$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json) Hash identifier: YiHBB/Wbrmp7ALtG/UMZ8A/D3tu0x+Fh3So1NjSj/70= Subject key identifier: FB:BD:4D:D1:57:3D:23:64:B3:7D:54:BF:35:39:D0:32:C4:DE:7E:AF Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Certificate serial: 206C403ECF054215613AB07C4E0DE456D77732AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 20:38:28 +0000 Manifest this update: Thu 26 Mar 2026 20:33:28 +0000 Manifest next update: Fri 27 Mar 2026 21:36:28 +0000 Files and hashes: 1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: j8kXqlqD7CEhkcracry5U1Yx4nGd6OdW5Ltl72WB+38=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6c:40:3e:cf:05:42:15:61:3a:b0:7c:4e:0d:e4:56:d7:77:32:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Validity Not Before: Mar 26 20:33:28 2026 GMT Not After : Mar 27 21:36:28 2026 GMT Subject: CN=FBBD4DD1573D2364B37D54BF3539D032C4DE7EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:24:48:81:81:48:59:a2:27:79:c1:fa:ec: 86:5f:c2:48:8e:1a:6a:9f:03:c4:ef:ad:e2:7d:e5: e7:99:a7:24:81:b7:37:37:e0:8f:67:34:ff:dd:77: 3c:bc:36:cb:49:e3:5c:85:cf:ae:5b:f9:7a:77:af: 96:ec:4c:6b:4f:f3:9a:8b:45:e0:da:95:ae:c7:9b: 7f:f7:2b:af:3d:ed:38:de:36:3b:7f:d8:7d:9a:42: 8c:71:59:86:f8:99:87:50:9f:87:cf:2a:5f:fc:f8: ce:0f:29:37:68:f2:21:fb:78:1b:64:51:61:45:0a: bc:3e:26:fc:5c:b8:86:d8:22:b4:04:a6:b0:97:b8: b9:6b:9f:c3:8d:16:65:42:e4:31:85:97:a7:db:df: 46:a0:20:26:f4:77:14:fd:50:58:07:47:c6:c1:39: a7:f8:1f:72:22:23:d3:f9:e9:06:3b:63:e0:f3:71: 8b:eb:a6:ab:26:3e:b4:6a:18:8e:e8:71:c2:f9:19: 51:b4:aa:bd:d2:0f:c6:78:1b:c2:37:cc:11:c8:d5: bc:b6:3e:6f:97:62:50:db:9e:5e:85:49:7e:c6:e5: 95:53:e5:76:1a:ba:0f:e4:47:da:b4:ff:4e:ca:3f: d3:1b:66:27:b1:1e:68:92:98:68:7a:8f:52:06:42: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BD:4D:D1:57:3D:23:64:B3:7D:54:BF:35:39:D0:32:C4:DE:7E:AF X509v3 Authority Key Identifier: keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bf:24:38:2a:1f:ba:87:0f:68:18:38:c6:9a:5a:db:c8:85: 79:41:3c:81:24:80:b4:1d:99:4c:7b:22:a4:8c:69:8f:b7:ef: 4d:c5:fe:58:30:da:63:bd:5c:cd:2f:6d:fb:6f:c9:59:cf:55: 0b:9e:8e:2a:89:6a:e6:6c:54:a3:72:b7:cb:65:7b:02:96:aa: 87:c2:42:c6:bd:cc:aa:56:3b:f7:b9:07:56:43:8b:38:5d:1e: e4:23:08:25:65:42:b6:91:22:07:de:f0:17:83:a0:02:a9:6d: 17:14:ff:2e:40:5d:7d:20:61:13:dd:0f:71:14:16:ba:4e:f6: 04:95:d7:f9:50:18:06:6a:56:35:45:a2:f3:ff:0b:14:a2:40: cd:34:e3:03:70:c9:94:36:59:a8:76:a8:df:e7:23:cd:ea:54: 5b:2f:88:34:6e:5d:74:cf:29:d7:9d:da:1e:1e:cc:1d:78:c6: ff:bc:07:9f:f3:a6:f2:e1:89:c5:c8:14:2e:4b:1a:d2:af:50: fb:b0:94:34:60:a0:60:90:bf:3b:25:16:6e:3d:49:40:0d:43: 6a:38:6c:9d:f2:be:01:2f:87:07:60:2b:5d:51:41:fc:b2:75: 5e:d4:f2:01:39:69:86:ad:01:8b:49:f9:02:f4:f9:40:4c:80: f8:9f:b5:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIGxAPs8FQhVhOrB8Tg3kVtd3MqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4 MEU5RThENTAeFw0yNjAzMjYyMDMzMjhaFw0yNjAzMjcyMTM2MjhaMDMxMTAvBgNV BAMTKEZCQkQ0REQxNTczRDIzNjRCMzdENTRCRjM1MzlEMDMyQzRERTdFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZTyRIgYFIWaInecH67IZfwkiO GmqfA8TvreJ95eeZpySBtzc34I9nNP/ddzy8NstJ41yFz65b+Xp3r5bsTGtP85qL ReDala7Hm3/3K6897TjeNjt/2H2aQoxxWYb4mYdQn4fPKl/8+M4PKTdo8iH7eBtk UWFFCrw+JvxcuIbYIrQEprCXuLlrn8ONFmVC5DGFl6fb30agICb0dxT9UFgHR8bB Oaf4H3IiI9P56QY7Y+DzcYvrpqsmPrRqGI7occL5GVG0qr3SD8Z4G8I3zBHI1by2 Pm+XYlDbnl6FSX7G5ZVT5XYaug/kR9q0/07KP9MbZiexHmiSmGh6j1IGQuB5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+71N0Vc9I2SzfVS/NTnQMsTefq8wHwYDVR0j BBgwFoAUTReeXLokVPeW/ygX/mLiC4Dp6NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8xLzREMTc5RTVDQkEyNDU0Rjc5NkZGMjgxN0ZFNjJF MjBCODBFOUU4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4MEU5RThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMS80RDE3OUU1Q0JBMjQ1 NEY3OTZGRjI4MTdGRTYyRTIwQjgwRTlFOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGb8kOCofuocP aBg4xppa28iFeUE8gSSAtB2ZTHsipIxpj7fvTcX+WDDaY71czS9t+2/JWc9VC56O Kolq5mxUo3K3y2V7Apaqh8JCxr3MqlY797kHVkOLOF0e5CMIJWVCtpEiB97wF4Og AqltFxT/LkBdfSBhE90PcRQWuk72BJXX+VAYBmpWNUWi8/8LFKJAzTTjA3DJlDZZ qHao3+cjzepUWy+ING5ddM8p153aHh7MHXjG/7wHn/Om8uGJxcgULksa0q9Q+7CU NGCgYJC/OyUWbj1JQA1DajhsnfK+AS+HB2ArXVFB/LJ1XtTyATlphq0Bi0n5AvT5 QEyA+J+1TA== -----END CERTIFICATE-----Generated at Fri Mar 27 02:14:16 2026 by rpki-client