$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json) Hash identifier: DEossiO+Gx3CPhqPgkw2Y878EUeIjkd8ctJNBw8k2tY= Subject key identifier: 05:2B:3F:05:CD:6C:A3:23:12:69:3D:DC:1F:AB:F2:C3:E4:4E:32:2D Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Certificate serial: 15B80021BF6EBED4D342CAF066BE08AD3A3967C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft Manifest number: 5A Signing time: Fri 27 Mar 2026 00:28:28 +0000 Manifest this update: Fri 27 Mar 2026 00:23:28 +0000 Manifest next update: Sat 28 Mar 2026 01:28:28 +0000 Files and hashes: 1: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=) 2: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: Bq8GSRt6DGYgTCTnOwHma53djABjVCbQoQOPufHdkqY=) 3: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=) 4: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b8:00:21:bf:6e:be:d4:d3:42:ca:f0:66:be:08:ad:3a:39:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Validity Not Before: Mar 27 00:23:28 2026 GMT Not After : Mar 28 01:28:28 2026 GMT Subject: CN=052B3F05CD6CA32312693DDC1FABF2C3E44E322D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b0:5b:dd:98:8d:55:81:95:fb:04:2b:95:0b: 7b:78:f6:01:b2:7f:6d:ad:27:09:a1:a7:57:d4:23: 70:ee:fe:83:cf:a2:e5:ba:30:c3:bb:53:2b:83:8e: 71:67:c9:1c:68:b8:09:d2:e6:83:0d:6a:d7:9f:5e: 93:d7:f0:e3:12:ea:ec:5a:bc:78:b4:c6:bc:0a:93: a1:e5:08:99:d8:1b:64:13:15:6a:e4:d9:ac:51:e6: 66:1e:b0:9a:06:42:e1:97:77:e4:ef:f6:1b:fb:22: 85:2b:1c:69:45:9c:a5:5c:a4:2e:38:77:40:e4:5d: 84:70:3c:f4:63:57:b5:21:3f:7e:1a:e9:a3:50:31: 9b:26:ce:54:9a:68:37:2b:6e:5d:79:54:dd:63:9e: ae:1a:d2:36:d6:97:82:a7:8b:0f:f4:dd:ff:c8:b5: 3a:6a:21:95:de:d9:82:ec:6b:15:d6:e2:71:76:0d: 2f:bc:e0:70:42:20:b9:12:13:18:f6:b3:ce:89:1b: 3b:15:50:16:b7:45:eb:1c:b5:a2:86:9f:ba:b2:55: da:96:0d:35:b8:3b:8d:46:3c:7a:bf:c4:3c:ff:ed: 34:4b:c8:be:19:d8:f9:f9:a9:b6:6a:b1:52:c2:09: bb:dc:7f:49:de:32:df:f6:7d:d6:9a:41:c1:74:d7: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2B:3F:05:CD:6C:A3:23:12:69:3D:DC:1F:AB:F2:C3:E4:4E:32:2D X509v3 Authority Key Identifier: keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:88:2b:d8:17:7e:fd:6e:e0:8c:fa:85:10:17:e5:36:e3:ef: e4:ea:b4:95:bd:3a:b3:58:5d:a0:1b:4a:7b:93:30:02:6b:b9: b6:0d:c3:60:85:c1:61:6d:08:21:f0:e4:3d:c3:cf:65:0b:b1: f9:d3:45:cc:12:d9:96:b2:96:b1:f4:30:e4:33:4d:58:4c:54: 2f:29:06:fd:f7:d0:3c:dd:ca:ef:46:72:3f:81:2b:4d:50:ce: ce:95:77:98:c6:69:35:ec:87:ea:65:f1:b0:b8:fc:15:24:f1: 98:11:67:69:fb:72:f8:1c:b9:92:db:65:ac:a5:78:6a:10:89: 7d:7a:a4:90:e3:91:41:c2:98:77:83:2a:f4:f5:43:ca:70:ac: 26:58:62:e8:05:56:91:f5:ed:25:69:94:39:f3:7c:67:5d:83: b0:d6:e4:93:4e:be:3d:c3:4d:4b:86:9b:14:70:7e:64:f6:a9: 6a:8f:0e:6e:4f:9f:9f:8b:b9:e3:c4:e7:7b:ca:91:a5:6c:72: b4:6e:f3:0b:fa:1b:f9:f8:e9:03:1b:f7:33:a8:7e:17:5e:57: 11:9a:ac:67:c4:57:ba:9e:2f:71:2a:1f:cc:14:d5:84:7b:c4: bb:3a:c3:8d:dc:fe:b2:f2:c5:a9:e9:4e:fa:82:01:9b:cd:90: 78:19:ae:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFbgAIb9uvtTTQsrwZr4IrTo5Z8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy MzQ0QkE2QzAeFw0yNjAzMjcwMDIzMjhaFw0yNjAzMjgwMTI4MjhaMDMxMTAvBgNV BAMTKDA1MkIzRjA1Q0Q2Q0EzMjMxMjY5M0REQzFGQUJGMkMzRTQ0RTMyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqsFvdmI1VgZX7BCuVC3t49gGy f22tJwmhp1fUI3Du/oPPouW6MMO7UyuDjnFnyRxouAnS5oMNatefXpPX8OMS6uxa vHi0xrwKk6HlCJnYG2QTFWrk2axR5mYesJoGQuGXd+Tv9hv7IoUrHGlFnKVcpC44 d0DkXYRwPPRjV7UhP34a6aNQMZsmzlSaaDcrbl15VN1jnq4a0jbWl4Kniw/03f/I tTpqIZXe2YLsaxXW4nF2DS+84HBCILkSExj2s86JGzsVUBa3ResctaKGn7qyVdqW DTW4O41GPHq/xDz/7TRLyL4Z2Pn5qbZqsVLCCbvcf0neMt/2fdaaQcF013B/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBSs/Bc1soyMSaT3cH6vyw+ROMi0wHwYDVR0j BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5 MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2 NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIgr2Bd+/W7g jPqFEBflNuPv5Oq0lb06s1hdoBtKe5MwAmu5tg3DYIXBYW0IIfDkPcPPZQux+dNF zBLZlrKWsfQw5DNNWExULykG/ffQPN3K70ZyP4ErTVDOzpV3mMZpNeyH6mXxsLj8 FSTxmBFnafty+By5kttlrKV4ahCJfXqkkOORQcKYd4Mq9PVDynCsJlhi6AVWkfXt JWmUOfN8Z12DsNbkk06+PcNNS4abFHB+ZPapao8Obk+fn4u548Tne8qRpWxytG7z C/ob+fjpAxv3M6h+F15XEZqsZ8RXup4vcSofzBTVhHvEuzrDjdz+svLFqelO+oIB m82QeBmuQw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:21:24 2026 by rpki-client