$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: 19CgtTEoS9TOlZQcKkb0W0RG1cN9SmzQKYNMFVZM0mE= Subject key identifier: FA:65:0C:9D:3F:5D:54:4B:31:90:78:22:C8:82:0A:A5:15:92:5A:36 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 5749FB179F71C45244E540325001A0277AC7B71B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 18:23:28 +0000 Manifest this update: Thu 26 Mar 2026 18:18:28 +0000 Manifest next update: Fri 27 Mar 2026 20:23:28 +0000 Files and hashes: 1: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) 2: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: aftoNK6f2935U//L7x1++0YXODp8cmOSqL9AgJ9mJKw=) 3: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:49:fb:17:9f:71:c4:52:44:e5:40:32:50:01:a0:27:7a:c7:b7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Mar 26 18:18:28 2026 GMT Not After : Mar 27 20:23:28 2026 GMT Subject: CN=FA650C9D3F5D544B31907822C8820AA515925A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:5c:61:3c:cc:42:e7:80:0c:ea:26:b0:e2: 61:94:9e:5c:3d:72:e6:f6:b1:13:9b:3f:6d:4d:2c: 72:6f:de:62:a4:5d:21:5f:45:35:af:d0:4e:54:26: c7:14:cd:33:16:aa:28:ce:06:1f:0d:66:93:60:74: f9:22:25:5e:a3:8d:3c:d2:62:72:93:4c:a1:ca:09: 71:ac:81:b8:df:48:29:63:ca:c8:86:a6:69:21:b5: d3:8f:fb:d7:d5:31:4c:36:84:05:85:e7:e9:5d:22: 99:c9:18:e0:d5:0e:7e:25:d9:7a:cf:35:b8:b7:f6: 35:1c:7d:38:09:a0:4c:37:6b:4d:c3:43:10:49:e5: 5a:37:af:6f:eb:04:6a:85:1f:ea:59:35:9a:93:8f: 67:d2:2a:fb:29:9b:e9:b0:52:4d:f4:0b:c1:a1:04: 5c:e5:ea:ee:62:cf:57:5c:eb:c3:99:be:28:1f:b6: 8e:a5:51:77:d0:24:cd:c9:fb:3e:31:59:f4:76:3d: 2d:f5:1b:e0:85:4f:e6:09:1d:a7:aa:44:1b:44:84: fe:ff:39:80:0f:60:46:20:22:2a:65:6c:87:c7:f4: 21:05:10:47:54:30:cb:60:0c:c3:97:33:9f:38:ff: d9:7f:14:e5:dd:20:41:83:25:54:ee:e2:9f:63:05: 82:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:65:0C:9D:3F:5D:54:4B:31:90:78:22:C8:82:0A:A5:15:92:5A:36 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8a:a7:76:71:49:b8:36:3e:b2:f2:99:aa:dc:eb:e1:9e:f6: a2:b8:4f:f2:c7:c8:70:cd:78:36:9b:30:0f:2c:3f:bc:d4:31: 2e:a5:41:0a:ad:50:c4:5c:09:69:80:72:fa:3c:8d:aa:db:60: ae:be:dd:8b:65:da:f1:52:09:17:35:2c:9e:7d:c4:db:93:c8: ff:c1:8d:bd:4b:6b:ae:9e:1b:31:b1:f8:dc:db:50:55:c0:27: 15:5b:b2:20:d3:cf:46:b0:1a:c5:b1:94:cd:13:3e:6a:80:b4: 01:69:fa:f9:7e:d6:2f:0b:b3:ca:fa:7e:14:a1:42:08:1b:17: 81:62:dd:eb:93:08:cf:c2:6a:46:02:97:6e:7c:e5:2c:9c:1f: 0b:82:85:3b:e7:6f:9e:c2:04:6e:16:fa:dc:2e:e3:45:c0:da: 8f:13:00:bf:35:5a:09:0d:81:27:0a:e7:a1:81:f0:1a:f6:68: 32:44:24:cb:cf:5d:59:71:8f:92:3e:f4:2f:88:45:5c:68:63: 60:d0:68:d0:c9:4b:f4:a7:71:16:ad:9d:a3:31:09:e5:57:63: 7f:2e:ff:ab:d3:55:af:68:1f:3f:33:38:b4:63:9c:fb:73:70: 1a:bc:cc:65:3e:55:3a:70:52:e1:58:b0:9d:f4:9e:ef:6f:02: d5:86:64:86 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV0n7F59xxFJE5UAyUAGgJ3rHtxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjAzMjYxODE4MjhaFw0yNjAzMjcyMDIzMjhaMDMxMTAvBgNV BAMTKEZBNjUwQzlEM0Y1RDU0NEIzMTkwNzgyMkM4ODIwQUE1MTU5MjVBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJn1xhPMxC54AM6iaw4mGUnlw9 cub2sRObP21NLHJv3mKkXSFfRTWv0E5UJscUzTMWqijOBh8NZpNgdPkiJV6jjTzS YnKTTKHKCXGsgbjfSCljysiGpmkhtdOP+9fVMUw2hAWF5+ldIpnJGODVDn4l2XrP Nbi39jUcfTgJoEw3a03DQxBJ5Vo3r2/rBGqFH+pZNZqTj2fSKvspm+mwUk30C8Gh BFzl6u5iz1dc68OZvigfto6lUXfQJM3J+z4xWfR2PS31G+CFT+YJHaeqRBtEhP7/ OYAPYEYgIiplbIfH9CEFEEdUMMtgDMOXM584/9l/FOXdIEGDJVTu4p9jBYKjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+mUMnT9dVEsxkHgiyIIKpRWSWjYwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoqndnFJuDY+ svKZqtzr4Z72orhP8sfIcM14NpswDyw/vNQxLqVBCq1QxFwJaYBy+jyNqttgrr7d i2Xa8VIJFzUsnn3E25PI/8GNvUtrrp4bMbH43NtQVcAnFVuyINPPRrAaxbGUzRM+ aoC0AWn6+X7WLwuzyvp+FKFCCBsXgWLd65MIz8JqRgKXbnzlLJwfC4KFO+dvnsIE bhb63C7jRcDajxMAvzVaCQ2BJwrnoYHwGvZoMkQky89dWXGPkj70L4hFXGhjYNBo 0MlL9KdxFq2dozEJ5Vdjfy7/q9NVr2gfPzM4tGOc+3NwGrzMZT5VOnBS4ViwnfSe 728C1YZkhg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:50:06 2026 by rpki-client