$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json) Hash identifier: MuYGOj2DLsW21e54Vm6b4Z0f9/90lyoxCjQkRvI17io= Subject key identifier: 4E:3D:7E:FA:FD:34:9E:0B:F9:E1:07:5B:F3:59:48:EF:D7:1D:8D:EA Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 10D02B3BA51359744288626F9DD861AE7C7372B0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 21:58:28 +0000 Manifest this update: Thu 26 Mar 2026 21:53:28 +0000 Manifest next update: Fri 27 Mar 2026 22:26:28 +0000 Files and hashes: 1: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=) 2: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=) 3: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=) 4: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: d4h4Ez77m4OI4xhqZWSwhpqNRORofW5El1ZqE3gDIv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d0:2b:3b:a5:13:59:74:42:88:62:6f:9d:d8:61:ae:7c:73:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Mar 26 21:53:28 2026 GMT Not After : Mar 27 22:26:28 2026 GMT Subject: CN=4E3D7EFAFD349E0BF9E1075BF35948EFD71D8DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:ff:73:ef:11:d3:8a:8e:24:40:e6:81:14: 9e:69:d4:d2:92:2a:a2:3b:49:f3:ca:ef:cb:d2:76: 73:06:14:24:73:e3:f3:0e:71:f4:2e:5c:8b:f7:ff: 7f:4d:19:7c:8c:8d:21:7f:70:fd:03:eb:38:3e:cc: c1:2c:67:0a:d3:df:d6:99:4c:b6:77:43:65:29:c1: 6f:64:01:a4:24:81:e8:09:16:95:6c:cd:83:a4:2f: 3e:de:e5:54:70:5e:29:54:3b:ba:af:d1:fe:1e:ca: 99:b5:96:fe:d8:17:dc:50:e4:70:28:03:c1:7e:92: 22:99:32:52:88:05:97:c3:6a:03:12:b4:be:df:ea: 89:0b:39:50:42:d1:b0:c5:7d:9d:3c:81:00:e4:f6: 30:05:93:29:3f:6f:d0:cd:fb:91:f5:7e:8e:41:28: 64:5d:94:f7:d8:7b:ea:0b:fb:8c:97:4a:ab:91:cd: da:6f:4d:45:3d:9f:ff:1f:b8:42:a9:8c:fe:2f:72: 9b:0c:f3:c4:69:6c:03:a0:0c:e2:d2:44:0f:4a:3e: d6:79:89:06:65:00:1c:e1:00:5e:11:d2:2c:de:5a: 58:0d:41:d1:af:ed:fb:94:cd:22:1c:f4:9a:ba:69: 18:67:dd:8d:a5:4f:82:b6:e9:e1:3c:83:43:3e:69: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3D:7E:FA:FD:34:9E:0B:F9:E1:07:5B:F3:59:48:EF:D7:1D:8D:EA X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fe:32:42:69:76:1c:bb:30:3a:4d:00:d9:74:2d:55:84:c6: ec:21:da:e2:b8:a8:b4:34:47:15:0b:cd:14:ac:74:01:ac:ce: c1:5d:08:16:cb:0d:41:fe:b6:28:01:0c:1c:28:61:fe:25:9f: 2b:d8:7d:e3:05:d6:95:a5:91:5f:97:98:3a:ef:04:89:1c:e2: b1:bd:29:aa:cf:fc:98:a1:c9:3b:8d:7a:2e:89:4c:2e:c3:41: b7:17:73:01:91:4e:aa:0c:49:1f:54:03:88:1c:d5:40:43:f7: 99:cd:e2:03:1a:a4:9a:cf:cb:b1:3a:91:62:6c:19:55:ce:2a: 17:86:d6:6b:64:ec:f1:bb:9f:ca:04:16:8a:5f:e3:65:23:05: 68:c8:31:fc:16:0a:74:26:52:bd:40:72:21:ff:b0:ba:c5:06: b9:ad:8c:79:5c:c0:9c:e8:63:b1:62:be:c2:08:3d:dc:bb:ce: 13:0d:15:11:8d:e0:65:96:04:33:90:ac:32:56:3e:92:f2:2a: 11:10:e7:32:f9:e2:41:8d:0a:67:90:23:f6:fc:db:79:d6:71: 0f:ff:65:69:f8:b7:d6:aa:fa:ab:c7:6f:a2:e7:e9:e2:ed:94: 5c:1d:4f:3b:ff:54:1f:2e:41:07:49:4b:45:31:46:32:54:c8: 82:cc:dd:c7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUENArO6UTWXRCiGJvndhhrnxzcrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjAzMjYyMTUzMjhaFw0yNjAzMjcyMjI2MjhaMDMxMTAvBgNV BAMTKDRFM0Q3RUZBRkQzNDlFMEJGOUUxMDc1QkYzNTk0OEVGRDcxRDhERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd9/9z7xHTio4kQOaBFJ5p1NKS KqI7SfPK78vSdnMGFCRz4/MOcfQuXIv3/39NGXyMjSF/cP0D6zg+zMEsZwrT39aZ TLZ3Q2UpwW9kAaQkgegJFpVszYOkLz7e5VRwXilUO7qv0f4eypm1lv7YF9xQ5HAo A8F+kiKZMlKIBZfDagMStL7f6okLOVBC0bDFfZ08gQDk9jAFkyk/b9DN+5H1fo5B KGRdlPfYe+oL+4yXSquRzdpvTUU9n/8fuEKpjP4vcpsM88RpbAOgDOLSRA9KPtZ5 iQZlABzhAF4R0izeWlgNQdGv7fuUzSIc9Jq6aRhn3Y2lT4K26eE8g0M+aXAtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTj1++v00ngv54Qdb81lI79cdjeowHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ3NDk5NTMvMC85Qjg3REZFQkRDQ0RB ODEzMTE2OTg4RDQ0MjFCMDg4NDA0NTc4MTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/4yQml2HLsw Ok0A2XQtVYTG7CHa4riotDRHFQvNFKx0AazOwV0IFssNQf62KAEMHChh/iWfK9h9 4wXWlaWRX5eYOu8EiRzisb0pqs/8mKHJO416LolMLsNBtxdzAZFOqgxJH1QDiBzV QEP3mc3iAxqkms/LsTqRYmwZVc4qF4bWa2Ts8bufygQWil/jZSMFaMgx/BYKdCZS vUByIf+wusUGua2MeVzAnOhjsWK+wgg93LvOEw0VEY3gZZYEM5CsMlY+kvIqERDn MvniQY0KZ5Aj9vzbedZxD/9lafi31qr6q8dvoufp4u2UXB1PO/9UHy5BB0lLRTFG MlTIgszdxw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:27:28 2026 by rpki-client