$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: tJUycxMlXgcHgXIdBn0VhTMH0dTth3+W2vpeCZcmjUg= Subject key identifier: B5:08:F7:C7:DE:79:77:81:4C:90:E5:EA:84:F6:5D:38:7F:B9:A0:05 Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 398B15E347B74EBD50D93F7A4147B9884B741B3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 22:43:28 +0000 Manifest this update: Thu 26 Mar 2026 22:38:28 +0000 Manifest next update: Fri 27 Mar 2026 23:35:28 +0000 Files and hashes: 1: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) 2: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) 3: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) 4: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: u+eQXC/i/hx3kFisw3M03Be29T9BCAO+a1LdY9YN5J4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8b:15:e3:47:b7:4e:bd:50:d9:3f:7a:41:47:b9:88:4b:74:1b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Mar 26 22:38:28 2026 GMT Not After : Mar 27 23:35:28 2026 GMT Subject: CN=B508F7C7DE7977814C90E5EA84F65D387FB9A005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:75:52:5a:c4:a1:70:4f:17:8a:b3:dc:64: c1:25:4c:02:eb:a7:79:a0:7e:12:9b:1e:d1:6b:0f: 2d:59:45:2c:81:70:0e:fe:43:d2:a8:77:2a:0e:9c: 40:e2:e0:c7:c1:17:97:e2:6d:d3:0d:f3:9f:52:36: 12:c2:af:a4:7e:27:9d:0a:5b:3e:c7:23:6e:63:21: 65:e2:ae:94:81:44:39:b0:8b:4b:66:03:f3:3e:a4: cf:d3:2e:21:28:a0:e6:db:5e:a4:e9:82:b3:07:f1: 2f:90:7d:04:66:68:e3:9a:3b:a7:78:75:f2:59:45: 6a:60:27:2c:4b:57:76:68:73:0c:e9:51:6c:6f:a3: 3d:30:de:f0:8e:49:a8:f4:58:68:a2:a8:ef:2c:fa: c8:52:74:b7:43:31:00:fa:c0:f9:79:fe:ba:85:ba: 52:f6:4b:63:c3:71:ca:98:cc:0d:07:ae:c8:85:40: 19:d2:62:89:db:50:c2:52:d7:de:9f:ef:a2:b8:e5: eb:00:15:16:d2:07:2b:e8:43:e4:bb:7f:a5:83:64: b4:1d:57:80:2a:65:2b:16:b3:d7:7a:67:62:00:4c: 7e:f9:1f:b9:bb:ad:22:bd:c2:47:61:39:43:85:b0: 53:4a:32:21:c3:a8:3c:35:1c:4d:d4:fb:0c:b3:85: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:08:F7:C7:DE:79:77:81:4C:90:E5:EA:84:F6:5D:38:7F:B9:A0:05 X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:aa:e3:38:61:10:e3:e7:34:a4:8e:f5:59:d4:c7:c3:14:5a: e0:69:af:96:87:45:04:a7:81:5f:8b:d8:5d:b8:fc:72:21:b1: 08:6f:a8:de:e5:ae:e6:f2:21:08:42:81:c4:db:41:5a:07:0b: 12:3c:19:f5:02:01:0b:e4:a2:b2:e4:7c:74:74:8c:d0:69:d5: 0e:14:98:1d:8b:9a:fc:3d:7d:b2:25:02:ed:02:3b:0b:93:cc: 16:f1:dc:e2:05:92:0f:78:fa:b8:46:e2:b7:ff:8c:74:92:93: 24:15:b9:12:9e:42:53:a2:7b:5b:78:7b:22:60:4c:c0:5b:db: dd:b4:53:70:9b:57:f1:e3:53:bd:0c:a9:48:c8:ec:e2:4a:30: 6b:23:d0:15:f3:e9:64:45:ed:d8:48:3f:c0:96:1f:27:d3:0b: 41:5d:62:e8:f4:0a:73:e7:a9:12:b9:e9:e2:90:29:28:3b:1c: fd:09:89:b5:a7:84:e1:eb:4d:68:4f:ac:df:3f:f9:f0:d7:0f: 2a:9e:00:3a:bd:45:f7:42:72:25:b3:d4:8e:54:80:58:09:22: 00:3d:22:58:ac:b7:a2:e6:ba:e0:f9:ea:8f:f6:4e:cc:54:8f: 71:03:1e:e9:c9:cd:2a:19:e3:fd:3b:20:4d:4b:bf:f7:a8:fb: 95:bf:a5:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOYsV40e3Tr1Q2T96QUe5iEt0GzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjAzMjYyMjM4MjhaFw0yNjAzMjcyMzM1MjhaMDMxMTAvBgNV BAMTKEI1MDhGN0M3REU3OTc3ODE0QzkwRTVFQTg0RjY1RDM4N0ZCOUEwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKknVSWsShcE8XirPcZMElTALr p3mgfhKbHtFrDy1ZRSyBcA7+Q9KodyoOnEDi4MfBF5fibdMN859SNhLCr6R+J50K Wz7HI25jIWXirpSBRDmwi0tmA/M+pM/TLiEooObbXqTpgrMH8S+QfQRmaOOaO6d4 dfJZRWpgJyxLV3ZocwzpUWxvoz0w3vCOSaj0WGiiqO8s+shSdLdDMQD6wPl5/rqF ulL2S2PDccqYzA0HrsiFQBnSYonbUMJS196f76K45esAFRbSByvoQ+S7f6WDZLQd V4AqZSsWs9d6Z2IATH75H7m7rSK9wkdhOUOFsFNKMiHDqDw1HE3U+wyzhRp9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtQj3x955d4FMkOXqhPZdOH+5oAUwHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqrjOGEQ4+c0 pI71WdTHwxRa4GmvlodFBKeBX4vYXbj8ciGxCG+o3uWu5vIhCEKBxNtBWgcLEjwZ 9QIBC+SisuR8dHSM0GnVDhSYHYua/D19siUC7QI7C5PMFvHc4gWSD3j6uEbit/+M dJKTJBW5Ep5CU6J7W3h7ImBMwFvb3bRTcJtX8eNTvQypSMjs4kowayPQFfPpZEXt 2Eg/wJYfJ9MLQV1i6PQKc+epErnp4pApKDsc/QmJtaeE4etNaE+s3z/58NcPKp4A Or1F90JyJbPUjlSAWAkiAD0iWKy3oua64Pnqj/ZOzFSPcQMe6cnNKhnj/TsgTUu/ 96j7lb+lbQ== -----END CERTIFICATE-----Generated at Fri Mar 27 04:45:50 2026 by rpki-client