$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json) Hash identifier: vNAVylwzdBFx18iwZeV6NNfTodSzSMQIoU8etJddTAY= Subject key identifier: 7D:D4:D6:41:B0:23:C2:8C:C1:AD:20:9C:AB:FA:44:64:7D:1E:51:6A Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB Certificate serial: 5B7FB3E7AAAE27CD3E38CC63D4198EAA1625F7CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft Manifest number: 6B Signing time: Thu 26 Mar 2026 13:08:28 +0000 Manifest this update: Thu 26 Mar 2026 13:03:28 +0000 Manifest next update: Fri 27 Mar 2026 13:45:28 +0000 Files and hashes: 1: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=) 2: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: tTSa953lUZtDk0UU88MTR3yv4oLoM5oO7Gb74ItSyoM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7f:b3:e7:aa:ae:27:cd:3e:38:cc:63:d4:19:8e:aa:16:25:f7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB Validity Not Before: Mar 26 13:03:28 2026 GMT Not After : Mar 27 13:45:28 2026 GMT Subject: CN=7DD4D641B023C28CC1AD209CABFA44647D1E516A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:01:44:84:28:6f:85:2e:c0:f9:cc:6b:e1:91: 3f:aa:95:74:92:8c:95:f3:87:f9:2a:ca:8e:44:64: e6:4b:97:05:f4:e2:e9:93:57:c3:aa:93:24:fd:82: 50:a7:2c:b3:a4:04:c6:c4:ae:1c:90:19:db:0e:26: 16:b5:70:6d:22:8e:ef:49:14:c9:b3:e0:95:98:62: d3:95:78:01:3e:f3:65:eb:7d:50:2e:21:5a:a3:7e: 66:68:20:62:c9:ab:aa:b4:1f:01:58:67:43:6c:00: 1f:ad:e9:53:d9:a8:b9:6c:1a:7d:f4:e3:84:4a:fa: 2c:b4:bd:85:98:7e:0d:61:70:3b:30:8c:37:7e:f6: 7e:52:4b:99:ab:cd:c2:a0:02:83:97:b3:cf:34:a1: 1d:8c:19:da:fa:80:f1:80:ac:bb:ed:e6:56:05:e4: d1:55:31:98:2d:fa:77:8e:b8:5f:ed:33:d5:f4:52: ea:94:3c:d2:18:95:b1:c5:a0:92:4d:07:b7:f9:da: 61:6c:a5:f4:10:a9:83:82:4b:ee:e3:52:38:9c:ff: 83:72:01:51:94:5d:7f:96:b1:37:f9:cc:29:15:57: cf:db:76:9e:c0:54:79:e0:cf:b6:a0:52:97:7e:8d: 9c:9a:ba:c1:29:c7:e8:fb:8c:79:70:07:09:7d:68: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D4:D6:41:B0:23:C2:8C:C1:AD:20:9C:AB:FA:44:64:7D:1E:51:6A X509v3 Authority Key Identifier: keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9a:05:d7:f9:6e:9d:3e:ea:0e:b6:61:bc:29:c9:c1:97:42: f8:8d:7b:82:2f:ec:e2:de:ac:9a:2b:50:0f:9c:b7:de:5f:9b: 19:f0:5b:95:9d:3e:b5:91:ce:9f:a1:99:ff:26:01:33:42:f7: ed:ab:49:27:8a:fe:a0:71:e4:70:d8:0f:88:07:48:97:83:61: 1c:ba:79:22:fc:8f:4a:40:55:16:d2:fa:f9:03:63:1a:4a:ce: f4:60:c9:2f:35:7c:5c:1e:d6:3f:2b:14:17:dd:7b:ff:5f:b8: 2b:19:6e:4e:67:5e:b1:d2:1e:e2:75:fc:40:f1:4f:ef:07:a0: 5c:2c:a3:34:92:81:0c:ef:a9:eb:f8:67:29:19:a0:42:b0:88: 27:c5:a6:7e:73:56:a9:d1:a2:e3:84:43:04:ea:af:c8:47:05: cc:49:88:6a:c0:df:fc:6a:57:34:92:12:8c:9c:69:4d:9c:53: 69:3c:84:d9:ec:64:0c:c6:c1:80:29:f1:f5:2f:77:ee:ce:c9: 66:d5:58:63:23:15:66:05:8f:a6:b1:ca:2d:25:3d:93:84:b5: c5:30:41:70:ef:ce:27:5d:c7:f7:3c:e9:e2:79:d6:b8:92:62: 2d:76:94:68:ad:a5:3f:b1:49:38:9f:5e:f1:e1:a7:19:6a:af: 4b:f8:48:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW3+z56quJ80+OMxj1BmOqhYl98swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2 MzU0NjFBQjAeFw0yNjAzMjYxMzAzMjhaFw0yNjAzMjcxMzQ1MjhaMDMxMTAvBgNV BAMTKDdERDRENjQxQjAyM0MyOENDMUFEMjA5Q0FCRkE0NDY0N0QxRTUxNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2AUSEKG+FLsD5zGvhkT+qlXSS jJXzh/kqyo5EZOZLlwX04umTV8OqkyT9glCnLLOkBMbErhyQGdsOJha1cG0iju9J FMmz4JWYYtOVeAE+82XrfVAuIVqjfmZoIGLJq6q0HwFYZ0NsAB+t6VPZqLlsGn30 44RK+iy0vYWYfg1hcDswjDd+9n5SS5mrzcKgAoOXs880oR2MGdr6gPGArLvt5lYF 5NFVMZgt+neOuF/tM9X0UuqUPNIYlbHFoJJNB7f52mFspfQQqYOCS+7jUjic/4Ny AVGUXX+WsTf5zCkVV8/bdp7AVHngz7agUpd+jZyausEpx+j7jHlwBwl9aGhpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfdTWQbAjwozBrSCcq/pEZH0eUWowHwYDVR0j BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3 NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZoF1/lunT7q DrZhvCnJwZdC+I17gi/s4t6smitQD5y33l+bGfBblZ0+tZHOn6GZ/yYBM0L37atJ J4r+oHHkcNgPiAdIl4NhHLp5IvyPSkBVFtL6+QNjGkrO9GDJLzV8XB7WPysUF917 /1+4KxluTmdesdIe4nX8QPFP7wegXCyjNJKBDO+p6/hnKRmgQrCIJ8WmfnNWqdGi 44RDBOqvyEcFzEmIasDf/GpXNJISjJxpTZxTaTyE2exkDMbBgCnx9S937s7JZtVY YyMVZgWPprHKLSU9k4S1xTBBcO/OJ13H9zzp4nnWuJJiLXaUaK2lP7FJOJ9e8eGn GWqvS/hIsw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:56:40 2026 by rpki-client