$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft File: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft (raw, json) Hash identifier: CjAHeybxTySG/SH2FE/NUNsEpKD11bR4E7UFqcurLV0= Subject key identifier: 6C:02:7A:17:63:F0:39:A5:74:9C:22:86:3D:78:3D:E7:E9:F3:98:6F Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 30289997720AE7EE9936298A5021573D0C3723F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 09:48:28 +0000 Manifest this update: Thu 26 Mar 2026 09:43:28 +0000 Manifest next update: Fri 27 Mar 2026 09:57:28 +0000 Files and hashes: 1: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl (hash: I7Dk76NG522DSDiSIfGPq3t7B46fIgh7DoAxKFAOk04=) 2: 3130332e3231392e38352e302f32342d3234203d3e20313532333230.roa (hash: m2V99zSF93yuAoBUSJ81tqRCkxDUa+Q9dv+b/3LsrzA=) 3: 3130332e3231392e38362e302f32332d3234203d3e20313532333230.roa (hash: y9Nb3BhAesAhC0Yz2nuugVvW5UakXURGQvAzLngRYos=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:28:99:97:72:0a:e7:ee:99:36:29:8a:50:21:57:3d:0c:37:23:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Mar 26 09:43:28 2026 GMT Not After : Mar 27 09:57:28 2026 GMT Subject: CN=6C027A1763F039A5749C22863D783DE7E9F3986F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:83:87:08:78:18:83:cf:91:89:ce:3f:59: 21:17:db:91:a5:c0:3a:d6:c1:b5:fa:44:da:c2:f1: b3:c1:5c:13:5f:f2:6e:d6:2e:9e:9a:c1:80:b7:31: d8:36:56:e8:a9:33:eb:e0:c9:6a:73:14:8a:6d:b2: b0:dd:72:a8:50:09:94:43:7f:51:b8:a1:cb:45:01: 9a:be:93:51:d1:92:e0:07:bd:cf:ac:77:d7:a0:40: d4:34:88:7d:57:43:4c:be:9f:d6:6b:39:d3:d4:08: 71:15:5f:55:aa:bb:14:b9:5b:df:72:01:82:3c:ba: e9:9b:fc:f2:e5:70:b9:f4:f7:96:3a:c2:ab:73:c8: 4f:5e:2c:94:5c:48:46:c6:55:5a:04:98:20:06:58: 0a:84:72:8e:d9:83:fd:ee:f5:52:b6:9e:95:a1:ed: 74:39:5a:ee:c7:1e:ad:e9:dc:5c:8d:16:44:84:35: 1d:9f:f6:f5:b6:7c:50:ca:a2:75:f4:52:a9:01:ff: 8c:1a:8e:a3:9c:f7:90:5b:3d:62:f3:18:32:c3:46: 44:44:32:83:4d:f4:b3:da:36:2a:41:17:9d:d2:4c: 18:55:54:67:54:49:fd:f8:61:0a:02:b0:f1:4a:a0: d4:33:a8:25:b4:39:49:0d:25:9b:aa:10:91:33:cd: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:7A:17:63:F0:39:A5:74:9C:22:86:3D:78:3D:E7:E9:F3:98:6F X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:70:b5:94:87:5a:cd:f2:63:8d:e5:cd:41:09:c4:f8:cb:95: a4:82:18:88:f5:07:bf:2a:6e:1a:61:09:e2:ab:8c:60:7c:f1: 94:6c:0b:03:25:a9:0e:be:0a:a2:07:32:03:8d:81:c6:6f:f2: 6c:4c:e2:c6:36:66:d4:44:be:3c:89:b3:52:87:3e:ad:5d:bf: b6:8e:2e:d9:56:e9:15:2c:86:0c:99:a4:16:8c:5b:eb:f2:0d: 4d:1a:49:e5:21:8d:30:f5:ec:17:18:ad:3a:80:2b:b7:5c:80: 19:18:ed:d5:46:90:e6:60:96:9d:a9:13:aa:3f:c7:de:40:ae: 9f:c1:dd:ff:83:2c:f2:97:b1:2e:e3:c5:6d:86:9f:58:7d:89: dd:99:da:d2:8a:5f:2b:f4:26:88:7e:1c:36:11:d1:0c:c7:98: ce:72:f9:d8:ee:9e:28:d6:82:4a:6a:2b:46:8f:99:86:05:eb: aa:99:b4:34:ff:2e:8c:5b:2b:32:09:26:5e:30:40:37:77:9c: f1:71:5f:14:2e:53:c8:c7:5c:09:5a:26:6c:f8:a2:df:6a:63: 2b:5d:4d:1e:ae:bd:a3:85:57:81:43:ef:43:6c:27:86:b7:3f: 05:da:49:60:eb:4e:a9:2f:50:c7:17:df:d6:45:88:5c:19:62: 8d:58:c7:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMCiZl3IK5+6ZNimKUCFXPQw3I/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjAzMjYwOTQzMjhaFw0yNjAzMjcwOTU3MjhaMDMxMTAvBgNV BAMTKDZDMDI3QTE3NjNGMDM5QTU3NDlDMjI4NjNENzgzREU3RTlGMzk4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeR4OHCHgYg8+Ric4/WSEX25Gl wDrWwbX6RNrC8bPBXBNf8m7WLp6awYC3Mdg2VuipM+vgyWpzFIptsrDdcqhQCZRD f1G4octFAZq+k1HRkuAHvc+sd9egQNQ0iH1XQ0y+n9ZrOdPUCHEVX1WquxS5W99y AYI8uumb/PLlcLn095Y6wqtzyE9eLJRcSEbGVVoEmCAGWAqEco7Zg/3u9VK2npWh 7XQ5Wu7HHq3p3FyNFkSENR2f9vW2fFDKonX0UqkB/4wajqOc95BbPWLzGDLDRkRE MoNN9LPaNipBF53STBhVVGdUSf34YQoCsPFKoNQzqCW0OUkNJZuqEJEzzVVpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbAJ6F2PwOaV0nCKGPXg95+nzmG8wHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zRDAxQ0Q2OTI4RERF OEQyNkFDOTYyNjVGMUY5MDRDNzJGMUExMkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnC1lIdazfJj jeXNQQnE+MuVpIIYiPUHvypuGmEJ4quMYHzxlGwLAyWpDr4KogcyA42Bxm/ybEzi xjZm1ES+PImzUoc+rV2/to4u2VbpFSyGDJmkFoxb6/INTRpJ5SGNMPXsFxitOoAr t1yAGRjt1UaQ5mCWnakTqj/H3kCun8Hd/4Ms8pexLuPFbYafWH2J3Zna0opfK/Qm iH4cNhHRDMeYznL52O6eKNaCSmorRo+ZhgXrqpm0NP8ujFsrMgkmXjBAN3ec8XFf FC5TyMdcCVombPii32pjK11NHq69o4VXgUPvQ2wnhrc/BdpJYOtOqS9Qxxff1kWI XBlijVjHsg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:55 2026 by rpki-client