$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json) Hash identifier: QFdhQvUUsSxQ7+hCZSJVHFfqocIaW1oG8P1fChKZ/9c= Subject key identifier: 42:BF:A4:39:3B:EA:55:8B:4C:79:B7:96:B5:63:45:83:37:7B:0E:4E Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF Certificate serial: 7760E2687A0170B1CB6C80ED13DEC5EE16658EE1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 10:43:28 +0000 Manifest this update: Thu 26 Mar 2026 10:38:28 +0000 Manifest next update: Fri 27 Mar 2026 13:06:28 +0000 Files and hashes: 1: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: OyoLPeMHquVgt0bwx8qnf6srZRvqoXS5HqXsqMVPF8M=) 2: 3130332e37312e36382e302f32322d3234203d3e20313531323936.roa (hash: jQm71q4usHyZ9nJvSyXcTJ5XN9QvxSzUc33cqUIvKFA=) 3: 3130332e392e32342e302f32322d3234203d3e20313531323936.roa (hash: tYibZuj8OEdbI/Q3XU9CgQa43up3w/0XZUPoQrVWfiI=) 4: 323430363a383838303a3a2f33322d3438203d3e20313531323936.roa (hash: 6jkJHvaNfJJtutlBO8hSVpCzbKvz9/2EnreSyJOv8js=) 5: 3130332e392e3130382e302f32322d3234203d3e20313531323936.roa (hash: u9TH7kS6NsN1y7YmlOW0ie+K8ZWX9sGtjrQcgOMa7ns=) 6: 3138302e3231302e3231322e302f32322d3234203d3e20313531323936.roa (hash: kkm/8CDZqODXpO/QeXBWBwDLwQw2WYXyUBGvuF12C1I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:60:e2:68:7a:01:70:b1:cb:6c:80:ed:13:de:c5:ee:16:65:8e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF Validity Not Before: Mar 26 10:38:28 2026 GMT Not After : Mar 27 13:06:28 2026 GMT Subject: CN=42BFA4393BEA558B4C79B796B5634583377B0E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:4d:9a:24:4f:aa:38:2c:0c:f0:e0:bd:05: 53:d6:69:cd:c2:2d:58:bc:9a:26:b8:f9:a2:8f:39: ca:5e:98:e0:a6:eb:64:3d:1c:81:5e:b5:8e:11:9a: 2a:7c:b5:d2:ef:8e:2c:6a:f0:ed:fe:c5:ae:3a:24: d9:ba:08:f8:54:2a:46:69:a6:00:6e:2e:0e:dd:12: ec:ce:99:71:cf:f1:41:b5:59:7e:d0:05:40:b4:90: e1:4e:36:98:58:86:f7:84:3b:6a:d0:f0:cb:3d:a8: a5:36:00:a3:87:e8:3d:35:54:45:2d:cb:79:d4:3a: a0:27:ec:64:3a:76:17:c8:01:99:a5:5b:d6:8d:3c: a6:4c:0f:45:89:2d:7c:82:cc:0b:b6:16:e5:7a:d0: aa:77:36:52:0b:a9:57:fe:e5:fd:4b:0e:ea:f1:d1: 85:09:9b:b7:66:1c:4b:dd:ea:1a:20:7f:67:19:b5: d7:5f:e7:f0:28:78:26:81:fe:63:92:ed:4d:75:ea: ae:37:64:89:1d:f1:45:a1:c7:52:22:79:68:d6:5b: ad:26:e9:64:3a:e5:97:a2:34:32:30:11:1e:e3:1c: 6f:e8:95:2d:11:1e:1e:0d:57:ab:bd:51:67:91:f2: 56:d7:10:67:94:9d:5e:0f:99:25:4c:6c:96:97:00: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BF:A4:39:3B:EA:55:8B:4C:79:B7:96:B5:63:45:83:37:7B:0E:4E X509v3 Authority Key Identifier: keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c5:9b:be:f8:c1:58:f8:28:ec:bc:e8:ed:05:83:af:11:06: 43:90:61:02:74:68:d2:91:a0:dd:a4:f1:fd:06:ae:1f:ce:ec: 24:a0:1c:45:fd:b7:1c:be:7d:e7:2e:0c:c3:63:35:f5:a3:62: 97:58:d4:99:e2:22:7f:0e:7a:4c:7a:e9:f4:5e:ce:e5:57:34: 0c:02:c9:04:a7:8e:0e:20:b6:74:67:24:2b:3f:c1:92:26:09: 96:5c:2f:d6:aa:92:4a:17:e9:e1:8c:d2:50:43:26:62:df:b8: 04:f5:ab:34:e7:e2:e8:3d:c4:5f:74:33:2a:90:51:6e:5e:9e: df:e6:df:7d:99:76:1d:f6:d6:d9:e7:56:98:82:40:26:c1:72: 53:04:6c:4e:1e:f8:91:32:6b:83:69:c7:16:7b:cc:95:7f:a1: 46:77:e5:7f:8e:4e:a1:c5:c0:19:59:ff:ca:e8:2b:9a:d3:f5: 23:a0:83:38:d5:e2:64:13:ff:cb:05:b7:09:66:b2:2f:06:e6: f5:6c:4b:ca:3f:7a:0c:3e:29:c4:f5:34:ee:d5:0c:e2:7b:6b: 0d:d6:84:9c:09:9d:f0:7a:4f:5c:29:c3:ee:2d:2b:68:a8:57: 82:6b:92:28:5c:39:8b:ab:8d:09:81:56:87:f9:a0:93:be:3e: 04:b6:05:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd2DiaHoBcLHLbIDtE97F7hZljuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB MEY0MzJCRjAeFw0yNjAzMjYxMDM4MjhaFw0yNjAzMjcxMzA2MjhaMDMxMTAvBgNV BAMTKDQyQkZBNDM5M0JFQTU1OEI0Qzc5Qjc5NkI1NjM0NTgzMzc3QjBFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQK02aJE+qOCwM8OC9BVPWac3C LVi8mia4+aKPOcpemOCm62Q9HIFetY4Rmip8tdLvjixq8O3+xa46JNm6CPhUKkZp pgBuLg7dEuzOmXHP8UG1WX7QBUC0kOFONphYhveEO2rQ8Ms9qKU2AKOH6D01VEUt y3nUOqAn7GQ6dhfIAZmlW9aNPKZMD0WJLXyCzAu2FuV60Kp3NlILqVf+5f1LDurx 0YUJm7dmHEvd6hogf2cZtddf5/AoeCaB/mOS7U116q43ZIkd8UWhx1IieWjWW60m 6WQ65ZeiNDIwER7jHG/olS0RHh4NV6u9UWeR8lbXEGeUnV4PmSVMbJaXAFlZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQr+kOTvqVYtMebeWtWNFgzd7Dk4wHwYDVR0j BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4 NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4ODEwMjUvMC83OUFDQ0FENDQ5MTUy OUVEQTM4MTcwRjM0QTU4ODREMkEwRjQzMkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusWbvvjBWPgo 7Lzo7QWDrxEGQ5BhAnRo0pGg3aTx/QauH87sJKAcRf23HL595y4Mw2M19aNil1jU meIifw56THrp9F7O5Vc0DALJBKeODiC2dGckKz/BkiYJllwv1qqSShfp4YzSUEMm Yt+4BPWrNOfi6D3EX3QzKpBRbl6e3+bffZl2HfbW2edWmIJAJsFyUwRsTh74kTJr g2nHFnvMlX+hRnflf45OocXAGVn/yugrmtP1I6CDONXiZBP/ywW3CWayLwbm9WxL yj96DD4pxPU07tUM4ntrDdaEnAmd8HpPXCnD7i0raKhXgmuSKFw5i6uNCYFWh/mg k74+BLYFeA== -----END CERTIFICATE-----Generated at Fri Mar 27 06:22:09 2026 by rpki-client