$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: JueSKX/97w9gQunD+ANd3RizbhepjMLnsFeldDsa5DU= Subject key identifier: C3:55:1A:56:84:E6:D3:7E:63:E1:DD:AF:E3:75:1E:0E:F7:96:BC:67 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 404CA8A3A4E483F46F341275ECD0F8556AD094C3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 17:43:28 +0000 Manifest this update: Thu 26 Mar 2026 17:38:28 +0000 Manifest next update: Fri 27 Mar 2026 19:27:28 +0000 Files and hashes: 1: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) 2: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: KTWNggenvOWWAWnixiANsm03erqqLf0jmOH8Tr1dhmQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4c:a8:a3:a4:e4:83:f4:6f:34:12:75:ec:d0:f8:55:6a:d0:94:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Mar 26 17:38:28 2026 GMT Not After : Mar 27 19:27:28 2026 GMT Subject: CN=C3551A5684E6D37E63E1DDAFE3751E0EF796BC67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:ef:71:e7:de:e8:2b:91:29:1e:48:88:47: d3:db:b5:2b:15:3a:bc:c6:81:37:38:ab:f6:63:19: 87:03:d5:09:b4:11:dd:75:31:ca:ae:77:60:07:c8: 4a:f3:8f:d4:cb:6f:32:b7:de:3b:8b:52:01:63:15: 27:28:f8:38:f3:76:be:c8:cd:9e:c8:8e:98:ae:88: f8:11:c1:48:eb:70:c9:a2:84:14:4a:49:dc:4d:66: 0e:37:fc:06:41:09:5f:1a:cb:11:4c:96:37:64:62: 85:b3:8d:95:8e:eb:3c:2e:44:ca:5b:22:85:e9:a3: 36:0d:df:ad:40:cb:50:71:4b:21:10:03:85:c1:ea: d3:2a:9c:20:bb:c9:99:d7:ae:f9:0d:b5:98:6c:f5: c5:3a:0c:f6:6f:45:12:08:b0:f5:11:03:f0:02:df: ac:06:70:f9:43:a3:c1:0a:27:7d:8b:99:e8:36:a9: ce:e7:55:b3:44:3a:f5:87:6a:ab:71:e2:f9:8d:48: c0:20:be:cc:9b:6c:dd:63:8c:de:9c:1f:96:51:06: d8:fc:ae:a0:b8:2e:ed:27:e4:a1:d5:01:e4:f1:5c: c4:5f:55:ec:2c:2d:a0:2d:e2:30:b5:df:81:56:e7: 16:e2:86:43:6b:0b:20:d6:87:24:38:d3:73:03:88: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:55:1A:56:84:E6:D3:7E:63:E1:DD:AF:E3:75:1E:0E:F7:96:BC:67 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f0:21:0b:b0:c6:9a:2f:b8:4b:f9:8d:60:31:4b:e4:9f:51: c3:a0:cb:e1:84:f8:72:a8:96:dd:a4:d4:fc:91:0b:c8:9a:e6: cd:65:f1:dc:38:58:46:16:c4:17:44:50:a6:d3:bc:86:ce:da: bd:ce:a3:cd:f7:d4:55:cb:a8:7b:b9:f1:80:57:3c:20:45:60: 36:42:5a:66:b5:43:2e:da:70:c4:57:4c:8f:0f:ea:59:00:8e: 87:70:6e:f9:52:93:78:fb:e5:57:24:f7:23:23:35:a1:4c:2f: 5e:6e:84:5b:47:f3:d8:2f:44:c1:6e:49:ea:ab:5d:12:20:ef: 4e:b2:35:32:61:f9:a0:48:40:c5:2e:22:97:77:17:b9:d7:f2: d7:9c:98:a5:89:77:ea:7d:8a:f1:aa:c5:53:68:78:b8:42:e7: 69:7f:b8:e8:4e:5b:41:f3:cb:04:b0:b7:44:b4:5e:c8:88:a6: b2:54:8c:1d:df:03:ae:2e:8e:83:17:e3:f1:3f:82:fe:83:a0: 1f:8f:33:63:b2:5d:13:aa:18:09:57:31:05:dd:97:a4:00:22: 15:f0:72:59:b5:11:ca:6c:f5:61:50:10:31:b9:3d:08:cb:8f: 80:ad:40:8a:7e:68:05:55:e1:e6:2e:b0:ac:e8:39:17:5d:53: c8:80:36:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQEyoo6Tkg/RvNBJ17ND4VWrQlMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjAzMjYxNzM4MjhaFw0yNjAzMjcxOTI3MjhaMDMxMTAvBgNV BAMTKEMzNTUxQTU2ODRFNkQzN0U2M0UxRERBRkUzNzUxRTBFRjc5NkJDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM4u9x597oK5EpHkiIR9PbtSsV OrzGgTc4q/ZjGYcD1Qm0Ed11Mcqud2AHyErzj9TLbzK33juLUgFjFSco+Djzdr7I zZ7IjpiuiPgRwUjrcMmihBRKSdxNZg43/AZBCV8ayxFMljdkYoWzjZWO6zwuRMpb IoXpozYN361Ay1BxSyEQA4XB6tMqnCC7yZnXrvkNtZhs9cU6DPZvRRIIsPURA/AC 36wGcPlDo8EKJ32Lmeg2qc7nVbNEOvWHaqtx4vmNSMAgvsybbN1jjN6cH5ZRBtj8 rqC4Lu0n5KHVAeTxXMRfVewsLaAt4jC134FW5xbihkNrCyDWhyQ403MDiFWXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUw1UaVoTm035j4d2v43UeDveWvGcwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvAhC7DGmi+4 S/mNYDFL5J9Rw6DL4YT4cqiW3aTU/JELyJrmzWXx3DhYRhbEF0RQptO8hs7avc6j zffUVcuoe7nxgFc8IEVgNkJaZrVDLtpwxFdMjw/qWQCOh3Bu+VKTePvlVyT3IyM1 oUwvXm6EW0fz2C9EwW5J6qtdEiDvTrI1MmH5oEhAxS4il3cXudfy15yYpYl36n2K 8arFU2h4uELnaX+46E5bQfPLBLC3RLReyIimslSMHd8Dri6Ogxfj8T+C/oOgH48z Y7JdE6oYCVcxBd2XpAAiFfByWbURymz1YVAQMbk9CMuPgK1Ain5oBVXh5i6wrOg5 F11TyIA2YA== -----END CERTIFICATE-----Generated at Fri Mar 27 05:01:33 2026 by rpki-client