$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: pTlsRvcoeHLPlSEiVF3T//q3Zz2AqaZjcmsyV53bKns= Subject key identifier: E5:14:EC:63:98:91:68:F5:6A:0C:5C:F3:E8:E0:8E:49:06:17:E0:31 Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 5640CEAC486AB013DC27E81A4E96A35B7DC6BA96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 18:08:28 +0000 Manifest this update: Thu 26 Mar 2026 18:03:28 +0000 Manifest next update: Fri 27 Mar 2026 20:05:28 +0000 Files and hashes: 1: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) 2: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 3: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: ZC0dG2oEu7smcgVagZlCHgAfMp4KlW9kxYfLz3yQ7M0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:40:ce:ac:48:6a:b0:13:dc:27:e8:1a:4e:96:a3:5b:7d:c6:ba:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Mar 26 18:03:28 2026 GMT Not After : Mar 27 20:05:28 2026 GMT Subject: CN=E514EC63989168F56A0C5CF3E8E08E490617E031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:09:23:a0:76:b5:d1:94:2f:50:f8:b5:10:09: 59:14:fb:72:53:bf:90:65:b2:eb:b1:46:84:16:9f: e9:bc:43:d4:dd:a0:90:de:3c:13:f9:9b:56:a0:d6: 25:f0:1d:d0:13:e3:c1:95:ec:df:fb:1f:fd:fa:18: 69:90:4e:e4:bf:e8:a4:5f:98:1f:a3:25:08:6c:27: 21:12:b9:d0:fc:89:c7:b1:0f:2b:c8:48:37:3f:6a: 9e:a8:ac:8b:7c:50:b2:b1:8a:21:ac:3b:22:56:8c: a7:d4:ae:78:99:67:6b:a7:07:bd:2c:14:f6:06:39: cd:87:6c:78:31:10:51:3c:8d:b3:d3:a7:50:fa:0b: 5b:2f:bb:71:37:1e:61:9d:7a:06:6f:98:b0:7f:9f: 53:c3:a6:67:c1:12:8b:0f:40:17:9f:05:de:eb:f8: 63:fe:1e:01:33:df:df:03:82:5d:03:e4:af:38:05: 7f:e0:e8:36:75:61:b8:7d:cd:ea:99:ae:0d:1b:20: 6b:ea:1c:e6:ce:da:23:c5:5e:61:b3:67:d3:4c:e7: dd:73:d4:f7:c4:31:cd:39:78:6e:08:70:24:77:74: c1:64:b1:dc:94:70:a1:14:91:d6:29:41:f3:31:d3: 09:63:ec:59:97:5c:67:79:da:54:d8:e4:f9:9e:0d: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:14:EC:63:98:91:68:F5:6A:0C:5C:F3:E8:E0:8E:49:06:17:E0:31 X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:12:37:2a:15:74:ca:03:0d:74:f7:3a:16:54:6d:8e:f5:7c: 2d:0f:98:67:21:83:f4:07:35:6d:d7:05:aa:ac:c7:39:e0:2f: f1:68:f5:11:a2:17:64:fe:a9:72:6d:cc:30:de:42:3d:5f:bb: de:eb:c4:1d:e6:0b:8e:53:0a:4a:31:dc:9c:45:a0:26:d3:59: 6b:70:d8:58:44:10:42:a3:ba:ff:e1:1e:bc:63:8e:9a:e2:b3: f3:32:0d:55:b8:95:e6:53:a7:7d:26:1e:dd:a4:57:b6:79:1e: a5:f9:f9:f7:ed:0a:b6:2f:37:31:88:62:f5:fb:b6:cf:84:28: f1:dd:67:b9:21:83:92:00:0d:2f:01:d6:c2:f0:33:f5:96:65: fc:70:1e:cd:a2:cc:30:46:a8:96:6c:27:be:a5:19:25:c6:d3: 5d:ef:c2:93:00:d1:2b:38:9f:83:ae:de:4e:eb:71:b2:bb:af: 53:d5:dd:69:d3:c9:dc:14:e8:cc:92:07:d6:f3:11:46:de:f2: 72:be:09:75:d0:8c:1d:c1:cf:45:47:82:58:c0:d7:d5:80:c5: 26:d4:6e:5f:87:cd:6c:d0:21:bd:c8:4d:f0:e8:0f:a2:d1:64: b4:a6:c6:8c:8a:f0:06:bb:59:f8:09:ee:5c:68:ea:b7:3b:16: d0:ce:69:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVkDOrEhqsBPcJ+gaTpajW33GupYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjAzMjYxODAzMjhaFw0yNjAzMjcyMDA1MjhaMDMxMTAvBgNV BAMTKEU1MTRFQzYzOTg5MTY4RjU2QTBDNUNGM0U4RTA4RTQ5MDYxN0UwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCSOgdrXRlC9Q+LUQCVkU+3JT v5BlsuuxRoQWn+m8Q9TdoJDePBP5m1ag1iXwHdAT48GV7N/7H/36GGmQTuS/6KRf mB+jJQhsJyESudD8icexDyvISDc/ap6orIt8ULKxiiGsOyJWjKfUrniZZ2unB70s FPYGOc2HbHgxEFE8jbPTp1D6C1svu3E3HmGdegZvmLB/n1PDpmfBEosPQBefBd7r +GP+HgEz398Dgl0D5K84BX/g6DZ1Ybh9zeqZrg0bIGvqHObO2iPFXmGzZ9NM591z 1PfEMc05eG4IcCR3dMFksdyUcKEUkdYpQfMx0wlj7FmXXGd52lTY5PmeDZbTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5RTsY5iRaPVqDFzz6OCOSQYX4DEwHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBI3KhV0ygMN dPc6FlRtjvV8LQ+YZyGD9Ac1bdcFqqzHOeAv8Wj1EaIXZP6pcm3MMN5CPV+73uvE HeYLjlMKSjHcnEWgJtNZa3DYWEQQQqO6/+EevGOOmuKz8zINVbiV5lOnfSYe3aRX tnkepfn59+0Kti83MYhi9fu2z4Qo8d1nuSGDkgANLwHWwvAz9ZZl/HAezaLMMEao lmwnvqUZJcbTXe/CkwDRKzifg67eTutxsruvU9XdadPJ3BTozJIH1vMRRt7ycr4J ddCMHcHPRUeCWMDX1YDFJtRuX4fNbNAhvchN8OgPotFktKbGjIrwBrtZ+AnuXGjq tzsW0M5pzg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:49:47 2026 by rpki-client