$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: +6/ljYnqfev5CGwOFi00vkbLNHXgmVAqPHzKZaUlP5w= Subject key identifier: 39:D0:43:16:E5:26:88:64:02:00:8C:C7:AE:16:42:14:B6:25:55:FE Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 6DBE84D308DBBE5B1DBB54C3B4B17891E6A91CBC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 15:18:28 +0000 Manifest this update: Thu 26 Mar 2026 15:13:28 +0000 Manifest next update: Fri 27 Mar 2026 17:35:28 +0000 Files and hashes: 1: 3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa (hash: Bj7faP7dbLHP8DKHtGy7odbPHjPoUjxSJmi90LoGi/o=) 2: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: kd25MQoH0+iCWgCwoQ1nRf8b1IPWhnbT2kflrMeJQjk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:be:84:d3:08:db:be:5b:1d:bb:54:c3:b4:b1:78:91:e6:a9:1c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Mar 26 15:13:28 2026 GMT Not After : Mar 27 17:35:28 2026 GMT Subject: CN=39D04316E526886402008CC7AE164214B62555FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:e3:e8:40:bc:5b:1c:cc:33:e2:8d:2c:32: 73:a7:8b:c2:a5:b7:a0:33:c0:f4:9c:64:81:fc:26: d2:7a:67:d4:91:06:e9:04:99:1f:af:51:c7:39:a5: dd:7b:2e:cf:84:c4:8a:de:af:c0:aa:08:62:02:b9: 0c:a7:d2:cc:77:89:b4:04:1e:80:db:79:0c:90:1f: 32:4d:5c:ab:96:e1:e2:f1:b8:99:18:84:07:bb:c9: 9d:7d:b5:6d:9b:50:5d:b9:7a:9e:37:ef:f4:24:76: 5f:ee:77:62:68:86:32:af:1e:c6:39:98:5f:b9:ea: 25:b6:0c:5e:a2:1e:b5:6d:a7:be:ca:c9:8f:60:04: 6f:4e:fe:9f:f2:92:2d:96:57:16:f7:92:d9:cd:56: 15:85:93:61:f6:b4:85:c6:cd:bf:79:fc:e9:12:03: 53:4e:19:cb:07:ad:a0:02:02:29:a4:52:0d:07:70: a9:6f:78:d8:78:4c:88:d1:87:91:70:56:b5:13:7e: 09:71:9b:80:5c:b5:64:c9:b2:c7:f9:09:2f:dd:92: 12:40:97:0e:cc:88:ac:0b:d2:6c:b9:ff:31:31:0e: 8b:bb:26:b9:70:cb:6c:28:60:24:39:a3:79:4d:de: 94:11:33:25:f0:be:54:9e:52:6e:da:f5:b3:a8:7f: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D0:43:16:E5:26:88:64:02:00:8C:C7:AE:16:42:14:B6:25:55:FE X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:60:ab:0e:cb:b7:a4:3a:ba:67:bd:fa:e0:19:5e:9d:4a:5d: 20:bf:c9:8e:e2:ad:e5:f5:f2:50:36:89:e4:97:b0:62:21:07: c7:7f:1e:80:0b:fc:af:d3:fd:8f:f4:74:3c:4a:72:ea:8c:c3: 62:df:42:03:10:fd:fd:d2:a0:c7:80:0f:09:9b:83:8b:a7:e4: cb:5c:18:bd:64:79:b2:88:4f:84:79:a0:0a:06:ec:d9:25:1a: 89:88:b2:60:3c:1b:99:e2:e3:a3:7a:b8:39:7a:91:4f:8f:b9: e7:c7:c2:44:7c:0a:e7:c3:b9:a6:3a:b2:64:71:43:ba:54:0e: a3:94:f6:7b:5c:71:59:d9:2a:a0:ff:53:48:06:7a:02:9e:68: 46:51:8d:8f:bb:91:b0:a5:94:3b:b4:e9:56:b8:5a:5a:6e:33: 57:f7:5a:ec:96:6f:f0:09:bf:85:83:ce:de:e7:8f:c3:21:9a: 77:f7:b2:b0:82:32:13:9c:64:12:91:78:be:dd:7f:e7:19:2b: 6b:4e:19:62:1b:1b:0a:16:1f:8a:78:fb:ae:6f:da:64:f1:ae: e0:24:7e:ba:c1:72:bc:03:ac:8d:f8:1c:fe:b8:5f:71:b1:f9: aa:65:ac:bb:e6:d7:1a:1a:01:9f:61:46:fa:14:45:be:87:67: b6:c4:e1:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbb6E0wjbvlsdu1TDtLF4keapHLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjAzMjYxNTEzMjhaFw0yNjAzMjcxNzM1MjhaMDMxMTAvBgNV BAMTKDM5RDA0MzE2RTUyNjg4NjQwMjAwOENDN0FFMTY0MjE0QjYyNTU1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HOPoQLxbHMwz4o0sMnOni8Kl t6AzwPScZIH8JtJ6Z9SRBukEmR+vUcc5pd17Ls+ExIrer8CqCGICuQyn0sx3ibQE HoDbeQyQHzJNXKuW4eLxuJkYhAe7yZ19tW2bUF25ep437/Qkdl/ud2JohjKvHsY5 mF+56iW2DF6iHrVtp77KyY9gBG9O/p/yki2WVxb3ktnNVhWFk2H2tIXGzb95/OkS A1NOGcsHraACAimkUg0HcKlveNh4TIjRh5FwVrUTfglxm4BctWTJssf5CS/dkhJA lw7MiKwL0my5/zExDou7Jrlwy2woYCQ5o3lN3pQRMyXwvlSeUm7a9bOof4P3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOdBDFuUmiGQCAIzHrhZCFLYlVf4wHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGCrDsu3pDq6 Z7364BlenUpdIL/JjuKt5fXyUDaJ5JewYiEHx38egAv8r9P9j/R0PEpy6ozDYt9C AxD9/dKgx4APCZuDi6fky1wYvWR5sohPhHmgCgbs2SUaiYiyYDwbmeLjo3q4OXqR T4+558fCRHwK58O5pjqyZHFDulQOo5T2e1xxWdkqoP9TSAZ6Ap5oRlGNj7uRsKWU O7TpVrhaWm4zV/da7JZv8Am/hYPO3uePwyGad/eysIIyE5xkEpF4vt1/5xkra04Z YhsbChYfinj7rm/aZPGu4CR+usFyvAOsjfgc/rhfcbH5qmWsu+bXGhoBn2FG+hRF vodntsThvg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:53 2026 by rpki-client