$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: e5er0GedUjIOa15M4uy4eN1nvCtNymkSeuKEma3oMz4= Subject key identifier: 64:66:57:92:79:FE:B1:2B:2D:5D:74:A2:41:DB:5D:40:F0:AB:06:CD Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 3E564CA4BFEC8F58321F58AFB98F1EE404A8036F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 11:03:28 +0000 Manifest this update: Thu 26 Mar 2026 10:58:28 +0000 Manifest next update: Fri 27 Mar 2026 14:21:28 +0000 Files and hashes: 1: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: BgeqzEPWpTStGVwOlPO4lu4TXici8vEU1NnhrKcdP/I=) 2: 3136302e31392e38322e302f32342d3332203d3e20313531323631.roa (hash: wIryNUkq+SQIuh9QyxK3ngEMwqyiwq3cbzW2X3MdysU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:56:4c:a4:bf:ec:8f:58:32:1f:58:af:b9:8f:1e:e4:04:a8:03:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Mar 26 10:58:28 2026 GMT Not After : Mar 27 14:21:28 2026 GMT Subject: CN=6466579279FEB12B2D5D74A241DB5D40F0AB06CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:53:19:bc:52:02:0c:b0:e4:6c:60:05:cc: 4e:e0:ac:62:b8:ab:8a:ab:36:5a:09:80:71:56:5b: 8a:a3:6f:b0:ca:42:ae:0e:3f:3f:cf:84:f6:c8:d0: ba:71:9f:49:33:98:c1:47:70:74:86:7e:ce:b2:28: ce:b3:be:cb:e2:dc:90:0d:97:8e:89:04:eb:41:20: 08:bb:28:3a:9d:c9:ff:60:06:e9:d7:b1:80:e8:0b: 3c:69:1a:4d:e4:2f:ba:ef:89:a2:79:c0:29:2f:b6: e8:cc:ef:03:9c:1a:de:29:c6:0b:7d:81:95:31:2b: bd:33:66:2d:b2:6d:f6:22:c6:c3:4c:6f:bc:b5:db: 7a:a3:05:f4:ad:05:b4:0c:69:a1:f3:0e:44:91:cd: ae:c6:59:af:3e:00:9d:fb:84:f0:41:a9:85:c2:49: 7e:27:97:7b:a6:c4:69:e1:dc:ef:d8:60:85:01:3a: 11:59:d7:50:cc:a0:6a:89:ac:de:68:83:51:27:d0: ba:3a:22:ba:c5:cc:42:d6:1a:e8:86:22:21:fe:99: 84:96:0f:df:89:4a:46:74:17:32:da:61:52:fb:72: 8f:af:55:40:19:53:b4:74:12:f0:0a:c3:5b:98:3c: a7:82:1c:d1:d3:48:4d:0d:eb:05:ba:d0:d2:6e:ab: 75:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:66:57:92:79:FE:B1:2B:2D:5D:74:A2:41:DB:5D:40:F0:AB:06:CD X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:88:b8:e7:d1:5f:a9:3c:e2:eb:c3:89:84:d1:f6:5e:2d:50: 4b:cd:07:e8:bd:fc:89:14:e8:9b:89:a0:7a:f6:49:24:c6:1b: 23:70:8f:3a:5a:17:02:9b:cb:0c:9b:87:1f:8a:91:b9:1c:83: 30:41:39:40:58:46:3c:95:e2:58:f9:8f:10:c0:27:9c:a3:69: 15:cd:3a:d2:84:24:ea:d8:8c:ca:f7:ae:5c:2f:30:9a:2e:3f: e6:4c:0d:86:3e:24:48:2e:15:b5:d2:22:61:37:71:a8:5e:84: cf:1e:8c:e4:ee:61:b9:1e:3c:9b:41:3c:5a:5b:99:61:56:e9: 6f:97:5c:ed:49:7d:3e:8e:fe:34:de:dc:4e:da:75:9a:0b:c3: c3:d6:7f:5f:9c:92:f5:64:0d:2c:8c:ad:0f:d7:5b:61:68:63: 5b:b1:1b:0f:36:fd:f8:cd:00:e0:99:b1:ac:dd:8c:2b:82:62: 0e:7e:3d:21:6e:ca:ef:7b:8d:a8:63:88:61:20:e9:62:da:89: 67:58:97:9d:1d:e8:44:f7:75:75:bc:bc:50:4c:19:98:52:dd: 1d:2a:7e:d5:4c:75:12:bc:35:cd:23:76:f0:a2:ea:f1:9a:1a: d5:9b:2f:bf:31:04:26:f3:52:65:86:ec:ae:3a:b8:69:fb:6a: f3:60:14:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPlZMpL/sj1gyH1ivuY8e5ASoA28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjAzMjYxMDU4MjhaFw0yNjAzMjcxNDIxMjhaMDMxMTAvBgNV BAMTKDY0NjY1NzkyNzlGRUIxMkIyRDVENzRBMjQxREI1RDQwRjBBQjA2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb1FMZvFICDLDkbGAFzE7grGK4 q4qrNloJgHFWW4qjb7DKQq4OPz/PhPbI0Lpxn0kzmMFHcHSGfs6yKM6zvsvi3JAN l46JBOtBIAi7KDqdyf9gBunXsYDoCzxpGk3kL7rviaJ5wCkvtujM7wOcGt4pxgt9 gZUxK70zZi2ybfYixsNMb7y123qjBfStBbQMaaHzDkSRza7GWa8+AJ37hPBBqYXC SX4nl3umxGnh3O/YYIUBOhFZ11DMoGqJrN5og1En0Lo6IrrFzELWGuiGIiH+mYSW D9+JSkZ0FzLaYVL7co+vVUAZU7R0EvAKw1uYPKeCHNHTSE0N6wW60NJuq3WxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZGZXknn+sSstXXSiQdtdQPCrBs0wHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIi459FfqTzi 68OJhNH2Xi1QS80H6L38iRTom4mgevZJJMYbI3CPOloXApvLDJuHH4qRuRyDMEE5 QFhGPJXiWPmPEMAnnKNpFc060oQk6tiMyveuXC8wmi4/5kwNhj4kSC4VtdIiYTdx qF6Ezx6M5O5huR48m0E8WluZYVbpb5dc7Ul9Po7+NN7cTtp1mgvDw9Z/X5yS9WQN LIytD9dbYWhjW7EbDzb9+M0A4JmxrN2MK4JiDn49IW7K73uNqGOIYSDpYtqJZ1iX nR3oRPd1dby8UEwZmFLdHSp+1Ux1Erw1zSN28KLq8Zoa1ZsvvzEEJvNSZYbsrjq4 aftq82AUFA== -----END CERTIFICATE-----Generated at Fri Mar 27 08:12:50 2026 by rpki-client