$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft File: E44A11245B84A6269EEC23D7321F11971335E4E9.mft (raw, json) Hash identifier: mqGK21Q0qer5hpk95KtaYH8O4dUrnOKrBM5xtWBVoFA= Subject key identifier: E1:45:A6:13:8D:48:8C:DC:E5:C8:6D:75:E6:C7:7D:1A:E1:CD:A0:05 Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9 Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9 Certificate serial: 46146761B30CACF3C12172428162E417EABA183D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft Manifest number: 5B Signing time: Thu 26 Mar 2026 08:53:28 +0000 Manifest this update: Thu 26 Mar 2026 08:48:28 +0000 Manifest next update: Fri 27 Mar 2026 10:58:28 +0000 Files and hashes: 1: E44A11245B84A6269EEC23D7321F11971335E4E9.crl (hash: 7SKMQOZ/PtTd8u9DSiNutKNlv+Y/y+2QoX4H9GTX/K8=) 2: 34352e3131332e31362e302f32332d3332203d3e20313531323631.roa (hash: LQqTuamZJecJVVqiprVHJhT1U57uhuSeYxVF1Jp6NjU=) 3: 34352e3131322e3233322e302f32342d3234203d3e20313531323631.roa (hash: IOZwuMEqrOSqCjp4OdE4qWo28zAgS1iGgWf7fe/RtoQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:14:67:61:b3:0c:ac:f3:c1:21:72:42:81:62:e4:17:ea:ba:18:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9 Validity Not Before: Mar 26 08:48:28 2026 GMT Not After : Mar 27 10:58:28 2026 GMT Subject: CN=E145A6138D488CDCE5C86D75E6C77D1AE1CDA005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:19:e1:da:1d:fa:48:96:44:f2:34:13:fd: 52:07:c4:aa:15:30:7b:3f:d5:bf:cd:fa:d0:62:ef: a2:eb:b9:27:ea:b3:ec:10:43:59:f2:47:5c:72:f6: af:cc:17:25:e2:44:50:4f:66:c8:5d:ab:21:54:ba: 47:81:7c:1b:4d:2e:87:2e:c1:c5:da:99:c4:88:84: 88:95:c8:ad:b3:92:62:aa:91:45:14:1e:4c:24:be: 60:1c:bc:a5:15:bc:79:ca:9f:1c:50:1a:ef:ba:5f: 2a:15:40:5b:35:67:24:d2:d1:93:3d:40:d8:32:1f: 81:c3:4c:32:f7:3f:36:ee:72:98:53:bd:d2:d8:44: c7:46:c5:0f:a4:b5:e8:aa:0a:79:9b:39:fc:d9:1e: 95:d3:a1:d2:76:dd:1d:6b:ef:4c:70:37:0b:d9:1d: 94:a3:e3:3c:23:d2:32:03:2a:b9:3b:31:0b:81:b7: 78:b2:fb:76:ce:16:ae:4c:d6:a5:a2:1f:31:2b:c1: da:3a:ee:6e:fc:1f:19:1e:16:49:b2:34:de:6f:5e: 4d:1c:18:74:bf:f0:40:84:6e:0a:58:7a:20:e7:9a: bd:eb:d5:d1:bc:8a:58:4e:ae:2f:8f:ba:b8:99:57: 67:ae:22:a1:ed:44:1a:dc:3a:25:15:d8:42:8d:26: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:45:A6:13:8D:48:8C:DC:E5:C8:6D:75:E6:C7:7D:1A:E1:CD:A0:05 X509v3 Authority Key Identifier: keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:97:8e:cf:07:45:3c:ec:90:90:9f:5c:87:b0:25:ed:38:33: 05:f1:39:9a:4b:22:3d:49:25:93:d9:1c:bd:0e:64:42:d3:30: 23:fd:cc:7e:a6:b1:77:32:f4:38:75:a1:f7:03:58:9c:3c:22: 61:88:0f:cd:a5:2e:1e:02:ae:e8:83:4f:bb:61:3d:44:0b:fd: 49:31:58:22:90:b5:62:b0:89:d4:13:bd:65:d7:0a:87:bc:d8: 39:2d:34:29:03:d4:18:ff:18:19:f7:b6:b6:5d:61:00:ec:66: f7:82:54:8f:39:74:35:36:d9:88:f4:c7:ee:2d:63:55:88:18: ca:47:e7:20:b6:8a:17:65:b8:78:32:b7:e4:11:6f:e2:bd:03: d4:bb:57:cb:cb:81:0c:8f:57:3d:4a:cb:2d:e7:7d:4e:24:74: 2a:89:03:44:e7:e5:71:ae:44:e9:16:38:d4:b3:70:8e:90:34: a0:88:ec:97:3d:1c:e7:c4:d3:cd:1b:80:ce:7b:20:f7:7f:b9: f9:f9:08:d9:b1:3e:37:50:16:6e:85:c0:c7:64:8a:db:f3:f1: ee:2d:39:27:01:ae:17:7a:d5:bc:9a:85:7a:04:d9:30:66:88: ef:52:57:3d:93:09:6d:90:64:48:a2:60:bb:56:5a:ef:14:10: 9b:76:4c:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURhRnYbMMrPPBIXJCgWLkF+q6GD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcx MzM1RTRFOTAeFw0yNjAzMjYwODQ4MjhaFw0yNjAzMjcxMDU4MjhaMDMxMTAvBgNV BAMTKEUxNDVBNjEzOEQ0ODhDRENFNUM4NkQ3NUU2Qzc3RDFBRTFDREEwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yBnh2h36SJZE8jQT/VIHxKoV MHs/1b/N+tBi76LruSfqs+wQQ1nyR1xy9q/MFyXiRFBPZshdqyFUukeBfBtNLocu wcXamcSIhIiVyK2zkmKqkUUUHkwkvmAcvKUVvHnKnxxQGu+6XyoVQFs1ZyTS0ZM9 QNgyH4HDTDL3PzbucphTvdLYRMdGxQ+kteiqCnmbOfzZHpXTodJ23R1r70xwNwvZ HZSj4zwj0jIDKrk7MQuBt3iy+3bOFq5M1qWiHzErwdo67m78HxkeFkmyNN5vXk0c GHS/8ECEbgpYeiDnmr3r1dG8ilhOri+PuriZV2euIqHtRBrcOiUV2EKNJkG1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4UWmE41IjNzlyG115sd9GuHNoAUwHwYDVR0j BBgwFoAU5EoRJFuEpiae7CPXMh8RlxM15OkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8wL0U0NEExMTI0NUI4NEE2MjY5RUVDMjNENzMyMUYx MTk3MTMzNUU0RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcxMzM1RTRFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMC9FNDRBMTEyNDVCODRB NjI2OUVFQzIzRDczMjFGMTE5NzEzMzVFNEU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJeOzwdFPOyQ kJ9ch7Al7TgzBfE5mksiPUklk9kcvQ5kQtMwI/3MfqaxdzL0OHWh9wNYnDwiYYgP zaUuHgKu6INPu2E9RAv9STFYIpC1YrCJ1BO9ZdcKh7zYOS00KQPUGP8YGfe2tl1h AOxm94JUjzl0NTbZiPTH7i1jVYgYykfnILaKF2W4eDK35BFv4r0D1LtXy8uBDI9X PUrLLed9TiR0KokDROflca5E6RY41LNwjpA0oIjslz0c58TTzRuAznsg93+5+fkI 2bE+N1AWboXAx2SK2/Px7i05JwGuF3rVvJqFegTZMGaI71JXPZMJbZBkSKJgu1Za 7xQQm3ZM9w== -----END CERTIFICATE-----Generated at Fri Mar 27 02:00:59 2026 by rpki-client