$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json) Hash identifier: q8j0AdfFtp/0CSI7UVaOFLsfkY0H+AviyfgvLxEZhDQ= Subject key identifier: E5:9D:5A:EA:E7:A2:5D:67:6D:3C:AE:E0:3F:DB:58:AE:AC:38:D2:26 Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 468B27B7CD4A3F3C79C74E4A8A1C474211E1271A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 07:53:28 +0000 Manifest this update: Thu 26 Mar 2026 07:48:28 +0000 Manifest next update: Fri 27 Mar 2026 11:51:28 +0000 Files and hashes: 1: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: mhZaYCuLdIf2Sp7/DkBSU7B9OilpIYUDSOxy9RXuhhA=) 2: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=) 3: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=) 4: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=) 5: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=) 6: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=) 7: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8b:27:b7:cd:4a:3f:3c:79:c7:4e:4a:8a:1c:47:42:11:e1:27:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: Mar 26 07:48:28 2026 GMT Not After : Mar 27 11:51:28 2026 GMT Subject: CN=E59D5AEAE7A25D676D3CAEE03FDB58AEAC38D226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:7b:5a:69:86:99:94:9b:32:ba:c4:d2:72: d8:20:6b:3d:26:8b:4d:57:b9:04:92:b4:66:0e:c1: 17:5e:89:14:fd:dc:cf:fa:6c:49:96:39:00:75:2f: 8f:3d:b4:6f:f2:dc:53:98:df:65:e3:e1:03:b4:53: 0a:57:bd:71:41:08:49:f9:35:a9:f1:aa:d5:b5:47: 51:66:2a:4f:08:3c:45:e5:5d:b2:c7:1a:22:44:f0: a0:6c:69:78:6c:cb:ac:f4:b9:51:d3:01:40:54:9c: 71:32:1d:05:48:7e:ea:24:9f:ce:29:c0:8b:10:76: 22:8c:60:5c:08:46:f1:51:b5:7b:8d:27:c3:fb:42: 73:92:60:85:e9:d9:dd:59:65:b6:fc:6e:4e:2b:27: b2:ec:9d:f4:85:67:e8:de:2b:fe:d8:b7:a1:36:c7: 96:32:83:43:89:fa:70:a7:78:a9:df:4f:56:a6:d2: aa:1c:bf:75:ef:a7:13:8e:24:d5:58:ca:24:31:99: 76:e6:7a:ab:f4:0d:69:23:93:be:59:0c:d8:b4:04: 1c:67:bc:f5:a9:2c:a2:2a:5f:55:cd:b1:3a:df:5e: 7b:75:a2:f9:bf:52:8c:e6:4f:71:7d:e8:da:86:e9: cf:b3:5e:fd:ee:ca:05:9f:e6:d6:3e:6f:b5:e8:9d: c9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9D:5A:EA:E7:A2:5D:67:6D:3C:AE:E0:3F:DB:58:AE:AC:38:D2:26 X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c7:54:8c:cf:8e:92:cd:d0:3e:64:84:88:b9:c1:ae:79:59: b0:28:58:d0:6f:2a:47:d2:ab:17:74:72:2a:69:63:32:58:3b: 55:9e:c4:15:d6:e7:b7:79:15:9f:93:b0:1a:b4:ee:5c:c6:13: a7:93:f0:3e:5f:ee:44:5e:ee:6e:a6:f0:81:15:ba:5d:4d:97: 6e:27:fd:e3:4a:b1:b6:18:5a:9a:c5:75:0a:3e:dc:fa:f1:06: 03:7a:02:74:c5:7d:d0:6a:d8:1d:23:ac:cb:44:e6:c6:6a:d8: 3a:0e:96:a5:13:c6:6e:0e:ec:9c:26:5c:7f:45:b7:49:d7:7b: 5b:f5:d9:24:ac:7c:69:54:d4:fd:12:7b:09:f8:96:6d:1d:c8: 2b:c0:8e:71:48:22:44:7a:3b:bd:09:46:b5:60:e6:53:51:e6: 19:c0:e1:88:d0:42:1b:b7:1f:45:f4:6b:5b:86:b8:76:10:ac: 25:02:5c:86:02:e9:3d:fb:19:91:ba:43:22:20:27:a9:13:5f: f7:f9:65:0c:3a:a5:4d:cd:2a:20:27:82:e0:f9:d5:fb:4c:f0: fc:56:22:23:b5:53:b6:ef:f8:be:59:94:91:3b:15:bb:fe:3f: 06:f8:ef:23:cd:47:3f:45:c7:61:3b:b7:89:fc:8a:eb:11:b6: fb:a6:bd:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURosnt81KPzx5x05KihxHQhHhJxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjAzMjYwNzQ4MjhaFw0yNjAzMjcxMTUxMjhaMDMxMTAvBgNV BAMTKEU1OUQ1QUVBRTdBMjVENjc2RDNDQUVFMDNGREI1OEFFQUMzOEQyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbR3taaYaZlJsyusTSctggaz0m i01XuQSStGYOwRdeiRT93M/6bEmWOQB1L489tG/y3FOY32Xj4QO0UwpXvXFBCEn5 NanxqtW1R1FmKk8IPEXlXbLHGiJE8KBsaXhsy6z0uVHTAUBUnHEyHQVIfuokn84p wIsQdiKMYFwIRvFRtXuNJ8P7QnOSYIXp2d1ZZbb8bk4rJ7LsnfSFZ+jeK/7Yt6E2 x5Yyg0OJ+nCneKnfT1am0qocv3XvpxOOJNVYyiQxmXbmeqv0DWkjk75ZDNi0BBxn vPWpLKIqX1XNsTrfXnt1ovm/UozmT3F96NqG6c+zXv3uygWf5tY+b7XonckvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5Z1a6ueiXWdtPK7gP9tYrqw40iYwHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0NjU4NTgvMC9BNTlGQjU1RjhCM0U0 MDY5NDI3ODc4QkQ1QkE3RkY0MUExNjkxQjVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcdUjM+Oks3Q PmSEiLnBrnlZsChY0G8qR9KrF3RyKmljMlg7VZ7EFdbnt3kVn5OwGrTuXMYTp5Pw Pl/uRF7ubqbwgRW6XU2Xbif940qxthhamsV1Cj7c+vEGA3oCdMV90GrYHSOsy0Tm xmrYOg6WpRPGbg7snCZcf0W3Sdd7W/XZJKx8aVTU/RJ7CfiWbR3IK8COcUgiRHo7 vQlGtWDmU1HmGcDhiNBCG7cfRfRrW4a4dhCsJQJchgLpPfsZkbpDIiAnqRNf9/ll DDqlTc0qICeC4PnV+0zw/FYiI7VTtu/4vlmUkTsVu/4/BvjvI81HP0XHYTu3ifyK 6xG2+6a99Q== -----END CERTIFICATE-----Generated at Fri Mar 27 05:23:02 2026 by rpki-client