$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json) Hash identifier: 2ShriqwsE5Bm9pGOFCj/GlrZ3q7JqgqPxkolI4dvkIc= Subject key identifier: 21:66:02:92:23:AC:C0:F5:25:BE:B1:5B:84:18:68:11:76:33:47:1A Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 2B9816098DE2BA95579F72A55CDA7743ECD9A28F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft Manifest number: 58 Signing time: Wed 25 Mar 2026 18:18:27 +0000 Manifest this update: Wed 25 Mar 2026 18:13:27 +0000 Manifest next update: Thu 26 Mar 2026 22:17:27 +0000 Files and hashes: 1: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: xJbyCM1a1euO2yp6hcCywBDxqxlzwuwh0A7z9ZHNjPI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 22:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:98:16:09:8d:e2:ba:95:57:9f:72:a5:5c:da:77:43:ec:d9:a2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Mar 25 18:13:27 2026 GMT Not After : Mar 26 22:17:27 2026 GMT Subject: CN=2166029223ACC0F525BEB15B841868117633471A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:78:fa:c3:aa:c6:6b:03:09:3e:26:c0:c9: 0b:29:6a:3f:f6:07:bf:c8:2e:ca:35:48:07:f3:ac: 2b:7c:7d:4d:d6:8f:07:c7:2d:a5:e5:01:c3:fb:98: 23:8b:00:4c:ef:4a:88:f1:f5:04:e1:e4:17:98:fa: 63:73:30:03:46:a2:01:e4:71:71:4d:ee:24:3e:84: 5e:9a:d4:69:ac:5c:8f:80:2c:06:f0:a2:5b:38:7b: 2e:32:f5:5b:52:1e:60:d2:8a:73:4a:f9:b9:d8:c7: f4:e2:f8:a3:22:7b:c2:96:8b:39:26:0c:3e:7d:94: 57:5e:d3:76:81:60:44:50:21:e2:63:ae:e2:18:e9: 5d:52:29:d9:b2:62:2d:9d:c7:74:29:9a:3d:44:47: ae:ce:97:2a:91:1f:73:4c:36:12:41:fc:4f:7d:12: fb:ff:27:e3:76:4d:e6:a1:31:a7:7c:38:87:19:0c: f5:dd:92:11:1c:dd:ce:9d:14:61:da:f8:ab:c7:bb: 2e:b0:b0:fa:b9:91:35:ea:e7:99:a2:9e:de:4b:fc: d4:de:02:a1:b5:92:82:1b:67:b2:ef:f7:de:07:73: bf:c0:a9:33:09:14:cd:d5:5a:cc:f3:cc:ca:eb:c2: 3c:95:1f:03:5d:3f:06:a8:d6:2c:61:0c:14:32:24: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:66:02:92:23:AC:C0:F5:25:BE:B1:5B:84:18:68:11:76:33:47:1A X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:26:a3:c9:4c:86:95:14:a4:cd:79:ab:c9:5f:da:4b:0e:c2: 91:63:61:39:7e:c9:7e:b7:a7:3b:3a:27:bb:af:e7:2b:b4:be: 74:8d:9f:84:df:0b:79:42:d9:ec:f6:b8:32:2f:26:1f:1d:1f: dd:55:66:e1:88:df:24:ec:5b:da:74:b9:e1:be:e2:7a:1d:ae: 8d:a8:7a:af:08:dd:86:89:fd:37:c0:c8:47:d0:9d:5e:58:ba: fc:a5:05:64:58:6c:ee:9a:ce:52:f0:0f:ad:74:fd:18:10:6e: 7b:72:21:6a:49:e1:ea:77:3e:bf:02:1f:f2:b2:2c:6c:f1:63: 6c:38:8d:8a:0b:79:67:cd:0d:ec:78:68:81:db:77:9e:07:7a: 18:10:0c:3b:5e:7c:08:72:86:1b:e3:e7:64:ee:57:7e:07:fc: be:18:c1:71:b0:fa:53:1c:2c:85:de:6e:1a:f2:67:13:64:22: 6d:8e:4b:11:84:79:f4:83:62:a2:6a:61:e4:57:da:88:7a:e3: e5:b1:59:2c:88:8a:b1:0f:f6:73:2d:c4:50:9f:33:f9:95:39: ee:fb:e7:24:45:2e:15:98:6d:38:e0:e0:92:ed:53:a5:cf:1d: b8:e6:5d:5b:c7:d6:57:36:35:b3:3d:17:5e:cd:4f:2e:39:ad: 2a:53:67:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK5gWCY3iupVXn3KlXNp3Q+zZoo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjAzMjUxODEzMjdaFw0yNjAzMjYyMjE3MjdaMDMxMTAvBgNV BAMTKDIxNjYwMjkyMjNBQ0MwRjUyNUJFQjE1Qjg0MTg2ODExNzYzMzQ3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUn3j6w6rGawMJPibAyQspaj/2 B7/ILso1SAfzrCt8fU3WjwfHLaXlAcP7mCOLAEzvSojx9QTh5BeY+mNzMANGogHk cXFN7iQ+hF6a1GmsXI+ALAbwols4ey4y9VtSHmDSinNK+bnYx/Ti+KMie8KWizkm DD59lFde03aBYERQIeJjruIY6V1SKdmyYi2dx3Qpmj1ER67OlyqRH3NMNhJB/E99 Evv/J+N2TeahMad8OIcZDPXdkhEc3c6dFGHa+KvHuy6wsPq5kTXq55mint5L/NTe AqG1koIbZ7Lv994Hc7/AqTMJFM3VWszzzMrrwjyVHwNdPwao1ixhDBQyJPczAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIWYCkiOswPUlvrFbhBhoEXYzRxowHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8wMUZCNTYwOUZEMkFB NTY3QUQ3QUY2OUNEMjBDQzRBQjNFQkQxMENBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSajyUyGlRSk zXmryV/aSw7CkWNhOX7JfrenOzonu6/nK7S+dI2fhN8LeULZ7Pa4Mi8mHx0f3VVm 4YjfJOxb2nS54b7ieh2ujah6rwjdhon9N8DIR9CdXli6/KUFZFhs7prOUvAPrXT9 GBBue3Ihaknh6nc+vwIf8rIsbPFjbDiNigt5Z80N7Hhogdt3ngd6GBAMO158CHKG G+PnZO5Xfgf8vhjBcbD6Uxwshd5uGvJnE2QibY5LEYR59INiomph5FfaiHrj5bFZ LIiKsQ/2cy3EUJ8z+ZU57vvnJEUuFZhtOODgku1Tpc8duOZdW8fWVzY1sz0XXs1P LjmtKlNn/A== -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:32 2026 by rpki-client