$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: vnOSm5hQmnPRtFiWXq4CQMnwaiz5xEb0MLIWbElQOl4= Subject key identifier: 28:C6:89:7F:9F:3D:29:AB:2E:A9:79:3A:2A:2C:6B:90:DB:89:19:77 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 38F07E27139DB5A16149724899DBF5FDB2F431DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 19:38:28 +0000 Manifest this update: Thu 26 Mar 2026 19:33:28 +0000 Manifest next update: Fri 27 Mar 2026 21:34:28 +0000 Files and hashes: 1: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: 2hrblK93cXFAydL7n9Sbp2DtCEP2VnZm5c2CqwwYB3s=) 2: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f0:7e:27:13:9d:b5:a1:61:49:72:48:99:db:f5:fd:b2:f4:31:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Mar 26 19:33:28 2026 GMT Not After : Mar 27 21:34:28 2026 GMT Subject: CN=28C6897F9F3D29AB2EA9793A2A2C6B90DB891977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dc:83:2e:00:24:ad:72:30:93:12:b1:70:67: b8:c8:14:98:fe:83:73:26:66:22:e5:50:bf:b3:a6: 63:25:14:31:b9:3a:f9:6a:c0:28:ec:d9:1f:ad:fc: 1f:45:43:fa:85:f1:ea:4d:14:c1:a0:2c:93:29:aa: 87:09:b1:5d:45:cf:7b:7c:ee:13:cb:e2:66:78:76: a9:5b:b3:ef:e4:b5:5d:46:a7:12:cd:33:b8:d2:19: 67:61:58:83:32:22:8d:d5:78:f9:80:27:54:27:74: 7f:80:dd:23:bf:a8:49:3a:5a:d5:86:05:2f:ae:92: a7:ec:da:39:c5:67:4d:5a:4e:12:29:9a:45:c7:98: 84:23:45:6b:67:c8:fa:1c:d9:ac:18:c1:cf:e3:3d: 9e:30:f6:94:13:95:63:01:11:78:92:aa:15:66:c3: ba:fa:d0:c2:02:d4:8f:00:17:32:6d:8a:c9:c1:b8: 66:70:e2:f3:2c:c8:1c:96:dc:19:17:be:f3:0e:83: 11:94:49:9e:55:c4:2e:bb:6a:f3:c5:f6:9b:56:33: 79:95:0f:b4:ef:d0:da:ca:2a:52:f8:cb:c3:70:04: fa:5a:7e:3a:06:20:f5:58:5e:95:07:19:80:c7:42: 82:aa:80:31:e6:c6:ee:65:df:5c:1a:00:7b:81:53: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C6:89:7F:9F:3D:29:AB:2E:A9:79:3A:2A:2C:6B:90:DB:89:19:77 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e0:52:46:6e:d6:e5:b5:a8:87:be:1a:2d:97:17:36:39:ad: 52:e0:30:b1:11:36:54:44:69:67:76:99:05:c6:cc:6e:a5:69: b5:45:46:36:89:8d:84:cb:de:e7:16:01:1b:94:47:c5:10:8e: 34:8a:fa:d5:70:8e:07:f1:14:3c:c9:93:09:9b:e5:f6:aa:fc: 87:4b:1c:11:21:2c:93:f8:56:c0:ac:09:14:4e:17:b2:67:2d: 9e:94:5e:88:82:01:d3:45:72:27:35:23:14:69:7a:f8:e0:60: 70:3d:8f:8b:75:c8:56:79:09:2c:e4:d4:a3:74:c2:97:52:65: 7c:57:29:88:77:ea:99:3d:be:b5:b3:0d:48:77:81:f6:87:58: 5e:d6:91:ad:dc:47:1b:6f:08:db:57:cc:ed:03:cd:24:9e:0b: 0e:05:63:26:4c:f7:da:26:b0:cc:96:b3:78:93:46:c3:b4:5c: 00:c4:70:88:1a:41:cf:25:74:d3:bc:51:02:df:ee:69:fd:e6: f9:f1:f8:3f:c4:41:e0:c4:0e:f1:40:65:ce:d2:dd:f6:5d:04: 48:65:a3:fd:4e:48:d1:b3:f4:59:db:d3:db:0c:c1:d2:b6:e1: c6:f0:a3:c0:56:59:0f:a8:8d:17:65:38:6a:c3:3f:f2:4c:ac: 2d:b6:66:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOPB+JxOdtaFhSXJImdv1/bL0Md0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjAzMjYxOTMzMjhaFw0yNjAzMjcyMTM0MjhaMDMxMTAvBgNV BAMTKDI4QzY4OTdGOUYzRDI5QUIyRUE5NzkzQTJBMkM2QjkwREI4OTE5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK3IMuACStcjCTErFwZ7jIFJj+ g3MmZiLlUL+zpmMlFDG5OvlqwCjs2R+t/B9FQ/qF8epNFMGgLJMpqocJsV1Fz3t8 7hPL4mZ4dqlbs+/ktV1GpxLNM7jSGWdhWIMyIo3VePmAJ1QndH+A3SO/qEk6WtWG BS+ukqfs2jnFZ01aThIpmkXHmIQjRWtnyPoc2awYwc/jPZ4w9pQTlWMBEXiSqhVm w7r60MIC1I8AFzJtisnBuGZw4vMsyByW3BkXvvMOgxGUSZ5VxC67avPF9ptWM3mV D7Tv0NrKKlL4y8NwBPpafjoGIPVYXpUHGYDHQoKqgDHmxu5l31waAHuBU7yNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKMaJf589KasuqXk6KixrkNuJGXcwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveBSRm7W5bWo h74aLZcXNjmtUuAwsRE2VERpZ3aZBcbMbqVptUVGNomNhMve5xYBG5RHxRCONIr6 1XCOB/EUPMmTCZvl9qr8h0scESEsk/hWwKwJFE4XsmctnpReiIIB00VyJzUjFGl6 +OBgcD2Pi3XIVnkJLOTUo3TCl1JlfFcpiHfqmT2+tbMNSHeB9odYXtaRrdxHG28I 21fM7QPNJJ4LDgVjJkz32iawzJazeJNGw7RcAMRwiBpBzyV007xRAt/uaf3m+fH4 P8RB4MQO8UBlztLd9l0ESGWj/U5I0bP0WdvT2wzB0rbhxvCjwFZZD6iNF2U4asM/ 8kysLbZmCQ== -----END CERTIFICATE-----Generated at Fri Mar 27 06:21:26 2026 by rpki-client