$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json) Hash identifier: beTHTZf6pbsHvC8IhSi+etmn0pHHl15qI5wDnuL3/44= Subject key identifier: 20:0B:7B:91:FB:B1:88:E3:59:3E:4F:69:B0:0C:E0:64:B5:7F:BF:5D Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36 Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036 Certificate serial: 7B0157D52D6CD987A66AB9DB2822679DD9B78BDF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 07:13:28 +0000 Manifest this update: Thu 26 Mar 2026 07:08:28 +0000 Manifest next update: Fri 27 Mar 2026 10:04:28 +0000 Files and hashes: 1: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: WRWmTBrksM6giFTgooIdivyIo7Ea7c58lioT2AFDRBM=) 2: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:01:57:d5:2d:6c:d9:87:a6:6a:b9:db:28:22:67:9d:d9:b7:8b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036 Validity Not Before: Mar 26 07:08:28 2026 GMT Not After : Mar 27 10:04:28 2026 GMT Subject: CN=200B7B91FBB188E3593E4F69B00CE064B57FBF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6b:f3:dc:6d:9f:13:e6:c8:17:2e:2d:24:11: 87:dd:71:22:dd:7b:32:fa:53:d4:c3:af:93:b9:04: a4:c7:0b:f8:e6:0c:c9:f7:78:2c:22:21:73:b1:c1: fc:25:ce:c6:e2:29:46:1a:5e:5d:8a:4a:ce:4c:77: ec:91:ec:47:0d:d2:ff:3a:5e:3d:75:03:b8:b2:50: 82:17:a6:b8:19:57:f5:02:fb:a4:09:f1:05:73:74: 03:47:17:8e:48:f1:96:e3:08:e4:44:75:0d:e7:80: 04:64:fe:1b:1a:07:63:f0:c2:65:97:93:68:96:3c: f9:12:27:ac:ee:2f:8c:92:60:82:6f:aa:74:4b:ae: eb:62:67:fe:3e:61:6d:1f:50:c8:31:cd:62:3d:6a: 73:38:4f:03:e0:62:c2:b7:75:4c:78:9f:8a:65:74: 85:8b:b9:ce:71:44:19:50:14:2f:ce:43:bc:16:5c: 0e:54:d9:a8:5b:ea:e7:42:41:46:70:bd:d6:2f:ef: 5b:96:2c:0f:8b:79:23:4c:3e:d2:78:b6:83:5b:66: 19:5f:f2:9f:14:a7:3b:f9:4d:b7:e2:79:e3:31:04: d3:7f:d3:4a:ba:ef:b6:7c:b5:72:51:3b:71:32:0c: a1:47:bc:22:5b:0d:e8:34:2a:12:07:1f:c5:07:e8: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0B:7B:91:FB:B1:88:E3:59:3E:4F:69:B0:0C:E0:64:B5:7F:BF:5D X509v3 Authority Key Identifier: keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c2:06:d4:72:c3:7f:24:df:23:45:56:fc:da:31:6c:6d:df: b0:26:25:f5:17:3b:88:3f:43:a9:b0:f5:74:a3:fd:72:58:15: ee:81:70:21:40:7b:18:19:bc:54:78:32:c1:37:53:1d:d2:e9: a8:29:56:96:a5:40:6f:09:69:f6:57:a4:de:d4:60:a6:82:2b: 14:f9:1e:27:54:c6:5d:2b:5d:65:57:ff:fe:73:ad:1c:39:2f: 6b:04:88:ae:f4:0d:e0:48:66:c5:29:85:0c:1c:d0:67:d0:5a: ca:4c:f4:2a:56:b4:11:ca:3a:71:dd:64:b5:eb:6c:a8:b9:c8: 62:be:d4:b5:ba:b2:ac:46:8b:69:a8:59:48:55:b3:d8:f0:09: 61:45:b7:7d:3a:91:88:87:09:44:b9:c4:e6:30:57:be:6c:ea: 37:01:24:47:4d:96:6d:aa:12:37:09:4e:ec:93:e3:46:89:13: eb:db:38:06:c6:e2:04:d9:11:a2:e7:c7:b1:64:e0:ff:f1:b4: 98:d8:e5:65:8e:da:c5:fb:2f:f4:78:3f:a8:41:da:07:52:e7: 93:37:ec:a4:e1:c9:b0:0f:d0:2c:dd:49:19:c0:31:77:3c:e7: 73:35:10:e8:c4:94:81:e0:c2:b3:f8:56:1b:a7:6e:70:59:e7: b6:a5:78:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUewFX1S1s2YemarnbKCJnndm3i98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFNzEwRUNCRDJCNjk5NDk4Qzc1RkE5MjU5MzQ3QUM2 ODc3NjAzNjAeFw0yNjAzMjYwNzA4MjhaFw0yNjAzMjcxMDA0MjhaMDMxMTAvBgNV BAMTKDIwMEI3QjkxRkJCMTg4RTM1OTNFNEY2OUIwMENFMDY0QjU3RkJGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDna/PcbZ8T5sgXLi0kEYfdcSLd ezL6U9TDr5O5BKTHC/jmDMn3eCwiIXOxwfwlzsbiKUYaXl2KSs5Md+yR7EcN0v86 Xj11A7iyUIIXprgZV/UC+6QJ8QVzdANHF45I8ZbjCOREdQ3ngARk/hsaB2PwwmWX k2iWPPkSJ6zuL4ySYIJvqnRLrutiZ/4+YW0fUMgxzWI9anM4TwPgYsK3dUx4n4pl dIWLuc5xRBlQFC/OQ7wWXA5U2ahb6udCQUZwvdYv71uWLA+LeSNMPtJ4toNbZhlf 8p8Upzv5TbfieeMxBNN/00q677Z8tXJRO3EyDKFHvCJbDeg0KhIHH8UH6NjtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIAt7kfuxiONZPk9psAzgZLV/v10wHwYDVR0j BBgwFoAUlOcQ7L0raZSYx1+pJZNHrGh3YDYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDYxODg4MS8wLzk0RTcxMEVDQkQyQjY5OTQ5OEM3NUZBOTI1OTM0 N0FDNjg3NzYwMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRFNzEwRUNCRDJCNjk5NDk4Qzc1RkE5MjU5MzQ3QUM2ODc3NjAzNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2MTg4ODEvMC85NEU3MTBFQ0JEMkI2 OTk0OThDNzVGQTkyNTkzNDdBQzY4Nzc2MDM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsIG1HLDfyTf I0VW/NoxbG3fsCYl9Rc7iD9DqbD1dKP9clgV7oFwIUB7GBm8VHgywTdTHdLpqClW lqVAbwlp9lek3tRgpoIrFPkeJ1TGXStdZVf//nOtHDkvawSIrvQN4EhmxSmFDBzQ Z9Baykz0Kla0Eco6cd1ktetsqLnIYr7UtbqyrEaLaahZSFWz2PAJYUW3fTqRiIcJ RLnE5jBXvmzqNwEkR02WbaoSNwlO7JPjRokT69s4BsbiBNkRoufHsWTg//G0mNjl ZY7axfsv9Hg/qEHaB1LnkzfspOHJsA/QLN1JGcAxdzznczUQ6MSUgeDCs/hWG6du cFnntqV4mw== -----END CERTIFICATE-----Generated at Fri Mar 27 02:04:43 2026 by rpki-client