$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json) Hash identifier: GEnmKwLOrtNnSiOE1HHKbSxIj46VDQB89/LH8VLm3/E= Subject key identifier: 4C:D1:A1:E4:34:5D:00:95:DB:BB:30:BC:E0:7F:DA:FD:0B:33:EE:ED Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF Certificate serial: 2EC1A5AD77541EB045501AEB9F16AEAF7272EFF3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft Manifest number: 5D Signing time: Thu 26 Mar 2026 15:23:28 +0000 Manifest this update: Thu 26 Mar 2026 15:18:28 +0000 Manifest next update: Fri 27 Mar 2026 17:34:28 +0000 Files and hashes: 1: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=) 2: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: WN7Jcrx13mTy0VBe7NaXCz/C7R5G6ofeS64vrN1Y1jY=) 3: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c1:a5:ad:77:54:1e:b0:45:50:1a:eb:9f:16:ae:af:72:72:ef:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF Validity Not Before: Mar 26 15:18:28 2026 GMT Not After : Mar 27 17:34:28 2026 GMT Subject: CN=4CD1A1E4345D0095DBBB30BCE07FDAFD0B33EEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:db:41:e2:17:0e:bd:92:94:10:06:01:42: 74:a9:8b:00:d9:8a:c6:f5:4b:66:59:7c:9c:72:1d: b5:90:46:10:ee:42:40:48:86:35:f5:2f:17:3c:72: 1d:6d:f6:ca:f5:8d:72:83:5a:34:88:6c:31:18:3e: b3:6a:d8:d4:89:43:5c:e0:d0:d0:51:7f:ce:d1:91: eb:15:14:40:fa:45:c0:7f:4b:41:24:46:65:37:d0: da:e9:71:ad:1c:b8:14:aa:cb:b0:93:f3:99:01:da: 86:d4:8b:52:19:c1:20:5a:fd:b2:ee:bf:be:cb:cb: 49:df:20:8d:cd:0a:c3:44:3a:17:48:15:e8:84:a8: 2e:22:ce:c9:7b:90:53:79:4d:3d:de:a0:e3:a8:24: 87:85:57:85:70:2f:0f:11:56:5a:01:11:e7:c7:c4: 1d:e1:87:ab:98:55:a2:17:d5:1b:49:49:b2:d2:76: ab:6e:b7:48:4f:8d:9b:95:22:7e:d5:7a:93:b3:39: 27:05:20:0c:c7:52:53:32:40:ba:95:56:27:10:7d: 2c:c7:0f:b5:b5:7d:0b:2d:5d:39:31:65:c6:c4:0b: 42:d1:cb:ff:36:6e:4b:83:b2:8e:93:b6:08:9b:c6: d5:25:7f:be:b8:8d:d1:b2:6b:62:67:e8:9e:ae:e4: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D1:A1:E4:34:5D:00:95:DB:BB:30:BC:E0:7F:DA:FD:0B:33:EE:ED X509v3 Authority Key Identifier: keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6c:7f:b6:b7:c4:74:84:16:85:85:b5:0a:7a:be:63:99:3b: 38:7f:7c:a3:3a:3f:b0:0a:d0:26:e6:fb:16:67:36:52:9a:9e: 74:1e:20:0d:50:61:4d:8f:9f:98:8e:24:19:f8:5c:fc:1f:8f: 50:10:14:3b:77:1d:c5:ce:99:f2:f8:66:17:56:85:a4:29:71: 3b:5d:9f:64:54:17:c4:2e:a5:75:6b:ee:9c:48:00:33:4d:a3: a7:d8:e8:b4:6a:2d:ad:5b:d5:0b:b6:76:37:4d:9b:7c:a2:51: 96:ab:9f:c8:d0:62:c1:62:0d:3f:e6:80:74:33:74:0e:43:d1: 56:4a:c7:ec:eb:53:2a:ca:e6:80:a2:4b:74:81:51:80:a5:36: 2d:1c:71:3a:28:3f:be:b0:c8:f5:fd:b3:5f:ba:c4:81:5a:94: 5d:95:be:a7:d6:bf:29:43:4b:da:f0:f7:0b:45:c0:50:ac:04: 6d:cf:6d:0b:81:2c:10:2b:99:74:16:4e:48:20:42:e0:69:41: ed:9e:d2:05:ff:e8:a8:52:b0:6f:0b:a1:d7:29:be:9e:35:45: 66:6f:b8:04:f7:3c:9c:f5:31:cc:05:45:b6:6d:36:fe:2b:09: 06:63:84:83:1d:11:7b:9d:d7:49:eb:07:9f:bb:e1:5e:e1:af: 90:23:ab:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULsGlrXdUHrBFUBrrnxaur3Jy7/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0 ODVDOUNERjAeFw0yNjAzMjYxNTE4MjhaFw0yNjAzMjcxNzM0MjhaMDMxMTAvBgNV BAMTKDRDRDFBMUU0MzQ1RDAwOTVEQkJCMzBCQ0UwN0ZEQUZEMEIzM0VFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYNtB4hcOvZKUEAYBQnSpiwDZ isb1S2ZZfJxyHbWQRhDuQkBIhjX1Lxc8ch1t9sr1jXKDWjSIbDEYPrNq2NSJQ1zg 0NBRf87RkesVFED6RcB/S0EkRmU30Nrpca0cuBSqy7CT85kB2obUi1IZwSBa/bLu v77Ly0nfII3NCsNEOhdIFeiEqC4izsl7kFN5TT3eoOOoJIeFV4VwLw8RVloBEefH xB3hh6uYVaIX1RtJSbLSdqtut0hPjZuVIn7VepOzOScFIAzHUlMyQLqVVicQfSzH D7W1fQstXTkxZcbEC0LRy/82bkuDso6TtgibxtUlf764jdGya2Jn6J6u5AR5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTNGh5DRdAJXbuzC84H/a/Qsz7u0wHwYDVR0j BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2x/trfEdIQW hYW1Cnq+Y5k7OH98ozo/sArQJub7Fmc2UpqedB4gDVBhTY+fmI4kGfhc/B+PUBAU O3cdxc6Z8vhmF1aFpClxO12fZFQXxC6ldWvunEgAM02jp9jotGotrVvVC7Z2N02b fKJRlqufyNBiwWINP+aAdDN0DkPRVkrH7OtTKsrmgKJLdIFRgKU2LRxxOig/vrDI 9f2zX7rEgVqUXZW+p9a/KUNL2vD3C0XAUKwEbc9tC4EsECuZdBZOSCBC4GlB7Z7S Bf/oqFKwbwuh1ym+njVFZm+4BPc8nPUxzAVFtm02/isJBmOEgx0Re53XSesHn7vh XuGvkCOrCA== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:15 2026 by rpki-client