$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft File: 909D556251A0BE5F9234514028EBD37CE8E1280A.mft (raw, json) Hash identifier: numGPYWzY31yBO3T/31QT/3iM7LapghghCeByhfRP3w= Subject key identifier: 5C:5C:FF:9F:62:0C:A5:36:8B:E7:08:AB:6F:BE:91:63:39:12:D4:4F Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 6B19AD925888F4C99DCA28A411006CBB84793FE4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 07:53:28 +0000 Manifest this update: Thu 26 Mar 2026 07:48:28 +0000 Manifest next update: Fri 27 Mar 2026 09:50:28 +0000 Files and hashes: 1: 3132332e34392e3234312e302f32342d3234203d3e203633363431.roa (hash: oJWDFgNP10dQZ/IsB56YuUh2YzqysBIN0PTRtohD/D0=) 2: 3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (hash: AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=) 3: 3132332e34392e3234352e302f32342d3234203d3e2034383132.roa (hash: eHtoU26S9uQP9D4qKQ0M3F2642XYQQ/3cUcRnCSD8Kw=) 4: 3132332e34392e3234372e302f32342d3234203d3e2034353135.roa (hash: kAVWZq0A9zD+vWiTRlhRcXBRkWNI+ZpkNQpWt0I2T2w=) 5: 3132332e34392e3234352e302f32342d3234203d3e203633363431.roa (hash: URY/fnRSKZtxcyZMIV2zonyjJhXZIXVlZKxZiD23qHc=) 6: 909D556251A0BE5F9234514028EBD37CE8E1280A.crl (hash: VJCzAyyEfaJwqOGWvjlF6LYlSbTj7y5clPs+xHZnMfs=) 7: 3132332e34392e3234372e302f32342d3234203d3e203633363431.roa (hash: p79j4YGmWW4IV+Ou8ryXl//w37lh9IuSadq/jTt/hgA=) 8: 3132332e34392e3233372e302f32342d3234203d3e203633363431.roa (hash: 7pKQkhzkq1U210D2cZU/h7MDDRd2cNlncacV8dcNrfg=) 9: 3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (hash: 4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=) 10: 3132332e34392e3139362e302f32342d3234203d3e203633363431.roa (hash: 0iTDK2jBtrXhBc+FRVAS0NVqOcMAurUMKS5nPe1dw2E=) 11: 3132332e34392e3234322e302f32342d3234203d3e2034353135.roa (hash: KwDAtrxOe3gPNr0PBcclw0t4c/e2Kbrw4nqX1PJIpDY=) 12: 3132332e34392e3233372e302f32342d3234203d3e2034353135.roa (hash: jJftpG3x4g3cL1YrT7aEpgobH6HBDOkt05jsoCJTJ2Q=) 13: 3132332e34392e3234362e302f32342d3234203d3e2034353135.roa (hash: iOY+HPVvGy3/dXGKhLG1Kw8dLVPZsso+CaY41zAgyRY=) 14: 3132332e34392e3139352e302f32342d3234203d3e203633363431.roa (hash: rO+l5Qlk15uuhyb0exm7lOm58oejeBgyGycLSvlGIsA=) 15: 3132332e34392e3234312e302f32342d3234203d3e2034353135.roa (hash: TQFKLb6QXJghjcVvTOVEQ+qkJHS6U3QD78fM7fDfLRo=) 16: 3132332e34392e3234362e302f32342d3234203d3e203633363431.roa (hash: ZLaSbqkhr0ckiAj1yXpXnIu2V3obfSobsdCH83ZzjdY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:19:ad:92:58:88:f4:c9:9d:ca:28:a4:11:00:6c:bb:84:79:3f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Mar 26 07:48:28 2026 GMT Not After : Mar 27 09:50:28 2026 GMT Subject: CN=5C5CFF9F620CA5368BE708AB6FBE91633912D44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:cf:e4:17:aa:92:a6:8c:a3:44:f2:c2:10: 0c:29:0c:41:05:de:16:0a:9d:3f:d4:0d:83:e0:48: 24:3a:cb:d4:d1:29:e7:ca:98:6f:4f:f7:2d:6f:99: cd:7b:8d:44:7a:62:37:47:1f:01:02:6e:c5:3f:76: 04:d9:1e:e1:e0:cb:e6:0c:ca:0c:e5:9b:09:1d:9d: 72:e8:50:ab:bd:77:9c:0c:03:55:56:59:17:ce:60: 7d:67:7a:68:57:09:f3:72:f5:ab:f0:16:2c:62:d9: 8b:ee:da:95:74:dc:dd:37:98:c2:39:53:f0:ce:ed: b3:b0:c4:69:d3:50:5c:a1:a8:a6:b6:7e:26:20:e2: 50:e8:54:3f:09:c2:9c:83:ff:7b:71:1d:71:71:bd: fb:a1:29:ed:36:b8:74:23:7a:69:81:d8:a9:93:65: 22:ab:47:f4:12:ad:50:23:91:ab:57:47:6b:15:a3: cf:94:a0:c2:1f:29:38:04:f3:b7:59:5b:e5:d8:b7: 91:c3:ea:dd:6f:25:7a:8a:8a:9f:15:71:14:c8:6f: 39:e6:ee:55:ba:47:fb:2f:4b:63:8a:56:0a:49:61: 5c:a8:59:23:9e:92:13:0b:d6:a9:a5:36:dd:17:7c: 53:0c:39:43:e8:b2:5e:f5:e9:5a:bf:22:a3:d3:b3: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:FF:9F:62:0C:A5:36:8B:E7:08:AB:6F:BE:91:63:39:12:D4:4F X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7a:e2:61:6b:c1:bd:fa:93:de:50:dd:e5:45:62:c6:60:1e: df:98:df:06:a4:af:e8:ce:ed:2d:da:6a:eb:b1:f9:7a:9f:1e: 3c:57:52:17:83:37:9b:0e:89:9a:50:ff:93:85:14:c3:0d:0d: f4:78:47:02:f0:39:44:f8:68:b2:63:38:53:b6:03:5e:1f:d4: d3:92:db:10:6a:15:02:6d:a7:58:52:69:4b:bb:3b:f2:3a:d5: f6:83:66:76:c3:49:4d:52:2d:d3:fd:66:81:20:f9:ee:2a:d4: ff:fc:53:25:3d:a5:93:b0:ef:c2:19:5f:73:7a:f0:4a:a2:4a: 86:06:2a:2d:43:79:75:82:e4:09:9e:76:44:ea:97:dd:89:89: 76:80:68:a2:e2:a9:2a:c3:c1:1f:d5:13:1f:ce:22:0a:8a:d7: 64:a8:fd:27:fe:64:d1:c1:40:3f:a1:0e:76:1f:80:ed:dc:05: f6:9e:d8:e7:e3:95:71:91:c9:46:78:49:c0:c6:7d:ae:c6:00: 4c:20:63:26:11:1a:b9:ff:41:76:f8:34:d4:84:bc:5f:ee:f5: d0:5f:16:55:9e:30:d9:8b:4a:aa:dc:18:3b:62:1c:02:4f:64: e0:e2:d8:39:8f:a2:10:28:20:bd:0f:0f:07:47:04:c9:53:f9: 75:46:a9:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaxmtkliI9MmdyiikEQBsu4R5P+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjAzMjYwNzQ4MjhaFw0yNjAzMjcwOTUwMjhaMDMxMTAvBgNV BAMTKDVDNUNGRjlGNjIwQ0E1MzY4QkU3MDhBQjZGQkU5MTYzMzkxMkQ0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSU8/kF6qSpoyjRPLCEAwpDEEF 3hYKnT/UDYPgSCQ6y9TRKefKmG9P9y1vmc17jUR6YjdHHwECbsU/dgTZHuHgy+YM ygzlmwkdnXLoUKu9d5wMA1VWWRfOYH1nemhXCfNy9avwFixi2Yvu2pV03N03mMI5 U/DO7bOwxGnTUFyhqKa2fiYg4lDoVD8JwpyD/3txHXFxvfuhKe02uHQjemmB2KmT ZSKrR/QSrVAjkatXR2sVo8+UoMIfKTgE87dZW+XYt5HD6t1vJXqKip8VcRTIbznm 7lW6R/svS2OKVgpJYVyoWSOekhML1qmlNt0XfFMMOUPosl716Vq/IqPTs3TvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXFz/n2IMpTaL5wirb76RYzkS1E8wHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3OTkxMDUvMC85MDlENTU2MjUxQTBC RTVGOTIzNDUxNDAyOEVCRDM3Q0U4RTEyODBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3riYWvBvfqT 3lDd5UVixmAe35jfBqSv6M7tLdpq67H5ep8ePFdSF4M3mw6JmlD/k4UUww0N9HhH AvA5RPhosmM4U7YDXh/U05LbEGoVAm2nWFJpS7s78jrV9oNmdsNJTVIt0/1mgSD5 7irU//xTJT2lk7Dvwhlfc3rwSqJKhgYqLUN5dYLkCZ52ROqX3YmJdoBoouKpKsPB H9UTH84iCorXZKj9J/5k0cFAP6EOdh+A7dwF9p7Y5+OVcZHJRnhJwMZ9rsYATCBj JhEauf9Bdvg01IS8X+710F8WVZ4w2YtKqtwYO2IcAk9k4OLYOY+iECggvQ8PB0cE yVP5dUapTQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:02 2026 by rpki-client