$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: blbqAiV14OuQF5c2kRgN0q+bq2ZV0hE4Ysf5B5mRvQI= Subject key identifier: 91:08:92:AF:88:CF:F0:44:05:0F:6E:5B:F5:D6:C6:E4:AC:04:BB:4D Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 02545B5B8E38710085CC466AFB48AA32E31381B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 5A Signing time: Fri 27 Mar 2026 02:48:28 +0000 Manifest this update: Fri 27 Mar 2026 02:43:28 +0000 Manifest next update: Sat 28 Mar 2026 05:57:28 +0000 Files and hashes: 1: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: 6ylEgp8EsXKHiSmZjXirXrAunw+G59KJdWY3WLjMkA0=) 2: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 3: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:54:5b:5b:8e:38:71:00:85:cc:46:6a:fb:48:aa:32:e3:13:81:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Mar 27 02:43:28 2026 GMT Not After : Mar 28 05:57:28 2026 GMT Subject: CN=910892AF88CFF044050F6E5BF5D6C6E4AC04BB4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:68:8f:65:fa:d8:83:0c:2f:d1:b4:a4:f5:6d: ba:00:b4:44:ab:5d:6f:59:54:f7:53:06:23:80:1c: 8c:c0:c1:e6:12:b3:bb:ec:3a:bb:6b:62:91:f5:31: 38:ed:e5:23:11:0c:02:b0:77:6a:2d:11:b0:bf:b2: 5a:34:49:af:c1:ba:b2:04:ca:b0:bc:96:e9:be:16: 34:33:dd:54:f7:1a:de:a6:84:e4:ba:6f:c4:f4:60: d6:b4:63:9a:4a:9f:31:c2:12:5e:6a:80:6d:cd:b3: 89:43:f2:bd:3d:d6:66:49:2c:e0:e0:f6:2b:7c:e2: 9d:58:76:9b:bc:b0:70:93:62:2e:1f:73:8d:7a:77: 3a:ab:e4:ab:26:5b:2a:f2:26:c1:c5:24:4e:f3:68: d1:54:54:f2:11:e5:be:f0:8c:ed:d3:80:70:b8:5a: 47:e0:8a:90:31:a6:1f:ba:c7:4b:6d:cc:a7:39:05: 3a:5e:70:b9:78:30:46:6c:6c:5c:ee:96:d0:f9:82: b0:a0:d6:b5:34:ba:57:10:9a:da:ed:e3:13:80:67: ff:83:d0:aa:f0:df:a5:24:22:70:68:d6:fe:4f:9f: a6:d3:e9:3c:32:bb:52:9d:a7:d6:2b:8f:c0:13:87: 12:cb:90:64:e1:09:5b:1f:55:f0:8c:53:cc:e2:16: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:08:92:AF:88:CF:F0:44:05:0F:6E:5B:F5:D6:C6:E4:AC:04:BB:4D X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7c:2b:99:07:6c:d5:2f:06:5b:40:d6:3b:12:e1:82:ea:f7: f1:44:86:78:88:f9:84:22:5a:c7:54:04:c9:7f:07:11:fd:8f: 87:11:40:9c:c6:49:e3:17:7b:6c:d1:9e:cd:b5:02:04:6e:8d: e0:a8:93:34:b9:70:40:96:62:85:14:61:b8:00:18:4a:77:43: 41:59:d7:c6:9d:c9:21:a1:b0:0f:e7:1c:33:c0:bd:6b:39:03: b9:54:6b:a5:ab:d2:40:9a:1c:ad:84:be:c7:15:e7:da:07:d9: c5:cf:71:92:fd:57:7d:4f:bc:ad:45:ee:50:30:f1:8d:29:39: bd:16:81:4c:8e:0c:7d:01:56:26:fa:bb:77:95:d3:72:59:cd: 37:1e:87:18:7a:40:e0:aa:0a:44:cf:53:76:24:31:3b:d1:4f: d4:a7:80:1b:a7:18:ad:3f:38:12:94:43:10:38:59:0a:07:4c: 8f:8e:0d:55:c4:05:98:30:68:8a:45:ab:30:2d:f6:db:48:8d: 56:26:48:0c:8c:56:66:42:7a:fd:af:26:9f:bb:98:80:92:cf: d7:01:a4:3a:47:09:9e:33:39:71:cb:01:e2:dd:7f:d8:38:8a: 7c:e5:ec:13:c0:33:78:3a:89:7b:0c:cf:9d:cf:29:e1:7e:12: 89:71:0a:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAlRbW444cQCFzEZq+0iqMuMTgbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjAzMjcwMjQzMjhaFw0yNjAzMjgwNTU3MjhaMDMxMTAvBgNV BAMTKDkxMDg5MkFGODhDRkYwNDQwNTBGNkU1QkY1RDZDNkU0QUMwNEJCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVaI9l+tiDDC/RtKT1bboAtESr XW9ZVPdTBiOAHIzAweYSs7vsOrtrYpH1MTjt5SMRDAKwd2otEbC/slo0Sa/BurIE yrC8lum+FjQz3VT3Gt6mhOS6b8T0YNa0Y5pKnzHCEl5qgG3Ns4lD8r091mZJLODg 9it84p1Ydpu8sHCTYi4fc416dzqr5KsmWyryJsHFJE7zaNFUVPIR5b7wjO3TgHC4 WkfgipAxph+6x0ttzKc5BTpecLl4MEZsbFzultD5grCg1rU0ulcQmtrt4xOAZ/+D 0Krw36UkInBo1v5Pn6bT6Twyu1Kdp9Yrj8AThxLLkGThCVsfVfCMU8ziFkk/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkQiSr4jP8EQFD25b9dbG5KwEu00wHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHwrmQds1S8G W0DWOxLhgur38USGeIj5hCJax1QEyX8HEf2PhxFAnMZJ4xd7bNGezbUCBG6N4KiT NLlwQJZihRRhuAAYSndDQVnXxp3JIaGwD+ccM8C9azkDuVRrpavSQJocrYS+xxXn 2gfZxc9xkv1XfU+8rUXuUDDxjSk5vRaBTI4MfQFWJvq7d5XTclnNNx6HGHpA4KoK RM9TdiQxO9FP1KeAG6cYrT84EpRDEDhZCgdMj44NVcQFmDBoikWrMC3220iNViZI DIxWZkJ6/a8mn7uYgJLP1wGkOkcJnjM5ccsB4t1/2DiKfOXsE8AzeDqJewzPnc8p 4X4SiXEKgA== -----END CERTIFICATE-----Generated at Fri Mar 27 06:22:18 2026 by rpki-client