$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: I9ptiewet9dD6MbEXpRe1+QZqmOFj56hdzY/1eQgwZE= Subject key identifier: 3C:D0:1B:10:D3:04:38:4C:67:C7:C0:04:AC:48:93:11:F8:67:CB:15 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 1C1ABB34CB8ADAA2E11E11B3DC425215FEED72A6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 23:13:28 +0000 Manifest this update: Thu 26 Mar 2026 23:08:28 +0000 Manifest next update: Sat 28 Mar 2026 00:56:28 +0000 Files and hashes: 1: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 2: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: 3N8T4dz/KV4KiwmHsXXLEatZHBeZfn0oWLf1Hrda4YI=) 3: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1a:bb:34:cb:8a:da:a2:e1:1e:11:b3:dc:42:52:15:fe:ed:72:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Mar 26 23:08:28 2026 GMT Not After : Mar 28 00:56:28 2026 GMT Subject: CN=3CD01B10D304384C67C7C004AC489311F867CB15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:04:b3:df:c7:8c:1d:9d:fd:dd:87:ca:07: 3b:5e:0c:d6:9f:d9:b8:81:b6:1d:1a:6b:fc:84:d5: 69:1a:e5:09:62:3a:a7:1a:9f:e2:39:12:21:52:51: 19:59:36:5e:0a:d2:49:4a:e9:e0:5d:ac:8c:b2:a1: 9f:c6:04:03:38:5f:9d:fa:95:c2:17:4c:50:bb:59: 45:72:92:5c:64:f4:d1:a9:7e:d7:b0:83:e4:f0:a8: 76:88:ed:dc:1e:1f:ea:94:3d:4c:7e:49:b1:02:5b: a6:3a:75:33:43:5a:44:e8:f2:0f:f4:32:63:5f:01: 6a:70:85:c0:83:38:3b:c4:3a:b0:50:f7:2e:ce:58: 2c:88:dc:c7:01:85:1d:ef:d5:8c:a6:ee:d8:c6:b0: bd:b4:64:b9:66:f9:38:6d:1d:9e:48:2d:2b:d9:b0: 75:02:b2:d0:74:c5:72:e2:ec:f3:48:40:db:f2:ec: 92:df:66:e6:78:75:0f:ee:af:80:37:4f:d3:6d:43: c0:72:25:cc:52:8d:04:1d:05:ba:79:1c:6f:4e:93: 75:02:0b:fd:ce:e2:6d:10:0f:ad:ad:4c:ec:c6:76: 01:57:be:21:6e:a9:0d:ce:d3:f7:81:65:e8:b1:b0: 4d:d1:00:de:e4:95:97:8d:cf:40:ed:93:7b:1e:f1: 72:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D0:1B:10:D3:04:38:4C:67:C7:C0:04:AC:48:93:11:F8:67:CB:15 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:53:d5:0f:9c:58:60:92:81:fa:6b:3f:ab:e2:e9:27:80:f1: 94:7a:b7:6a:53:2d:9b:ad:35:60:12:8c:eb:18:c4:55:11:7f: 00:f5:f2:cd:be:3b:47:75:33:cd:24:6a:e0:4d:fc:9b:35:48: 2f:0c:d8:91:56:61:64:09:18:f1:1c:70:ed:b5:a0:03:8a:e5: aa:4d:ec:bb:60:e5:61:ec:c8:d7:0a:db:dc:79:74:86:7a:39: d9:51:06:2a:a1:54:01:33:33:42:b4:63:15:13:f7:a6:27:89: b6:75:f8:62:58:95:fd:74:94:fc:2b:ed:9d:ba:79:ab:93:3f: ca:8f:9f:b3:9a:42:3b:7e:91:ab:64:37:cd:d4:c1:25:60:00: 95:76:5e:53:8c:42:66:58:b6:41:61:57:65:a3:39:2e:15:b0: dc:ba:05:55:22:d1:a9:d4:e3:cf:80:32:f3:35:27:85:9f:2b: 0d:34:66:eb:b4:13:30:eb:d1:fd:38:fe:9b:03:89:dd:5e:49: d8:70:48:57:b6:28:8e:32:3b:60:3b:37:de:90:25:4f:61:7e: 26:ab:1e:9d:2b:f0:ae:3c:b0:74:66:52:38:7d:d6:74:26:e3: a4:6f:5f:9a:3e:45:a5:7b:a0:58:7b:f2:03:f6:ae:f1:d3:08: 6f:11:0c:b6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHBq7NMuK2qLhHhGz3EJSFf7tcqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjAzMjYyMzA4MjhaFw0yNjAzMjgwMDU2MjhaMDMxMTAvBgNV BAMTKDNDRDAxQjEwRDMwNDM4NEM2N0M3QzAwNEFDNDg5MzExRjg2N0NCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQXQSz38eMHZ393YfKBzteDNaf 2biBth0aa/yE1Wka5QliOqcan+I5EiFSURlZNl4K0klK6eBdrIyyoZ/GBAM4X536 lcIXTFC7WUVyklxk9NGpftewg+TwqHaI7dweH+qUPUx+SbECW6Y6dTNDWkTo8g/0 MmNfAWpwhcCDODvEOrBQ9y7OWCyI3McBhR3v1Yym7tjGsL20ZLlm+ThtHZ5ILSvZ sHUCstB0xXLi7PNIQNvy7JLfZuZ4dQ/ur4A3T9NtQ8ByJcxSjQQdBbp5HG9Ok3UC C/3O4m0QD62tTOzGdgFXviFuqQ3O0/eBZeixsE3RAN7klZeNz0Dtk3se8XKfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPNAbENMEOExnx8AErEiTEfhnyxUwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVPVD5xYYJKB +ms/q+LpJ4DxlHq3alMtm601YBKM6xjEVRF/APXyzb47R3UzzSRq4E38mzVILwzY kVZhZAkY8Rxw7bWgA4rlqk3su2DlYezI1wrb3Hl0hno52VEGKqFUATMzQrRjFRP3 pieJtnX4YliV/XSU/Cvtnbp5q5M/yo+fs5pCO36Rq2Q3zdTBJWAAlXZeU4xCZli2 QWFXZaM5LhWw3LoFVSLRqdTjz4Ay8zUnhZ8rDTRm67QTMOvR/Tj+mwOJ3V5J2HBI V7YojjI7YDs33pAlT2F+JqsenSvwrjywdGZSOH3WdCbjpG9fmj5FpXugWHvyA/au 8dMIbxEMtg== -----END CERTIFICATE-----Generated at Fri Mar 27 06:22:22 2026 by rpki-client