$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: VxMddKgaNHo0M+wkXuZxWmA7FKMKRat/2lwAUn09NaA= Subject key identifier: 22:61:33:00:12:F7:50:DA:3D:F3:BA:23:C5:27:19:E7:FD:27:11:55 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 2D1A8FA091DEFC41A4A18D87E9BB0132E86CB1B1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 16:43:28 +0000 Manifest this update: Thu 26 Mar 2026 16:38:28 +0000 Manifest next update: Fri 27 Mar 2026 18:32:28 +0000 Files and hashes: 1: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: qwSpC3VhX1U6ZIZQegpVu52VZ60lxGEytYIm/YFx8xs=) 2: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 3: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) 4: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 5: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 6: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1a:8f:a0:91:de:fc:41:a4:a1:8d:87:e9:bb:01:32:e8:6c:b1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Mar 26 16:38:28 2026 GMT Not After : Mar 27 18:32:28 2026 GMT Subject: CN=2261330012F750DA3DF3BA23C52719E7FD271155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:41:9a:e8:ec:b2:7a:8e:45:8a:d0:d5:41: 14:ba:11:82:ae:f1:b8:b1:23:26:0d:da:36:18:0c: e4:53:b4:4d:2d:f8:7b:c4:a0:8b:2b:ef:69:5c:7b: dc:f8:93:89:ff:38:47:27:27:f8:f5:a5:ba:35:e5: 6b:a2:17:84:a5:c7:84:df:4c:47:97:a8:da:d8:56: 18:1c:cd:7b:b5:ac:15:c6:99:a0:67:3c:88:fb:fc: d8:a4:0e:01:6a:10:ff:62:3b:5d:f3:ed:fd:00:9a: f8:da:61:ad:10:3e:a1:0a:89:d7:cc:98:55:07:5e: 0d:e7:c0:9b:86:7c:44:8a:c3:57:34:1b:1d:db:a4: c9:ab:38:4b:1e:ed:97:64:df:c5:9c:c8:45:57:39: 98:97:c1:b1:39:a7:73:59:4c:32:ce:2d:b5:d8:38: a3:30:f1:26:25:78:8c:d7:95:66:f8:6e:aa:45:70: cf:17:90:4d:ef:05:01:45:b7:30:71:d3:67:b4:50: 41:9a:4c:de:36:41:13:8f:d4:b2:01:c9:1b:0f:c6: 52:21:60:f4:4f:3b:31:9d:8a:6f:79:2d:be:29:0a: b7:cf:02:0d:b9:44:20:f3:53:33:6f:61:51:70:08: 8d:21:9c:3a:bf:ff:f4:c9:9b:a4:77:13:df:c4:77: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:61:33:00:12:F7:50:DA:3D:F3:BA:23:C5:27:19:E7:FD:27:11:55 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c9:f7:0a:ff:2c:64:c4:34:45:6b:e9:f5:3c:b9:8a:79:f4: bf:ef:00:36:33:c8:b5:dd:4c:0c:cf:e5:fb:8e:fb:f4:e3:ad: 1b:51:67:d7:40:b3:a0:bd:32:55:b5:e8:09:d4:65:a8:7d:e4: de:df:ac:09:27:79:d9:ee:75:fc:cc:7e:04:87:6b:bb:f9:73: 42:e3:0d:67:62:a7:34:a3:89:86:a6:00:da:72:5e:12:56:9a: 78:94:92:99:c6:b4:5b:c5:b0:fb:d8:bd:58:60:90:fb:57:69: db:b8:70:32:0c:91:8d:f4:ef:e9:af:6a:c4:84:82:66:f2:33: 40:89:f7:1f:1d:9d:81:80:c2:ce:42:a3:c3:24:5d:c4:77:80: 3d:e5:f0:7f:63:c2:db:4b:e4:8b:3d:25:9b:d5:1e:12:25:fe: 69:9a:42:c2:17:11:30:d0:43:b8:a4:26:31:cf:66:38:d5:4d: a8:87:93:76:93:2a:a4:bb:97:ce:fd:dc:18:53:ab:51:f8:4f: db:5f:2e:76:eb:1a:91:89:96:ca:a7:d4:d9:b1:ad:58:2b:cf: f1:aa:09:69:bf:e2:a6:65:f1:95:27:b4:2a:ad:18:fc:82:29: ee:74:8f:8b:59:b6:05:f1:9b:64:0e:46:c4:9f:83:eb:87:e0: 58:97:34:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULRqPoJHe/EGkoY2H6bsBMuhssbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjAzMjYxNjM4MjhaFw0yNjAzMjcxODMyMjhaMDMxMTAvBgNV BAMTKDIyNjEzMzAwMTJGNzUwREEzREYzQkEyM0M1MjcxOUU3RkQyNzExNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JUGa6Oyyeo5FitDVQRS6EYKu 8bixIyYN2jYYDORTtE0t+HvEoIsr72lce9z4k4n/OEcnJ/j1pbo15WuiF4Slx4Tf TEeXqNrYVhgczXu1rBXGmaBnPIj7/NikDgFqEP9iO13z7f0AmvjaYa0QPqEKidfM mFUHXg3nwJuGfESKw1c0Gx3bpMmrOEse7Zdk38WcyEVXOZiXwbE5p3NZTDLOLbXY OKMw8SYleIzXlWb4bqpFcM8XkE3vBQFFtzBx02e0UEGaTN42QROP1LIByRsPxlIh YPRPOzGdim95Lb4pCrfPAg25RCDzUzNvYVFwCI0hnDq///TJm6R3E9/EdyATAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUImEzABL3UNo987ojxScZ5/0nEVUwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsn3Cv8sZMQ0 RWvp9Ty5inn0v+8ANjPItd1MDM/l+4779OOtG1Fn10CzoL0yVbXoCdRlqH3k3t+s CSd52e51/Mx+BIdru/lzQuMNZ2KnNKOJhqYA2nJeElaaeJSSmca0W8Ww+9i9WGCQ +1dp27hwMgyRjfTv6a9qxISCZvIzQIn3Hx2dgYDCzkKjwyRdxHeAPeXwf2PC20vk iz0lm9UeEiX+aZpCwhcRMNBDuKQmMc9mONVNqIeTdpMqpLuXzv3cGFOrUfhP218u dusakYmWyqfU2bGtWCvP8aoJab/ipmXxlSe0Kq0Y/IIp7nSPi1m2BfGbZA5GxJ+D 64fgWJc0Qg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:43:59 2026 by rpki-client