$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: 4fi0Cxn44N63LkCKtrU0QyG+0VYl1wuli9bWqS1XsWw= Subject key identifier: C3:FC:16:75:D2:17:41:03:57:B1:3A:A7:38:25:9B:AD:47:55:A6:C6 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 7F8966338A9A3DE459377FD0DE60244F1717BD4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 04:23:28 +0000 Manifest this update: Thu 26 Mar 2026 04:18:28 +0000 Manifest next update: Fri 27 Mar 2026 07:23:28 +0000 Files and hashes: 1: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: P6P/Q1Kw+qNzewdfOdiUuqoaOmO3KGfA2mHR3Xz3hBw=) 2: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 3: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 4: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:89:66:33:8a:9a:3d:e4:59:37:7f:d0:de:60:24:4f:17:17:bd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Mar 26 04:18:28 2026 GMT Not After : Mar 27 07:23:28 2026 GMT Subject: CN=C3FC1675D217410357B13AA738259BAD4755A6C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:f8:1c:5f:df:9f:d7:b5:9b:84:08:81:f0: 4b:e0:d7:60:4b:4a:ea:01:ee:f3:95:16:4c:66:7c: 4f:31:97:0f:83:63:3f:ff:67:a8:92:18:b2:46:c9: 6c:1d:dc:80:7c:53:53:37:52:41:e4:df:2a:d3:23: 8b:18:22:65:dd:75:7a:8e:e3:cb:71:46:02:4a:3d: 2f:d1:cc:2f:1f:36:2a:0d:a1:1a:00:7c:a6:5e:e5: 9f:f1:94:de:7c:dd:fd:14:8d:c6:65:62:e1:35:8d: 93:58:12:fd:76:fe:15:e6:b6:e2:94:f8:f2:be:12: f3:40:10:97:d6:26:de:59:89:66:b6:84:f8:b2:43: f7:60:df:79:b9:60:27:cc:e1:3e:1f:0e:58:24:63: d4:8d:af:e3:e0:53:69:e3:9d:f2:3d:94:9a:13:6d: 45:d1:7c:33:f1:46:4a:2f:3e:fa:31:f4:95:58:ea: 6a:8a:80:b9:1f:54:32:63:13:93:2f:da:80:c6:44: 64:02:f6:19:a4:63:ec:e4:1e:37:6d:39:a7:8d:05: 73:68:98:18:df:1d:65:c0:4e:c3:02:cd:84:22:fb: 99:f9:0a:8d:59:fd:ca:3d:c5:cf:58:b7:20:dd:15: 67:52:3c:83:33:a1:ee:62:d7:0f:94:12:df:60:b6: b0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FC:16:75:D2:17:41:03:57:B1:3A:A7:38:25:9B:AD:47:55:A6:C6 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:30:60:7c:c2:0c:2c:db:45:9e:64:6e:02:cf:08:60:df:4c: 61:8d:f8:0c:f2:57:90:d2:6a:03:81:11:7e:79:81:2a:db:4b: 75:96:95:10:32:37:ea:94:6b:6b:f6:4f:e9:af:5c:b6:96:e0: 19:8a:f9:5c:fe:7f:ce:85:ab:f0:8a:ee:15:71:61:9a:e1:ae: 7a:52:4e:66:06:d2:ae:ba:d1:b3:8c:37:2d:8b:14:26:45:73: e7:fb:e8:24:c9:e1:cb:6c:0d:c0:e3:20:9f:58:cd:ab:9d:34: 42:14:3d:4b:c2:7e:e6:f6:5f:df:a1:83:7c:8c:c1:e3:3a:e3: b7:e4:04:b0:4b:a4:5f:2a:32:d3:76:6a:03:bd:a2:97:9a:b0: e5:3d:5f:c8:be:66:c1:0c:00:9d:b8:bf:5c:bd:62:40:63:a6: f6:7f:66:c2:0d:e1:01:f2:51:cb:57:ba:4b:13:e1:e4:8b:b0: fd:7b:05:ee:79:bb:e5:b2:f0:a5:e8:54:81:6f:1d:67:1b:a2: 01:63:3e:00:1a:b5:84:a3:43:94:dc:29:bc:76:4b:52:7e:ef: 90:ee:5a:01:a2:c1:7d:5a:d9:da:82:82:99:9e:dd:d2:8f:8a: ea:fa:9d:ff:12:63:4d:b6:33:9b:1e:2c:7f:bb:d6:90:47:70: 05:7c:a4:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf4lmM4qaPeRZN3/Q3mAkTxcXvUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjAzMjYwNDE4MjhaFw0yNjAzMjcwNzIzMjhaMDMxMTAvBgNV BAMTKEMzRkMxNjc1RDIxNzQxMDM1N0IxM0FBNzM4MjU5QkFENDc1NUE2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhvgcX9+f17WbhAiB8Evg12BL SuoB7vOVFkxmfE8xlw+DYz//Z6iSGLJGyWwd3IB8U1M3UkHk3yrTI4sYImXddXqO 48txRgJKPS/RzC8fNioNoRoAfKZe5Z/xlN583f0UjcZlYuE1jZNYEv12/hXmtuKU +PK+EvNAEJfWJt5ZiWa2hPiyQ/dg33m5YCfM4T4fDlgkY9SNr+PgU2njnfI9lJoT bUXRfDPxRkovPvox9JVY6mqKgLkfVDJjE5Mv2oDGRGQC9hmkY+zkHjdtOaeNBXNo mBjfHWXATsMCzYQi+5n5Co1Z/co9xc9YtyDdFWdSPIMzoe5i1w+UEt9gtrDbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUw/wWddIXQQNXsTqnOCWbrUdVpsYwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozBgfMIMLNtF nmRuAs8IYN9MYY34DPJXkNJqA4ERfnmBKttLdZaVEDI36pRra/ZP6a9ctpbgGYr5 XP5/zoWr8IruFXFhmuGuelJOZgbSrrrRs4w3LYsUJkVz5/voJMnhy2wNwOMgn1jN q500QhQ9S8J+5vZf36GDfIzB4zrjt+QEsEukXyoy03ZqA72il5qw5T1fyL5mwQwA nbi/XL1iQGOm9n9mwg3hAfJRy1e6SxPh5Iuw/XsF7nm75bLwpehUgW8dZxuiAWM+ ABq1hKNDlNwpvHZLUn7vkO5aAaLBfVrZ2oKCmZ7d0o+K6vqd/xJjTbYzmx4sf7vW kEdwBXykDQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:46 2026 by rpki-client