$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: +xEZrgOEeIA5T5qFa5lmQrZplufYGWempz+Klv8zhgg= Subject key identifier: 64:6C:4C:0A:34:81:67:A5:93:D3:09:D1:16:34:51:31:F9:1B:B3:CC Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 182A8D96D7ACB98D07D61518CF953AF9AD7226EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 07:28:28 +0000 Manifest this update: Thu 26 Mar 2026 07:23:28 +0000 Manifest next update: Fri 27 Mar 2026 07:32:28 +0000 Files and hashes: 1: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: 9XrVaBwxya2YDwxq8h1aETNmGcVx3lD28JYSClgAehY=) 2: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 3: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 4: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 5: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 6: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 7: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:2a:8d:96:d7:ac:b9:8d:07:d6:15:18:cf:95:3a:f9:ad:72:26:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: Mar 26 07:23:28 2026 GMT Not After : Mar 27 07:32:28 2026 GMT Subject: CN=646C4C0A348167A593D309D116345131F91BB3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:13:6a:00:f1:13:86:d4:78:6c:a3:52:a6: 77:ea:95:fa:8c:d2:f7:56:e2:a1:db:3c:c2:34:04: d6:b6:41:d6:e4:50:5a:57:8d:de:b8:51:49:a7:7b: e0:5d:e6:32:96:d7:08:4f:4e:63:e7:a3:a2:92:fa: 07:8a:78:06:01:e0:db:ed:33:c8:45:5b:3b:d0:28: 8f:67:fd:43:de:6f:15:1a:8d:31:fa:ce:44:38:36: 7e:d6:85:38:39:18:02:0a:c1:8c:a8:1c:cf:f3:97: a7:c9:df:5f:4b:a9:1f:b8:c9:35:0d:16:bf:09:29: 59:6f:c0:d7:05:1c:e7:6c:4f:75:e3:4c:0d:9c:ca: 35:4a:88:87:cb:65:6c:45:ea:8c:d7:6b:a2:29:3b: 4c:f3:96:87:0f:d7:36:31:08:76:53:4d:da:c8:d8: 6e:82:4b:93:f1:27:54:07:ef:62:be:54:e5:79:57: 09:c3:51:6e:fb:da:29:42:91:f9:fe:bb:a1:bf:9e: f9:cf:c0:b8:f1:21:f5:51:7d:6c:2c:0e:65:1d:81: fe:61:66:69:00:80:75:3a:8a:b2:5a:10:2a:6e:c4: 92:3f:e2:84:fc:e6:3f:4a:14:78:05:a1:df:d9:bc: 77:50:6d:36:a9:c8:3b:53:00:f7:69:32:d7:93:35: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:4C:0A:34:81:67:A5:93:D3:09:D1:16:34:51:31:F9:1B:B3:CC X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:52:3c:99:1a:aa:b9:6e:05:2c:10:77:96:1d:20:b2:38:79: ab:e4:a5:8a:e3:6b:44:3a:0c:9d:ef:01:74:61:1b:5e:b9:d0: 71:32:a1:68:2d:49:2d:89:b1:28:61:64:2a:f7:6c:d1:bb:8e: d9:f4:49:4c:03:dc:bc:5f:38:e8:89:62:05:ba:23:f6:7d:02: 27:4a:ea:39:94:6d:c8:d2:ba:d3:65:43:68:c9:7e:26:ad:87: f9:ef:c9:a0:19:b6:7e:92:25:92:1d:6b:91:56:07:d1:3d:e3: 83:62:c7:ca:5d:01:7d:41:8a:f9:51:45:96:82:9c:f7:74:93: c4:41:bd:c1:02:32:b2:2f:9a:f5:89:fb:f0:73:6b:a9:b2:0f: 50:51:ee:f8:b7:58:99:b2:59:66:82:0d:a2:58:32:54:7e:ff: e2:db:ef:a3:c5:77:f8:c3:f0:b1:7e:1a:a6:c3:08:69:c2:c3: f8:3f:f5:eb:c0:38:2f:13:12:ea:65:12:a7:15:9e:06:74:71: a1:3d:47:ae:0f:69:5b:d3:8c:0b:97:5c:2b:e2:ee:a8:a5:9e: 4d:fd:61:b9:42:f9:22:fe:49:6c:5d:8e:90:f5:83:34:7a:b9: 15:fe:61:04:46:83:ef:61:f9:ec:5a:4f:9f:88:bb:87:3e:dc: 73:40:53:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGCqNltesuY0H1hUYz5U6+a1yJuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjAzMjYwNzIzMjhaFw0yNjAzMjcwNzMyMjhaMDMxMTAvBgNV BAMTKDY0NkM0QzBBMzQ4MTY3QTU5M0QzMDlEMTE2MzQ1MTMxRjkxQkIzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XRNqAPEThtR4bKNSpnfqlfqM 0vdW4qHbPMI0BNa2QdbkUFpXjd64UUmne+Bd5jKW1whPTmPno6KS+geKeAYB4Nvt M8hFWzvQKI9n/UPebxUajTH6zkQ4Nn7WhTg5GAIKwYyoHM/zl6fJ319LqR+4yTUN Fr8JKVlvwNcFHOdsT3XjTA2cyjVKiIfLZWxF6ozXa6IpO0zzlocP1zYxCHZTTdrI 2G6CS5PxJ1QH72K+VOV5VwnDUW772ilCkfn+u6G/nvnPwLjxIfVRfWwsDmUdgf5h ZmkAgHU6irJaECpuxJI/4oT85j9KFHgFod/ZvHdQbTapyDtTAPdpMteTNRYDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZGxMCjSBZ6WT0wnRFjRRMfkbs8wwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlI8mRqquW4F LBB3lh0gsjh5q+SliuNrRDoMne8BdGEbXrnQcTKhaC1JLYmxKGFkKvds0buO2fRJ TAPcvF846IliBboj9n0CJ0rqOZRtyNK602VDaMl+Jq2H+e/JoBm2fpIlkh1rkVYH 0T3jg2LHyl0BfUGK+VFFloKc93STxEG9wQIysi+a9Yn78HNrqbIPUFHu+LdYmbJZ ZoINolgyVH7/4tvvo8V3+MPwsX4apsMIacLD+D/168A4LxMS6mUSpxWeBnRxoT1H rg9pW9OMC5dcK+LuqKWeTf1huUL5Iv5JbF2OkPWDNHq5Ff5hBEaD72H57FpPn4i7 hz7cc0BT2Q== -----END CERTIFICATE-----Generated at Thu Mar 26 17:57:22 2026 by rpki-client