$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: jp2dkzPBYI09JVeZdEQ+3a9ElbQb4q74U8qxrGlO2eE= Subject key identifier: C7:14:A9:12:7C:CD:C6:EE:DC:13:EF:5A:C7:AA:8B:6E:0D:AB:73:21 Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 306FA6E72FC7CD9264E5A81D36D6B4ADC0C7FC0D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 14:38:28 +0000 Manifest this update: Thu 26 Mar 2026 14:33:28 +0000 Manifest next update: Fri 27 Mar 2026 17:24:28 +0000 Files and hashes: 1: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: G6P03inURxvWAleC/iDeEg5afkYktD3q6PNBMHEBwfI=) 2: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) 3: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6f:a6:e7:2f:c7:cd:92:64:e5:a8:1d:36:d6:b4:ad:c0:c7:fc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Mar 26 14:33:28 2026 GMT Not After : Mar 27 17:24:28 2026 GMT Subject: CN=C714A9127CCDC6EEDC13EF5AC7AA8B6E0DAB7321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:8c:67:4d:88:0d:42:63:22:30:f9:0c:3d: 19:9f:6f:d7:51:54:1e:77:5e:0d:d0:cb:00:7a:bc: d6:94:5b:c8:81:89:51:71:20:56:72:3b:0f:a6:4d: a4:d4:53:cf:96:4f:a1:57:00:92:5a:e4:d1:37:b0: e1:13:02:16:2a:2c:cf:6f:ef:3f:29:6a:34:59:d6: af:f1:d7:65:b2:23:04:3c:4a:5e:34:2c:77:25:d0: 53:d1:b7:c5:40:1a:bc:af:11:d3:b5:57:c0:ad:9b: 9a:84:59:2f:fe:8b:53:8d:9f:63:4f:70:aa:38:65: 36:d2:f5:c8:66:ee:10:b6:e9:13:3e:3d:64:4d:8b: 42:32:62:4f:01:cf:f4:3c:17:b7:7d:22:9a:18:4c: 68:30:95:44:3c:80:f4:11:00:37:7a:7f:84:42:a2: f1:94:50:7c:f7:50:b6:b4:2b:ff:4e:e0:87:16:ff: 27:2d:30:6b:ac:e6:46:dc:64:23:8a:f7:28:b3:41: 93:37:74:56:06:19:af:3c:c7:8b:2c:17:84:d2:85: cc:99:3e:20:07:60:d5:c2:3b:6a:cf:cf:5e:4e:87: f6:6f:01:5f:7d:1c:8f:8b:fb:98:36:71:8a:1b:97: aa:93:33:55:81:03:d4:06:5a:6e:0a:fe:ec:77:7f: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:14:A9:12:7C:CD:C6:EE:DC:13:EF:5A:C7:AA:8B:6E:0D:AB:73:21 X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:46:69:71:9f:0e:f4:19:df:dc:e9:78:d7:8e:2b:c4:9d:d7: ed:cf:15:45:40:61:77:bd:2a:4e:d5:e3:6a:bf:dc:d1:4c:4a: 39:aa:c4:89:1f:56:b6:8a:a3:8e:a3:2c:bf:36:de:a1:84:8c: 8a:fd:d8:eb:88:09:85:bc:e3:98:a9:ac:ff:e1:ac:f3:a1:99: 5c:6f:6a:ee:85:79:49:ee:bb:7e:e9:a8:ef:5b:ef:a3:e9:23: 46:58:ea:b0:83:95:b0:c4:4a:e1:d4:57:49:a2:48:b2:38:08: 30:22:2a:d8:75:e8:b5:26:08:1e:79:71:49:bd:48:6e:2c:13: e0:c0:c0:ca:ba:b9:cf:92:a3:a6:0a:d3:ce:ba:ad:da:3a:5d: d4:4c:75:cc:bf:91:f3:30:2a:f4:f2:9b:d5:70:5b:1f:7b:26: 60:c9:8e:ca:43:c1:a3:00:c0:11:6f:46:dd:f6:85:03:3a:cc: ce:0b:73:80:db:96:22:cf:7c:d6:08:60:3a:e2:c1:a2:05:1d: 33:f9:84:3f:0b:59:5e:16:d9:4a:51:69:5e:8e:e0:ef:e2:aa: f4:70:d0:59:27:64:09:99:26:e5:2f:8c:a5:ae:d6:95:9d:d7: 83:11:cc:8e:b9:de:ef:da:b2:95:6a:eb:79:93:a9:28:57:63: b2:23:6a:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMG+m5y/HzZJk5agdNta0rcDH/A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjAzMjYxNDMzMjhaFw0yNjAzMjcxNzI0MjhaMDMxMTAvBgNV BAMTKEM3MTRBOTEyN0NDREM2RUVEQzEzRUY1QUM3QUE4QjZFMERBQjczMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJYxnTYgNQmMiMPkMPRmfb9dR VB53Xg3QywB6vNaUW8iBiVFxIFZyOw+mTaTUU8+WT6FXAJJa5NE3sOETAhYqLM9v 7z8pajRZ1q/x12WyIwQ8Sl40LHcl0FPRt8VAGryvEdO1V8Ctm5qEWS/+i1ONn2NP cKo4ZTbS9chm7hC26RM+PWRNi0IyYk8Bz/Q8F7d9IpoYTGgwlUQ8gPQRADd6f4RC ovGUUHz3ULa0K/9O4IcW/yctMGus5kbcZCOK9yizQZM3dFYGGa88x4ssF4TShcyZ PiAHYNXCO2rPz15Oh/ZvAV99HI+L+5g2cYobl6qTM1WBA9QGWm4K/ux3f/odAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxxSpEnzNxu7cE+9ax6qLbg2rcyEwHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0ZpcZ8O9Bnf 3Ol4144rxJ3X7c8VRUBhd70qTtXjar/c0UxKOarEiR9WtoqjjqMsvzbeoYSMiv3Y 64gJhbzjmKms/+Gs86GZXG9q7oV5Se67fumo71vvo+kjRljqsIOVsMRK4dRXSaJI sjgIMCIq2HXotSYIHnlxSb1IbiwT4MDAyrq5z5KjpgrTzrqt2jpd1Ex1zL+R8zAq 9PKb1XBbH3smYMmOykPBowDAEW9G3faFAzrMzgtzgNuWIs981ghgOuLBogUdM/mE PwtZXhbZSlFpXo7g7+Kq9HDQWSdkCZkm5S+Mpa7WlZ3XgxHMjrne79qylWrreZOp KFdjsiNqHg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:47 2026 by rpki-client