$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: 9sElUdVm7FqeYclbezOWolVJ82EwCatuufClXmYofdk= Subject key identifier: 81:CD:4A:A7:4A:4E:5F:FE:0E:6F:4C:64:CD:67:A9:17:F4:95:A3:5A Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 37A4289085C9D5ACE70DC951DE04E4200F6E18AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 23:43:28 +0000 Manifest this update: Thu 26 Mar 2026 23:38:28 +0000 Manifest next update: Sat 28 Mar 2026 00:17:28 +0000 Files and hashes: 1: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: nlWu1jzkOpQACPQ0hbhZjAmJX+DWPXcZaBKw7j9BQ7c=) 2: 3130332e34342e3134342e302f32322d3232203d3e203535393931.roa (hash: 9QpEwcLlTSumOVyS9dHL6HMKkLj+qy0YVIHIa2L518I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a4:28:90:85:c9:d5:ac:e7:0d:c9:51:de:04:e4:20:0f:6e:18:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Mar 26 23:38:28 2026 GMT Not After : Mar 28 00:17:28 2026 GMT Subject: CN=81CD4AA74A4E5FFE0E6F4C64CD67A917F495A35A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:1e:79:61:64:56:3a:c6:b0:c3:e4:2b:41: 9b:90:ad:60:e2:ac:a0:f6:9b:51:58:91:ab:d5:01: 76:1a:03:57:b5:ce:cb:6c:e8:bf:47:17:07:1f:ad: e7:aa:b9:8c:43:f8:63:4f:9d:21:3c:3b:1d:7d:75: 05:c4:11:0d:8f:a4:a8:fd:ea:02:dc:e4:e5:82:4e: bb:e5:39:6b:a4:3a:5e:51:42:b6:18:77:ca:86:12: 0a:2f:7d:ed:32:4d:1c:81:03:a6:ae:6a:97:ee:6c: d7:b2:b4:86:dd:d5:16:5e:a5:87:cb:0d:ef:32:b4: a3:43:2a:de:a0:51:e7:41:9f:84:e3:ea:71:18:bd: c3:a5:63:06:f3:2d:73:07:ea:d5:82:1d:9e:b7:e8: c1:39:b3:c0:0d:29:a7:5f:c7:6a:71:08:c1:21:36: c8:63:8d:bc:99:66:44:81:07:aa:ca:55:0b:15:99: 62:96:34:07:3c:b8:3a:52:4c:35:1a:87:9d:7a:69: 97:1b:ef:21:37:77:fa:d8:e8:0f:ef:47:e5:e6:43: 7f:d3:4b:d9:f4:11:98:84:67:77:d2:29:ed:5a:54: 16:9c:6f:81:ef:ca:f6:b3:76:f9:18:c5:30:7b:4b: dc:03:73:6c:93:32:69:6b:9c:77:ef:f6:02:fe:8b: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CD:4A:A7:4A:4E:5F:FE:0E:6F:4C:64:CD:67:A9:17:F4:95:A3:5A X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:5f:ba:79:bc:7c:79:0d:37:33:75:c6:65:65:87:8e:db:b0: 60:bc:de:f5:23:e7:d7:ac:3c:0d:62:3f:59:7d:81:d9:8c:66: d5:d9:50:83:6d:bf:cd:b7:f9:91:84:1a:46:e8:b5:9f:db:11: 39:d1:e3:85:17:bc:14:77:4e:a1:06:aa:35:3f:f7:5d:ac:76: b7:70:4f:b4:75:65:d8:ea:75:a1:5f:2a:3b:52:e4:2c:22:9f: a0:9f:6e:96:a1:39:12:7e:f6:2c:22:d0:0e:f1:83:4d:56:4f: 95:b7:7f:b7:6b:ac:48:31:66:32:bd:31:c5:2b:cc:00:4c:f3: 07:7a:ee:96:27:3a:29:7f:07:8c:3d:f4:09:6f:ed:02:21:37: 0e:c5:4f:11:2a:bb:0c:e3:a3:3c:b3:d1:fd:a2:9c:5c:5a:25: 0b:7c:e8:3f:41:94:d1:54:cb:b4:2e:69:cb:5a:97:59:bf:f5: f5:68:bb:93:ff:cc:2e:3f:d8:1d:16:93:70:8f:b6:64:38:47: 66:d3:8a:d7:a5:25:d8:fc:9b:a1:bb:54:7b:60:a2:1a:19:41: 28:f0:2b:70:53:75:16:b4:f2:a4:1c:c3:e8:7d:17:d2:45:73: 61:03:e7:cf:ec:ab:5f:84:e7:45:eb:8d:3a:e2:3f:33:d7:17: 62:0d:01:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN6QokIXJ1aznDclR3gTkIA9uGK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjAzMjYyMzM4MjhaFw0yNjAzMjgwMDE3MjhaMDMxMTAvBgNV BAMTKDgxQ0Q0QUE3NEE0RTVGRkUwRTZGNEM2NENENjdBOTE3RjQ5NUEzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafh55YWRWOsaww+QrQZuQrWDi rKD2m1FYkavVAXYaA1e1zsts6L9HFwcfreequYxD+GNPnSE8Ox19dQXEEQ2PpKj9 6gLc5OWCTrvlOWukOl5RQrYYd8qGEgovfe0yTRyBA6auapfubNeytIbd1RZepYfL De8ytKNDKt6gUedBn4Tj6nEYvcOlYwbzLXMH6tWCHZ636ME5s8ANKadfx2pxCMEh NshjjbyZZkSBB6rKVQsVmWKWNAc8uDpSTDUah516aZcb7yE3d/rY6A/vR+XmQ3/T S9n0EZiEZ3fSKe1aVBacb4HvyvazdvkYxTB7S9wDc2yTMmlrnHfv9gL+i7AzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgc1Kp0pOX/4Ob0xkzWepF/SVo1owHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuF+6ebx8eQ03 M3XGZWWHjtuwYLze9SPn16w8DWI/WX2B2Yxm1dlQg22/zbf5kYQaRui1n9sROdHj hRe8FHdOoQaqNT/3Xax2t3BPtHVl2Op1oV8qO1LkLCKfoJ9ulqE5En72LCLQDvGD TVZPlbd/t2usSDFmMr0xxSvMAEzzB3rulic6KX8HjD30CW/tAiE3DsVPESq7DOOj PLPR/aKcXFolC3zoP0GU0VTLtC5py1qXWb/19Wi7k//MLj/YHRaTcI+2ZDhHZtOK 16Ul2PybobtUe2CiGhlBKPArcFN1FrTypBzD6H0X0kVzYQPnz+yrX4TnReuNOuI/ M9cXYg0BOA== -----END CERTIFICATE-----Generated at Fri Mar 27 06:22:22 2026 by rpki-client