$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft File: 4B9663C98FB267EE767D89354546CFB5F1950080.mft (raw, json) Hash identifier: aEL/Ae7QLPOEoShApJj+/1VvrPswTKccruvxLynxQ2g= Subject key identifier: 04:FB:9E:34:99:1E:1F:C5:A7:10:A7:B4:6D:23:E5:10:2C:36:27:7D Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80 Certificate issuer: /CN=4B9663C98FB267EE767D89354546CFB5F1950080 Certificate serial: 40E833F4FB30C458DC2BE7E7E2181E04317DC3BA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 08:23:28 +0000 Manifest this update: Thu 26 Mar 2026 08:18:28 +0000 Manifest next update: Fri 27 Mar 2026 11:13:28 +0000 Files and hashes: 1: 3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa (hash: 0pufc7/8qoYUfAmwuaik++UnUtWz2+V3vbRti8a+0CY=) 2: 3130332e32352e3135362e302f32342d3234203d3e203539303637.roa (hash: Fhm18jMP0LneDzpdDN9bxE/6o0W++vH4PjTwSu3QXws=) 3: 3230322e38392e3233322e302f32312d3231203d3e203539303637.roa (hash: LxmwgqIyXKQ1LvD6HPrtkI+bgscVtAKEfia1kE5S16I=) 4: 3131312e3232312e32382e302f32342d3234203d3e203539303637.roa (hash: 5GBQ05kupa1eov4R4hg4QmiyoDcMGMwGDLJFGgFNDY4=) 5: 3130332e3230322e3131392e302f32342d3234203d3e203539303637.roa (hash: xwK0frG/nA9EnjQLmnlPT3TbP/TwR9YEKyj6/CwykjE=) 6: 3130332e3230322e3131382e302f32342d3234203d3e203539303637.roa (hash: 3X9OfTTXPjNj0ajTWzHmULX4/iI+wZXM/hgoYn8WWPo=) 7: 4B9663C98FB267EE767D89354546CFB5F1950080.crl (hash: XvEzx8k3ay+pMkTDPJhLD+Znj0YmIFd0bokhFCXzl4c=) 8: 3130332e3230322e3131372e302f32342d3234203d3e203539303637.roa (hash: rqOuDw3iVs42GNBw5+/dSDoIytGIIze8vnGtEjqD+9o=) 9: 3130332e3235352e3134302e302f32322d3232203d3e203539303637.roa (hash: 9ENwWTaIR1kgTR2cM8Bxzg75QWe4g5f6pdCy3pGfOoM=) 10: 3130332e33362e39362e302f32322d3232203d3e203539303637.roa (hash: FkelfI67m7ipj6mV1iMgqPetZxVxz1HRPE6PR4K52Mg=) 11: 3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa (hash: kTJjPihi+5ShHwcjCG95Ksd/IeqfaBWsCJz1Z+qGwi8=) 12: 3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa (hash: VImbyzhe3gUUh86v0HsN0hITp9TmfCxhigtsSIgpKVQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e8:33:f4:fb:30:c4:58:dc:2b:e7:e7:e2:18:1e:04:31:7d:c3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080 Validity Not Before: Mar 26 08:18:28 2026 GMT Not After : Mar 27 11:13:28 2026 GMT Subject: CN=04FB9E34991E1FC5A710A7B46D23E5102C36277D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:60:29:c1:71:4d:3e:8c:f9:57:d5:0c:fb:f9: 2f:42:9d:c2:ef:ee:c8:16:cd:d7:1c:a8:3c:0b:5c: 33:00:f0:ce:b5:91:30:86:d1:b1:d8:21:54:5b:05: 37:80:28:b1:49:66:15:8c:3c:08:be:3e:a7:bb:21: 9e:95:31:9d:e7:48:6c:47:c4:25:f0:d3:a2:9a:52: 80:2a:e8:26:23:46:6b:f9:3a:30:d8:25:f9:e3:2a: c0:7d:a6:d0:56:cc:a1:6a:98:99:21:e6:2a:f8:76: 25:6d:e9:18:e1:7c:8d:13:95:6e:63:14:dc:04:04: a8:63:1e:2d:ff:9b:72:48:26:37:5c:d3:af:43:d4: a7:ab:09:38:d8:0e:0b:01:76:d6:a4:5d:83:1a:9a: bf:7b:d4:1b:7b:f1:63:c0:b7:3f:28:ca:32:98:27: 3f:6e:89:f2:04:a2:d7:13:54:5f:39:c1:24:60:c6: bc:fa:1a:20:e9:ab:1f:da:dc:0a:33:49:c4:27:ad: 46:d5:e1:19:ec:f1:4d:47:74:c4:7c:c9:1c:3d:51: 1f:db:b1:4a:b0:ca:d8:c4:7a:c1:96:a3:c5:d3:94: 89:d3:52:03:a6:9e:fc:b5:c3:f1:17:2a:bc:f4:5c: 1c:2b:3b:91:d9:82:6a:9c:e8:a3:ef:71:4c:9b:02: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FB:9E:34:99:1E:1F:C5:A7:10:A7:B4:6D:23:E5:10:2C:36:27:7D X509v3 Authority Key Identifier: keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:54:65:8f:58:3b:40:54:74:c9:8b:87:19:bc:a5:3f:83:57: f3:ce:4d:ff:7d:fe:be:7d:1d:26:c3:95:c7:e5:ee:39:d6:30: ff:6b:cd:92:9c:06:d6:ef:28:0e:4d:d6:98:40:87:21:ff:c1: 3b:b1:7b:cb:c1:cc:4a:e7:5b:66:5b:6d:87:f9:2b:c2:e0:9a: 7a:5c:3d:14:04:23:28:c4:73:3b:fb:ce:3b:9e:b7:9e:1a:9d: b5:a0:43:24:52:ee:e0:38:f6:6e:09:ec:e2:f6:29:15:8a:bf: 94:9b:ad:2f:46:93:be:ff:b9:14:2f:a2:18:ff:55:02:6d:1a: 61:09:d6:b9:ee:7b:01:1f:e1:52:0f:39:09:b2:36:64:7d:31: 72:71:d0:e2:ab:b7:45:51:2e:0e:85:68:ca:55:18:f4:61:e4: 8f:46:36:41:61:3e:61:d8:18:39:a6:34:8b:89:f5:2e:c6:8d: 40:f4:7c:24:72:1c:53:a9:53:63:7e:b5:53:6c:f0:0c:3b:99: df:e0:f8:62:da:cc:bf:ce:6f:d3:cf:c1:1a:60:8e:88:f4:72: f9:9e:9c:b6:4f:fb:2e:72:48:64:f0:60:f1:bb:50:20:00:43: a4:81:e8:83:1f:cf:92:b2:d0:25:83:01:43:53:62:ed:5f:ac: 81:9d:29:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQOgz9PswxFjcK+fn4hgeBDF9w7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI5NjYzQzk4RkIyNjdFRTc2N0Q4OTM1NDU0NkNGQjVG MTk1MDA4MDAeFw0yNjAzMjYwODE4MjhaFw0yNjAzMjcxMTEzMjhaMDMxMTAvBgNV BAMTKDA0RkI5RTM0OTkxRTFGQzVBNzEwQTdCNDZEMjNFNTEwMkMzNjI3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtYCnBcU0+jPlX1Qz7+S9CncLv 7sgWzdccqDwLXDMA8M61kTCG0bHYIVRbBTeAKLFJZhWMPAi+Pqe7IZ6VMZ3nSGxH xCXw06KaUoAq6CYjRmv5OjDYJfnjKsB9ptBWzKFqmJkh5ir4diVt6RjhfI0TlW5j FNwEBKhjHi3/m3JIJjdc069D1KerCTjYDgsBdtakXYMamr971Bt78WPAtz8oyjKY Jz9uifIEotcTVF85wSRgxrz6GiDpqx/a3AozScQnrUbV4Rns8U1HdMR8yRw9UR/b sUqwytjEesGWo8XTlInTUgOmnvy1w/EXKrz0XBwrO5HZgmqc6KPvcUybAstBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBPueNJkeH8WnEKe0bSPlECw2J30wHwYDVR0j BBgwFoAUS5ZjyY+yZ+52fYk1RUbPtfGVAIAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTg4NzIzNC8wLzRCOTY2M0M5OEZCMjY3RUU3NjdEODkzNTQ1NDZD RkI1RjE5NTAwODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEI5NjYzQzk4RkIyNjdFRTc2N0Q4OTM1NDU0NkNGQjVGMTk1MDA4MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE4ODcyMzQvMC80Qjk2NjNDOThGQjI2 N0VFNzY3RDg5MzU0NTQ2Q0ZCNUYxOTUwMDgwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFRlj1g7QFR0 yYuHGbylP4NX885N/33+vn0dJsOVx+XuOdYw/2vNkpwG1u8oDk3WmECHIf/BO7F7 y8HMSudbZltth/krwuCaelw9FAQjKMRzO/vOO563nhqdtaBDJFLu4Dj2bgns4vYp FYq/lJutL0aTvv+5FC+iGP9VAm0aYQnWue57AR/hUg85CbI2ZH0xcnHQ4qu3RVEu DoVoylUY9GHkj0Y2QWE+YdgYOaY0i4n1LsaNQPR8JHIcU6lTY361U2zwDDuZ3+D4 YtrMv85v08/BGmCOiPRy+Z6ctk/7LnJIZPBg8btQIABDpIHogx/PkrLQJYMBQ1Ni 7V+sgZ0pvg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:48 2026 by rpki-client