$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json) Hash identifier: LaxDHBMvg+WKM2RJ43NR4dOtXjMDq8uW+mchs3veJmQ= Subject key identifier: 80:40:5B:4C:2F:75:1C:A6:B3:16:D5:A5:F7:CB:79:F2:B6:5E:52:4D Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Certificate serial: ED2FEB696B39E163BBAF8E47FF31BE6235D2CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 14:58:28 +0000 Manifest this update: Thu 26 Mar 2026 14:53:28 +0000 Manifest next update: Fri 27 Mar 2026 17:40:28 +0000 Files and hashes: 1: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=) 2: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: B0B37Tp9ZCjLccC1egdoIx2eJhMogvTr9HE3idtIlVA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ed:2f:eb:69:6b:39:e1:63:bb:af:8e:47:ff:31:be:62:35:d2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Validity Not Before: Mar 26 14:53:28 2026 GMT Not After : Mar 27 17:40:28 2026 GMT Subject: CN=80405B4C2F751CA6B316D5A5F7CB79F2B65E524D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:2a:65:9d:14:e7:a2:37:92:65:4a:4e:35: cf:fd:89:ff:06:93:03:25:be:d8:51:1c:ff:a0:81: f2:92:8b:79:ae:57:04:b8:cd:c4:3b:87:d3:f9:ff: 26:c2:e9:8a:7f:1f:9b:c5:6b:38:dd:99:aa:9f:1e: 94:b0:9f:7d:41:fe:46:26:3a:a2:93:1e:63:38:c6: 59:1f:6e:99:58:38:08:87:0b:5f:38:a0:49:d7:76: 60:35:2c:fe:d0:64:18:de:48:ef:0d:75:62:d6:cf: fe:cf:1c:b9:b5:e0:7e:73:b5:d8:8e:9a:91:64:2b: f0:58:03:ea:01:16:a7:ef:1a:61:3c:2a:e2:5b:18: 70:d0:d6:da:22:ab:6a:5e:f0:82:f4:63:c5:bd:7c: 14:02:1e:a5:aa:94:f4:33:b3:a7:26:7a:45:fa:7f: fa:fb:e8:84:4c:86:56:2a:d7:43:a4:58:61:87:e6: f7:ab:93:49:c3:ec:87:1f:93:65:70:23:cc:6c:2f: 82:62:7b:20:4e:04:a1:0d:4e:bb:0c:64:ac:71:8e: 08:22:c7:e1:e2:63:ef:c0:6d:2d:41:b4:a6:08:b7: a8:82:ed:d3:32:b4:a4:43:7a:af:cf:6b:e1:48:54: 5d:6f:1b:cc:46:21:f3:de:2c:42:68:39:45:aa:20: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:40:5B:4C:2F:75:1C:A6:B3:16:D5:A5:F7:CB:79:F2:B6:5E:52:4D X509v3 Authority Key Identifier: keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7e:31:75:7c:ee:6b:f2:43:45:30:3a:6e:2b:64:a8:1b:45: 38:25:fe:60:ff:58:e0:46:5c:28:a4:fc:3d:4f:7d:60:d2:7d: f3:1b:b6:7a:d0:9d:3e:74:34:fe:cb:f5:1e:ae:6e:0c:fe:91: 20:2e:62:5f:f4:b5:37:68:85:66:e3:d3:25:68:75:8a:ff:56: 1c:6c:b0:54:8b:ec:b5:08:c6:9b:df:6d:ce:c6:41:7f:46:60: c2:42:58:c5:90:17:69:e8:e8:3a:6e:09:a2:ef:38:2b:04:35: b6:2f:62:d2:2d:70:d4:84:70:ef:1d:09:49:76:62:08:f0:f8: cd:9c:37:df:13:b6:d8:ca:65:f0:21:92:47:61:a5:62:10:83: 7f:e7:33:cb:ad:38:88:81:04:13:92:cf:c1:37:3d:a5:42:35: e7:19:c2:d1:ba:4d:bf:c9:5b:7f:ca:b9:4c:aa:66:1e:7f:d0: 84:ec:1b:85:e6:89:96:ca:25:2b:8b:a7:8c:86:94:a6:97:ec: 9f:59:3d:3f:3b:f1:a6:80:0b:91:28:78:65:6a:f6:25:e6:03: f7:54:58:4a:61:2a:5a:3b:8d:b3:a0:f7:14:ea:6d:ca:57:d3: f2:09:3b:f1:a4:a1:c9:7e:d9:8a:aa:3f:56:46:cc:49:e0:e7: 8c:b8:64:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAO0v62lrOeFju6+OR/8xvmI10sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1 NjE4RjIwRjAeFw0yNjAzMjYxNDUzMjhaFw0yNjAzMjcxNzQwMjhaMDMxMTAvBgNV BAMTKDgwNDA1QjRDMkY3NTFDQTZCMzE2RDVBNUY3Q0I3OUYyQjY1RTUyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DCplnRTnojeSZUpONc/9if8G kwMlvthRHP+ggfKSi3muVwS4zcQ7h9P5/ybC6Yp/H5vFazjdmaqfHpSwn31B/kYm OqKTHmM4xlkfbplYOAiHC184oEnXdmA1LP7QZBjeSO8NdWLWz/7PHLm14H5ztdiO mpFkK/BYA+oBFqfvGmE8KuJbGHDQ1toiq2pe8IL0Y8W9fBQCHqWqlPQzs6cmekX6 f/r76IRMhlYq10OkWGGH5verk0nD7Icfk2VwI8xsL4JieyBOBKENTrsMZKxxjggi x+HiY+/AbS1BtKYIt6iC7dMytKRDeq/Pa+FIVF1vG8xGIfPeLEJoOUWqIONTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgEBbTC91HKazFtWl98t58rZeUk0wHwYDVR0j BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH4xdXzua/JD RTA6bitkqBtFOCX+YP9Y4EZcKKT8PU99YNJ98xu2etCdPnQ0/sv1Hq5uDP6RIC5i X/S1N2iFZuPTJWh1iv9WHGywVIvstQjGm99tzsZBf0ZgwkJYxZAXaejoOm4Jou84 KwQ1ti9i0i1w1IRw7x0JSXZiCPD4zZw33xO22Mpl8CGSR2GlYhCDf+czy604iIEE E5LPwTc9pUI15xnC0bpNv8lbf8q5TKpmHn/QhOwbheaJlsolK4unjIaUppfsn1k9 PzvxpoALkSh4ZWr2JeYD91RYSmEqWjuNs6D3FOptylfT8gk78aShyX7Ziqo/VkbM SeDnjLhkZw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:42:14 2026 by rpki-client