$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: iBJmFRJOQX4eF8L02iHdHOlY/6No8XomSBheu7Tm7cE= Subject key identifier: E8:09:03:84:58:17:A4:1D:56:9B:23:81:9C:64:AD:F7:6E:E4:F9:99 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 3A4C3BDBFC550797E4B653BE1AD1B3C7BFB32B79 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 08:13:28 +0000 Manifest this update: Thu 26 Mar 2026 08:08:28 +0000 Manifest next update: Fri 27 Mar 2026 10:44:28 +0000 Files and hashes: 1: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: bOxMqFxVYyDkMNGtiv8AheWKZri/TwvFkyA9wmVCTao=) 2: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) 3: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4c:3b:db:fc:55:07:97:e4:b6:53:be:1a:d1:b3:c7:bf:b3:2b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Mar 26 08:08:28 2026 GMT Not After : Mar 27 10:44:28 2026 GMT Subject: CN=E80903845817A41D569B23819C64ADF76EE4F999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:96:60:db:60:70:e3:70:60:87:72:6f:a6: 1f:80:74:ea:1f:f7:f7:7f:0d:64:24:cf:1a:d9:44: 82:f6:bc:4c:f4:31:e1:0d:d4:05:9a:33:c6:71:5a: a4:e5:45:39:9d:df:16:a3:c6:12:be:90:ab:1d:f6: 06:97:52:e8:05:01:43:5b:9c:f0:78:fc:c1:b4:64: f8:a5:b4:be:10:5d:11:9e:42:b9:f7:1e:9f:b1:c8: d4:02:68:bb:a1:f8:27:96:c8:16:b2:51:56:9b:10: ed:0a:64:ce:c0:5e:44:b9:35:7c:79:0d:3b:15:a1: d8:93:be:5d:27:74:c9:f7:98:cd:47:2d:99:d5:4a: d6:5b:75:63:f9:3a:ad:0b:9b:8a:2d:8f:6c:1d:0b: b4:4c:24:b7:9f:67:ca:03:23:bf:1e:cd:05:cb:00: 32:85:ca:5b:d8:0b:1a:d6:07:50:c7:82:01:02:9f: d6:a4:90:65:e5:d9:7a:78:6d:e2:40:d9:85:1c:3f: d1:a7:de:0e:69:f7:a4:c3:2b:73:10:a9:8b:de:d4: 26:ef:8e:51:2e:3f:f4:d1:7e:a2:1f:39:41:f4:11: 26:d3:78:8d:4b:6f:54:ca:7c:2a:c7:52:83:a3:7d: 43:f1:2c:9f:ac:ad:c4:f2:b1:51:3c:f9:04:81:43: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:09:03:84:58:17:A4:1D:56:9B:23:81:9C:64:AD:F7:6E:E4:F9:99 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:56:13:2c:12:25:36:24:41:e4:33:b0:d1:21:b7:42:be:7d: 04:17:82:24:41:9c:bb:f0:19:9e:a5:93:99:e6:04:d2:f6:63: 3f:c8:1b:37:6c:8b:fb:84:db:2a:b9:7c:65:c3:bd:df:df:74: 4e:0c:95:39:2f:ef:be:9e:1c:83:9f:1e:93:d4:19:a2:4f:e8: 81:94:23:b8:51:02:91:87:02:f3:5b:9c:dc:28:dd:d6:59:27: bd:81:23:7b:b8:5e:74:74:9b:ba:da:50:53:44:39:c8:37:36: 19:77:7e:00:f4:ba:a4:8c:f2:4b:b2:82:06:9e:da:b4:a2:41: c6:77:64:ba:c8:ed:65:9e:29:03:a6:f6:30:26:26:ac:52:ea: 5c:3b:0a:08:1e:87:d6:60:3f:e9:b2:50:5f:19:34:03:8d:66: 25:8c:97:89:34:f4:f6:49:41:8c:21:30:a4:a4:36:d1:da:7f: 5e:fa:5f:3d:72:3f:2a:bb:ec:9c:0d:32:a2:d5:3e:69:01:90: ba:f3:fe:f3:c6:24:8b:db:3e:af:1d:51:f0:50:90:ad:31:0f: 6d:9f:fb:66:0a:f8:97:2e:5c:e7:3b:66:d9:c6:61:31:64:61: 4a:b7:40:ce:58:8d:18:5a:43:df:7e:07:e4:58:83:58:99:0d: 9b:1e:6e:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOkw72/xVB5fktlO+GtGzx7+zK3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjAzMjYwODA4MjhaFw0yNjAzMjcxMDQ0MjhaMDMxMTAvBgNV BAMTKEU4MDkwMzg0NTgxN0E0MUQ1NjlCMjM4MTlDNjRBREY3NkVFNEY5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYgpZg22Bw43Bgh3Jvph+AdOof 9/d/DWQkzxrZRIL2vEz0MeEN1AWaM8ZxWqTlRTmd3xajxhK+kKsd9gaXUugFAUNb nPB4/MG0ZPiltL4QXRGeQrn3Hp+xyNQCaLuh+CeWyBayUVabEO0KZM7AXkS5NXx5 DTsVodiTvl0ndMn3mM1HLZnVStZbdWP5Oq0Lm4otj2wdC7RMJLefZ8oDI78ezQXL ADKFylvYCxrWB1DHggECn9akkGXl2Xp4beJA2YUcP9Gn3g5p96TDK3MQqYve1Cbv jlEuP/TRfqIfOUH0ESbTeI1Lb1TKfCrHUoOjfUPxLJ+srcTysVE8+QSBQ6tpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6AkDhFgXpB1WmyOBnGSt927k+ZkwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1YTLBIlNiRB 5DOw0SG3Qr59BBeCJEGcu/AZnqWTmeYE0vZjP8gbN2yL+4TbKrl8ZcO93990TgyV OS/vvp4cg58ek9QZok/ogZQjuFECkYcC81uc3Cjd1lknvYEje7hedHSbutpQU0Q5 yDc2GXd+APS6pIzyS7KCBp7atKJBxndkusjtZZ4pA6b2MCYmrFLqXDsKCB6H1mA/ 6bJQXxk0A41mJYyXiTT09klBjCEwpKQ20dp/XvpfPXI/KrvsnA0yotU+aQGQuvP+ 88Yki9s+rx1R8FCQrTEPbZ/7Zgr4ly5c5ztm2cZhMWRhSrdAzliNGFpD334H5FiD WJkNmx5uFg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:05:26 2026 by rpki-client