$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft File: E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json) Hash identifier: IPX5V39e6EgCVph51pIF4MHzDIryodtyuRJhnLp+Nuw= Subject key identifier: 29:3F:19:24:BE:F7:C1:BE:04:5C:3D:26:AA:C7:5F:32:E4:C6:4F:FB Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232 Certificate serial: 1A9CA8FB1EA6F2D8C7CE5645FFDFE540DBD175F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft Manifest number: 5D Signing time: Thu 26 Mar 2026 08:23:28 +0000 Manifest this update: Thu 26 Mar 2026 08:18:28 +0000 Manifest next update: Fri 27 Mar 2026 09:36:28 +0000 Files and hashes: 1: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=) 2: 3230322e3136352e3230382e302f32302d3234203d3e20313436383334.roa (hash: xG3PI0F+sPPi1DnSGZHfDnmRvSYoRWgSB+By3rD4zv0=) 3: 3131362e3139392e3135322e302f32322d3234203d3e203231383539.roa (hash: QOyMyxL3BQmztpsRoWy1C75w1RphCCZxpH/MhVpOHKQ=) 4: 3130332e3135362e37382e302f32332d3234203d3e203231383539.roa (hash: Nc3wGfCMThvQd+bqUSNmuME0vCXe9XwNOalM21iiOq4=) 5: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: Ed/mn1x01SoIuOF3tSiG64Q7/1gVkjMdttF4qodSy4Q=) 6: 3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa (hash: EeCbVZ8eWIjYjevJQ1udtZuLCSkHUsj9Yj5AaZL7S4U=) 7: 3131362e3139392e3135362e302f32322d3234203d3e20313436383334.roa (hash: Uh2/EDdWK4c6ZYX1tLFLGx4xTpdDGyLVBokH0GwB3j4=) 8: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9c:a8:fb:1e:a6:f2:d8:c7:ce:56:45:ff:df:e5:40:db:d1:75:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232 Validity Not Before: Mar 26 08:18:28 2026 GMT Not After : Mar 27 09:36:28 2026 GMT Subject: CN=293F1924BEF7C1BE045C3D26AAC75F32E4C64FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:ff:84:1b:53:77:ef:85:ff:a0:b2:27:da: d2:e8:17:2b:e7:19:31:b2:13:ba:2d:d2:17:23:9a: 2c:b0:71:a9:1c:a1:3b:c8:63:4b:d1:d4:a3:c5:f5: f8:cf:b5:ab:c7:c9:60:64:40:a4:d5:68:75:f0:8e: f2:3c:05:b7:da:ef:39:4a:c5:2d:58:ce:96:28:14: 03:2c:24:69:a7:42:44:2b:2c:1c:d7:39:35:0f:f5: 2e:7e:c0:ee:f0:32:93:43:d2:0e:df:65:28:c6:ea: d8:04:9f:d6:3e:fd:7b:41:43:92:10:ae:c2:73:41: 2d:11:1d:80:09:b6:ac:d0:c0:e0:e7:26:9d:26:00: 3d:1e:dd:6e:87:02:93:29:fb:09:3a:f2:8f:03:fc: 58:a0:67:c4:29:5f:7c:8a:d7:21:d1:8a:94:f4:2a: 78:9d:82:4d:69:38:da:98:67:7b:23:a0:b9:33:0e: b8:e8:b0:3a:24:7b:83:4e:46:72:b4:3d:85:a3:ee: ba:75:6c:e7:ae:f6:c5:82:66:7b:86:c6:2e:80:f7: 1d:ef:c2:d4:8d:b0:72:9b:a3:36:76:76:78:3c:c3: f2:cf:05:21:05:f9:7b:05:3c:94:09:53:ec:6f:20: d2:d2:ad:62:6a:e1:f9:ed:df:47:fa:6c:77:08:e5: f5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3F:19:24:BE:F7:C1:BE:04:5C:3D:26:AA:C7:5F:32:E4:C6:4F:FB X509v3 Authority Key Identifier: keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2a:46:08:84:33:88:6f:fe:e6:c8:70:33:e1:37:51:9b:fa: 5b:b9:96:08:fa:33:4b:e4:8f:d3:d4:0f:c3:78:6c:b1:96:02: df:bd:26:f6:f4:65:c1:68:07:65:f1:b8:3f:5b:b6:f8:0e:27: e3:c9:03:3e:5c:57:f2:44:7a:81:6e:14:68:2a:50:fb:29:5a: ca:58:21:48:5a:ba:d3:21:78:d8:79:31:b2:ba:b1:7d:4f:6e: cb:0d:45:b1:cc:ad:3b:e2:0c:88:9a:16:c7:88:1d:de:1e:15: ca:e0:f7:47:db:8b:6e:0b:1e:e0:e4:a7:13:4c:af:f2:01:9f: 85:ec:bc:34:22:62:32:08:01:5b:ce:a7:c1:7a:ec:47:55:03: 29:39:7f:7d:40:7e:ee:a6:b5:b5:94:df:65:69:c6:cc:e1:db: 25:35:2d:fa:a5:bc:e6:8f:0b:28:28:ea:13:6a:56:5a:11:6d: c8:72:f9:25:d7:35:1b:38:59:9b:44:78:2a:c7:d6:e2:5d:ba: fb:33:8a:93:3b:36:6f:b0:21:99:4a:df:53:a1:ee:5c:2e:a8: 94:8e:48:0a:dd:62:5f:ec:00:4b:81:d6:ae:77:e4:44:2b:d2: 67:d0:61:37:fe:54:47:dc:59:b6:cc:4b:09:ef:55:08:29:62: cc:5d:c2:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGpyo+x6m8tjHzlZF/9/lQNvRdfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz MDgzMDIzMjAeFw0yNjAzMjYwODE4MjhaFw0yNjAzMjcwOTM2MjhaMDMxMTAvBgNV BAMTKDI5M0YxOTI0QkVGN0MxQkUwNDVDM0QyNkFBQzc1RjMyRTRDNjRGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdP+EG1N374X/oLIn2tLoFyvn GTGyE7ot0hcjmiywcakcoTvIY0vR1KPF9fjPtavHyWBkQKTVaHXwjvI8Bbfa7zlK xS1YzpYoFAMsJGmnQkQrLBzXOTUP9S5+wO7wMpND0g7fZSjG6tgEn9Y+/XtBQ5IQ rsJzQS0RHYAJtqzQwODnJp0mAD0e3W6HApMp+wk68o8D/FigZ8QpX3yK1yHRipT0 Knidgk1pONqYZ3sjoLkzDrjosDoke4NORnK0PYWj7rp1bOeu9sWCZnuGxi6A9x3v wtSNsHKbozZ2dng8w/LPBSEF+XsFPJQJU+xvINLSrWJq4fnt30f6bHcI5fUZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKT8ZJL73wb4EXD0mqsdfMuTGT/swHwYDVR0j BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1 NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC9FMjNDNDgwMENBNDUy QjFBOEU2MjE0OTIzQzAxNTQwRTMwODMwMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECpGCIQziG/+ 5shwM+E3UZv6W7mWCPozS+SP09QPw3hssZYC370m9vRlwWgHZfG4P1u2+A4n48kD PlxX8kR6gW4UaCpQ+ylaylghSFq60yF42HkxsrqxfU9uyw1FscytO+IMiJoWx4gd 3h4VyuD3R9uLbgse4OSnE0yv8gGfhey8NCJiMggBW86nwXrsR1UDKTl/fUB+7qa1 tZTfZWnGzOHbJTUt+qW85o8LKCjqE2pWWhFtyHL5Jdc1GzhZm0R4KsfW4l26+zOK kzs2b7AhmUrfU6HuXC6olI5ICt1iX+wAS4HWrnfkRCvSZ9BhN/5UR9xZtsxLCe9V CClizF3C6g== -----END CERTIFICATE-----Generated at Thu Mar 26 19:11:57 2026 by rpki-client