$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: xfeZyM5KpheF/sNtUGwawIVAex2w4iCOcBRV6jJrEI4= Subject key identifier: F2:29:6D:53:5D:62:D9:29:BB:4E:03:8D:02:A2:AB:C9:1A:31:12:3A Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 5BC7D34887A3FC370BE78E3B8B61FDF3D5CCCF71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 23:43:28 +0000 Manifest this update: Thu 26 Mar 2026 23:38:28 +0000 Manifest next update: Sat 28 Mar 2026 01:19:28 +0000 Files and hashes: 1: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: gc4nVW5E6CWw7FTLXHHhhTlzL9enPe0ryeRZXqcRw38=) 2: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 3: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c7:d3:48:87:a3:fc:37:0b:e7:8e:3b:8b:61:fd:f3:d5:cc:cf:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Mar 26 23:38:28 2026 GMT Not After : Mar 28 01:19:28 2026 GMT Subject: CN=F2296D535D62D929BB4E038D02A2ABC91A31123A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:66:ca:cf:67:37:19:4e:73:dd:ac:66:de: 61:ba:f2:16:31:ab:84:f3:9a:92:53:81:76:19:89: 9f:10:4a:e5:22:7a:0e:68:f2:0e:f0:c5:af:f2:f1: f0:72:64:9b:f2:d0:4c:91:ec:79:0a:34:81:61:53: 53:9e:81:b1:62:44:38:9c:63:9e:9d:8c:6d:b3:0d: 44:2c:28:8f:a7:6b:43:5e:78:c7:a1:3d:47:ea:5f: 5d:78:7f:79:70:91:a9:9a:08:03:cc:82:e2:87:69: 01:31:d7:96:ea:d8:61:d4:74:80:b8:77:43:0c:1c: d9:0c:af:c0:71:2b:8e:e3:94:a4:04:68:f2:69:d7: 32:7e:7d:3a:9d:75:bf:64:74:5b:2d:b1:ce:5e:a7: 6f:ab:16:65:fb:64:9a:36:cd:d4:7c:0d:d9:32:8a: 04:5f:51:ef:d5:fb:0d:c2:dc:20:8c:fd:26:39:e0: 0a:94:55:8f:d9:db:5b:7d:09:ac:0a:5e:1b:a6:5b: ba:09:82:16:17:59:8f:12:7b:88:fb:af:48:b6:d7: ff:4d:e8:c1:5c:7e:9a:a7:85:a4:31:2b:ce:00:d2: 0d:e7:6b:a5:90:25:f1:e4:3c:96:60:b6:26:99:6d: d6:ca:22:7b:65:cd:f5:8e:26:c4:88:10:75:c8:6c: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:29:6D:53:5D:62:D9:29:BB:4E:03:8D:02:A2:AB:C9:1A:31:12:3A X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3b:f0:7e:8f:3a:cc:fb:fa:99:14:78:26:2f:8b:aa:48:1b: a1:0d:22:ac:05:77:90:f7:c0:34:47:93:d8:c9:57:5f:f0:90: 08:a8:d6:70:f0:d4:fa:20:e8:4f:7b:17:53:cd:ba:0a:c9:71: 82:6c:43:73:81:54:de:bb:59:5e:0a:b6:c7:86:29:2f:ed:2a: de:c9:4b:60:d2:c3:c7:c6:93:84:d0:3e:b8:5f:cf:4e:5f:8d: 98:3d:3f:7c:a6:ec:ac:86:59:a5:c2:95:6e:59:43:f9:93:08: bb:31:06:02:81:e7:63:51:c4:71:a1:b7:5e:a5:99:9d:2a:0b: a3:2e:cd:a4:eb:24:d5:07:8a:70:2d:28:9c:e9:ce:45:c1:42: 3d:66:6b:a1:fa:da:b3:4d:48:d4:af:0c:01:d0:ef:74:fe:44: 23:29:16:c2:f2:96:6d:8f:b9:dd:e7:01:22:07:1c:43:78:dc: f0:49:76:74:cf:3d:ad:db:ff:ca:81:0f:87:60:b4:f4:43:6f: e0:b1:db:59:b3:4d:90:e5:4b:8f:68:eb:fc:b4:2b:14:11:29: 9b:8c:45:de:fb:3e:28:7a:f1:3c:de:cb:42:06:b0:a1:1c:da: 8c:85:a2:9b:ff:cb:12:5f:10:99:73:4a:e9:c2:68:ff:0c:30: a5:96:96:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW8fTSIej/DcL5447i2H989XMz3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjAzMjYyMzM4MjhaFw0yNjAzMjgwMTE5MjhaMDMxMTAvBgNV BAMTKEYyMjk2RDUzNUQ2MkQ5MjlCQjRFMDM4RDAyQTJBQkM5MUEzMTEyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjJ2bKz2c3GU5z3axm3mG68hYx q4TzmpJTgXYZiZ8QSuUieg5o8g7wxa/y8fByZJvy0EyR7HkKNIFhU1OegbFiRDic Y56djG2zDUQsKI+na0NeeMehPUfqX114f3lwkamaCAPMguKHaQEx15bq2GHUdIC4 d0MMHNkMr8BxK47jlKQEaPJp1zJ+fTqddb9kdFstsc5ep2+rFmX7ZJo2zdR8Ddky igRfUe/V+w3C3CCM/SY54AqUVY/Z21t9CawKXhumW7oJghYXWY8Se4j7r0i21/9N 6MFcfpqnhaQxK84A0g3na6WQJfHkPJZgtiaZbdbKIntlzfWOJsSIEHXIbOKNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8iltU11i2Sm7TgONAqKryRoxEjowHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDvwfo86zPv6 mRR4Ji+LqkgboQ0irAV3kPfANEeT2MlXX/CQCKjWcPDU+iDoT3sXU826CslxgmxD c4FU3rtZXgq2x4YpL+0q3slLYNLDx8aThNA+uF/PTl+NmD0/fKbsrIZZpcKVbllD +ZMIuzEGAoHnY1HEcaG3XqWZnSoLoy7NpOsk1QeKcC0onOnORcFCPWZrofras01I 1K8MAdDvdP5EIykWwvKWbY+53ecBIgccQ3jc8El2dM89rdv/yoEPh2C09ENv4LHb WbNNkOVLj2jr/LQrFBEpm4xF3vs+KHrxPN7LQgawoRzajIWim//LEl8QmXNK6cJo /wwwpZaWpQ== -----END CERTIFICATE-----Generated at Fri Mar 27 05:00:10 2026 by rpki-client