$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft File: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft (raw, json) Hash identifier: g1jBBfKUXSvIljg6o2msTHFyxRiTSvbZqoV7SE34lbA= Subject key identifier: 8E:D5:69:8E:6A:43:7E:04:D5:4E:ED:03:3A:5D:5D:86:CA:F6:A3:8B Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Certificate serial: 2181670E59136849F912777DC1D7AFFA75E20B44 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 14:28:28 +0000 Manifest this update: Thu 26 Mar 2026 14:23:28 +0000 Manifest next update: Fri 27 Mar 2026 17:19:28 +0000 Files and hashes: 1: 323430303a353238303a343830303a3a2f33382d3338203d3e203633313939.roa (hash: 7ssKnd9cjBOU2kO59bHrjY+5RWNLO5X7QF02nxsOFtk=) 2: 3130362e332e3133392e302f32342d3234203d3e203633313939.roa (hash: yg1jTqj1EVwFDnWcCKP21rIIoexnkGEjd3BNf40P0DM=) 3: 323430303a353238303a343030303a3a2f33382d3338203d3e203633313939.roa (hash: VLWs1MOagyRUFeUiUi74U3IkGzuxu68szaETh9T31ns=) 4: 323430303a353238303a343430303a3a2f33382d3338203d3e203633313939.roa (hash: PZpvOJ79B3+v+Ig/cY0R0dd/kREz5TklSnuw4BHna5k=) 5: 323430303a353238303a336330303a3a2f33382d3338203d3e203633313939.roa (hash: vLjzej9BGyHuqC6sUVDGzNiHv3TweGRyRvLEckbizcc=) 6: 323430303a353238303a323030303a3a2f33382d3338203d3e203633313939.roa (hash: fuUdVOrhiUcDjt1XkJLg6UX15/AKeKejc2EgKLTBOo0=) 7: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl (hash: fpX+meE5e2BFdhOcYinFfdcEk3/ULbPo0RK/bqWhJoE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:81:67:0e:59:13:68:49:f9:12:77:7d:c1:d7:af:fa:75:e2:0b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Validity Not Before: Mar 26 14:23:28 2026 GMT Not After : Mar 27 17:19:28 2026 GMT Subject: CN=8ED5698E6A437E04D54EED033A5D5D86CAF6A38B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:49:1f:88:98:a1:c8:e0:d3:b3:33:d9:55:ac: df:d1:04:7f:41:45:b7:5f:ee:f2:22:aa:40:57:90: 2e:8b:85:48:02:5f:1a:52:75:5c:e2:9e:99:a7:74: f5:0a:d6:50:77:4a:df:ff:cf:26:bd:e6:f6:da:7d: b3:ce:1a:c2:c1:02:49:b7:6c:b5:36:31:31:ba:c7: 44:ab:4f:3e:08:18:d1:6c:45:f6:53:c5:3b:82:46: 4a:50:e3:d7:fb:c6:22:7a:62:03:07:56:6e:08:f3: 3c:e0:2d:5e:55:00:ce:23:14:f6:20:9d:dd:30:cc: c8:3f:fd:9f:49:d0:ad:05:a3:4b:7f:92:5a:d7:86: dd:b2:ba:a0:d0:68:ab:b4:a4:e4:50:a5:dc:bd:4b: a0:56:bf:43:0a:b5:55:2d:ef:42:a1:d5:30:f6:e0: a5:34:c6:5b:8a:a3:87:85:7d:eb:a9:22:83:9c:91: a7:14:1c:4d:ca:26:f3:d1:48:a3:18:fc:fe:68:cb: 19:b2:d7:3d:3d:32:d9:be:61:1f:5d:97:9b:7c:17: 48:5d:a5:17:40:f8:6d:a8:b6:2d:9f:dd:8b:07:d2: 88:52:45:ba:5e:3c:f5:1a:43:71:30:d7:1f:b6:37: 57:34:c5:91:94:24:51:79:a4:02:c6:6c:88:1e:d2: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D5:69:8E:6A:43:7E:04:D5:4E:ED:03:3A:5D:5D:86:CA:F6:A3:8B X509v3 Authority Key Identifier: keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b2:97:10:f5:86:19:58:85:72:45:8b:05:6a:d8:f1:19:a4: e7:dd:81:4c:da:8c:81:1f:d0:bb:70:c9:cd:9c:43:16:99:99: a4:bf:1f:52:99:6a:05:93:0a:7e:60:2e:15:cc:46:0a:e8:6d: 36:1d:73:45:aa:04:d4:63:2c:88:1b:8f:6b:42:05:af:8b:f0: 57:ea:cb:df:72:9f:20:10:95:53:e1:c2:74:26:9b:42:b3:42: 11:d4:46:17:9c:55:6a:40:dd:fa:cf:80:ef:04:5c:66:f9:86: 3f:19:cf:35:b3:74:d1:96:96:37:80:cd:fd:17:8e:b2:ed:6a: 58:3e:33:28:6b:b6:54:13:0b:a0:98:13:fe:d4:98:4a:37:79: 92:46:71:c7:f6:23:f7:d7:b1:da:d2:c0:b0:5a:c6:52:55:a0: 0f:2e:47:a0:45:d1:2a:71:a0:30:19:00:04:93:1d:4b:3f:95: 6e:45:fc:a1:ed:99:58:20:f1:af:bf:fa:3c:55:93:ea:9c:1d: d6:35:3e:2b:45:9b:cc:d8:04:ad:de:18:ce:ce:2d:85:3b:38: 34:49:d3:3e:a3:63:82:9a:85:e6:66:2c:a2:a8:b4:28:52:74: 57:21:19:e6:ee:42:e1:3c:19:41:be:e8:b3:22:ee:7e:7c:91: 16:61:dd:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIYFnDlkTaEn5End9wdev+nXiC0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFG RDJDMDExNTAeFw0yNjAzMjYxNDIzMjhaFw0yNjAzMjcxNzE5MjhaMDMxMTAvBgNV BAMTKDhFRDU2OThFNkE0MzdFMDRENTRFRUQwMzNBNUQ1RDg2Q0FGNkEzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSR+ImKHI4NOzM9lVrN/RBH9B Rbdf7vIiqkBXkC6LhUgCXxpSdVzinpmndPUK1lB3St//zya95vbafbPOGsLBAkm3 bLU2MTG6x0SrTz4IGNFsRfZTxTuCRkpQ49f7xiJ6YgMHVm4I8zzgLV5VAM4jFPYg nd0wzMg//Z9J0K0Fo0t/klrXht2yuqDQaKu0pORQpdy9S6BWv0MKtVUt70Kh1TD2 4KU0xluKo4eFfeupIoOckacUHE3KJvPRSKMY/P5oyxmy1z09Mtm+YR9dl5t8F0hd pRdA+G2oti2f3YsH0ohSRbpePPUaQ3Ew1x+2N1c0xZGUJFF5pALGbIge0rsNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjtVpjmpDfgTVTu0DOl1dhsr2o4swHwYDVR0j BBgwFoAUngewLvJ04zmzxLIlmFXlKv0sARUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8wLzlFMDdCMDJFRjI3NEUzMzlCM0M0QjIyNTk4NTVF NTJBRkQyQzAxMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMC85RTA3QjAyRUYyNzRF MzM5QjNDNEIyMjU5ODU1RTUyQUZEMkMwMTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbKXEPWGGViF ckWLBWrY8Rmk592BTNqMgR/Qu3DJzZxDFpmZpL8fUplqBZMKfmAuFcxGCuhtNh1z RaoE1GMsiBuPa0IFr4vwV+rL33KfIBCVU+HCdCabQrNCEdRGF5xVakDd+s+A7wRc ZvmGPxnPNbN00ZaWN4DN/ReOsu1qWD4zKGu2VBMLoJgT/tSYSjd5kkZxx/Yj99ex 2tLAsFrGUlWgDy5HoEXRKnGgMBkABJMdSz+VbkX8oe2ZWCDxr7/6PFWT6pwd1jU+ K0WbzNgErd4Yzs4thTs4NEnTPqNjgpqF5mYsoqi0KFJ0VyEZ5u5C4TwZQb7osyLu fnyRFmHdhQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:35:18 2026 by rpki-client