$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json) Hash identifier: fpJ2j0Z2LE5qNxMRKbC14SAbxrBW4pmuyvjX0TSMYC0= Subject key identifier: 6F:AF:44:81:7D:FE:2B:5B:C8:E4:EC:75:88:10:D9:20:60:C5:27:67 Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Certificate serial: 05EFD9B82C4AFDCDD6E83D19CF8DFF38E4C77F7E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 15:33:28 +0000 Manifest this update: Thu 26 Mar 2026 15:28:28 +0000 Manifest next update: Fri 27 Mar 2026 18:17:28 +0000 Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: DGLTrqOqecm0f4Ch1hX3ImDYnRgQRJgitc0IOYdILk8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ef:d9:b8:2c:4a:fd:cd:d6:e8:3d:19:cf:8d:ff:38:e4:c7:7f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Validity Not Before: Mar 26 15:28:28 2026 GMT Not After : Mar 27 18:17:28 2026 GMT Subject: CN=6FAF44817DFE2B5BC8E4EC758810D92060C52767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:22:e5:66:31:7f:4b:ea:48:7b:3c:91:dc: 37:65:b4:a0:5f:d8:83:ad:cd:4c:55:78:2b:bd:64: da:cf:68:2f:56:65:af:55:03:aa:52:76:98:2d:23: b4:f4:49:fd:e3:2e:bf:c4:71:17:44:5f:e2:06:20: be:af:ce:08:85:63:27:ea:dd:1b:85:71:7e:4b:b3: bb:e7:c1:2d:dc:d6:ee:3d:13:d9:97:b9:58:ec:e6: ff:cd:51:15:a1:a0:32:e0:2e:23:06:d5:89:bc:14: 70:c5:98:2a:5a:a6:a5:f6:c0:f8:5b:ba:f2:e7:ab: 67:2c:37:a0:24:d5:eb:ee:de:a3:ab:11:eb:0b:cc: 6f:81:e4:95:09:7e:59:f0:91:9d:4d:1b:e8:85:b6: 59:12:15:41:35:38:c5:3c:03:0b:0d:0d:9d:d4:80: c9:48:04:29:dd:c8:95:ab:1f:66:f7:62:26:da:3f: e4:92:e9:68:a0:28:ee:e3:a0:79:bd:7b:47:c6:98: 9a:7e:9a:9c:eb:a9:70:ee:bb:26:a5:99:ec:aa:5c: c4:27:c6:5a:31:50:b6:7d:f9:d3:86:5a:ad:0d:51: 74:37:21:12:bd:af:08:f6:84:31:4f:31:26:66:88: 64:a7:65:d2:e0:a8:41:58:69:1a:2d:8c:c1:90:20: 47:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AF:44:81:7D:FE:2B:5B:C8:E4:EC:75:88:10:D9:20:60:C5:27:67 X509v3 Authority Key Identifier: keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:dd:15:7c:f0:f2:f7:2d:06:e8:ed:cf:c6:90:b8:1a:42:2c: de:a3:0e:85:cd:19:ee:ec:55:b1:16:c1:67:95:7e:c1:d4:45: cd:91:81:42:28:7c:95:98:c6:e1:84:32:76:ed:3f:b1:e2:7d: 02:22:94:00:f3:4e:55:b3:2e:8f:a9:5a:a5:3d:23:e7:ad:a2: b9:0d:73:ba:ab:b7:e9:ea:1c:eb:ce:0c:73:41:47:fe:c8:a5: 8a:d6:09:55:25:d8:b5:08:f3:6c:39:86:0e:bd:68:07:08:f8: a3:eb:b1:d3:2f:2c:af:a9:0d:9a:50:76:f1:d5:8c:f6:a4:b5: f2:ab:25:47:5c:78:0c:52:28:f3:3d:e8:5e:58:cd:60:2a:87: 81:46:77:99:8d:70:8e:7c:f1:38:01:41:5b:b7:1e:8c:46:59: fb:d5:9e:a7:b4:42:e5:df:b6:f6:ad:e5:17:a4:d1:20:ee:ba: 51:d6:74:0b:ed:10:91:e0:6e:8c:41:64:9d:31:27:c3:db:9a: cc:15:f2:70:71:a7:5e:54:24:96:db:ab:15:53:12:c9:2f:d1: 68:55:7a:82:cf:b2:31:88:30:76:28:48:5d:ad:a6:f9:17:fc: 3c:99:c5:15:54:a6:c8:29:a1:e2:be:9e:25:90:53:e6:70:1a: 07:9c:6c:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBe/ZuCxK/c3W6D0Zz43/OOTHf34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0 QjI0MjcwNDAeFw0yNjAzMjYxNTI4MjhaFw0yNjAzMjcxODE3MjhaMDMxMTAvBgNV BAMTKDZGQUY0NDgxN0RGRTJCNUJDOEU0RUM3NTg4MTBEOTIwNjBDNTI3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV9yLlZjF/S+pIezyR3DdltKBf 2IOtzUxVeCu9ZNrPaC9WZa9VA6pSdpgtI7T0Sf3jLr/EcRdEX+IGIL6vzgiFYyfq 3RuFcX5Ls7vnwS3c1u49E9mXuVjs5v/NURWhoDLgLiMG1Ym8FHDFmCpapqX2wPhb uvLnq2csN6Ak1evu3qOrEesLzG+B5JUJflnwkZ1NG+iFtlkSFUE1OMU8AwsNDZ3U gMlIBCndyJWrH2b3YibaP+SS6WigKO7joHm9e0fGmJp+mpzrqXDuuyalmeyqXMQn xloxULZ9+dOGWq0NUXQ3IRK9rwj2hDFPMSZmiGSnZdLgqEFYaRotjMGQIEe3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb69EgX3+K1vI5Ox1iBDZIGDFJ2cwHwYDVR0j BBgwFoAU02n3Hf2WUZ3rS8oowqeyN0skJwQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8xL0QzNjlGNzFERkQ5NjUxOURFQjRCQ0EyOEMyQTdC MjM3NEIyNDI3MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMS9EMzY5RjcxREZEOTY1 MTlERUI0QkNBMjhDMkE3QjIzNzRCMjQyNzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvd0VfPDy9y0G 6O3PxpC4GkIs3qMOhc0Z7uxVsRbBZ5V+wdRFzZGBQih8lZjG4YQydu0/seJ9AiKU APNOVbMuj6lapT0j562iuQ1zuqu36eoc684Mc0FH/silitYJVSXYtQjzbDmGDr1o Bwj4o+ux0y8sr6kNmlB28dWM9qS18qslR1x4DFIo8z3oXljNYCqHgUZ3mY1wjnzx OAFBW7cejEZZ+9Wep7RC5d+29q3lF6TRIO66UdZ0C+0QkeBujEFknTEnw9uazBXy cHGnXlQklturFVMSyS/RaFV6gs+yMYgwdihIXa2m+Rf8PJnFFVSmyCmh4r6eJZBT 5nAaB5xsKA== -----END CERTIFICATE-----Generated at Thu Mar 26 22:39:42 2026 by rpki-client