$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json) Hash identifier: q3LSXTlufPNg3j9TOmlreFOrNz0BJiYsJXKlMP5Maqg= Subject key identifier: 7E:34:6A:AC:B2:0C:1E:64:B7:C8:A6:CD:8C:3E:0A:D6:30:62:3D:B0 Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Certificate serial: 13F107A11B3684DE9F2C743C23138D0B400E438D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 05:33:28 +0000 Manifest this update: Thu 26 Mar 2026 05:28:28 +0000 Manifest next update: Fri 27 Mar 2026 08:24:28 +0000 Files and hashes: 1: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=) 2: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: R9JZ3HD9uoTVYnX0CUA4fUEItqT2zpoNUfLzSQyFoRw=) 3: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: pBwER9sTJhTwYDQM7K5BzzFLDuRowL/EfrGMCdxJtro=) 4: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=) 5: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QHP6i0URLcoEUo8SGK+7kXUZkIMj8cNOFacHv1WMPHU=) 6: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=) 7: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: PnRTCZodwFvvxLNCVBWc71hkMeLqFF+kuYfdErpIm54=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f1:07:a1:1b:36:84:de:9f:2c:74:3c:23:13:8d:0b:40:0e:43:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Validity Not Before: Mar 26 05:28:28 2026 GMT Not After : Mar 27 08:24:28 2026 GMT Subject: CN=7E346AACB20C1E64B7C8A6CD8C3E0AD630623DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:f5:0a:7f:40:60:21:fd:d3:3c:41:b1:6b: 7d:0d:37:23:de:3c:4e:2f:cd:7e:1d:71:9d:ed:ef: 1c:0c:87:4f:a5:e7:ec:3f:45:c6:df:e1:13:0b:f2: 46:b0:4f:9c:80:49:b7:23:6f:fc:ba:af:6a:a4:9f: 9b:08:94:c0:16:ec:e0:22:16:e7:da:ed:ed:13:63: 84:d5:40:49:9f:df:0f:cb:88:49:79:90:44:3c:98: f1:44:a1:2d:d3:b1:a6:85:53:8d:23:06:15:6b:62: 53:39:08:6e:61:b1:9f:4f:d3:8b:24:a9:f7:72:b1: 74:0a:f9:f6:c5:ca:9b:62:40:36:a2:5d:1c:f6:83: 66:70:a0:1b:3e:6a:41:87:d2:c4:bc:43:0b:66:ef: d8:8b:39:a9:2a:53:a3:1b:38:25:03:bf:bb:b4:ca: e9:ce:cf:18:a5:c0:8f:2d:86:be:20:31:29:23:45: be:6f:c0:44:ab:9b:6c:e8:88:c1:bf:48:72:34:c7: 14:a6:72:17:8b:5d:7f:71:1a:fa:b1:93:2a:34:80: a2:89:c2:2e:e2:93:f4:a1:16:c1:ea:cb:ad:23:25: f2:2e:80:19:94:ad:37:26:80:34:4d:98:67:7a:45: 27:7d:89:3f:7c:b2:ce:54:74:01:b6:4f:db:3c:36: 11:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:34:6A:AC:B2:0C:1E:64:B7:C8:A6:CD:8C:3E:0A:D6:30:62:3D:B0 X509v3 Authority Key Identifier: keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bc:06:ae:93:69:c8:42:3f:2d:d2:ea:4e:df:c5:8d:21:9f: 9e:bf:ac:e8:1e:ee:ff:c0:99:4c:12:a9:68:13:2e:74:02:0a: 01:c0:8b:52:ba:ba:ab:37:87:8e:15:a7:19:da:17:77:d7:84: 2a:f0:cb:96:d2:e9:87:01:78:fa:e0:14:28:81:df:37:90:25: bb:1c:03:8e:0b:80:63:e1:f5:b6:02:9c:3d:c9:d0:f9:9a:f9: f8:7a:f9:14:74:27:dc:5c:1c:09:e0:c8:3a:1a:93:6b:e9:08: ee:f9:03:86:a3:1d:dc:44:f0:b9:20:3a:b6:81:78:fb:b3:4f: 98:26:83:cc:a6:45:44:44:50:b9:c2:0a:1d:90:0a:18:d8:1a: 08:5c:a2:1b:24:e3:4e:44:e8:3a:a1:5b:36:f1:a4:c8:48:42: ba:04:3e:0e:1d:55:bf:46:c7:f4:9b:45:93:64:19:ae:d4:6e: 68:30:12:a4:13:e2:61:33:46:d9:90:11:53:35:3a:92:f5:25: cf:7f:24:74:5b:57:e4:d5:52:a6:fa:74:74:c1:8f:a8:c2:a1: 0b:e7:2a:64:0c:f0:a3:f5:f5:7d:1f:59:e4:73:71:98:2c:44: ad:3a:c4:ef:74:1d:7a:6e:31:04:c3:a1:9a:3d:90:d8:22:b1: 65:34:8f:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE/EHoRs2hN6fLHQ8IxONC0AOQ40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURF Njk3MDBCRjAeFw0yNjAzMjYwNTI4MjhaFw0yNjAzMjcwODI0MjhaMDMxMTAvBgNV BAMTKDdFMzQ2QUFDQjIwQzFFNjRCN0M4QTZDRDhDM0UwQUQ2MzA2MjNEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSvUKf0BgIf3TPEGxa30NNyPe PE4vzX4dcZ3t7xwMh0+l5+w/Rcbf4RML8kawT5yASbcjb/y6r2qkn5sIlMAW7OAi Fufa7e0TY4TVQEmf3w/LiEl5kEQ8mPFEoS3TsaaFU40jBhVrYlM5CG5hsZ9P04sk qfdysXQK+fbFyptiQDaiXRz2g2ZwoBs+akGH0sS8Qwtm79iLOakqU6MbOCUDv7u0 yunOzxilwI8thr4gMSkjRb5vwESrm2zoiMG/SHI0xxSmcheLXX9xGvqxkyo0gKKJ wi7ik/ShFsHqy60jJfIugBmUrTcmgDRNmGd6RSd9iT98ss5UdAG2T9s8NhGnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfjRqrLIMHmS3yKbNjD4K1jBiPbAwHwYDVR0j BBgwFoAUCjesiOMD9LuDTBgLBvJQreaXAL8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzI2OTI1MC8wLzBBMzdBQzg4RTMwM0Y0QkI4MzRDMTgwQjA2RjI1 MEFERTY5NzAwQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzcyNjkyNTAvMC8wQTM3QUM4OEUzMDNG NEJCODM0QzE4MEIwNkYyNTBBREU2OTcwMEJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7wGrpNpyEI/ LdLqTt/FjSGfnr+s6B7u/8CZTBKpaBMudAIKAcCLUrq6qzeHjhWnGdoXd9eEKvDL ltLphwF4+uAUKIHfN5AluxwDjguAY+H1tgKcPcnQ+Zr5+Hr5FHQn3FwcCeDIOhqT a+kI7vkDhqMd3ETwuSA6toF4+7NPmCaDzKZFRERQucIKHZAKGNgaCFyiGyTjTkTo OqFbNvGkyEhCugQ+Dh1Vv0bH9JtFk2QZrtRuaDASpBPiYTNG2ZARUzU6kvUlz38k dFtX5NVSpvp0dMGPqMKhC+cqZAzwo/X1fR9Z5HNxmCxErTrE73Qdem4xBMOhmj2Q 2CKxZTSP8w== -----END CERTIFICATE-----Generated at Fri Mar 27 01:56:21 2026 by rpki-client