$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft (raw, json) Hash identifier: c5qe/p4BNKipyGKVrjO5XO7zemIaVV81hlyJuJ1rVGk= Subject key identifier: E1:F8:8E:B3:D5:73:FB:AB:18:9E:03:CB:30:FE:E8:3D:F7:62:91:A3 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 4379871A20453E02D3E1BC6B4C26F63F0253BC5D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 22:48:28 +0000 Manifest this update: Thu 26 Mar 2026 22:43:28 +0000 Manifest next update: Sat 28 Mar 2026 00:34:28 +0000 Files and hashes: 1: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl (hash: oFmF36zv8a2aChZJvFEZlNxCpXEkJoi1o5rZ+7BWp1c=) 2: 32372e302e3133332e302f32342d3234203d3e20313338393135.roa (hash: yjVaS9fU/BmpI0d1y40icFKgvmXLnvrVPGA9lnAYovg=) 3: 3130332e32372e342e302f32342d3234203d3e203538383534.roa (hash: qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:79:87:1a:20:45:3e:02:d3:e1:bc:6b:4c:26:f6:3f:02:53:bc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: Mar 26 22:43:28 2026 GMT Not After : Mar 28 00:34:28 2026 GMT Subject: CN=E1F88EB3D573FBAB189E03CB30FEE83DF76291A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:ea:ba:47:94:f0:85:ca:b1:bc:0d:2e:5a: b5:ae:d0:9d:a4:40:26:aa:85:08:04:24:5d:4c:91: 4a:63:c3:48:b9:29:9c:5f:80:3f:ed:cb:51:63:98: 42:84:1d:c8:12:61:6b:e9:70:af:bf:d4:7f:6a:bb: a0:c7:03:ab:02:cc:84:c7:69:82:dc:47:ef:95:1a: 0c:03:90:e5:5f:20:6a:b6:fd:7e:df:d6:bb:ec:52: 05:26:e4:6d:8f:88:ba:c9:2e:44:3e:31:2d:3d:55: d4:4c:99:39:23:04:4f:a2:9b:50:ae:f1:ce:d2:e8: 93:1e:d9:d3:02:6a:d9:4e:20:67:e0:4a:21:e0:d1: cb:b1:12:9f:48:e7:08:f5:c0:b2:25:04:7a:81:d3: 5f:35:cf:28:17:84:2f:88:88:34:00:ae:16:a5:11: 07:93:72:59:9d:41:66:9e:0f:ee:1e:63:38:64:d0: b8:57:78:05:af:fc:1d:f5:27:52:4d:40:bf:01:c6: c9:9b:19:ff:39:e4:28:5b:a5:36:b8:21:1a:e1:59: 01:a1:2b:01:59:01:b2:b0:14:f2:ee:c6:ca:3e:2b: 53:61:c6:81:bf:34:9d:87:67:58:a5:76:de:a6:d9: b9:94:dc:a1:10:54:2a:f7:c5:47:4a:f6:49:16:0a: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F8:8E:B3:D5:73:FB:AB:18:9E:03:CB:30:FE:E8:3D:F7:62:91:A3 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b6:3b:d7:6e:63:bc:f7:fd:06:79:6b:47:35:00:66:4d:75: 9d:a8:e0:db:79:d7:0e:7a:3d:00:17:f6:f3:1a:3c:37:98:0e: 97:3d:d1:b2:34:6a:b2:33:2b:dd:f1:37:cf:7d:7a:1b:7e:ba: 75:52:4d:7e:12:28:8c:19:7a:ca:09:49:ae:4b:88:7a:62:c9: 77:80:3c:68:fe:de:7f:b6:3d:69:62:25:2c:6f:dc:10:db:0f: 35:88:66:87:f2:b9:c6:90:2e:df:d0:2c:b5:ba:47:87:0e:db: a0:68:ec:cb:5a:12:20:d8:d7:ad:7c:cf:42:b5:6d:66:90:b4: a6:b0:7c:b5:d2:86:27:5a:9d:97:17:e6:1f:08:dc:d2:6b:2d: ae:08:65:5e:12:2f:7d:99:4d:8a:9a:53:39:15:b5:62:8d:56: 78:aa:25:f7:1b:97:65:43:b3:78:7f:77:95:d1:0d:e8:d1:0f: 59:f7:05:48:1d:47:06:e4:1d:c2:2c:f4:31:44:17:2d:49:47: 6b:ab:4e:6f:b8:15:01:97:2e:b7:eb:0f:da:e1:ed:db:78:d3: d8:f2:ed:a7:fc:b7:b6:fb:80:9d:58:6b:f8:87:75:c5:07:aa: 8b:58:88:5b:d6:ac:ab:f3:ba:fb:02:51:94:49:3e:97:e5:66: 8d:e1:bb:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ3mHGiBFPgLT4bxrTCb2PwJTvF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjAzMjYyMjQzMjhaFw0yNjAzMjgwMDM0MjhaMDMxMTAvBgNV BAMTKEUxRjg4RUIzRDU3M0ZCQUIxODlFMDNDQjMwRkVFODNERjc2MjkxQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjeq6R5TwhcqxvA0uWrWu0J2k QCaqhQgEJF1MkUpjw0i5KZxfgD/ty1FjmEKEHcgSYWvpcK+/1H9qu6DHA6sCzITH aYLcR++VGgwDkOVfIGq2/X7f1rvsUgUm5G2PiLrJLkQ+MS09VdRMmTkjBE+im1Cu 8c7S6JMe2dMCatlOIGfgSiHg0cuxEp9I5wj1wLIlBHqB0181zygXhC+IiDQArhal EQeTclmdQWaeD+4eYzhk0LhXeAWv/B31J1JNQL8BxsmbGf855ChbpTa4IRrhWQGh KwFZAbKwFPLuxso+K1NhxoG/NJ2HZ1ildt6m2bmU3KEQVCr3xUdK9kkWCv9PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4fiOs9Vz+6sYngPLMP7oPfdikaMwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC9FQzlFMUM4NDBDODcw NUU3NTRDMkUzRkYzMkE0NEZCOUQ3ODEwMUQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLY7125jvPf9 BnlrRzUAZk11najg23nXDno9ABf28xo8N5gOlz3RsjRqsjMr3fE3z316G366dVJN fhIojBl6yglJrkuIemLJd4A8aP7ef7Y9aWIlLG/cENsPNYhmh/K5xpAu39AstbpH hw7boGjsy1oSINjXrXzPQrVtZpC0prB8tdKGJ1qdlxfmHwjc0mstrghlXhIvfZlN ippTORW1Yo1WeKol9xuXZUOzeH93ldEN6NEPWfcFSB1HBuQdwiz0MUQXLUlHa6tO b7gVAZcut+sP2uHt23jT2PLtp/y3tvuAnVhr+Id1xQeqi1iIW9asq/O6+wJRlEk+ l+VmjeG7AA== -----END CERTIFICATE-----Generated at Fri Mar 27 01:56:53 2026 by rpki-client