$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: q2bDF8hN27OZNTdX/KftaB4EscX3NLw8e+JAtw78oww= Subject key identifier: E3:38:9B:BE:ED:4E:F9:ED:69:06:8F:DD:9C:34:50:E0:64:97:FC:0A Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 78447F35D896D13F79BE0BC940EC903095B7F2FF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 05:58:28 +0000 Manifest this update: Thu 26 Mar 2026 05:53:28 +0000 Manifest next update: Fri 27 Mar 2026 09:11:28 +0000 Files and hashes: 1: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: KfagX0P/05G9QBUl1Q0tlVfcdcwmySl1xruVH9UjqBU=) 2: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:44:7f:35:d8:96:d1:3f:79:be:0b:c9:40:ec:90:30:95:b7:f2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Mar 26 05:53:28 2026 GMT Not After : Mar 27 09:11:28 2026 GMT Subject: CN=E3389BBEED4EF9ED69068FDD9C3450E06497FC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:77:e4:4d:f9:bd:92:6d:37:d1:ac:06:01:bd: 79:b8:6e:9f:41:d7:56:34:6d:ea:43:7e:d7:ba:a7: 1e:24:8f:ff:f3:c4:f8:f2:a0:1f:bb:cd:13:7b:00: 78:67:6f:6b:28:5b:ea:fd:4a:18:dd:9a:30:3f:bd: 11:62:8c:c2:5a:99:b9:04:24:ba:93:05:5b:7e:13: 0b:0b:7f:a2:40:9e:7b:c0:e8:b3:3b:f5:ff:ee:63: aa:b0:bd:05:f7:4b:e1:0b:d3:9c:a0:fd:48:42:1d: e8:92:25:e4:1f:5b:e4:8b:65:ba:87:a6:92:aa:f2: 64:b3:a3:1c:2c:e1:9c:94:f3:f3:eb:37:81:e6:b5: a0:3b:64:64:a7:9d:6b:7f:a1:42:a3:2b:b1:59:49: b5:46:24:60:78:31:65:0d:90:b0:9a:01:86:1b:03: 24:07:4d:2d:b8:d6:eb:56:e7:ec:5c:a7:7c:6c:06: 75:9f:0c:cd:a2:fb:a5:fc:0f:83:53:4e:72:da:82: c3:33:2a:78:fd:00:20:41:b9:37:5f:cb:15:23:b3: fb:c0:a6:31:d3:3d:19:e5:9f:eb:23:6a:49:40:06: 73:8c:b8:22:da:da:56:e2:60:45:7e:1e:b3:d4:19: 32:ec:11:c6:70:8a:9d:dc:4f:ac:80:46:b8:17:e1: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:38:9B:BE:ED:4E:F9:ED:69:06:8F:DD:9C:34:50:E0:64:97:FC:0A X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1d:0b:22:96:bb:a6:80:59:fb:ec:0d:e3:ba:51:3d:2f:7d: 6d:06:12:34:8b:ff:7d:51:3a:dd:ee:09:ce:16:95:34:f0:c3: 43:e7:c5:99:a2:8f:8c:57:b5:a3:26:2c:cd:c6:84:48:36:52: 36:48:ec:f8:87:e4:09:7a:02:8a:cf:56:3b:2f:c8:d3:6b:2c: c3:49:3f:6d:3b:dc:6e:42:78:e2:44:41:c6:20:24:84:95:36: 14:c7:44:13:91:55:8c:70:b9:48:b8:42:b3:80:42:77:9f:80: 64:d0:2d:ca:c7:49:f1:eb:a2:fb:a4:2e:d7:74:63:11:ca:bc: e8:72:87:18:c0:6d:41:0a:fe:b3:00:c7:b0:46:fe:88:83:26: e0:55:69:4d:87:95:87:ad:7b:ca:d0:55:f7:0b:07:c5:30:69: e3:10:28:30:58:bc:ff:02:06:16:34:1e:27:2c:a9:8f:7e:37: e7:eb:3b:c9:68:01:24:90:e8:13:1d:c1:21:f6:f0:75:b5:31: ae:e7:d4:65:28:7e:65:9a:e7:36:d6:76:9b:14:67:43:1d:92: c2:16:90:37:d8:fb:f4:23:28:de:2b:37:67:b2:7d:73:4f:fd: 56:6e:b7:d7:f3:8b:31:12:02:f3:23:e9:89:e1:01:d8:aa:bd: 06:b1:f6:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeER/NdiW0T95vgvJQOyQMJW38v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjAzMjYwNTUzMjhaFw0yNjAzMjcwOTExMjhaMDMxMTAvBgNV BAMTKEUzMzg5QkJFRUQ0RUY5RUQ2OTA2OEZERDlDMzQ1MEUwNjQ5N0ZDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUd+RN+b2SbTfRrAYBvXm4bp9B 11Y0bepDfte6px4kj//zxPjyoB+7zRN7AHhnb2soW+r9ShjdmjA/vRFijMJambkE JLqTBVt+EwsLf6JAnnvA6LM79f/uY6qwvQX3S+EL05yg/UhCHeiSJeQfW+SLZbqH ppKq8mSzoxws4ZyU8/PrN4HmtaA7ZGSnnWt/oUKjK7FZSbVGJGB4MWUNkLCaAYYb AyQHTS241utW5+xcp3xsBnWfDM2i+6X8D4NTTnLagsMzKnj9ACBBuTdfyxUjs/vA pjHTPRnln+sjaklABnOMuCLa2lbiYEV+HrPUGTLsEcZwip3cT6yARrgX4UWLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4zibvu1O+e1pBo/dnDRQ4GSX/AowHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJx0LIpa7poBZ ++wN47pRPS99bQYSNIv/fVE63e4JzhaVNPDDQ+fFmaKPjFe1oyYszcaESDZSNkjs +IfkCXoCis9WOy/I02ssw0k/bTvcbkJ44kRBxiAkhJU2FMdEE5FVjHC5SLhCs4BC d5+AZNAtysdJ8eui+6Qu13RjEcq86HKHGMBtQQr+swDHsEb+iIMm4FVpTYeVh617 ytBV9wsHxTBp4xAoMFi8/wIGFjQeJyypj3435+s7yWgBJJDoEx3BIfbwdbUxrufU ZSh+ZZrnNtZ2mxRnQx2SwhaQN9j79CMo3is3Z7J9c0/9Vm631/OLMRIC8yPpieEB 2Kq9BrH2zA== -----END CERTIFICATE-----Generated at Fri Mar 27 01:57:42 2026 by rpki-client