$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json) Hash identifier: b3pfri++TNWUZTGup2DRN2awBrKGxe5zC2BVVO5TylI= Subject key identifier: DD:F4:CA:E4:B1:4B:82:C9:DE:A1:AF:0B:22:FC:B7:A0:7B:DE:EC:03 Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977 Certificate serial: 13C9C6A92898C6C48E9E1FF8E10303A800FA1858 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft Manifest number: 5A Signing time: Fri 27 Mar 2026 00:03:28 +0000 Manifest this update: Thu 26 Mar 2026 23:58:28 +0000 Manifest next update: Sat 28 Mar 2026 02:17:28 +0000 Files and hashes: 1: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=) 2: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=) 3: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=) 4: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: WhneOWL4sRC/EzsPJzks/JKcbAfAGH6A+tKLvgtYhbY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c9:c6:a9:28:98:c6:c4:8e:9e:1f:f8:e1:03:03:a8:00:fa:18:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977 Validity Not Before: Mar 26 23:58:28 2026 GMT Not After : Mar 28 02:17:28 2026 GMT Subject: CN=DDF4CAE4B14B82C9DEA1AF0B22FCB7A07BDEEC03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:0a:3d:6d:fe:b1:0c:55:04:8f:10:e7:b1: a6:41:54:d6:26:2e:18:68:59:7d:47:fd:db:aa:32: 83:68:ed:9b:be:30:44:f8:0f:23:7a:f4:78:10:3a: 03:e1:26:97:63:bf:4f:50:95:79:60:2d:8e:19:94: 88:6d:0a:8e:3c:2f:2e:6a:b9:00:7e:59:87:1f:94: 5e:f4:72:25:ba:a3:2e:33:fa:04:ee:13:54:ce:6e: b3:4c:29:e5:ad:55:30:14:b2:0a:6a:8f:98:81:3b: de:73:89:38:88:b1:8c:9c:ae:a0:55:83:56:fd:67: a2:0c:16:b1:5c:fd:9b:9a:68:b9:da:78:a6:33:e0: a3:c1:08:45:34:2d:19:4e:ba:91:45:33:71:09:d5: a3:b0:1f:ba:3a:f0:2d:cf:65:e6:ed:46:75:f4:2f: 3f:a4:09:02:87:6e:07:74:a5:da:3c:8f:4d:aa:b6: f6:c4:e2:67:1b:53:40:a6:1b:01:fa:7b:db:22:3c: c2:c0:a3:eb:b5:30:76:72:60:6b:ed:26:04:a0:c7: 5b:30:fe:49:3b:de:60:f3:25:4b:f1:fa:f0:63:5a: 56:2d:75:7b:a1:71:00:bc:82:06:a6:ff:4c:aa:fe: 6b:45:c5:b4:51:42:73:58:ca:9f:16:2e:be:3b:7a: 6c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F4:CA:E4:B1:4B:82:C9:DE:A1:AF:0B:22:FC:B7:A0:7B:DE:EC:03 X509v3 Authority Key Identifier: keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4b:ec:d2:f5:b9:fb:b7:ce:af:05:f9:69:e6:29:d4:7c:cd: 75:1a:af:71:4d:d4:64:05:0f:c0:e6:e2:e2:c0:44:64:49:84: 20:6f:0a:8e:64:62:36:6e:1b:37:20:aa:2a:8d:22:68:c7:61: 42:d1:33:9e:64:1f:f7:67:0e:64:24:64:f8:8a:0a:f1:37:c6: e4:7c:f6:77:57:10:27:7a:94:16:29:81:94:63:53:b1:c3:e4: a6:f5:c3:e7:eb:2c:eb:95:c7:25:08:1a:b3:07:ff:47:f3:b5: d0:0c:68:e9:bc:6c:49:45:0b:43:fc:bf:06:fe:c5:39:13:df: 2c:4b:f6:54:5e:86:a5:ca:17:69:0e:a7:af:29:17:ca:68:1d: 96:99:0b:37:45:d4:b3:c4:b6:96:b5:42:5d:f3:e5:fe:bd:cc: 1f:2b:5f:9c:fa:2b:d5:81:14:4c:8e:44:97:56:b7:b9:a9:cc: 62:ef:95:8a:5a:4d:c7:18:9f:2f:34:11:39:2a:80:76:64:d3: 15:1d:ef:c7:5f:d5:43:45:6e:fb:35:bb:7a:d7:25:c0:56:44: 11:5b:3d:d9:13:f6:af:8f:9a:7c:df:a0:95:cb:0e:82:1a:f8: 9d:79:48:ec:b6:70:a8:06:ce:c6:77:c2:bf:fd:30:50:be:17: 47:dd:91:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE8nGqSiYxsSOnh/44QMDqAD6GFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5 NDI3OTk3NzAeFw0yNjAzMjYyMzU4MjhaFw0yNjAzMjgwMjE3MjhaMDMxMTAvBgNV BAMTKERERjRDQUU0QjE0QjgyQzlERUExQUYwQjIyRkNCN0EwN0JERUVDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnQo9bf6xDFUEjxDnsaZBVNYm LhhoWX1H/duqMoNo7Zu+MET4DyN69HgQOgPhJpdjv09QlXlgLY4ZlIhtCo48Ly5q uQB+WYcflF70ciW6oy4z+gTuE1TObrNMKeWtVTAUsgpqj5iBO95ziTiIsYycrqBV g1b9Z6IMFrFc/ZuaaLnaeKYz4KPBCEU0LRlOupFFM3EJ1aOwH7o68C3PZebtRnX0 Lz+kCQKHbgd0pdo8j02qtvbE4mcbU0CmGwH6e9siPMLAo+u1MHZyYGvtJgSgx1sw /kk73mDzJUvx+vBjWlYtdXuhcQC8ggam/0yq/mtFxbRRQnNYyp8WLr47emzTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3fTK5LFLgsneoa8LIvy3oHve7AMwHwYDVR0j BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2 MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ4NTEzMzEvMC80MTU1NDM5RUVCNzdF RDE5RTMwMzFGNjM4QThFNjMzMzk0Mjc5OTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkvs0vW5+7fO rwX5aeYp1HzNdRqvcU3UZAUPwObi4sBEZEmEIG8KjmRiNm4bNyCqKo0iaMdhQtEz nmQf92cOZCRk+IoK8TfG5Hz2d1cQJ3qUFimBlGNTscPkpvXD5+ss65XHJQgaswf/ R/O10Axo6bxsSUULQ/y/Bv7FORPfLEv2VF6GpcoXaQ6nrykXymgdlpkLN0XUs8S2 lrVCXfPl/r3MHytfnPor1YEUTI5El1a3uanMYu+VilpNxxifLzQROSqAdmTTFR3v x1/VQ0Vu+zW7etclwFZEEVs92RP2r4+afN+glcsOghr4nXlI7LZwqAbOxnfCv/0w UL4XR92RQw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:52:27 2026 by rpki-client