ3ZlUEIrNBRieKAlRtYgWmOeduQp9rFWIEgn0LtXOccYpM0cABbtz7+e uQhIApvmlRNV84uTLQLh4PKOZGh9RS677gTCPMWt5oGLY/Z7rfMehsYv1Y4MAMkR tixGnQC2du/2LoJDmdkyAzHS5Av6ardSW7Zfij0YpyTEIHoSAt/sP5gw6aRftnYi s43BuVU4Zz+X6G3+UxbabkaFnmvKnR84fda5fgBNU7q70z1QH/ZMopm5Uc7WCyQw tuMqRSyv/P/tUtopX7o9NBQMCe0jLy6utIxHueLYwj8yiWfCQMS+acs5mJo4aRjw MNV6r4j4Lg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:33:52 2026 by rpki-client