$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json) Hash identifier: 1USJ5i/bWA2FKEU7SfbgP1mAB3dkpWLWi3K31/fGh0k= Subject key identifier: 93:CE:F5:24:B4:70:5C:05:46:F7:AF:7F:51:A1:1A:67:20:DD:DC:9B Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 234DF28FDABB49AD1235CCBDFD74AEE12400D4A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 16:08:28 +0000 Manifest this update: Thu 26 Mar 2026 16:03:28 +0000 Manifest next update: Fri 27 Mar 2026 18:35:28 +0000 Files and hashes: 1: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=) 2: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=) 3: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: LO1IOpwhlHxeqsT8fq5UMlaXXRHvfgZjIx3gc4if03U=) 4: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4d:f2:8f:da:bb:49:ad:12:35:cc:bd:fd:74:ae:e1:24:00:d4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Mar 26 16:03:28 2026 GMT Not After : Mar 27 18:35:28 2026 GMT Subject: CN=93CEF524B4705C0546F7AF7F51A11A6720DDDC9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:26:a8:cf:d7:05:d2:b7:7d:4a:58:e2:8b: e1:41:e6:2f:27:eb:56:87:e6:c8:88:be:cd:6a:c3: 8a:dd:f4:85:09:8a:40:03:a2:f2:30:ff:b5:b8:b9: 8f:53:da:c5:29:b6:09:ca:57:69:ff:74:12:c8:ce: 4d:0b:32:bc:5e:66:d5:8e:72:2c:71:f4:33:ea:1c: 06:07:09:c3:fe:7d:b9:c1:03:6b:69:92:30:d2:aa: 31:ca:41:4d:78:69:68:ae:b5:ba:82:2e:2b:23:5a: 43:83:49:0c:ed:d6:e7:3e:c0:44:f3:e7:13:fd:2e: a6:97:7c:02:54:a8:18:ad:19:ce:d6:e0:18:94:e8: 0c:73:fd:12:78:3f:14:5e:07:6a:71:ca:3e:26:5d: c8:7b:74:70:9a:fd:01:85:47:6d:ae:6c:54:b8:75: 72:81:87:e3:a2:ad:9d:7d:89:96:9a:4d:0f:c9:53: 0d:18:62:bc:85:cf:5c:ed:98:56:80:45:e6:af:bf: 5f:c1:b5:de:0f:22:b2:76:fd:b6:0f:19:79:42:be: f3:32:ba:17:c2:de:0a:a9:5b:08:c8:e4:00:57:e1: ba:4f:71:88:a3:04:68:4b:cb:d9:d9:28:5a:a0:04: 6a:91:08:8d:94:16:31:ff:69:e9:94:44:17:82:42: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CE:F5:24:B4:70:5C:05:46:F7:AF:7F:51:A1:1A:67:20:DD:DC:9B X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d2:d1:37:0b:38:e9:0d:ac:8d:e7:04:56:2f:18:59:9c:bb: 18:02:a9:8a:f3:79:4a:ed:8a:63:ce:b4:80:58:3e:61:10:68: 1f:48:26:db:5d:aa:27:a2:d2:ec:d0:5f:2d:f2:59:2d:92:21: 66:2e:8c:75:2c:fa:dd:0f:fa:af:82:73:2a:95:e4:77:ae:2e: 1f:80:ce:60:06:98:f5:99:36:d8:0f:f6:4c:fa:0b:af:01:c9: de:2a:a9:ae:c6:0e:ec:9f:8c:7f:49:14:c3:ef:b1:12:bd:00: 9d:42:ca:3a:d4:7b:8f:f1:c5:ef:0c:fa:2d:62:c7:5c:54:ea: c4:e4:9d:03:8e:48:9a:79:27:ba:59:15:ae:eb:49:26:9f:89: be:c3:b4:66:f6:b9:4f:5d:90:33:70:16:26:6d:a2:2e:ae:e7: 52:47:20:09:5d:24:ac:f6:be:e2:c2:55:9c:a6:81:58:4e:aa: b4:db:fe:04:e0:a3:2a:8d:b6:3d:59:68:70:ea:81:5b:23:a3: 48:89:fe:c7:9b:e9:96:41:d8:0c:60:9e:34:b1:8c:af:f8:fe: 25:05:98:34:a3:f6:8b:f4:15:38:6c:de:fd:b9:57:c1:e9:31: 93:3d:97:5c:6e:d9:07:af:8a:bd:b3:a7:c4:90:48:85:ff:55: 37:fd:e5:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI03yj9q7Sa0SNcy9/XSu4SQA1KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjAzMjYxNjAzMjhaFw0yNjAzMjcxODM1MjhaMDMxMTAvBgNV BAMTKDkzQ0VGNTI0QjQ3MDVDMDU0NkY3QUY3RjUxQTExQTY3MjBERERDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Gyaoz9cF0rd9Sljii+FB5i8n 61aH5siIvs1qw4rd9IUJikADovIw/7W4uY9T2sUptgnKV2n/dBLIzk0LMrxeZtWO cixx9DPqHAYHCcP+fbnBA2tpkjDSqjHKQU14aWiutbqCLisjWkODSQzt1uc+wETz 5xP9LqaXfAJUqBitGc7W4BiU6Axz/RJ4PxReB2pxyj4mXch7dHCa/QGFR22ubFS4 dXKBh+OirZ19iZaaTQ/JUw0YYryFz1ztmFaAReavv1/Btd4PIrJ2/bYPGXlCvvMy uhfC3gqpWwjI5ABX4bpPcYijBGhLy9nZKFqgBGqRCI2UFjH/aemURBeCQg+tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk871JLRwXAVG969/UaEaZyDd3JswHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC83RjA4QjhEQzZFMjY3 RThCMTU5QzE1RjJGMjBBQjEwQjM0N0M3QTIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNLRNws46Q2s jecEVi8YWZy7GAKpivN5Su2KY860gFg+YRBoH0gm212qJ6LS7NBfLfJZLZIhZi6M dSz63Q/6r4JzKpXkd64uH4DOYAaY9Zk22A/2TPoLrwHJ3iqprsYO7J+Mf0kUw++x Er0AnULKOtR7j/HF7wz6LWLHXFTqxOSdA45ImnknulkVrutJJp+JvsO0Zva5T12Q M3AWJm2iLq7nUkcgCV0krPa+4sJVnKaBWE6qtNv+BOCjKo22PVlocOqBWyOjSIn+ x5vplkHYDGCeNLGMr/j+JQWYNKP2i/QVOGze/blXwekxkz2XXG7ZB6+KvbOnxJBI hf9VN/3lKw== -----END CERTIFICATE-----Generated at Fri Mar 27 02:08:20 2026 by rpki-client