$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft File: 8E80FA24E5DFF3073621050FF18487025A2A5198.mft (raw, json) Hash identifier: POx5/I44utbZREgwUvQdP3HXubymsITs5AFcBNiBOaE= Subject key identifier: 66:8C:67:2F:22:4B:75:D4:58:17:9D:7C:AA:40:7E:BB:D9:2D:3F:89 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 451377647C9885260A50F65A3437853CC6046F69 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 13:53:28 +0000 Manifest this update: Thu 26 Mar 2026 13:48:28 +0000 Manifest next update: Fri 27 Mar 2026 15:12:28 +0000 Files and hashes: 1: 3230322e3138392e32382e302f32322d3332203d3e20313337363930.roa (hash: 1NfYMuYmM23VWZnzSw96HJtYj4Lq8yKysAQ8JJZNoXw=) 2: 3230322e3138392e33322e302f32322d3332203d3e20313337363930.roa (hash: 4i4FSEybTioj1V2sTCq+7obB9sLuJf2pf8I6Vq9j4yk=) 3: 34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa (hash: cA3Izx4ClkaAnSH+4/BkPGWm/Zj6K4Lk6sR06Fy3Cjc=) 4: 3230322e3138392e31362e302f32322d3332203d3e20313337363930.roa (hash: IfoMH56XJ1hZmG6m81pyfga0KXHap9V3FsJ5JuGS2TU=) 5: 3230322e3138392e34302e302f32322d3332203d3e20313337363930.roa (hash: 7MLtgEQLgz8+JliMrgOq3UgS3iW+w2D5wOJJPHojtII=) 6: 3230322e3138392e33362e302f32322d3332203d3e20313337363930.roa (hash: tBDon7qwNeWrPA26OZBGPlmQowAGhGqE/GeAb1bpS10=) 7: 3230322e3138392e32342e302f32322d3332203d3e20313337363930.roa (hash: WsDWFA3iyxP5XNWv/VrakU6bn8VOzvjFaYrEaa9kg7U=) 8: 8E80FA24E5DFF3073621050FF18487025A2A5198.crl (hash: CF/b/QQ0CS5Ii/FWtRTmK8sy8qtu9yXDrvmkTWHPUrY=) 9: 3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa (hash: GLXCMV8i6iC0hMUqv1DgfKc7/30lWg0has6n1lO1ySU=) 10: 3230322e3138392e34342e302f32322d3332203d3e20313337363930.roa (hash: X++pwqsSWbzCsFfKHx63zaTXj3/7WcDlIS7dIyXvltA=) 11: 3230322e3138392e32302e302f32322d3332203d3e20313337363930.roa (hash: pXd/a+PR9keaGQQ50/8k6g0yn6Vvb7fAGIopVVHCeTY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:13:77:64:7c:98:85:26:0a:50:f6:5a:34:37:85:3c:c6:04:6f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Mar 26 13:48:28 2026 GMT Not After : Mar 27 15:12:28 2026 GMT Subject: CN=668C672F224B75D458179D7CAA407EBBD92D3F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:aa:30:73:16:32:f0:15:e9:72:a9:6d:71: 86:d9:27:18:9f:ac:a1:15:8a:d4:e1:97:9c:8c:2f: 5a:da:8c:64:cd:a3:38:38:d5:20:d4:6b:30:12:14: 79:c3:26:58:59:3e:a0:11:c2:9f:c4:7f:c0:22:69: 53:ca:09:09:63:5e:60:fd:30:76:11:84:df:84:58: 31:9b:63:5f:ec:9a:1c:e9:3a:78:27:ec:dc:ff:57: 5c:a8:9e:e5:85:6d:4d:4a:89:c5:2f:3b:fa:bd:70: d8:4b:e6:d1:64:d4:f0:be:39:2e:13:6a:01:e6:ff: 0e:62:c1:b2:7d:1e:af:41:b8:0b:31:3e:3f:26:29: 91:f4:23:46:67:e5:3a:0e:33:ac:3f:27:be:a1:43: 5a:52:e6:07:3c:4c:c2:69:07:67:89:04:3d:18:50: 78:7c:e4:13:80:f4:a6:ec:cd:4f:f2:b1:8c:f3:ee: a0:b1:8e:a6:d3:e1:95:c0:b4:db:43:f8:cb:f7:12: 4c:a6:75:ed:cb:d8:20:8f:85:2c:b1:1d:69:1e:5f: ce:ab:8d:18:50:07:5c:90:5e:b8:bc:99:3e:80:fd: f3:88:d1:0e:1e:8e:d2:eb:46:b7:45:04:c5:65:78: af:f4:7a:97:ee:90:dc:f0:97:ff:f0:85:96:ef:3c: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8C:67:2F:22:4B:75:D4:58:17:9D:7C:AA:40:7E:BB:D9:2D:3F:89 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4a:2f:a1:0a:df:ed:9c:6c:98:25:86:f8:a9:0f:96:f7:8e: eb:55:f5:3b:d8:e2:89:b3:00:84:67:8e:53:3b:e4:7a:cc:1d: 05:f9:f9:d0:fa:76:fe:ac:50:47:b0:ae:61:9f:a2:f6:3a:75: a1:59:a1:06:3b:11:f5:64:69:79:e5:0e:c4:39:03:f0:de:b8: ea:ba:cc:f6:9e:67:cc:1e:3f:30:c7:a8:36:e9:0b:64:35:23: b8:6b:92:ba:aa:26:e8:cb:83:44:bb:45:1d:d2:ba:67:ef:1c: 6e:9a:06:db:59:e0:84:2c:67:18:24:96:97:b8:9b:b4:33:2b: 2f:93:1e:b9:b9:18:be:c1:7e:a5:4d:f9:bf:c8:a7:31:b6:65: d4:9d:40:70:8c:63:ab:d2:ce:f4:55:07:c5:3a:0f:2c:d5:b8: d4:f8:44:44:9b:ee:ae:71:33:2e:d9:6b:b7:09:d0:c9:59:9b: 04:02:be:0f:2e:1a:b4:7a:24:b6:30:6e:77:92:30:d8:b0:02: 2f:a8:3e:12:54:33:e2:0f:80:20:a4:e1:46:c1:5a:d0:fd:67: 9f:30:24:25:62:9e:2b:15:23:32:71:f5:8c:11:10:0d:9d:fd: f5:96:d3:eb:3e:2e:40:2a:95:98:8d:63:fb:cd:3e:5f:5b:53: a9:84:a2:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURRN3ZHyYhSYKUPZaNDeFPMYEb2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjAzMjYxMzQ4MjhaFw0yNjAzMjcxNTEyMjhaMDMxMTAvBgNV BAMTKDY2OEM2NzJGMjI0Qjc1RDQ1ODE3OUQ3Q0FBNDA3RUJCRDkyRDNGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WqowcxYy8BXpcqltcYbZJxif rKEVitThl5yML1rajGTNozg41SDUazASFHnDJlhZPqARwp/Ef8AiaVPKCQljXmD9 MHYRhN+EWDGbY1/smhzpOngn7Nz/V1yonuWFbU1KicUvO/q9cNhL5tFk1PC+OS4T agHm/w5iwbJ9Hq9BuAsxPj8mKZH0I0Zn5ToOM6w/J76hQ1pS5gc8TMJpB2eJBD0Y UHh85BOA9KbszU/ysYzz7qCxjqbT4ZXAtNtD+Mv3Ekymde3L2CCPhSyxHWkeX86r jRhQB1yQXri8mT6A/fOI0Q4ejtLrRrdFBMVleK/0epfukNzwl//whZbvPBnfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZoxnLyJLddRYF518qkB+u9ktP4kwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC84RTgwRkEyNEU1REZG MzA3MzYyMTA1MEZGMTg0ODcwMjVBMkE1MTk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUovoQrf7Zxs mCWG+KkPlveO61X1O9jiibMAhGeOUzvkeswdBfn50Pp2/qxQR7CuYZ+i9jp1oVmh BjsR9WRpeeUOxDkD8N646rrM9p5nzB4/MMeoNukLZDUjuGuSuqom6MuDRLtFHdK6 Z+8cbpoG21nghCxnGCSWl7ibtDMrL5MeubkYvsF+pU35v8inMbZl1J1AcIxjq9LO 9FUHxToPLNW41PhERJvurnEzLtlrtwnQyVmbBAK+Dy4atHoktjBud5Iw2LACL6g+ ElQz4g+AIKThRsFa0P1nnzAkJWKeKxUjMnH1jBEQDZ399ZbT6z4uQCqVmI1j+80+ X1tTqYSisQ== -----END CERTIFICATE-----Generated at Fri Mar 27 01:59:15 2026 by rpki-client