$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json) Hash identifier: fgcfowq7Yi4CP0XvOnu/JGDjNMFIaD77r9esEPxZjNE= Subject key identifier: 7A:1E:A5:BE:CD:8F:FE:C3:CA:6C:EB:23:C2:E9:C2:1E:1B:E6:CD:DB Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Certificate serial: 4B4EF604C26C7F8BBDAD33B21D740E032DBAFEA6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft Manifest number: 5A Signing time: Fri 27 Mar 2026 00:48:28 +0000 Manifest this update: Fri 27 Mar 2026 00:43:28 +0000 Manifest next update: Sat 28 Mar 2026 01:46:28 +0000 Files and hashes: 1: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=) 2: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: SLGW9zVSQn9xIx5H+lOmWDmq8TzhI8WjDuwNvXu0mA0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4e:f6:04:c2:6c:7f:8b:bd:ad:33:b2:1d:74:0e:03:2d:ba:fe:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5 Validity Not Before: Mar 27 00:43:28 2026 GMT Not After : Mar 28 01:46:28 2026 GMT Subject: CN=7A1EA5BECD8FFEC3CA6CEB23C2E9C21E1BE6CDDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2e:f6:03:df:d6:e3:41:98:47:54:5d:d8:91: 43:3c:76:50:f5:81:99:ea:7d:c8:57:0c:06:c9:6b: c7:ff:f1:90:7a:1f:ba:2e:1e:3d:0b:9d:32:88:33: c6:98:b4:f6:14:c3:ef:1c:c6:99:51:26:28:ec:a7: e0:d3:3a:6f:8b:e4:dc:5d:79:b0:23:8c:a0:bd:cf: 1b:ee:06:07:e8:6c:d6:18:e3:cc:a4:e2:dd:2d:13: 38:28:74:ca:b1:0b:27:b1:0f:5b:bc:85:43:fe:98: e6:30:50:07:48:7c:9f:f5:98:6c:ca:b7:32:92:e6: 66:3f:34:d6:04:9c:c4:1f:ea:92:56:6f:8e:80:a6: 20:52:2c:98:e3:ce:0e:da:2a:8e:39:70:59:c9:c5: 0b:89:7f:55:74:48:b8:6f:7f:9e:fe:1b:fd:00:53: 93:af:57:3a:99:be:04:40:02:67:c3:f1:83:60:3d: e0:2c:46:1d:3f:63:3c:52:b7:4c:4b:44:4b:d5:d5: 0f:0a:0d:a2:c9:c8:8d:e8:15:90:1d:95:ae:d4:e7: bd:83:1a:7c:80:77:59:e8:8c:0e:a0:23:30:f9:da: ec:31:5d:f0:f1:23:af:e9:9c:63:24:ba:75:23:e2: 74:b3:1a:fb:7e:8f:1a:b6:a1:7f:15:c3:d8:b0:77: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1E:A5:BE:CD:8F:FE:C3:CA:6C:EB:23:C2:E9:C2:1E:1B:E6:CD:DB X509v3 Authority Key Identifier: keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:49:30:a0:0f:be:35:d8:63:65:0b:9b:6d:16:dc:95:c4:f6: 04:f6:ee:16:e1:89:4e:b6:5f:3b:3b:bc:b3:d4:7d:51:d8:c8: 50:8e:75:56:bd:92:6b:01:0f:75:d7:f3:1e:9a:e8:f1:c6:76: fc:53:f6:83:2e:90:50:09:39:ff:4f:a1:96:4e:2f:3b:46:65: 2c:4b:6c:8d:8f:ce:29:05:68:11:64:c5:0e:4b:00:a8:45:64: d9:ba:07:38:77:ad:c9:82:7c:3d:ed:2e:f6:f6:88:0e:7d:4f: 27:a1:cf:36:32:05:32:6a:fb:39:b4:b6:98:79:9f:06:96:89: c6:9b:a6:1c:94:99:68:6e:9a:e5:b8:9f:74:ed:0c:f2:ba:6f: 8c:a8:51:dc:88:64:35:42:70:1f:45:ab:60:bb:1c:19:ae:97: 98:85:22:1a:96:54:ee:2d:71:a6:60:bd:7f:b0:ee:ea:49:6e: 60:f6:51:66:56:ad:cb:ab:5f:5e:d8:c1:c2:4d:34:12:43:e7: f8:47:1b:e6:d7:df:c2:27:76:8c:7f:c9:6f:9b:0a:e3:a8:d1: 57:7e:5f:3a:00:37:05:3b:07:ac:a2:ca:59:d1:8a:0c:79:d1: d1:44:16:22:02:5f:2e:ab:5a:01:8e:49:ee:56:98:d1:c8:53: f2:58:38:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS072BMJsf4u9rTOyHXQOAy26/qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1 NUJGRjFGNTAeFw0yNjAzMjcwMDQzMjhaFw0yNjAzMjgwMTQ2MjhaMDMxMTAvBgNV BAMTKDdBMUVBNUJFQ0Q4RkZFQzNDQTZDRUIyM0MyRTlDMjFFMUJFNkNEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2LvYD39bjQZhHVF3YkUM8dlD1 gZnqfchXDAbJa8f/8ZB6H7ouHj0LnTKIM8aYtPYUw+8cxplRJijsp+DTOm+L5Nxd ebAjjKC9zxvuBgfobNYY48yk4t0tEzgodMqxCyexD1u8hUP+mOYwUAdIfJ/1mGzK tzKS5mY/NNYEnMQf6pJWb46ApiBSLJjjzg7aKo45cFnJxQuJf1V0SLhvf57+G/0A U5OvVzqZvgRAAmfD8YNgPeAsRh0/YzxSt0xLREvV1Q8KDaLJyI3oFZAdla7U572D GnyAd1nojA6gIzD52uwxXfDxI6/pnGMkunUj4nSzGvt+jxq2oX8Vw9iwd49nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeh6lvs2P/sPKbOsjwunCHhvmzdswHwYDVR0j BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1 RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvkkwoA++Ndhj ZQubbRbclcT2BPbuFuGJTrZfOzu8s9R9UdjIUI51Vr2SawEPddfzHpro8cZ2/FP2 gy6QUAk5/0+hlk4vO0ZlLEtsjY/OKQVoEWTFDksAqEVk2boHOHetyYJ8Pe0u9vaI Dn1PJ6HPNjIFMmr7ObS2mHmfBpaJxpumHJSZaG6a5bifdO0M8rpvjKhR3IhkNUJw H0WrYLscGa6XmIUiGpZU7i1xpmC9f7Du6kluYPZRZlaty6tfXtjBwk00EkPn+Ecb 5tffwid2jH/Jb5sK46jRV35fOgA3BTsHrKLKWdGKDHnR0UQWIgJfLqtaAY5J7laY 0chT8lg4LQ== -----END CERTIFICATE-----Generated at Fri Mar 27 03:51:34 2026 by rpki-client