$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft File: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft (raw, json) Hash identifier: Lxbr8bR6U5/zjyTWMluFHVaWXIWKr7vUTPC1jaFOnwc= Subject key identifier: EE:2C:61:DB:BA:26:E4:7F:86:CB:31:11:3D:0A:DC:3C:28:C6:68:52 Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Certificate issuer: /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Certificate serial: 313D5E0BF639C3891D3A91F4A83C56F332071CFD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 04:33:28 +0000 Manifest this update: Thu 26 Mar 2026 04:28:28 +0000 Manifest next update: Fri 27 Mar 2026 06:33:28 +0000 Files and hashes: 1: 3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa (hash: euPUAsBr1t7QdXoj1ahahda0S3VUgs4yGGVvDrZpqVI=) 2: 3130332e322e3135362e302f32342d3234203d3e20313436373632.roa (hash: ZT6T2FjjqBr9ft4J2Y3eyVRDUROWQVDrmyy7K6YoBoI=) 3: 3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa (hash: VC+9ee95pNmMQJysCZRaAUqZrztwr1iHfxKQUtLwzeU=) 4: 3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa (hash: jV0UQMUSzuX46lyxU9Q1TIad3C+g694F7rPF2x053cs=) 5: 3130332e322e3135392e302f32342d3234203d3e20313436373632.roa (hash: 9g0xW7AmpZhtlTL3yKRzbCzVa8h7KeJrq49B9jPei30=) 6: 3131342e3131312e3138332e302f32342d3234203d3e20313436373632.roa (hash: EI1qa8y78SWxMil8dnhbXcjeLjq6LDygLF5SIMrC0BA=) 7: 3131342e3131312e3137362e302f32302d3230203d3e20313436373632.roa (hash: eoYlD0RAPkGnyRtlK8iXT60W+N/fDNkGjE7hNOcXIoA=) 8: 3131342e3131312e3137382e302f32342d3234203d3e20313436373632.roa (hash: KonUV/ojd1MNml5rROTSxf3fIHa2czkDZZNwNKw8A44=) 9: 3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa (hash: Yd2hPJhMjdqd3tfkS6BhuAHKfqEvDiNjI/wreHyMlDM=) 10: 3130332e322e3135382e302f32342d3234203d3e20313436373632.roa (hash: KmAN9co8g8woRBt62qGsshlijcSmsXQ7J65gVIPP3WY=) 11: 3131342e3131312e3139312e302f32342d3234203d3e2034383132.roa (hash: 0Tz94FSnf8noh/jg+K+xGNe+oMRaQWPqA1KdljfT0sI=) 12: 3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa (hash: C7VfQ5RZhf5OnAeKfKA9NgZGlrBddmIBCn4gvV8/SvE=) 13: 3130332e3138332e32362e302f32332d3233203d3e20313436373631.roa (hash: n2yJFDGxv025XpKqavpDIa1XF9Rdfe1uA9zzY9nQ+sg=) 14: 3131342e3131312e3138362e302f32342d3234203d3e20313436373632.roa (hash: 14KdTLxuOOqp83g/G/Ys/4m/YS+CsQCpCaT1Ppveym0=) 15: 3130332e322e3135372e302f32342d3234203d3e20313436373632.roa (hash: 0lnVRbIs/e81a/ombdJYKhr/uI3gJ/7kYg5290LJFdI=) 16: 3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa (hash: PPgkSPwD1+U5stprn1D0dN8dTyE3ZUS4cSC5pqU8EBA=) 17: 323430303a356636303a3a2f33322d3332203d3e20313436373632.roa (hash: 2zf8ptIuNWz/ytNogvE5KsEgpil1bYy9wjHUWvs6PfU=) 18: 323430303a356636303a3a2f33322d3332203d3e20313436373631.roa (hash: DyboZUW+ZsHiG0TQ2QlXg9N1Udo8DukmD2LIGfkwL6w=) 19: 3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa (hash: G3+LeensaDFmePqko03P1I/U70ppCM1tFWwCVpmhfxk=) 20: 3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa (hash: UN7Qnirh/2XzM0qJ+K46LJtDxxzQ/o9T5wdOdPQYwgw=) 21: 3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa (hash: d3dxWmoPXxo1nO5RHMRT4MjQS31UKEZUCxDP0qx+gPI=) 22: 3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa (hash: DfoNTHHHPPQvz5ij9Tse9a3EdCP3ruj/rqOSevyve2I=) 23: 3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa (hash: 7MkVhAQ/ZLkwVh+NMEQgiOXhv9KYJmUNU5ot6ZWOSOU=) 24: 3131342e3131312e3137392e302f32342d3234203d3e20313436373632.roa (hash: C5mjk+1CG6r0bzt4b18un9KgRI/Xnp9P0cDH3RA0Hy4=) 25: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl (hash: zK1su0jorJ4WKBKqjbNvFJpo78HN9pct51vywwj6wtE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3d:5e:0b:f6:39:c3:89:1d:3a:91:f4:a8:3c:56:f3:32:07:1c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Validity Not Before: Mar 26 04:28:28 2026 GMT Not After : Mar 27 06:33:28 2026 GMT Subject: CN=EE2C61DBBA26E47F86CB31113D0ADC3C28C66852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:d1:3e:24:cc:80:a6:ad:5b:85:89:66:41: b9:a4:19:1b:75:a4:40:6a:d2:87:3c:a5:39:f2:b9: cc:4e:a7:8b:c3:79:ff:d5:a6:ab:b1:55:b9:e5:ab: 88:f4:65:fb:05:9b:fa:42:84:e7:2d:33:e2:d9:b2: 81:40:55:41:ec:c5:be:ae:64:d1:94:e0:18:07:87: 5b:01:bf:9b:88:ba:60:25:cb:59:24:1c:8a:ca:b7: 9b:83:3b:49:34:10:31:72:78:48:2d:41:eb:59:fd: 04:6a:57:29:53:66:fd:57:78:32:b0:da:7e:54:1e: 3b:e1:f3:b1:56:e0:46:0b:96:c8:23:34:43:dc:70: 4d:db:3a:fd:c4:4a:d6:84:83:e5:87:81:ef:88:29: 34:60:6d:e4:50:02:de:ce:58:88:7f:6a:59:d9:97: 9c:5d:83:40:53:09:32:49:db:4a:bc:b6:79:42:9f: a3:d3:48:1b:7b:33:61:b7:08:ab:63:33:f1:72:6d: ef:80:a5:20:0f:26:a0:04:e0:e6:c2:ce:71:4f:76: 93:78:7b:cf:0b:21:12:1f:cd:65:10:72:cb:e6:ba: c5:b6:c9:69:b8:54:e9:a7:9c:eb:eb:ed:ca:66:5c: c4:6f:f6:1c:91:2d:bd:8a:ac:34:a1:ae:0f:da:f4: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:61:DB:BA:26:E4:7F:86:CB:31:11:3D:0A:DC:3C:28:C6:68:52 X509v3 Authority Key Identifier: keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f9:c5:de:33:26:b4:8d:bb:07:4c:d6:5c:f5:ed:bf:12:7b: 93:ca:23:5a:d5:80:e5:22:4b:05:13:0c:af:d3:67:7d:e6:51: 9a:82:9c:59:b5:0a:0c:33:f4:49:fa:66:7d:fa:7f:21:77:92: 83:3d:4c:5f:75:5b:81:b4:e6:a7:76:7e:15:40:a8:0d:f5:7d: 8d:db:18:1a:db:24:9b:08:ec:b5:f2:8b:b9:3e:3c:51:d7:b4: 2c:9d:fa:6e:b1:1f:bb:10:fd:9a:d0:79:be:f6:50:76:6d:e8: c6:66:6f:02:15:0a:1f:fc:cc:b0:ae:d7:96:24:18:95:7f:b0: 9b:3c:0b:95:18:64:12:78:60:9f:ff:cd:a4:7b:10:4b:ba:75: 3d:04:6b:6b:d7:87:d7:ef:d8:68:af:9f:7f:94:05:2a:57:bb: 83:3e:c7:6b:e0:bf:5a:a2:1a:62:da:92:54:ed:23:a0:b4:c0: f3:17:2e:4b:ad:3d:a5:57:4f:5e:b2:fe:24:cd:62:69:dc:6e: f0:ca:74:95:eb:f0:a5:4f:7c:76:04:4b:01:9b:d5:95:6f:df: 20:a9:e4:05:62:91:c8:bc:da:7d:a0:3d:9d:0e:9b:bd:62:78: b6:19:06:22:7b:b5:f3:19:8a:7b:3e:c6:b8:63:cf:d9:3f:4f: 5d:50:5f:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMT1eC/Y5w4kdOpH0qDxW8zIHHP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3 REEyOTExRDAeFw0yNjAzMjYwNDI4MjhaFw0yNjAzMjcwNjMzMjhaMDMxMTAvBgNV BAMTKEVFMkM2MURCQkEyNkU0N0Y4NkNCMzExMTNEMEFEQzNDMjhDNjY4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHtE+JMyApq1bhYlmQbmkGRt1 pEBq0oc8pTnyucxOp4vDef/VpquxVbnlq4j0ZfsFm/pChOctM+LZsoFAVUHsxb6u ZNGU4BgHh1sBv5uIumAly1kkHIrKt5uDO0k0EDFyeEgtQetZ/QRqVylTZv1XeDKw 2n5UHjvh87FW4EYLlsgjNEPccE3bOv3EStaEg+WHge+IKTRgbeRQAt7OWIh/alnZ l5xdg0BTCTJJ20q8tnlCn6PTSBt7M2G3CKtjM/Fybe+ApSAPJqAE4ObCznFPdpN4 e88LIRIfzWUQcsvmusW2yWm4VOmnnOvr7cpmXMRv9hyRLb2KrDShrg/a9G81AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7ixh27om5H+GyzERPQrcPCjGaFIwHwYDVR0j BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczMjQwMzUvMC9EMzVGOTBEOEE3M0ZG QzE2MEEzMTBBOTZCQzAwQkVBQjdEQTI5MTFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPnF3jMmtI27 B0zWXPXtvxJ7k8ojWtWA5SJLBRMMr9NnfeZRmoKcWbUKDDP0Sfpmffp/IXeSgz1M X3VbgbTmp3Z+FUCoDfV9jdsYGtskmwjstfKLuT48Ude0LJ36brEfuxD9mtB5vvZQ dm3oxmZvAhUKH/zMsK7XliQYlX+wmzwLlRhkEnhgn//NpHsQS7p1PQRra9eH1+/Y aK+ff5QFKle7gz7Ha+C/WqIaYtqSVO0joLTA8xcuS609pVdPXrL+JM1iadxu8Mp0 levwpU98dgRLAZvVlW/fIKnkBWKRyLzafaA9nQ6bvWJ4thkGInu18xmKez7GuGPP 2T9PXVBfNg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:01:53 2026 by rpki-client