$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: /q9JtCciEx39fxvp5H6aSOuuV74ZgqtUK1Xe1WjF7Ls= Subject key identifier: 0D:4A:30:9D:D2:31:B5:E7:9C:EE:F2:F3:1C:06:55:62:3A:D0:D7:BE Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 12B60113F018B013A9875BBAB384B2A75E7C373B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 21:18:28 +0000 Manifest this update: Thu 26 Mar 2026 21:13:28 +0000 Manifest next update: Sat 28 Mar 2026 00:45:28 +0000 Files and hashes: 1: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: 1Dnq3i5II9lMXgWDTvOKEzHLcw4w+rDV9WH7bxMqQvY=) 2: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) 3: 3130332e32302e34362e302f32342d3234203d3e203137343038.roa (hash: Cqxt0WZEcv/CrX8zUgyTIyMtPh2X566qKRuS9+MgsQI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b6:01:13:f0:18:b0:13:a9:87:5b:ba:b3:84:b2:a7:5e:7c:37:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Mar 26 21:13:28 2026 GMT Not After : Mar 28 00:45:28 2026 GMT Subject: CN=0D4A309DD231B5E79CEEF2F31C0655623AD0D7BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:7f:e2:e9:42:4f:f2:65:95:db:0c:96:a0: 4c:f2:f0:7e:79:31:e9:06:31:e4:5c:5d:77:c5:12: 01:01:ab:5f:b8:8e:ed:1e:0d:d6:5d:93:a4:69:13: af:86:d7:36:3f:f7:c9:8c:90:ca:b0:77:d8:0f:5f: db:86:6b:a5:d8:1b:14:41:99:20:ad:ff:d2:4b:58: 2a:14:cd:ec:b2:9e:c8:49:b1:87:b8:16:21:63:7e: 8f:bd:96:ad:52:6a:3a:42:ca:3f:11:ff:97:b2:f2: ca:c0:76:d7:27:a1:a8:db:67:e6:7e:eb:d1:8f:43: 0e:96:93:90:c8:82:16:ad:1a:0f:fe:e2:f0:56:9b: ba:88:90:e5:38:33:af:ff:32:71:a3:e7:32:d0:54: 38:fe:8e:eb:ff:39:07:18:dd:48:9e:82:49:04:2d: 08:31:02:36:43:37:5f:f4:d4:41:00:9d:82:ca:7e: 5b:15:6c:d6:54:b3:07:d0:a1:fa:93:cc:67:e4:70: 0a:a7:af:c8:61:25:4a:12:54:8e:23:f5:bc:66:6e: 58:d1:83:8f:ff:11:5c:3a:a2:67:7e:24:d1:9e:a3: 09:0d:a4:57:97:74:45:4b:e1:ac:84:58:ff:da:2e: b9:61:7b:f5:ca:ba:09:e3:aa:94:21:a2:48:47:97: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4A:30:9D:D2:31:B5:E7:9C:EE:F2:F3:1C:06:55:62:3A:D0:D7:BE X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:29:40:7f:48:50:f0:f6:7f:52:8c:b5:89:c5:48:66:13:29: 30:e8:16:4a:94:b4:7f:b6:5b:14:d2:77:4a:5e:94:c0:16:34: 12:c9:4f:28:1c:0b:ef:ed:6b:76:65:8b:a7:27:e7:7b:e2:99: f1:08:20:ac:bb:4c:73:e8:4d:b7:30:98:c0:b4:a9:b1:3e:1e: df:a9:3c:5e:cd:ed:9d:e2:f6:f2:32:cb:eb:23:3a:ae:03:35: 5d:d8:c4:ba:3d:f6:5b:06:d0:a0:6b:83:4c:7b:af:a2:a6:46: 31:a8:cd:b6:d6:00:92:c8:43:6a:c4:7c:a7:30:00:98:a4:77: 21:9c:b5:02:22:6c:8b:72:a9:50:da:7f:9f:58:13:b7:33:1c: 92:cb:fd:0a:0d:2f:c0:61:47:52:22:a3:66:14:56:38:8d:da: 37:b5:af:4e:36:8a:b4:c5:e3:76:e6:61:9f:fc:14:59:75:c8: 45:dd:3e:af:cc:7a:1d:fb:92:07:41:98:8a:4d:8b:05:f5:88: b0:ec:14:f1:1c:74:9d:8d:0b:e7:95:c1:aa:45:2c:86:92:8b: 14:d5:2c:7d:e0:08:56:d3:17:60:2c:1d:74:e0:60:df:24:72: d1:e4:b7:5e:a2:88:7a:4f:ae:be:7d:e0:f8:0a:41:c5:ca:26: bb:d4:59:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUErYBE/AYsBOph1u6s4Syp158NzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjAzMjYyMTEzMjhaFw0yNjAzMjgwMDQ1MjhaMDMxMTAvBgNV BAMTKDBENEEzMDlERDIzMUI1RTc5Q0VFRjJGMzFDMDY1NTYyM0FEMEQ3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvL3/i6UJP8mWV2wyWoEzy8H55 MekGMeRcXXfFEgEBq1+4ju0eDdZdk6RpE6+G1zY/98mMkMqwd9gPX9uGa6XYGxRB mSCt/9JLWCoUzeyynshJsYe4FiFjfo+9lq1SajpCyj8R/5ey8srAdtcnoajbZ+Z+ 69GPQw6Wk5DIghatGg/+4vBWm7qIkOU4M6//MnGj5zLQVDj+juv/OQcY3UiegkkE LQgxAjZDN1/01EEAnYLKflsVbNZUswfQofqTzGfkcAqnr8hhJUoSVI4j9bxmbljR g4//EVw6omd+JNGeowkNpFeXdEVL4ayEWP/aLrlhe/XKugnjqpQhokhHl2JbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDUowndIxteec7vLzHAZVYjrQ174wHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcylAf0hQ8PZ/ Uoy1icVIZhMpMOgWSpS0f7ZbFNJ3Sl6UwBY0EslPKBwL7+1rdmWLpyfne+KZ8Qgg rLtMc+hNtzCYwLSpsT4e36k8Xs3tneL28jLL6yM6rgM1XdjEuj32WwbQoGuDTHuv oqZGMajNttYAkshDasR8pzAAmKR3IZy1AiJsi3KpUNp/n1gTtzMcksv9Cg0vwGFH UiKjZhRWOI3aN7WvTjaKtMXjduZhn/wUWXXIRd0+r8x6HfuSB0GYik2LBfWIsOwU 8Rx0nY0L55XBqkUshpKLFNUsfeAIVtMXYCwddOBg3yRy0eS3XqKIek+uvn3g+ApB xcomu9RZUg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:17 2026 by rpki-client