$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: BuFh7tRscN3hYsi+SRqy0And400KeW7DU8geYpdHNMw= Subject key identifier: 16:5A:F6:69:9F:CB:BB:1D:EC:DD:B4:AE:F0:2D:EC:F3:C1:06:AE:3D Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 7E14C355FFA369B8D059448BA6B1239CFB89818A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 06:08:28 +0000 Manifest this update: Thu 26 Mar 2026 06:03:28 +0000 Manifest next update: Fri 27 Mar 2026 08:00:28 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: eW6DABOmGZRKPc8a1mnh0aL6YJg/Nu5UNp1NuvEJOg4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:14:c3:55:ff:a3:69:b8:d0:59:44:8b:a6:b1:23:9c:fb:89:81:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Mar 26 06:03:28 2026 GMT Not After : Mar 27 08:00:28 2026 GMT Subject: CN=165AF6699FCBBB1DECDDB4AEF02DECF3C106AE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:99:20:d0:3b:c8:5e:60:37:ac:fb:ca:2d: a9:31:10:38:76:ca:06:70:1f:90:2f:26:67:96:73: 8c:52:94:62:8c:bf:f5:34:ff:cc:78:80:43:e0:38: 39:ed:08:29:7c:0d:39:bf:89:97:a9:f8:ef:94:c9: 5d:e8:e3:fb:b1:b4:52:9a:09:de:f9:ee:05:ee:79: 89:b4:a2:bc:79:1a:87:8c:68:21:ea:e4:0f:5b:fb: d0:25:05:c1:25:52:81:bb:7e:32:83:d3:57:5e:43: 72:39:df:67:5a:db:ff:63:c5:65:bd:e9:f7:34:b1: dc:70:37:63:56:d4:e7:2c:6e:b8:f0:b0:e9:e0:82: 3e:49:1c:71:64:c3:48:f3:d6:8e:d9:2e:52:85:70: b5:4f:ea:6d:7a:d9:27:d4:89:fa:f6:74:32:fc:76: 77:75:8e:64:8e:1e:0b:37:07:ce:6d:6c:5b:68:3c: ab:73:92:04:ce:ff:0e:65:ca:97:d0:40:f8:36:fd: ee:2d:23:00:ab:50:00:1e:46:f5:5d:79:0f:10:24: 0a:0e:dd:00:2b:44:8a:1b:28:53:f2:38:f1:fd:39: 23:a8:33:1f:fd:9e:4d:c6:84:97:ff:55:d3:a4:db: aa:1d:54:38:02:1d:52:dd:81:0c:22:87:db:cb:bd: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5A:F6:69:9F:CB:BB:1D:EC:DD:B4:AE:F0:2D:EC:F3:C1:06:AE:3D X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:41:ec:ee:21:92:02:58:5f:dc:bd:ea:86:c8:70:41:c7:6e: 6b:3c:ee:b7:97:b5:54:b5:e1:53:3e:f1:be:d5:c7:6a:4a:3c: 1a:28:0c:b6:e2:bd:4d:db:be:4b:5d:77:2b:b2:9b:d5:ec:93: 74:84:bf:a6:9d:df:d7:3b:73:d4:17:78:64:f7:c4:e3:04:dd: 74:f1:30:4c:e9:e2:04:5e:0e:e0:7a:81:c4:d4:07:1a:88:e6: 51:1a:57:ee:fd:11:b7:0e:f7:3c:e5:2c:80:74:af:d1:7c:8a: aa:fb:88:4f:22:9a:b7:8a:62:40:97:fe:25:a9:8f:c4:c6:a2: 49:f0:4f:8c:25:c8:79:0e:91:03:d2:1b:34:08:60:34:a3:57: e6:ab:3f:2e:10:6d:b3:91:71:62:d1:ad:46:b0:36:a2:20:ed: 50:2e:7d:6a:9e:2e:08:2a:be:a6:c9:7e:0a:60:b3:6c:03:77: 0c:af:fe:9d:20:53:53:3d:2a:df:ef:71:aa:3d:b6:a3:70:2d: 62:07:4f:21:4d:23:08:2e:24:32:90:21:a1:84:29:5e:5f:ae: 4b:7b:13:f3:a7:58:5f:a7:3a:a7:96:2c:84:3a:56:26:ab:8a: 52:0f:13:1a:ef:2c:c6:bd:50:ea:84:e8:e1:5a:40:ce:aa:f4: 56:a5:4a:70 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfhTDVf+jabjQWUSLprEjnPuJgYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjAzMjYwNjAzMjhaFw0yNjAzMjcwODAwMjhaMDMxMTAvBgNV BAMTKDE2NUFGNjY5OUZDQkJCMURFQ0REQjRBRUYwMkRFQ0YzQzEwNkFFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2Zkg0DvIXmA3rPvKLakxEDh2 ygZwH5AvJmeWc4xSlGKMv/U0/8x4gEPgODntCCl8DTm/iZep+O+UyV3o4/uxtFKa Cd757gXueYm0orx5GoeMaCHq5A9b+9AlBcElUoG7fjKD01deQ3I532da2/9jxWW9 6fc0sdxwN2NW1OcsbrjwsOnggj5JHHFkw0jz1o7ZLlKFcLVP6m162SfUifr2dDL8 dnd1jmSOHgs3B85tbFtoPKtzkgTO/w5lypfQQPg2/e4tIwCrUAAeRvVdeQ8QJAoO 3QArRIobKFPyOPH9OSOoMx/9nk3GhJf/VdOk26odVDgCHVLdgQwih9vLvaUTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFlr2aZ/Lux3s3bSu8C3s88EGrj0wHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEHs7iGSAlhf 3L3qhshwQcduazzut5e1VLXhUz7xvtXHako8GigMtuK9Tdu+S113K7Kb1eyTdIS/ pp3f1ztz1Bd4ZPfE4wTddPEwTOniBF4O4HqBxNQHGojmURpX7v0Rtw73POUsgHSv 0XyKqvuITyKat4piQJf+JamPxMaiSfBPjCXIeQ6RA9IbNAhgNKNX5qs/LhBts5Fx YtGtRrA2oiDtUC59ap4uCCq+psl+CmCzbAN3DK/+nSBTUz0q3+9xqj22o3AtYgdP IU0jCC4kMpAhoYQpXl+uS3sT86dYX6c6p5YshDpWJquKUg8TGu8sxr1Q6oTo4VpA zqr0VqVKcA== -----END CERTIFICATE-----Generated at Fri Mar 27 01:59:20 2026 by rpki-client