$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft File: B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json) Hash identifier: qznvLlL0odz4QVymxgxVBBfFHR8Y6SxYHgNHuFOngmg= Subject key identifier: 1F:E8:3F:47:8C:D5:16:50:0D:03:E2:C9:AD:58:25:FE:83:A5:A2:51 Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Certificate serial: 4721066F5D0E30B7F2E94D9DE5D374B988924D5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft Manifest number: 5D Signing time: Thu 26 Mar 2026 19:43:28 +0000 Manifest this update: Thu 26 Mar 2026 19:38:28 +0000 Manifest next update: Fri 27 Mar 2026 21:15:28 +0000 Files and hashes: 1: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=) 2: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: j34+qRmhvqFtDtX5J2Mga9QA+tdNL2KH/IzaeK7N9L4=) 3: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:21:06:6f:5d:0e:30:b7:f2:e9:4d:9d:e5:d3:74:b9:88:92:4d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Validity Not Before: Mar 26 19:38:28 2026 GMT Not After : Mar 27 21:15:28 2026 GMT Subject: CN=1FE83F478CD516500D03E2C9AD5825FE83A5A251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:ad:af:2d:c1:0e:3a:42:81:98:f5:f5:1c: e3:3f:f2:30:a1:3f:5f:40:26:49:ed:69:c7:8d:1a: b1:38:9f:96:e3:94:69:17:14:2d:7c:0b:ab:38:fe: b6:c7:a6:d3:2a:62:07:92:65:8a:fc:a4:65:d9:3c: 70:20:16:83:8d:f7:e1:0c:6b:d0:3d:eb:05:bc:fa: 59:f3:69:14:e6:7f:93:77:1b:c0:b9:d8:9b:84:e5: 25:53:d0:f6:3f:fc:62:cd:26:45:f9:c0:99:2f:7b: d3:b2:f9:0f:70:b7:c8:3e:53:d3:a8:50:07:e9:2b: 42:da:b8:b5:c8:b9:e2:5a:d5:77:74:5c:f7:33:1d: f3:26:e2:65:f7:8b:07:2f:58:5a:b8:d8:29:c1:0b: c9:c6:27:9d:30:f4:ae:f9:a4:a6:cf:1b:ee:e9:18: 53:ae:06:43:37:d0:21:0c:21:1b:46:c2:ce:d4:2e: 74:b4:62:4a:45:df:30:45:d4:c8:60:ce:50:4a:e9: 3b:10:73:79:eb:19:19:2a:97:ee:64:ed:e1:01:68: d0:fb:01:58:07:6c:e0:74:e0:77:10:0c:81:32:95: d3:30:cb:30:ab:57:64:5f:f6:1d:5a:7a:67:67:82: 8f:1c:da:61:de:e9:cc:99:ea:04:22:16:03:1e:79: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:3F:47:8C:D5:16:50:0D:03:E2:C9:AD:58:25:FE:83:A5:A2:51 X509v3 Authority Key Identifier: keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:86:bf:f6:69:42:de:bd:15:ec:b7:ef:66:8a:7d:8d:30:d6: 3d:f5:d3:69:e3:46:67:cb:29:7d:1c:89:4e:67:a7:17:0b:cf: 46:02:7d:0d:a2:9c:ec:b1:9e:55:0d:a4:15:52:4a:a9:39:9e: ad:a6:3f:ed:47:e1:41:c2:16:f6:6e:6d:77:39:5b:34:a5:20: a1:bd:78:3a:bb:dd:b5:ac:81:60:6c:68:57:0a:65:a2:e8:04: 47:10:03:3d:5a:49:6b:76:76:d0:c3:cd:22:bd:ee:dc:02:ec: f3:f3:d6:66:9b:f5:f9:11:0d:e8:de:28:2d:f6:f5:58:f8:cb: ea:79:74:07:35:ea:4a:da:53:15:25:c3:bb:4f:e2:29:1c:45: bd:e7:06:6b:30:67:98:bf:dc:45:b3:03:5e:2b:0f:9a:87:62: 72:30:87:9b:32:73:3a:0d:0e:22:73:51:c4:a9:c7:5d:77:00: d5:9f:d6:25:e6:8d:40:60:c8:95:4e:c1:1d:4a:12:12:d5:88: 80:0e:5d:50:40:de:92:7f:a6:c0:5a:0a:ad:67:07:a5:51:55: 2e:c1:58:a5:61:c8:3e:f1:8e:42:91:d7:ca:d8:b5:ee:ae:3e: 69:a0:72:da:c3:b9:ef:5b:39:34:fc:37:35:43:fd:06:1e:b2: c0:2d:b3:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURyEGb10OMLfy6U2d5dN0uYiSTV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1 NjhCMDBEODAeFw0yNjAzMjYxOTM4MjhaFw0yNjAzMjcyMTE1MjhaMDMxMTAvBgNV BAMTKDFGRTgzRjQ3OENENTE2NTAwRDAzRTJDOUFENTgyNUZFODNBNUEyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWwq2vLcEOOkKBmPX1HOM/8jCh P19AJkntaceNGrE4n5bjlGkXFC18C6s4/rbHptMqYgeSZYr8pGXZPHAgFoON9+EM a9A96wW8+lnzaRTmf5N3G8C52JuE5SVT0PY//GLNJkX5wJkve9Oy+Q9wt8g+U9Oo UAfpK0LauLXIueJa1Xd0XPczHfMm4mX3iwcvWFq42CnBC8nGJ50w9K75pKbPG+7p GFOuBkM30CEMIRtGws7ULnS0YkpF3zBF1MhgzlBK6TsQc3nrGRkql+5k7eEBaND7 AVgHbOB04HcQDIEyldMwyzCrV2Rf9h1aemdngo8c2mHe6cyZ6gQiFgMeeVTXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH+g/R4zVFlANA+LJrVgl/oOlolEwHwYDVR0j BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwMDg5NjMvMC9CMzYxQzc1N0I2RDcw QzMxN0ZEMDE4Q0U5MjFDQzEzRjU2OEIwMEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYa/9mlC3r0V 7LfvZop9jTDWPfXTaeNGZ8spfRyJTmenFwvPRgJ9DaKc7LGeVQ2kFVJKqTmeraY/ 7UfhQcIW9m5tdzlbNKUgob14OrvdtayBYGxoVwplougERxADPVpJa3Z20MPNIr3u 3ALs8/PWZpv1+REN6N4oLfb1WPjL6nl0BzXqStpTFSXDu0/iKRxFvecGazBnmL/c RbMDXisPmodicjCHmzJzOg0OInNRxKnHXXcA1Z/WJeaNQGDIlU7BHUoSEtWIgA5d UEDekn+mwFoKrWcHpVFVLsFYpWHIPvGOQpHXyti17q4+aaBy2sO571s5NPw3NUP9 Bh6ywC2zYg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:15 2026 by rpki-client