$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft File: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft (raw, json) Hash identifier: fdZdquOF98xw88HmQci5+QUcU6WwPLs0hF3o8yt03Wo= Subject key identifier: E0:10:05:C8:20:56:F0:13:30:D1:9B:3F:8F:1F:6A:85:A5:BC:B2:8E Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Certificate serial: 524B7DE512549B773AE4665FDCA13D2D770FDECD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 12:13:28 +0000 Manifest this update: Thu 26 Mar 2026 12:08:28 +0000 Manifest next update: Fri 27 Mar 2026 13:14:28 +0000 Files and hashes: 1: 34332e3235352e3231322e302f32322d3232203d3e20313336393538.roa (hash: mP/WzKqlnEhqwDkLhudrruXO2O7e8o0TzyuISBE0WWA=) 2: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl (hash: uMHbovZLFPx6bzbktGSwe05+EWtXQRBk/Coq6VolfhI=) 3: 34332e3235352e3231322e302f32322d3232203d3e203536303430.roa (hash: VLiXiRL9m9UaxtL5IIpzNqXZ0El1YmwJlVWUpR3X+4M=) 4: 34332e3235352e3231322e302f32322d3232203d3e20313334373634.roa (hash: nvpX3+tQBlD7o4JRzeJzJ8SBqs6nbVPAwRAZ8Hg23Rs=) 5: 3130332e3231302e3136302e302f32322d3232203d3e203633313939.roa (hash: B/mJbtPu0UVWmsBqfhu4FLdB1gzXkN1btMchb8wEDGA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4b:7d:e5:12:54:9b:77:3a:e4:66:5f:dc:a1:3d:2d:77:0f:de:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Validity Not Before: Mar 26 12:08:28 2026 GMT Not After : Mar 27 13:14:28 2026 GMT Subject: CN=E01005C82056F01330D19B3F8F1F6A85A5BCB28E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:75:bd:03:61:11:6b:6b:5b:40:56:de:a8: 8a:d8:da:52:21:91:4f:78:bf:38:90:a7:b4:ad:99: 78:14:a9:66:0a:0b:53:55:ef:56:fd:9d:a7:6e:bd: b7:91:d6:5a:e2:27:7a:f7:34:7e:15:a6:04:d1:d1: 57:86:93:80:44:61:51:b6:03:e1:99:21:f1:9d:f0: fe:2e:c6:b0:d3:4f:e1:35:d4:55:2d:59:50:52:f9: ee:9d:e5:ad:89:f2:22:20:ff:05:ef:2f:ed:fe:3f: 29:75:25:a4:85:25:64:a0:dd:42:df:6f:2f:9b:8a: 41:e3:fc:cb:a4:87:ef:26:5a:3b:dd:5f:09:50:db: 88:f6:e2:55:03:e7:2a:8b:b2:5f:93:ac:66:f7:6d: 48:14:fa:10:04:52:a2:d2:cc:4d:27:dc:2e:2d:d4: 4e:98:d3:f9:04:57:21:20:e4:2c:12:09:40:9b:96: a0:0f:e3:2b:cc:e6:da:67:d9:2c:7e:b6:ea:80:fc: e4:88:b8:14:e0:aa:df:04:b8:45:98:6e:44:fc:90: b2:99:3f:49:c1:9f:8c:2d:7a:a5:d8:0f:4b:80:da: b0:5b:be:2a:33:a0:82:79:a2:cd:08:0b:9b:4a:72: be:0b:ba:78:ad:24:48:cd:fd:7e:18:41:4f:05:94: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:10:05:C8:20:56:F0:13:30:D1:9B:3F:8F:1F:6A:85:A5:BC:B2:8E X509v3 Authority Key Identifier: keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e2:fa:6a:29:7b:fe:9a:49:16:c6:dd:5c:62:52:3d:18:52: c0:60:4b:4d:9c:41:06:ac:97:1f:ff:d2:66:61:b5:61:1c:b5: e1:1c:9a:d8:51:88:db:a9:c2:61:d2:8c:a0:54:94:f8:7e:a7: 3d:47:5d:5f:d1:de:b3:16:42:e0:ff:be:36:9f:13:ad:f0:46: b3:86:13:7a:f4:bc:8e:f9:90:3f:80:4a:a4:31:5c:58:74:22: d1:6d:bb:2a:8d:f8:21:24:cc:e3:43:d7:ae:bc:88:b4:b9:75: 3f:bc:9d:ea:41:09:1c:39:f0:1a:e1:81:7a:13:2f:74:df:28: 96:46:68:e6:3c:99:07:ce:c0:30:f1:d5:cb:b9:5b:9a:58:d3: 8d:d7:1b:51:77:b3:8f:88:5d:1c:2f:b4:4c:cc:f4:4d:9d:ba: 83:30:37:10:37:c9:0f:b8:73:4d:ce:61:f2:9e:23:95:ea:58: d4:69:5b:41:78:eb:9f:da:fc:4f:68:2d:0e:79:a0:fa:c0:64: ed:fe:bf:dc:50:2c:81:a1:69:cd:64:85:b3:26:09:ab:c6:e5: c7:96:cb:91:88:18:67:7b:fe:b0:35:27:88:46:8a:a8:45:98: f3:09:47:42:a6:fd:14:b1:6e:f0:19:76:66:f5:86:33:c9:96: 2f:36:23:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUkt95RJUm3c65GZf3KE9LXcP3s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw NEZENjlERDAeFw0yNjAzMjYxMjA4MjhaFw0yNjAzMjcxMzE0MjhaMDMxMTAvBgNV BAMTKEUwMTAwNUM4MjA1NkYwMTMzMEQxOUIzRjhGMUY2QTg1QTVCQ0IyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEnW9A2ERa2tbQFbeqIrY2lIh kU94vziQp7StmXgUqWYKC1NV71b9naduvbeR1lriJ3r3NH4VpgTR0VeGk4BEYVG2 A+GZIfGd8P4uxrDTT+E11FUtWVBS+e6d5a2J8iIg/wXvL+3+Pyl1JaSFJWSg3ULf by+bikHj/Mukh+8mWjvdXwlQ24j24lUD5yqLsl+TrGb3bUgU+hAEUqLSzE0n3C4t 1E6Y0/kEVyEg5CwSCUCblqAP4yvM5tpn2Sx+tuqA/OSIuBTgqt8EuEWYbkT8kLKZ P0nBn4wteqXYD0uA2rBbviozoIJ5os0IC5tKcr4LunitJEjN/X4YQU8FlPBHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4BAFyCBW8BMw0Zs/jx9qhaW8so4wHwYDVR0j BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMC81MDQ3MDgzQjQ2MzdB M0YwMkRGOURFRUJBNjdCRUREQzA0RkQ2OURELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuL6ail7/ppJ FsbdXGJSPRhSwGBLTZxBBqyXH//SZmG1YRy14Rya2FGI26nCYdKMoFSU+H6nPUdd X9HesxZC4P++Np8TrfBGs4YTevS8jvmQP4BKpDFcWHQi0W27Ko34ISTM40PXrryI tLl1P7yd6kEJHDnwGuGBehMvdN8olkZo5jyZB87AMPHVy7lbmljTjdcbUXezj4hd HC+0TMz0TZ26gzA3EDfJD7hzTc5h8p4jlepY1GlbQXjrn9r8T2gtDnmg+sBk7f6/ 3FAsgaFpzWSFsyYJq8blx5bLkYgYZ3v+sDUniEaKqEWY8wlHQqb9FLFu8Bl2ZvWG M8mWLzYj7w== -----END CERTIFICATE-----Generated at Fri Mar 27 03:43:36 2026 by rpki-client