$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: ldS8mRxoUD0zg8xAMjwKuf0n4uLeIrVAeelUfl0D77E= Subject key identifier: 63:80:CE:47:8C:B3:F6:E4:91:6F:C1:5F:AE:9E:2C:D6:09:20:AD:57 Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 11CD4B9C5B9CBF8B9382CC90371859B6ED4098F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 57 Signing time: Wed 25 Mar 2026 07:48:27 +0000 Manifest this update: Wed 25 Mar 2026 07:43:27 +0000 Manifest next update: Thu 26 Mar 2026 11:01:27 +0000 Files and hashes: 1: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 2: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: c9hI0mCG4BgTdMNq8P3FRWlfsOTNrvy141dCFDXOuzw=) 3: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 4: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 5: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) 6: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 7: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) 8: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cd:4b:9c:5b:9c:bf:8b:93:82:cc:90:37:18:59:b6:ed:40:98:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Mar 25 07:43:27 2026 GMT Not After : Mar 26 11:01:27 2026 GMT Subject: CN=6380CE478CB3F6E4916FC15FAE9E2CD60920AD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:42:51:0d:72:a0:c7:23:4f:27:e6:ce:87: af:12:28:8d:89:0d:0b:7c:b0:d4:6f:f1:e9:c6:8b: 11:81:8c:c1:4a:19:d6:ef:09:05:93:42:6f:c8:b5: a6:f3:8c:17:3d:99:b1:5b:c4:e0:7d:5a:ce:78:14: 87:84:ba:31:88:74:d4:ac:23:97:2d:b0:81:d8:4f: de:ba:ca:1f:53:41:55:3e:f6:29:e7:45:11:a3:e1: 89:a3:ea:03:d9:26:0d:55:90:ce:10:d4:b2:a8:f5: 84:f7:cf:f5:67:6e:a8:15:a0:5b:75:19:f4:7c:89: 8c:73:bc:3d:1e:94:b0:b4:c6:8d:b9:e0:1f:99:c9: 63:8f:a6:12:47:06:27:dd:c2:5d:09:a3:0f:18:c7: c3:e3:3f:10:27:24:7b:f9:95:27:f6:57:db:01:69: e5:36:1b:52:02:c9:35:54:fe:13:83:de:df:be:71: be:e9:0a:15:3c:cc:bd:2a:3d:f1:c1:2e:b1:30:28: cd:4b:bc:a0:1c:91:23:3f:73:df:fc:89:09:95:23: cd:eb:d0:fa:6b:50:59:e4:62:2e:e3:1a:aa:13:4a: 24:21:d4:9d:52:0e:0e:92:72:db:ee:18:6f:7c:03: ac:dd:5e:8c:ac:bc:ad:10:07:18:ad:b5:6f:c3:df: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:80:CE:47:8C:B3:F6:E4:91:6F:C1:5F:AE:9E:2C:D6:09:20:AD:57 X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:14:11:e1:47:ed:9c:cd:99:04:83:89:81:92:48:d2:65:24: f1:2b:05:d6:0a:4a:1a:b6:c3:1b:78:e3:b3:74:de:69:7f:72: b4:cb:36:c6:9e:80:ce:1c:c3:1c:75:87:56:eb:13:7f:5d:61: 2b:b3:51:34:82:08:34:b9:b9:c8:28:91:fc:8f:6d:ea:9e:c9: d2:67:97:47:44:0a:0b:6b:dc:88:1b:2c:20:46:12:6c:15:59: e0:fa:1e:5c:8f:64:13:b3:dc:13:eb:fa:7e:e9:16:fb:73:11: 69:4e:2b:57:13:e0:6c:30:b1:df:f0:93:63:92:94:49:96:6b: 84:83:80:3b:92:5d:9b:6a:df:01:63:bd:00:d6:1a:e5:6e:62: 92:54:96:00:bc:2f:5f:11:8d:5c:f8:5e:c7:15:97:cd:3a:a4: 11:0d:6e:b3:8c:1e:5b:d8:60:d5:ea:ab:97:62:ca:dc:97:13: 71:3f:36:4f:1b:e9:be:53:4d:f6:86:9f:3b:08:20:6e:97:be: 35:87:aa:3a:6f:1c:cc:32:e1:45:7d:64:27:7b:5a:5c:39:f4: 2f:76:7c:8b:a4:54:eb:6c:46:4c:22:36:83:f7:85:c1:25:f6: 8d:94:45:4b:d8:f6:2a:93:d4:86:dc:26:97:2d:fd:e8:7a:fc: de:ca:01:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEc1LnFucv4uTgsyQNxhZtu1AmPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjAzMjUwNzQzMjdaFw0yNjAzMjYxMTAxMjdaMDMxMTAvBgNV BAMTKDYzODBDRTQ3OENCM0Y2RTQ5MTZGQzE1RkFFOUUyQ0Q2MDkyMEFENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsiEJRDXKgxyNPJ+bOh68SKI2J DQt8sNRv8enGixGBjMFKGdbvCQWTQm/ItabzjBc9mbFbxOB9Ws54FIeEujGIdNSs I5ctsIHYT966yh9TQVU+9innRRGj4Ymj6gPZJg1VkM4Q1LKo9YT3z/VnbqgVoFt1 GfR8iYxzvD0elLC0xo254B+ZyWOPphJHBifdwl0Jow8Yx8PjPxAnJHv5lSf2V9sB aeU2G1ICyTVU/hOD3t++cb7pChU8zL0qPfHBLrEwKM1LvKAckSM/c9/8iQmVI83r 0PprUFnkYi7jGqoTSiQh1J1SDg6SctvuGG98A6zdXoysvK0QBxittW/D31vLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUY4DOR4yz9uSRb8Ffrp4s1gkgrVcwHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRQR4UftnM2Z BIOJgZJI0mUk8SsF1gpKGrbDG3jjs3TeaX9ytMs2xp6AzhzDHHWHVusTf11hK7NR NIIINLm5yCiR/I9t6p7J0meXR0QKC2vciBssIEYSbBVZ4PoeXI9kE7PcE+v6fukW +3MRaU4rVxPgbDCx3/CTY5KUSZZrhIOAO5Jdm2rfAWO9ANYa5W5iklSWALwvXxGN XPhexxWXzTqkEQ1us4weW9hg1eqrl2LK3JcTcT82TxvpvlNN9oafOwggbpe+NYeq Om8czDLhRX1kJ3taXDn0L3Z8i6RU62xGTCI2g/eFwSX2jZRFS9j2KpPUhtwmly39 6Hr83soByg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:08 2026 by rpki-client