$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: W59g8Cxo/M1pSBCmVB9LUz5Nu97lfYGvYzc4MQmATPM= Subject key identifier: 6F:56:7E:3B:92:41:40:15:1F:A5:18:1B:F2:E3:5D:E5:0C:48:6E:04 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 442928FFDA2D9A0913D21B4051769864ED66C6D7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 15:53:28 +0000 Manifest this update: Thu 26 Mar 2026 15:48:28 +0000 Manifest next update: Fri 27 Mar 2026 16:21:28 +0000 Files and hashes: 1: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: LuTgAlJGDn+IY7VFHSFRL/LFfXJzE/rwlyF6eNylNCo=) 2: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:29:28:ff:da:2d:9a:09:13:d2:1b:40:51:76:98:64:ed:66:c6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Mar 26 15:48:28 2026 GMT Not After : Mar 27 16:21:28 2026 GMT Subject: CN=6F567E3B924140151FA5181BF2E35DE50C486E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:1d:1a:66:08:c7:9f:cc:45:69:26:62:80: 3b:11:5c:f7:ef:69:7f:ee:89:95:ff:a3:37:c8:e0: 5f:78:90:60:21:64:fc:4c:08:82:f9:5b:04:12:fb: 6f:56:3b:3d:9e:66:f1:a7:e2:8b:90:08:f8:96:02: 27:bf:7e:5b:44:36:b6:7d:50:f6:46:e0:87:22:d6: 5f:37:6b:da:1a:af:b8:0d:fe:99:31:f2:d9:66:49: 3e:43:07:97:45:a2:3b:75:14:5b:92:a5:7a:1f:75: b2:70:73:da:62:17:2e:20:25:96:3b:09:47:d8:d2: 60:82:bd:eb:ec:e8:b2:b1:6f:14:4d:e5:12:e7:54: d2:d9:9a:d7:dc:4e:75:67:11:67:c8:a1:b4:6e:2a: c9:c3:71:b4:a2:a7:34:d7:9e:cc:6b:5e:26:61:4d: df:ce:77:1f:96:33:3c:bc:9f:7d:27:02:37:d2:68: e2:a1:5b:d2:24:21:4e:41:f7:78:89:36:95:e6:95: 87:dd:01:13:72:ab:3f:ec:fc:70:eb:08:cc:27:40: 3e:e8:b1:15:0a:ee:8a:6b:f7:0e:47:1a:23:c3:de: d6:a0:16:d6:eb:5a:60:22:2b:1f:0d:de:d3:85:ef: f3:80:c3:61:60:08:cc:fb:59:ae:30:49:a7:bb:89: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:56:7E:3B:92:41:40:15:1F:A5:18:1B:F2:E3:5D:E5:0C:48:6E:04 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:dc:d7:0a:88:f4:7c:70:d9:70:7c:46:fa:68:50:a6:ab:00: 3e:e1:73:66:a5:6b:51:ad:4f:06:9a:86:59:5d:60:a7:bb:6e: 10:89:ce:2c:fe:f8:f0:62:62:2a:a0:c1:43:c2:5b:49:18:59: 82:62:8b:60:80:17:30:c6:8a:81:65:a0:06:e2:3d:6c:07:8c: 20:05:ed:f6:3d:5c:fa:98:eb:85:b0:47:59:26:22:5a:05:5b: fe:25:ee:45:c8:97:14:60:44:b9:5c:c4:37:27:b4:cf:c0:8c: 76:b0:f6:19:dd:09:c7:25:5f:77:96:80:42:29:26:31:c4:50: 11:6b:ca:96:7f:52:70:0f:56:ae:54:65:0b:fa:7d:25:d8:a9: 8f:3f:35:dd:45:b3:83:61:8b:18:83:f7:b6:5d:39:7a:81:41: 0b:b7:67:fe:be:2c:65:a6:d1:21:de:c3:dd:66:cc:df:99:b3: 96:c6:2b:01:eb:f6:03:3d:77:c9:d3:91:d9:94:4f:a2:2d:9d: 8e:ae:ae:1d:9a:c5:47:8b:1d:9c:6c:41:0b:3b:df:ae:9a:f3: 48:6e:b8:49:0a:bb:18:0b:ee:01:55:d7:23:ff:48:5c:3b:3c: 46:29:98:28:14:59:c9:ca:0b:48:bd:de:0f:18:1a:c5:14:83: ae:0a:85:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURCko/9otmgkT0htAUXaYZO1mxtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjAzMjYxNTQ4MjhaFw0yNjAzMjcxNjIxMjhaMDMxMTAvBgNV BAMTKDZGNTY3RTNCOTI0MTQwMTUxRkE1MTgxQkYyRTM1REU1MEM0ODZFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUB0aZgjHn8xFaSZigDsRXPfv aX/uiZX/ozfI4F94kGAhZPxMCIL5WwQS+29WOz2eZvGn4ouQCPiWAie/fltENrZ9 UPZG4Ici1l83a9oar7gN/pkx8tlmST5DB5dFojt1FFuSpXofdbJwc9piFy4gJZY7 CUfY0mCCvevs6LKxbxRN5RLnVNLZmtfcTnVnEWfIobRuKsnDcbSipzTXnsxrXiZh Td/Odx+WMzy8n30nAjfSaOKhW9IkIU5B93iJNpXmlYfdARNyqz/s/HDrCMwnQD7o sRUK7opr9w5HGiPD3tagFtbrWmAiKx8N3tOF7/OAw2FgCMz7Wa4wSae7iS0LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb1Z+O5JBQBUfpRgb8uNd5QxIbgQwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2tzXCoj0fHDZ cHxG+mhQpqsAPuFzZqVrUa1PBpqGWV1gp7tuEInOLP748GJiKqDBQ8JbSRhZgmKL YIAXMMaKgWWgBuI9bAeMIAXt9j1c+pjrhbBHWSYiWgVb/iXuRciXFGBEuVzENye0 z8CMdrD2Gd0JxyVfd5aAQikmMcRQEWvKln9ScA9WrlRlC/p9Jdipjz813UWzg2GL GIP3tl05eoFBC7dn/r4sZabRId7D3WbM35mzlsYrAev2Az13ydOR2ZRPoi2djq6u HZrFR4sdnGxBCzvfrprzSG64SQq7GAvuAVXXI/9IXDs8RimYKBRZycoLSL3eDxga xRSDrgqFLw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:59:37 2026 by rpki-client