$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft File: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json) Hash identifier: oWj2ix8BHlBvzjksjBdnncAzFNebni9kwrW8TA9LTtg= Subject key identifier: BE:43:A8:C0:7A:DE:3A:F3:B3:7F:DC:A3:CF:A9:E9:C2:AD:3F:39:2E Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Certificate serial: 150449D844D86448B8F181CB84FCA5A1C6056084 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 03:38:28 +0000 Manifest this update: Thu 26 Mar 2026 03:33:28 +0000 Manifest next update: Fri 27 Mar 2026 06:36:28 +0000 Files and hashes: 1: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=) 2: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=) 3: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=) 4: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=) 5: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: fsOsEF0pKSSkiKlkaJ1siuBdennJxSayAFpelvYvA5E=) 6: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=) 7: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=) 8: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=) 9: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=) 10: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=) 11: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=) 12: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:04:49:d8:44:d8:64:48:b8:f1:81:cb:84:fc:a5:a1:c6:05:60:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF Validity Not Before: Mar 26 03:33:28 2026 GMT Not After : Mar 27 06:36:28 2026 GMT Subject: CN=BE43A8C07ADE3AF3B37FDCA3CFA9E9C2AD3F392E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:8f:2c:4b:6d:04:a2:97:00:6b:70:bf:d0: 7f:28:0e:8f:55:73:68:28:c9:74:d4:1c:88:74:b7: 26:3d:fd:e8:8e:f3:5d:a6:21:8f:25:b7:ad:dc:5d: c7:63:28:db:a0:77:65:98:c1:0f:6c:93:56:fc:82: 47:b1:cf:37:e8:d0:5e:96:4c:3a:3e:d6:62:2b:bb: d0:83:89:2e:b3:ad:24:7a:6a:a2:73:d3:5c:04:93: d2:91:f5:70:30:9d:6e:ad:0a:ed:5b:3a:59:dc:6a: ef:27:86:63:23:db:8b:6f:54:0e:0f:c2:3a:15:fb: b3:be:25:4c:6d:51:c0:f6:1e:7c:d8:aa:86:4e:55: ec:47:1b:3a:31:a0:88:e1:cf:46:6a:93:49:28:c1: eb:ce:a2:df:ea:8b:bc:68:5b:93:08:a5:98:2c:c7: a0:17:0b:27:c5:96:1b:f2:8e:1a:41:d5:b7:06:b4: a5:dc:82:7c:bc:49:62:8c:98:37:f1:c4:3c:f6:e2: b5:e6:0a:59:2d:71:ae:bd:6a:8c:7a:ce:a5:41:3b: 2e:99:77:b9:43:21:31:ce:d7:cb:c9:af:ef:f8:16: 9f:8a:00:0b:26:d8:56:e4:1d:17:c9:3d:82:73:b8: af:12:51:d3:75:4b:b3:b2:b0:82:30:ae:fb:16:40: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:A8:C0:7A:DE:3A:F3:B3:7F:DC:A3:CF:A9:E9:C2:AD:3F:39:2E X509v3 Authority Key Identifier: keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5f:82:23:8b:90:8e:71:94:6d:0a:32:b6:fe:12:5a:ff:19: 95:dc:3b:34:91:0d:72:3b:52:82:e9:3b:a0:ba:40:1d:29:03: e8:f6:f1:87:1a:ac:a4:30:ac:e9:cc:5a:0f:26:92:ab:f5:86: 5d:6a:71:fd:91:c0:9f:06:d8:5c:4a:74:9b:06:d4:f9:27:2b: ab:e1:19:f9:d4:12:83:af:81:0d:18:44:c6:7b:7e:78:4c:db: bc:e7:dc:db:bb:d0:36:b8:30:11:7d:66:34:65:e2:0d:9b:e1: ac:0b:0d:e3:f4:e3:56:03:82:42:7c:dc:ec:8d:29:5f:83:88: ed:ac:b9:92:9a:db:52:67:39:02:be:75:47:1a:7c:7e:24:88: 1f:fb:d2:0b:91:00:00:4b:31:40:31:31:83:62:bd:c5:42:18: e4:a1:4d:14:ab:9e:df:a3:58:0c:04:bc:31:98:8c:49:be:65: 18:36:6b:75:20:04:8b:9d:7c:ee:49:b7:02:d5:47:3e:46:cb: 9f:a3:01:a4:36:3a:60:02:ae:06:7a:cc:da:62:1f:e8:c7:35: b2:d8:14:89:32:95:8e:bf:2e:2e:95:f4:7e:cc:e8:a1:14:09: 6f:7d:3a:23:35:d4:2b:f6:11:bf:26:2c:fd:ed:16:cd:5e:03: b2:3c:e9:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFQRJ2ETYZEi48YHLhPylocYFYIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3 M0JGNUZCRjAeFw0yNjAzMjYwMzMzMjhaFw0yNjAzMjcwNjM2MjhaMDMxMTAvBgNV BAMTKEJFNDNBOEMwN0FERTNBRjNCMzdGRENBM0NGQTlFOUMyQUQzRjM5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXD48sS20EopcAa3C/0H8oDo9V c2goyXTUHIh0tyY9/eiO812mIY8lt63cXcdjKNugd2WYwQ9sk1b8gkexzzfo0F6W TDo+1mIru9CDiS6zrSR6aqJz01wEk9KR9XAwnW6tCu1bOlncau8nhmMj24tvVA4P wjoV+7O+JUxtUcD2HnzYqoZOVexHGzoxoIjhz0Zqk0kowevOot/qi7xoW5MIpZgs x6AXCyfFlhvyjhpB1bcGtKXcgny8SWKMmDfxxDz24rXmClktca69aox6zqVBOy6Z d7lDITHO18vJr+/4Fp+KAAsm2FbkHRfJPYJzuK8SUdN1S7OysIIwrvsWQFzZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvkOowHreOvOzf9yjz6npwq0/OS4wHwYDVR0j BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2 MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC84QjdDMkQxQzAxRUVD RjMzOTFGMDE3Nzc5MTVDNjFFNDczQkY1RkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKF+CI4uQjnGU bQoytv4SWv8Zldw7NJENcjtSguk7oLpAHSkD6PbxhxqspDCs6cxaDyaSq/WGXWpx /ZHAnwbYXEp0mwbU+Scrq+EZ+dQSg6+BDRhExnt+eEzbvOfc27vQNrgwEX1mNGXi DZvhrAsN4/TjVgOCQnzc7I0pX4OI7ay5kprbUmc5Ar51Rxp8fiSIH/vSC5EAAEsx QDExg2K9xUIY5KFNFKue36NYDAS8MZiMSb5lGDZrdSAEi5187km3AtVHPkbLn6MB pDY6YAKuBnrM2mIf6Mc1stgUiTKVjr8uLpX0fszooRQJb306IzXUK/YRvyYs/e0W zV4DsjzpAA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:36 2026 by rpki-client