$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: AHM2suijoyzPtn5EAg5BuFchaY2vMh1zyjejV9vHOIs= Subject key identifier: FC:ED:AD:2D:1B:B5:5D:76:F7:31:12:A6:2A:A3:1C:2C:08:F6:C6:27 Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 110B90F9985A0DFD67C24AE5F8DC7C96D87A66D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 20:58:28 +0000 Manifest this update: Thu 26 Mar 2026 20:53:28 +0000 Manifest next update: Sat 28 Mar 2026 00:27:28 +0000 Files and hashes: 1: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: Wlc4fJ32kjTYgSp3BI8SsGEhLVFfm4pT23iOIORzr3A=) 2: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0b:90:f9:98:5a:0d:fd:67:c2:4a:e5:f8:dc:7c:96:d8:7a:66:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Mar 26 20:53:28 2026 GMT Not After : Mar 28 00:27:28 2026 GMT Subject: CN=FCEDAD2D1BB55D76F73112A62AA31C2C08F6C627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:e9:b6:bb:d5:fc:1f:bb:d8:ef:be:25:c8: d0:cf:1e:38:50:20:d2:0a:50:2f:ad:b4:11:86:be: 19:0d:44:dc:5c:31:df:76:32:24:20:b5:75:6b:75: 89:cc:7c:eb:01:36:03:b3:44:19:e9:4c:7c:05:90: 79:f3:d5:29:4c:3e:98:95:61:47:f1:0f:06:76:b0: 9c:c3:4e:2a:ab:a8:08:50:f8:ed:d0:f0:05:eb:d0: 0c:09:b5:ed:2c:85:20:67:9f:93:66:96:d3:a1:de: fa:00:1b:3e:3e:66:bd:89:5a:53:4e:76:e9:0a:58: 02:21:8d:50:a8:15:65:0b:af:d8:ef:f7:b7:31:7b: d2:a4:1c:f3:7d:cc:85:75:09:29:ba:b3:b9:fd:e6: 6b:eb:f8:15:b3:3f:f6:99:30:2c:44:42:3f:dc:83: 6a:ef:ae:cb:6f:bb:13:cf:80:43:32:e8:88:cf:62: fc:cb:81:b5:9a:ff:cf:ef:87:82:bc:44:c1:46:7f: 1e:79:55:71:fd:92:b6:49:6e:c1:fb:b1:2e:6d:a3: 0a:16:48:51:75:6e:04:0f:1d:1e:5f:fa:19:1b:61: 9c:06:0c:8b:43:57:16:4a:0e:41:c2:65:07:85:90: 55:9a:cd:0b:4c:2e:4d:7e:be:8a:11:30:f2:0a:65: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:AD:2D:1B:B5:5D:76:F7:31:12:A6:2A:A3:1C:2C:08:F6:C6:27 X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3e:dd:23:69:b5:b3:8b:f7:43:34:d4:bf:cb:40:ec:ea:51: 08:56:a3:d2:0a:08:d2:c0:6a:6e:cb:0b:18:ba:36:dd:2c:8f: 97:84:22:3a:07:44:31:1c:ee:39:92:dd:0c:ce:e0:a5:1d:e3: e7:ca:d9:45:6a:61:59:6d:59:97:3c:40:b4:5a:21:e4:c9:c3: 5d:a0:e5:29:c6:62:c4:cd:82:4a:ad:9b:d6:c6:de:94:2a:a9: 12:cd:0d:b3:fa:f0:a6:7f:d6:fb:e1:d1:d3:47:f8:fc:0f:c3: 84:a9:30:68:e2:c9:5c:07:48:20:ff:d3:96:ee:0d:32:21:4e: c1:fe:ec:27:19:02:f8:21:b8:4f:bd:26:17:f3:d8:6f:ad:9c: a6:63:94:38:3a:24:6b:d1:1a:1d:f1:d7:c8:6e:89:68:ef:bf: 7f:ab:2a:b5:bd:21:3f:a6:5d:2b:00:9d:d2:7f:e6:35:83:b5: ca:38:27:6c:0d:fe:82:7b:3d:39:a4:2e:eb:f6:e0:9c:3a:9b: 93:a9:7a:62:cb:30:e2:2f:09:ce:34:de:1a:fa:2d:89:b7:81: ef:2f:c7:96:d4:ae:44:e1:2d:79:39:51:14:07:15:68:62:22: f3:44:79:e3:3f:80:06:c3:53:89:77:1a:a4:5d:35:2f:2c:6a: bb:82:8e:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEQuQ+ZhaDf1nwkrl+Nx8lth6ZtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjAzMjYyMDUzMjhaFw0yNjAzMjgwMDI3MjhaMDMxMTAvBgNV BAMTKEZDRURBRDJEMUJCNTVENzZGNzMxMTJBNjJBQTMxQzJDMDhGNkM2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowum2u9X8H7vY774lyNDPHjhQ INIKUC+ttBGGvhkNRNxcMd92MiQgtXVrdYnMfOsBNgOzRBnpTHwFkHnz1SlMPpiV YUfxDwZ2sJzDTiqrqAhQ+O3Q8AXr0AwJte0shSBnn5NmltOh3voAGz4+Zr2JWlNO dukKWAIhjVCoFWULr9jv97cxe9KkHPN9zIV1CSm6s7n95mvr+BWzP/aZMCxEQj/c g2rvrstvuxPPgEMy6IjPYvzLgbWa/8/vh4K8RMFGfx55VXH9krZJbsH7sS5towoW SFF1bgQPHR5f+hkbYZwGDItDVxZKDkHCZQeFkFWazQtMLk1+vooRMPIKZXWpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/O2tLRu1XXb3MRKmKqMcLAj2xicwHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET7dI2m1s4v3 QzTUv8tA7OpRCFaj0goI0sBqbssLGLo23SyPl4QiOgdEMRzuOZLdDM7gpR3j58rZ RWphWW1ZlzxAtFoh5MnDXaDlKcZixM2CSq2b1sbelCqpEs0Ns/rwpn/W++HR00f4 /A/DhKkwaOLJXAdIIP/Tlu4NMiFOwf7sJxkC+CG4T70mF/PYb62cpmOUODoka9Ea HfHXyG6JaO+/f6sqtb0hP6ZdKwCd0n/mNYO1yjgnbA3+gns9OaQu6/bgnDqbk6l6 Yssw4i8JzjTeGvotibeB7y/HltSuROEteTlRFAcVaGIi80R54z+ABsNTiXcapF01 Lyxqu4KOWw== -----END CERTIFICATE-----Generated at Fri Mar 27 04:09:36 2026 by rpki-client