$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft File: A162689F28161D4D4C3DF339D95097D5EF647370.mft (raw, json) Hash identifier: 6wyCyYgw2w3poUBkm4xhKC2pCj5so7cfhgH1KrD5BYA= Subject key identifier: 67:AF:35:EE:24:B0:20:DF:1D:19:49:9D:21:C4:A8:C4:72:7C:0B:33 Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370 Certificate serial: 5EFE0DC67A719C06E4DA9641F4EC2604E5A34337 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 09:38:28 +0000 Manifest this update: Thu 26 Mar 2026 09:33:28 +0000 Manifest next update: Fri 27 Mar 2026 12:21:28 +0000 Files and hashes: 1: A162689F28161D4D4C3DF339D95097D5EF647370.crl (hash: jcDtBOsceBwo8+Px5YU5ZF8F/qAm7utAQoTonSUOyks=) 2: 3132342e31342e312e302f32342d3234203d3e2034383132.roa (hash: XFRJp6zS1ERcSGN1XE2RvWKAzZUpGDHg4WQCg4nt+Og=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fe:0d:c6:7a:71:9c:06:e4:da:96:41:f4:ec:26:04:e5:a3:43:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370 Validity Not Before: Mar 26 09:33:28 2026 GMT Not After : Mar 27 12:21:28 2026 GMT Subject: CN=67AF35EE24B020DF1D19499D21C4A8C4727C0B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:bd:18:49:a4:b7:08:c0:2f:51:92:50:f1: b8:dc:b6:6a:ed:70:aa:be:a1:8c:aa:a8:84:0a:f6: 61:ee:cc:75:36:af:8e:48:34:c5:88:dd:fe:d3:e6: 80:cc:ba:24:13:25:b0:43:45:68:44:2d:a3:f5:ae: 8f:b3:6b:08:9e:fd:3d:cd:c2:0f:33:e4:34:c1:30: 6a:6e:39:49:47:0f:7f:5f:f9:14:a0:af:f2:4d:ab: c3:8c:bd:6f:33:97:96:ce:cb:78:61:e6:0d:e8:3e: 85:ac:25:2c:a5:44:37:6a:54:79:80:c7:00:3d:7d: c2:86:59:bf:9b:8c:c5:f3:c7:fb:26:db:ce:79:54: 43:b5:01:53:16:20:c0:49:2c:33:4f:1e:71:cc:0b: 29:0c:e4:2e:41:f7:cc:45:5b:be:20:67:f4:01:22: 48:bc:6c:95:c3:74:5e:2d:b0:49:18:d0:a5:42:a1: fe:ca:18:4b:a8:c3:af:60:cb:35:c4:bd:c5:9a:5d: 70:c8:81:18:b8:cc:5b:b6:b3:49:03:b0:a4:21:10: 32:66:cf:3b:a2:c3:32:13:69:f5:04:0d:94:a1:81: 9c:3d:cf:19:35:4f:48:86:55:7c:be:e8:dd:0f:13: 51:25:4f:77:13:9e:a0:37:f8:cf:24:fe:15:09:86: b9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AF:35:EE:24:B0:20:DF:1D:19:49:9D:21:C4:A8:C4:72:7C:0B:33 X509v3 Authority Key Identifier: keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5e:d6:31:27:dd:28:51:15:d8:d9:1e:e6:07:99:7e:aa:97: a2:05:67:ef:ff:31:ec:ab:9f:00:0a:01:9d:72:4b:2f:fc:8e: c4:25:5b:19:88:25:1a:74:4d:47:1c:56:ee:84:b1:5a:9e:bb: 4c:91:21:de:33:0b:65:39:a5:7e:84:d1:88:30:e5:b5:0a:3b: 19:e9:77:cf:9c:3e:5e:8d:e2:3f:d9:f8:3a:75:6b:79:0a:8a: 3a:34:ab:d9:86:4b:13:3a:63:9c:a8:72:53:75:65:7d:68:b3: 64:95:27:00:87:5c:06:d0:57:3e:ae:05:46:d3:f9:c5:7f:17: 20:95:ec:cd:30:ad:be:a8:32:e7:0b:54:78:4d:46:cd:83:64: 90:34:7e:35:03:1a:f3:e2:c9:60:98:b6:86:fd:4b:f6:f6:77: 24:7c:5f:54:ea:97:96:a5:3b:0c:6c:4d:17:0d:50:a2:0c:bb: 78:02:4f:65:05:4d:6e:70:53:d9:f8:9c:44:38:5e:4a:20:0c: 47:75:84:14:57:f5:4a:97:fa:a9:7c:41:ba:93:bf:18:22:41: c2:63:64:6a:02:bb:34:66:a0:74:e9:a6:25:10:aa:06:ec:19: 51:79:53:2a:b4:55:e3:31:c5:ac:cf:b9:09:f8:92:5f:1e:8d: 46:1e:fc:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXv4NxnpxnAbk2pZB9OwmBOWjQzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVF RjY0NzM3MDAeFw0yNjAzMjYwOTMzMjhaFw0yNjAzMjcxMjIxMjhaMDMxMTAvBgNV BAMTKDY3QUYzNUVFMjRCMDIwREYxRDE5NDk5RDIxQzRBOEM0NzI3QzBCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhb0YSaS3CMAvUZJQ8bjctmrt cKq+oYyqqIQK9mHuzHU2r45INMWI3f7T5oDMuiQTJbBDRWhELaP1ro+zawie/T3N wg8z5DTBMGpuOUlHD39f+RSgr/JNq8OMvW8zl5bOy3hh5g3oPoWsJSylRDdqVHmA xwA9fcKGWb+bjMXzx/sm2855VEO1AVMWIMBJLDNPHnHMCykM5C5B98xFW74gZ/QB Iki8bJXDdF4tsEkY0KVCof7KGEuow69gyzXEvcWaXXDIgRi4zFu2s0kDsKQhEDJm zzuiwzITafUEDZShgZw9zxk1T0iGVXy+6N0PE1ElT3cTnqA3+M8k/hUJhrk/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZ6817iSwIN8dGUmdIcSoxHJ8CzMwHwYDVR0j BBgwFoAUoWJonygWHU1MPfM52VCX1e9kc3AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjkzMDE3Ny8wL0ExNjI2ODlGMjgxNjFENEQ0QzNERjMzOUQ5NTA5 N0Q1RUY2NDczNzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY5MzAxNzcvMC9BMTYyNjg5RjI4MTYx RDRENEMzREYzMzlEOTUwOTdENUVGNjQ3MzcwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgF7WMSfdKFEV 2Nke5geZfqqXogVn7/8x7KufAAoBnXJLL/yOxCVbGYglGnRNRxxW7oSxWp67TJEh 3jMLZTmlfoTRiDDltQo7Gel3z5w+Xo3iP9n4OnVreQqKOjSr2YZLEzpjnKhyU3Vl fWizZJUnAIdcBtBXPq4FRtP5xX8XIJXszTCtvqgy5wtUeE1GzYNkkDR+NQMa8+LJ YJi2hv1L9vZ3JHxfVOqXlqU7DGxNFw1Qogy7eAJPZQVNbnBT2ficRDheSiAMR3WE FFf1Spf6qXxBupO/GCJBwmNkagK7NGagdOmmJRCqBuwZUXlTKrRV4zHFrM+5CfiS Xx6NRh78Mg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:25 2026 by rpki-client