$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: FB9ZcOf3CMea5qZq85ZIUUNRuA5OOUPo3kTgwadmPcc= Subject key identifier: DA:30:CD:A9:50:79:3E:9A:AE:E7:2D:53:A2:17:00:F2:FD:C2:BC:A6 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 123EFAC4DDBCDF92542890410153A10DEEC98D71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 18:03:28 +0000 Manifest this update: Thu 26 Mar 2026 17:58:28 +0000 Manifest next update: Fri 27 Mar 2026 19:59:28 +0000 Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 2: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 3: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 4: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: 2UboBGZ/+iIRQQelWpbGJVyuWK9J/668uK5w9AZ32lE=) 5: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3e:fa:c4:dd:bc:df:92:54:28:90:41:01:53:a1:0d:ee:c9:8d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Mar 26 17:58:28 2026 GMT Not After : Mar 27 19:59:28 2026 GMT Subject: CN=DA30CDA950793E9AAEE72D53A21700F2FDC2BCA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:4c:56:8a:72:dd:b2:e1:ae:aa:e9:49:5f: 0d:7c:13:32:0b:a8:b1:6b:14:c2:76:7e:d3:3c:e6: 8d:44:2d:4e:9e:5f:f2:08:45:20:d1:56:73:d4:0b: 3c:8e:95:30:ea:ac:f5:33:55:40:7a:27:88:10:b6: f8:47:bb:fa:46:7e:d9:18:ce:8e:cc:d4:5f:a8:31: 47:4a:26:65:8f:88:fc:cc:45:e2:16:a7:8d:38:3a: 2e:6c:61:ae:54:8b:a8:32:3a:e9:d5:44:f8:4a:27: dc:27:ec:bc:be:21:e2:5e:1e:c3:7d:88:3b:ef:bd: 2b:a2:f9:15:2e:67:42:a9:c1:79:5d:f3:78:97:e8: e9:02:15:b2:45:29:4a:af:f7:0f:5e:01:19:23:d6: a5:0d:b4:d2:90:7f:c8:59:b7:31:37:da:32:66:55: c1:da:79:ed:b6:fa:5e:28:f9:a0:52:6c:b5:c9:d9: ec:f0:e4:9c:91:80:d2:e4:22:d5:fa:43:84:b5:c8: 80:5d:c1:21:77:95:a8:cb:1b:4b:da:c7:41:ed:61: b7:20:06:10:a2:3f:b2:8a:77:8c:35:01:5e:2c:4e: 67:e8:0a:ab:92:f4:51:41:4f:28:2c:c4:10:ec:82: 69:0c:37:40:64:7d:a6:b1:0d:49:9f:7b:1c:8b:65: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:30:CD:A9:50:79:3E:9A:AE:E7:2D:53:A2:17:00:F2:FD:C2:BC:A6 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:26:6e:a2:47:34:c1:ff:77:d3:b4:d7:0b:fe:ba:a5:5f:aa: 7f:04:07:45:85:81:f5:2a:46:b4:44:9b:5b:fc:61:a9:de:bc: b5:0a:35:70:19:db:7d:d7:e9:a5:b9:1b:55:06:ae:f9:ba:f2: 1c:17:03:af:9e:80:97:78:0e:09:4b:0b:bb:6b:f6:10:be:f3: a0:94:1b:1b:d0:1c:3c:72:69:91:13:c4:b8:b2:90:f4:2f:8b: 51:c7:46:2e:b7:be:39:66:f0:89:9c:95:a0:bc:4f:40:7f:7e: ae:42:6a:e2:a7:7b:31:b1:d3:a6:87:fa:56:e2:2b:5e:f3:84: 08:68:be:8b:15:31:db:51:66:5a:65:0a:11:43:3a:b9:d6:0e: 4d:dc:ce:9d:4a:bd:b3:94:72:67:a9:4b:06:fe:4f:a8:6e:57: e2:8f:b6:9a:9e:a9:e4:0a:f4:5b:1a:d3:58:6a:60:17:c4:89: 2c:39:56:44:5a:01:53:58:57:59:ea:62:cc:94:b3:06:bf:ee: 87:dd:58:e6:27:36:3a:f8:48:bb:c5:06:21:38:c2:4f:e8:0f: f6:df:94:a8:c9:f3:5b:8d:9f:39:63:9d:bd:de:74:cf:7e:54: 59:97:94:09:c4:d9:40:67:20:d5:5a:bf:b5:4b:f0:d2:48:4f: 2e:59:75:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEj76xN2835JUKJBBAVOhDe7JjXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjAzMjYxNzU4MjhaFw0yNjAzMjcxOTU5MjhaMDMxMTAvBgNV BAMTKERBMzBDREE5NTA3OTNFOUFBRUU3MkQ1M0EyMTcwMEYyRkRDMkJDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14ExWinLdsuGuqulJXw18EzIL qLFrFMJ2ftM85o1ELU6eX/IIRSDRVnPUCzyOlTDqrPUzVUB6J4gQtvhHu/pGftkY zo7M1F+oMUdKJmWPiPzMReIWp404Oi5sYa5Ui6gyOunVRPhKJ9wn7Ly+IeJeHsN9 iDvvvSui+RUuZ0KpwXld83iX6OkCFbJFKUqv9w9eARkj1qUNtNKQf8hZtzE32jJm VcHaee22+l4o+aBSbLXJ2ezw5JyRgNLkItX6Q4S1yIBdwSF3lajLG0vax0HtYbcg BhCiP7KKd4w1AV4sTmfoCquS9FFBTygsxBDsgmkMN0BkfaaxDUmfexyLZWGpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2jDNqVB5Ppqu5y1TohcA8v3CvKYwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCZuokc0wf93 07TXC/66pV+qfwQHRYWB9SpGtESbW/xhqd68tQo1cBnbfdfppbkbVQau+bryHBcD r56Al3gOCUsLu2v2EL7zoJQbG9AcPHJpkRPEuLKQ9C+LUcdGLre+OWbwiZyVoLxP QH9+rkJq4qd7MbHTpof6VuIrXvOECGi+ixUx21FmWmUKEUM6udYOTdzOnUq9s5Ry Z6lLBv5PqG5X4o+2mp6p5Ar0WxrTWGpgF8SJLDlWRFoBU1hXWepizJSzBr/uh91Y 5ic2OvhIu8UGITjCT+gP9t+UqMnzW42fOWOdvd50z35UWZeUCcTZQGcg1Vq/tUvw 0khPLll1DQ== -----END CERTIFICATE-----Generated at Fri Mar 27 07:51:25 2026 by rpki-client