$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: e81bmwWU3HeFbTuBCcStsO6Ao/Zeiz+M2Cp7OKbdIYQ= Subject key identifier: F3:A6:6A:33:FD:CF:99:66:4A:25:5B:B9:06:C1:B9:04:F7:C0:BD:6B Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 109B48F15E9B96E48C9F862BEF89F551A86954BE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 16:53:28 +0000 Manifest this update: Thu 26 Mar 2026 16:48:28 +0000 Manifest next update: Fri 27 Mar 2026 18:40:28 +0000 Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) 2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: L1zhWH53V2tCn+JNukttHup8S+d1eV/AJIR7bt0xfOQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9b:48:f1:5e:9b:96:e4:8c:9f:86:2b:ef:89:f5:51:a8:69:54:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Mar 26 16:48:28 2026 GMT Not After : Mar 27 18:40:28 2026 GMT Subject: CN=F3A66A33FDCF99664A255BB906C1B904F7C0BD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:ba:7b:be:3f:1c:75:5b:0a:de:f6:af:4e: 76:77:7d:59:f0:b2:6c:e5:3b:42:1a:ed:3e:6b:2e: 0a:e8:fc:17:26:a7:73:70:dc:17:a3:c8:f3:cc:b0: 59:41:e3:a0:6c:15:f5:5b:79:93:35:a4:81:ed:2a: e7:10:70:c0:6d:56:7e:86:3a:ba:20:5c:ca:e9:f9: e4:24:39:32:ff:56:e1:38:12:66:69:63:0a:cd:ab: ad:e4:31:61:5b:86:bc:2a:d4:c4:8e:8d:e3:86:51: 40:a5:ba:18:97:1a:9b:80:be:e1:10:39:2a:27:a5: a6:a6:c5:e3:d8:45:d9:e1:12:67:bb:bf:16:63:58: b1:f4:84:0d:86:e9:1b:17:f8:c4:8b:fb:77:97:81: ae:e4:c4:ab:d8:58:42:19:9f:c5:ef:8b:7b:86:09: 78:64:a8:f5:1f:9d:18:97:58:16:e5:eb:e0:c6:1b: 07:b5:ef:93:55:83:1c:68:74:85:28:2b:8e:88:f2: 90:26:21:e8:a8:1c:94:46:1c:01:5a:92:63:c4:6a: 8b:a3:ef:14:49:7f:72:39:c0:e3:6d:77:a2:93:54: ce:55:50:12:0f:fd:0c:53:ff:55:3c:7b:31:32:22: fe:67:1e:b0:da:c2:06:c6:8b:a7:2c:de:95:c5:40: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A6:6A:33:FD:CF:99:66:4A:25:5B:B9:06:C1:B9:04:F7:C0:BD:6B X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3b:a9:d0:c2:13:c2:8b:16:07:de:88:8d:56:e0:f3:44:5d: a0:d3:d0:1d:82:92:f1:c9:93:7b:51:5c:02:1c:63:0b:4e:97: 0e:1a:37:d1:e0:14:42:19:aa:c7:fd:02:a6:99:18:99:79:31: de:ff:ce:44:5a:d5:84:5f:0a:95:08:ac:3f:03:60:65:79:28: da:02:7d:88:cc:f2:92:9f:80:b2:2a:e8:68:ab:ff:7b:be:a4: 41:6d:46:89:20:5f:91:b8:74:29:90:41:61:ee:b0:3f:5d:65: 07:aa:cc:00:60:21:3a:18:89:1c:62:6b:2d:07:e9:f3:d5:23: 9e:62:d4:8f:16:f0:04:81:4f:64:f0:f1:a2:33:d8:30:07:59: 60:19:a0:d3:d9:de:13:5a:6e:57:93:70:25:0e:bd:cb:ab:c1: e0:dc:b1:17:d6:01:6f:46:b5:a4:2a:60:e8:6b:eb:5c:cd:58: 94:c2:43:39:f7:94:e1:30:28:da:ac:00:00:4a:d6:ca:40:28: f3:d6:e1:ba:fe:13:0d:7b:53:fd:6b:d2:99:90:f1:9a:57:0d: 85:38:f8:81:5b:e0:64:23:f7:42:9f:bd:f9:d3:19:b4:64:95: b6:e5:18:82:e9:32:be:0e:ef:02:b6:3b:33:bb:3e:ee:16:27: ab:54:0d:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEJtI8V6bluSMn4Yr74n1UahpVL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjAzMjYxNjQ4MjhaFw0yNjAzMjcxODQwMjhaMDMxMTAvBgNV BAMTKEYzQTY2QTMzRkRDRjk5NjY0QTI1NUJCOTA2QzFCOTA0RjdDMEJENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcv7p7vj8cdVsK3vavTnZ3fVnw smzlO0Ia7T5rLgro/Bcmp3Nw3BejyPPMsFlB46BsFfVbeZM1pIHtKucQcMBtVn6G OrogXMrp+eQkOTL/VuE4EmZpYwrNq63kMWFbhrwq1MSOjeOGUUCluhiXGpuAvuEQ OSonpaamxePYRdnhEme7vxZjWLH0hA2G6RsX+MSL+3eXga7kxKvYWEIZn8Xvi3uG CXhkqPUfnRiXWBbl6+DGGwe175NVgxxodIUoK46I8pAmIeioHJRGHAFakmPEaouj 7xRJf3I5wONtd6KTVM5VUBIP/QxT/1U8ezEyIv5nHrDawgbGi6cs3pXFQEKLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU86ZqM/3PmWZKJVu5BsG5BPfAvWswHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjup0MITwosW B96IjVbg80RdoNPQHYKS8cmTe1FcAhxjC06XDho30eAUQhmqx/0CppkYmXkx3v/O RFrVhF8KlQisPwNgZXko2gJ9iMzykp+AsiroaKv/e76kQW1GiSBfkbh0KZBBYe6w P11lB6rMAGAhOhiJHGJrLQfp89UjnmLUjxbwBIFPZPDxojPYMAdZYBmg09neE1pu V5NwJQ69y6vB4NyxF9YBb0a1pCpg6GvrXM1YlMJDOfeU4TAo2qwAAErWykAo89bh uv4TDXtT/WvSmZDxmlcNhTj4gVvgZCP3Qp+9+dMZtGSVtuUYgukyvg7vArY7M7s+ 7hYnq1QN5Q== -----END CERTIFICATE-----Generated at Fri Mar 27 05:00:07 2026 by rpki-client