$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: EhMxdNm4GLEjd4HanFtIC53xgLrAt5zgNRb/FktlFVg= Subject key identifier: 91:13:6D:90:F5:0D:86:D9:D6:56:18:A3:7B:B0:2C:70:73:D4:FA:18 Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 628803B3B1CCDBF2B85DEB71D157C343FA78E1EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 17:13:28 +0000 Manifest this update: Thu 26 Mar 2026 17:08:28 +0000 Manifest next update: Fri 27 Mar 2026 18:17:28 +0000 Files and hashes: 1: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 2: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) 3: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: le/HEgj4JPRN8HM0Hv7LeMnEaPY2LTUVeQWqIQRwKi4=) 4: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:88:03:b3:b1:cc:db:f2:b8:5d:eb:71:d1:57:c3:43:fa:78:e1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Mar 26 17:08:28 2026 GMT Not After : Mar 27 18:17:28 2026 GMT Subject: CN=91136D90F50D86D9D65618A37BB02C7073D4FA18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:5e:4d:9b:42:53:19:0e:e8:55:86:47:22: e2:ea:8b:b4:80:ed:ed:25:f9:33:b2:ba:29:da:c4: 66:72:0b:61:e3:40:23:68:51:a5:64:6e:53:f3:a6: ef:82:ad:5b:14:79:fa:a9:66:d9:8f:d3:3e:ca:33: 07:af:47:44:f7:af:6f:1f:7f:80:a0:89:99:82:2b: d5:d8:8c:08:5d:a7:b9:98:17:4c:9f:62:45:f0:1e: 51:67:b1:42:54:d6:ce:23:f7:a5:22:ff:82:9d:58: 03:70:0c:b5:43:75:85:a8:43:3f:3c:ac:88:16:4b: d9:03:05:02:87:f3:5e:33:7f:2e:1c:0b:e4:91:c5: 65:18:85:e2:98:6f:bf:d4:7f:55:9d:73:83:a2:83: e9:24:38:b2:07:07:d1:2c:41:ed:10:4c:36:a1:14: be:e8:c9:2a:03:84:58:67:4a:17:d5:af:1d:5d:89: ad:d6:93:37:ef:5a:a8:a2:4e:62:4c:5c:94:14:27: d8:8b:75:d1:44:65:e9:30:77:74:ea:cf:e9:53:0d: d4:2f:0b:ce:f2:14:83:20:3e:0d:a4:63:3c:4e:3f: 93:9a:99:63:64:09:cb:fd:f9:f2:de:a2:98:7a:da: 2f:fc:b6:1b:5e:43:da:e9:d0:8a:f4:f8:7d:ea:e8: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:13:6D:90:F5:0D:86:D9:D6:56:18:A3:7B:B0:2C:70:73:D4:FA:18 X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:37:02:cc:7a:82:d8:f6:44:61:19:10:52:b7:ee:49:a0:a5: fe:6c:25:7e:e6:9e:02:18:82:97:14:3e:be:dc:23:e4:68:e1: cf:88:58:96:1e:e2:5d:a0:3f:2e:21:33:db:32:66:43:f4:7e: 0a:c0:55:b6:89:c0:7f:4c:42:bd:12:f4:24:99:a0:db:ca:ec: 59:92:1a:10:00:96:68:0f:f9:19:4b:ce:7a:c9:f7:66:c9:2d: 87:11:75:1a:ec:37:8a:6f:94:dc:0f:43:6c:b0:80:61:a7:bc: 0f:1b:fb:9b:ed:f3:10:ab:3d:61:28:bd:68:30:d8:21:23:1e: de:8d:4e:82:52:2a:92:15:ff:64:82:50:4e:2e:6d:ee:8c:89: b3:24:9e:69:b6:9a:50:ba:f4:d9:14:01:dc:d6:49:68:60:d1: 17:09:97:a5:d8:ae:04:e3:73:34:36:b2:da:cb:77:57:d7:b6: f9:1e:52:24:eb:dd:85:db:37:0d:8f:3b:6a:f5:95:14:a1:89: a6:54:61:0f:98:3e:d0:b9:48:2a:8a:51:a8:63:60:59:10:c2: 9a:6f:81:45:b3:28:16:62:d0:44:e3:fb:00:84:8b:89:8e:04: e9:01:30:6a:9f:1b:98:fc:98:a1:c6:37:88:1a:db:cb:31:34: 07:9c:87:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYogDs7HM2/K4Xetx0VfDQ/p44eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjAzMjYxNzA4MjhaFw0yNjAzMjcxODE3MjhaMDMxMTAvBgNV BAMTKDkxMTM2RDkwRjUwRDg2RDlENjU2MThBMzdCQjAyQzcwNzNENEZBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfl5Nm0JTGQ7oVYZHIuLqi7SA 7e0l+TOyuinaxGZyC2HjQCNoUaVkblPzpu+CrVsUefqpZtmP0z7KMwevR0T3r28f f4CgiZmCK9XYjAhdp7mYF0yfYkXwHlFnsUJU1s4j96Ui/4KdWANwDLVDdYWoQz88 rIgWS9kDBQKH814zfy4cC+SRxWUYheKYb7/Uf1Wdc4Oig+kkOLIHB9EsQe0QTDah FL7oySoDhFhnShfVrx1dia3WkzfvWqiiTmJMXJQUJ9iLddFEZekwd3Tqz+lTDdQv C87yFIMgPg2kYzxOP5OamWNkCcv9+fLeoph62i/8thteQ9rp0Ir0+H3q6CNbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkRNtkPUNhtnWVhije7AscHPU+hgwHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzcCzHqC2PZE YRkQUrfuSaCl/mwlfuaeAhiClxQ+vtwj5Gjhz4hYlh7iXaA/LiEz2zJmQ/R+CsBV tonAf0xCvRL0JJmg28rsWZIaEACWaA/5GUvOesn3ZskthxF1Guw3im+U3A9DbLCA Yae8Dxv7m+3zEKs9YSi9aDDYISMe3o1OglIqkhX/ZIJQTi5t7oyJsySeabaaULr0 2RQB3NZJaGDRFwmXpdiuBONzNDay2st3V9e2+R5SJOvdhds3DY87avWVFKGJplRh D5g+0LlIKopRqGNgWRDCmm+BRbMoFmLQROP7AISLiY4E6QEwap8bmPyYocY3iBrb yzE0B5yH7A== -----END CERTIFICATE-----Generated at Fri Mar 27 01:59:21 2026 by rpki-client