$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json) Hash identifier: OAab9dRHnTemDOtEctRBmL57XQLgAM0agYIO5UD5ens= Subject key identifier: 0F:B0:2A:6C:F7:CF:0F:62:95:E6:A2:71:05:13:68:43:25:51:4C:03 Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Certificate serial: 7A3E8452FEA3C64449368B476CE20BDCFFA48B60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 17:38:28 +0000 Manifest this update: Thu 26 Mar 2026 17:33:28 +0000 Manifest next update: Fri 27 Mar 2026 21:05:28 +0000 Files and hashes: 1: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=) 2: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=) 3: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: O0vbnjgIn1oMStudqsryhjZuYCU23jbcF/1JZQKHLL4=) 4: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3e:84:52:fe:a3:c6:44:49:36:8b:47:6c:e2:0b:dc:ff:a4:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Validity Not Before: Mar 26 17:33:28 2026 GMT Not After : Mar 27 21:05:28 2026 GMT Subject: CN=0FB02A6CF7CF0F6295E6A2710513684325514C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:92:92:90:f8:4d:d2:7c:36:4d:54:92:74: f1:bb:f1:68:b1:8d:59:01:52:d4:6d:f5:82:b2:78: d2:92:7c:10:99:ac:6e:05:94:86:01:3e:0c:3f:0a: dc:38:57:d8:88:30:3a:bd:88:2a:c8:e1:a5:c2:17: 8c:84:74:61:0b:1d:2c:37:53:f2:63:27:95:21:9d: 20:41:be:f0:61:b4:19:6e:3f:d6:d8:e4:26:9f:58: 64:33:fc:17:5d:7c:86:89:6f:ce:a0:9a:56:98:49: 3b:48:fc:4c:9a:b7:ba:c2:e7:61:c7:f0:f2:6a:f7: 34:5a:84:48:56:ba:d3:c3:32:57:16:f2:be:19:28: 5c:70:08:7d:82:94:02:c4:50:54:36:1d:ac:46:29: 2f:ea:ca:12:90:cb:9d:3f:47:21:78:ea:e4:dd:af: 43:13:da:dd:bf:39:bf:c0:7e:25:05:6f:68:19:0d: 2a:f7:25:4a:e6:5f:c3:9c:3c:67:c9:7c:09:71:8b: 99:6c:1e:14:5b:2c:87:d7:77:b8:20:c0:c0:df:4a: 9d:5d:3d:6e:0c:ab:70:76:13:d9:a7:cf:6d:e5:2a: 95:06:d2:f4:ce:a5:bf:29:4c:c8:bd:9f:fe:99:17: 01:21:c1:fe:39:f5:16:51:29:c9:41:cb:5f:2e:b6: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:2A:6C:F7:CF:0F:62:95:E6:A2:71:05:13:68:43:25:51:4C:03 X509v3 Authority Key Identifier: keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6d:23:1f:b9:95:e5:ff:dd:20:67:86:e6:6d:9a:cc:e1:04: 51:d4:16:fb:41:42:b5:a3:a3:12:21:b2:09:eb:50:cf:81:b3: 52:fc:f6:bd:50:c2:5a:80:e6:40:f4:1c:b3:96:da:3c:41:cf: d7:9a:78:98:a2:6d:db:a1:3a:f7:ed:16:89:f2:ad:6c:2e:9c: ee:b6:0d:b0:70:38:b9:45:ce:e8:57:1f:2a:d3:a0:77:f2:79: 1b:76:3a:b4:f4:9a:79:90:e3:f4:e8:71:e0:e6:79:af:33:c6: bd:a2:a0:d2:a1:0b:f0:b1:56:36:ed:92:80:24:9f:f2:df:00: 9d:41:f7:b3:dc:8f:2b:4a:f3:bd:04:7c:85:c6:4d:7e:43:91: b5:84:d0:3b:53:5c:1d:c5:0e:11:1e:74:72:7b:b7:9f:6c:93: 30:65:c3:f2:6f:a9:63:b4:9d:7d:6f:65:b1:42:7c:e2:3d:e0: a3:ec:ea:51:19:42:43:e8:dd:7a:84:c8:0a:36:58:a1:3b:11: 23:46:10:46:1d:17:11:14:a7:69:ab:0e:a2:01:32:16:38:72: e2:92:79:6a:2a:f6:2e:09:35:53:9c:b0:62:d4:a9:35:b5:61: e0:21:75:42:d4:fe:dc:9f:47:56:22:11:e7:1a:57:0f:02:e1: c2:df:1a:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUej6EUv6jxkRJNotHbOIL3P+ki2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC NERBQjhGNTAeFw0yNjAzMjYxNzMzMjhaFw0yNjAzMjcyMTA1MjhaMDMxMTAvBgNV BAMTKDBGQjAyQTZDRjdDRjBGNjI5NUU2QTI3MTA1MTM2ODQzMjU1MTRDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQm5KSkPhN0nw2TVSSdPG78Wix jVkBUtRt9YKyeNKSfBCZrG4FlIYBPgw/Ctw4V9iIMDq9iCrI4aXCF4yEdGELHSw3 U/JjJ5UhnSBBvvBhtBluP9bY5CafWGQz/BddfIaJb86gmlaYSTtI/Eyat7rC52HH 8PJq9zRahEhWutPDMlcW8r4ZKFxwCH2ClALEUFQ2HaxGKS/qyhKQy50/RyF46uTd r0MT2t2/Ob/AfiUFb2gZDSr3JUrmX8OcPGfJfAlxi5lsHhRbLIfXd7ggwMDfSp1d PW4Mq3B2E9mnz23lKpUG0vTOpb8pTMi9n/6ZFwEhwf459RZRKclBy18utq6BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUD7AqbPfPD2KV5qJxBRNoQyVRTAMwHwYDVR0j BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA20jH7mV5f/d IGeG5m2azOEEUdQW+0FCtaOjEiGyCetQz4GzUvz2vVDCWoDmQPQcs5baPEHP15p4 mKJt26E69+0WifKtbC6c7rYNsHA4uUXO6FcfKtOgd/J5G3Y6tPSaeZDj9Ohx4OZ5 rzPGvaKg0qEL8LFWNu2SgCSf8t8AnUH3s9yPK0rzvQR8hcZNfkORtYTQO1NcHcUO ER50cnu3n2yTMGXD8m+pY7SdfW9lsUJ84j3go+zqURlCQ+jdeoTICjZYoTsRI0YQ Rh0XERSnaasOogEyFjhy4pJ5air2Lgk1U5ywYtSpNbVh4CF1QtT+3J9HViIR5xpX DwLhwt8ayQ== -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:22 2026 by rpki-client