$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json) Hash identifier: MGnnK9luxx6jAvXTKY244sd9pmhgxr7bJohNDWV3e/c= Subject key identifier: 01:C4:03:F0:0C:3C:29:E1:7C:FA:43:29:D8:39:AF:0C:07:B8:9E:EB Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 607B48DDAFD98B0608B07D14D02ABDA834F0831A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 00:48:28 +0000 Manifest this update: Thu 26 Mar 2026 00:43:28 +0000 Manifest next update: Fri 27 Mar 2026 02:33:28 +0000 Files and hashes: 1: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=) 2: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=) 3: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=) 4: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: GQchKNuztnL1rU0H/oW97fY3+uBvjYKfgd76/kWdObQ=) 5: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 02:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7b:48:dd:af:d9:8b:06:08:b0:7d:14:d0:2a:bd:a8:34:f0:83:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Mar 26 00:43:28 2026 GMT Not After : Mar 27 02:33:28 2026 GMT Subject: CN=01C403F00C3C29E17CFA4329D839AF0C07B89EEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:b0:b1:fb:b5:e1:fc:62:6a:a3:e3:8e:9c: 48:32:26:49:dd:3e:98:a7:e1:db:3e:00:83:ae:2b: 74:3d:83:29:10:dc:54:60:ce:29:84:76:17:f0:51: cc:25:36:ee:f3:58:38:42:ff:7d:66:65:88:07:d5: b9:66:45:e8:c4:be:cf:16:93:46:50:c3:d3:82:b7: f9:5f:4d:14:41:be:c6:0f:02:da:23:21:8e:41:c5: f3:a9:4b:d4:50:e5:bd:48:bf:bb:8d:5e:18:b2:e2: 2f:6b:cf:03:fc:e9:0f:fe:da:42:ae:a3:d2:68:82: 87:2b:b0:a7:ec:8d:d7:6c:d2:88:48:16:a3:5f:ee: 95:10:c2:57:07:f1:f3:30:f9:89:26:de:44:4a:41: 04:9e:5f:92:6e:9b:00:90:23:69:2e:05:7d:3f:f6: a3:47:39:11:2a:f0:bf:f9:c5:b2:5a:8d:10:75:68: ce:2d:7b:0f:fc:37:81:da:62:62:6f:29:31:31:4f: 20:05:f9:b2:f2:30:6d:38:97:94:23:ad:dc:6c:bf: 49:04:0b:7f:3c:a4:f3:70:75:79:38:64:2e:8b:b5: 15:7a:e1:8c:9f:da:8e:7c:33:58:c7:5c:50:e3:46: 0e:b9:76:a8:e9:c7:7a:51:b9:35:46:35:dd:a8:13: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C4:03:F0:0C:3C:29:E1:7C:FA:43:29:D8:39:AF:0C:07:B8:9E:EB X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c7:32:37:7f:12:63:5b:64:4a:78:9f:c7:51:60:3e:6d:1f: 7b:b0:e9:39:b3:f3:0a:19:7e:38:c6:2c:95:90:c9:bb:6c:1b: 5a:82:24:24:03:c8:fc:2d:29:6c:17:63:50:b0:c3:83:c6:cb: 94:84:16:5e:c0:62:43:94:63:c6:34:d5:f1:2c:30:bd:c7:62: 55:b9:b6:98:98:ae:ea:f0:18:d0:f4:5d:0a:0c:e5:b7:a7:36: e6:2f:cb:ae:1f:17:ea:56:30:90:2b:90:1d:94:99:b4:5e:9f: 7b:25:74:3f:b9:9b:d5:e3:c3:66:f4:28:93:50:a4:32:f3:d4: 4a:01:30:29:ec:04:53:50:16:0a:a5:97:7f:76:55:76:ec:1f: 1d:3e:e0:7d:a8:a8:10:c3:db:3b:74:3a:3e:d2:8e:23:9f:f1: 43:e6:0a:ff:4e:b1:d2:55:db:cc:76:ae:e3:00:ca:87:3c:8d: b9:81:fd:23:2d:6d:2b:b1:13:35:8e:73:86:4d:ec:01:61:78: 4e:a2:e6:23:ed:60:1f:57:d7:7e:30:ff:fa:57:43:62:71:9f: 87:63:20:81:f0:83:82:54:dd:12:d7:6f:3a:f5:f5:82:d8:ae: d3:7a:ee:7d:b9:46:34:19:fc:1d:2b:8b:1f:af:f8:48:7c:a1: 4b:4c:bb:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYHtI3a/ZiwYIsH0U0Cq9qDTwgxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjAzMjYwMDQzMjhaFw0yNjAzMjcwMjMzMjhaMDMxMTAvBgNV BAMTKDAxQzQwM0YwMEMzQzI5RTE3Q0ZBNDMyOUQ4MzlBRjBDMDdCODlFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+bCx+7Xh/GJqo+OOnEgyJknd Ppin4ds+AIOuK3Q9gykQ3FRgzimEdhfwUcwlNu7zWDhC/31mZYgH1blmRejEvs8W k0ZQw9OCt/lfTRRBvsYPAtojIY5BxfOpS9RQ5b1Iv7uNXhiy4i9rzwP86Q/+2kKu o9JogocrsKfsjdds0ohIFqNf7pUQwlcH8fMw+Ykm3kRKQQSeX5JumwCQI2kuBX0/ 9qNHOREq8L/5xbJajRB1aM4tew/8N4HaYmJvKTExTyAF+bLyMG04l5Qjrdxsv0kE C388pPNwdXk4ZC6LtRV64Yyf2o58M1jHXFDjRg65dqjpx3pRuTVGNd2oE1NJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAcQD8Aw8KeF8+kMp2DmvDAe4nuswHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC9COEMxNTAzNjkzMjE3 NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdscyN38SY1tk Snifx1FgPm0fe7DpObPzChl+OMYslZDJu2wbWoIkJAPI/C0pbBdjULDDg8bLlIQW XsBiQ5RjxjTV8SwwvcdiVbm2mJiu6vAY0PRdCgzlt6c25i/Lrh8X6lYwkCuQHZSZ tF6feyV0P7mb1ePDZvQok1CkMvPUSgEwKewEU1AWCqWXf3ZVduwfHT7gfaioEMPb O3Q6PtKOI5/xQ+YK/06x0lXbzHau4wDKhzyNuYH9Iy1tK7ETNY5zhk3sAWF4TqLm I+1gH1fXfjD/+ldDYnGfh2MggfCDglTdEtdvOvX1gtiu03rufblGNBn8HSuLH6/4 SHyhS0y7CQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:02 2026 by rpki-client