$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: oky9D6FBw32qBBNDqUFTloR2QKn6lnnpnnUloREoBfA= Subject key identifier: 5F:40:DF:39:04:B1:9F:73:77:89:DF:DF:43:D6:E5:FA:5A:2F:5E:30 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 55C7ACA64B206CA5144A0D10AA8C7D6DD0114013 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:08:28 +0000 Manifest this update: Thu 26 Mar 2026 12:03:28 +0000 Manifest next update: Fri 27 Mar 2026 12:59:28 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: LDlo0DoJPtQEYxzNGtPN01YN5tkx37q6PzLIaW6jHOM=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c7:ac:a6:4b:20:6c:a5:14:4a:0d:10:aa:8c:7d:6d:d0:11:40:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Mar 26 12:03:28 2026 GMT Not After : Mar 27 12:59:28 2026 GMT Subject: CN=5F40DF3904B19F737789DFDF43D6E5FA5A2F5E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:72:27:f1:ee:e9:af:fe:cb:ae:a9:73:6b: b1:c6:a5:14:66:88:34:45:02:59:d4:05:aa:97:30: 47:6d:b6:9f:00:a9:49:24:b9:6a:99:a2:42:c7:c2: bd:5b:c0:18:df:d5:6d:9e:e8:11:56:01:ce:37:3b: a7:d4:83:07:eb:4a:dc:87:1b:5c:1a:94:fc:62:55: d4:ba:66:8e:87:25:08:de:54:84:2d:22:58:4d:90: dd:6a:7d:b1:0d:31:68:9d:05:18:86:7a:fa:e9:50: eb:9d:28:7c:d6:80:f7:34:81:54:a7:b0:46:99:eb: 46:ea:50:65:44:c8:de:f8:20:99:55:ca:1d:81:08: 4c:d7:b1:b9:b4:a4:dd:5d:b5:45:4e:c7:83:a5:d3: 69:00:35:9f:0c:9a:4a:46:a1:43:6b:01:9d:1c:47: 7a:1e:be:54:c7:05:c8:45:7c:a7:3d:04:23:49:fa: 09:cd:7b:20:53:44:69:a1:ff:5b:b6:26:06:91:53: 43:a5:21:c3:8e:f4:55:ce:2e:3b:26:20:3a:4a:8f: 85:ae:aa:03:96:1c:a1:2a:50:3d:03:d8:f0:b9:ee: 02:01:c3:e4:8a:bd:85:bd:0c:06:a2:7c:04:aa:c3: 3d:fc:8a:a4:99:5e:50:6a:b0:cb:92:69:7a:0a:6a: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:40:DF:39:04:B1:9F:73:77:89:DF:DF:43:D6:E5:FA:5A:2F:5E:30 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8c:a5:fe:c7:50:c1:61:c0:1d:4c:d7:eb:8a:21:39:ae:3a: 38:0f:5c:c5:ed:3c:7b:f2:45:1e:bf:c6:9c:22:a2:bf:07:69: 20:24:04:36:94:ef:31:88:3b:0b:dc:3f:bc:ef:9f:73:b3:0a: 14:b9:32:98:9c:86:d2:98:bd:9f:08:8c:29:57:06:8c:cd:be: 80:ba:5a:c5:68:06:bf:4f:22:f5:0b:80:e2:23:b7:0e:f5:84: 11:b6:6b:79:1b:f5:bf:b9:f3:55:ab:13:fb:cd:a9:00:db:3c: ee:f2:82:d7:5f:27:b5:92:3a:94:eb:cf:99:c2:f5:a7:87:6b: 7d:fe:72:cb:5b:db:0d:ee:be:c0:e0:9a:67:6c:28:dc:e1:2e: 0e:fa:16:59:44:01:8c:0f:60:09:e5:6a:af:66:a3:f2:1b:f7: ea:99:8f:56:7c:be:0a:f8:e7:b8:bc:95:22:18:4d:6e:ad:98: 66:14:d4:ac:69:39:9e:97:bf:c6:20:e1:2e:72:07:7f:f6:e3: fa:4d:17:cd:cb:1b:c8:54:d3:be:48:49:47:6a:64:91:47:ba: 4a:76:84:06:26:e7:90:a8:22:41:3f:de:49:fd:16:d3:cf:a1: b2:e4:5b:30:52:1b:14:7c:50:b0:34:7e:96:0d:30:f8:9d:e2: 57:75:c9:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVcespksgbKUUSg0Qqox9bdARQBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjAzMjYxMjAzMjhaFw0yNjAzMjcxMjU5MjhaMDMxMTAvBgNV BAMTKDVGNDBERjM5MDRCMTlGNzM3Nzg5REZERjQzRDZFNUZBNUEyRjVFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/XIn8e7pr/7Lrqlza7HGpRRm iDRFAlnUBaqXMEdttp8AqUkkuWqZokLHwr1bwBjf1W2e6BFWAc43O6fUgwfrStyH G1walPxiVdS6Zo6HJQjeVIQtIlhNkN1qfbENMWidBRiGevrpUOudKHzWgPc0gVSn sEaZ60bqUGVEyN74IJlVyh2BCEzXsbm0pN1dtUVOx4Ol02kANZ8MmkpGoUNrAZ0c R3oevlTHBchFfKc9BCNJ+gnNeyBTRGmh/1u2JgaRU0OlIcOO9FXOLjsmIDpKj4Wu qgOWHKEqUD0D2PC57gIBw+SKvYW9DAaifASqwz38iqSZXlBqsMuSaXoKakA/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUX0DfOQSxn3N3id/fQ9bl+lovXjAwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoyl/sdQwWHA HUzX64ohOa46OA9cxe08e/JFHr/GnCKivwdpICQENpTvMYg7C9w/vO+fc7MKFLky mJyG0pi9nwiMKVcGjM2+gLpaxWgGv08i9QuA4iO3DvWEEbZreRv1v7nzVasT+82p ANs87vKC118ntZI6lOvPmcL1p4drff5yy1vbDe6+wOCaZ2wo3OEuDvoWWUQBjA9g CeVqr2aj8hv36pmPVny+CvjnuLyVIhhNbq2YZhTUrGk5npe/xiDhLnIHf/bj+k0X zcsbyFTTvkhJR2pkkUe6SnaEBibnkKgiQT/eSf0W08+hsuRbMFIbFHxQsDR+lg0w +J3iV3XJrQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:17:22 2026 by rpki-client