$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: 0LW21CCNwcGhkDy43A6cwmiSgq7nLBciPLp9uZQkJkA= Subject key identifier: 11:E8:B6:63:19:BF:EE:16:D5:F8:C4:DA:35:36:AB:DB:0A:73:DB:81 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 2A5F8D53B206F7FD16CBA58299372FA3F5515C2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:03:28 +0000 Manifest this update: Thu 26 Mar 2026 11:58:28 +0000 Manifest next update: Fri 27 Mar 2026 13:42:28 +0000 Files and hashes: 1: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) 2: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: t7Judrd4CtGvXfwXNVBb8MHFbKxY7Em9fwX+x5Sc3K4=) 3: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5f:8d:53:b2:06:f7:fd:16:cb:a5:82:99:37:2f:a3:f5:51:5c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Mar 26 11:58:28 2026 GMT Not After : Mar 27 13:42:28 2026 GMT Subject: CN=11E8B66319BFEE16D5F8C4DA3536ABDB0A73DB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:08:20:4c:5f:a7:b1:bb:59:83:65:0e:93: 5b:93:f4:4f:71:63:58:95:1f:4f:fc:6a:55:d0:6c: 67:75:e2:ab:3f:2d:43:39:76:38:69:ec:7e:d4:44: b1:70:45:13:b7:e0:7d:6e:7e:e2:ec:89:05:bb:c1: b3:5b:1e:ae:ef:16:85:8b:3c:e0:38:32:a7:5d:6b: b2:4b:56:9e:2f:a0:40:26:ef:f4:62:f0:c7:54:1a: f8:90:e0:5b:80:70:1b:d2:8c:7f:71:9b:26:a3:f1: ae:ba:32:93:61:5f:9b:59:03:64:10:14:9b:d4:d5: a6:48:16:64:62:19:be:c9:7f:58:42:bd:a8:89:2e: b3:1c:4a:35:53:b8:3c:f5:2a:2d:fd:d9:8a:a2:53: 23:62:19:2c:79:be:1c:4b:28:9d:6a:42:55:4e:84: 83:eb:a1:76:b3:b8:1c:53:2e:46:96:7b:72:b0:0d: 93:16:82:28:a4:4c:9d:8e:72:72:db:3d:f6:44:fc: 04:bf:c6:22:f5:44:d0:60:0f:be:51:eb:99:d4:b7: 5b:a6:4f:3f:64:e7:d4:7c:bf:b1:97:85:e2:3d:84: e9:13:18:82:b7:da:3a:a4:74:ae:0f:d4:6a:14:ed: 89:88:f4:3c:04:df:6a:b4:3b:f0:ba:9a:3f:0a:15: 00:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E8:B6:63:19:BF:EE:16:D5:F8:C4:DA:35:36:AB:DB:0A:73:DB:81 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:76:37:65:6a:68:2f:08:59:d2:98:ef:7c:3c:64:5e:18:53: 58:2d:0d:5c:18:3a:db:fc:d8:7f:57:33:2f:29:f1:35:e1:e3: 9d:5a:0d:62:69:41:bd:28:03:7a:0f:af:c5:ca:d8:76:a4:bf: cc:7c:d5:cf:b3:e9:aa:f5:24:97:c5:03:68:a3:8f:d9:8a:9e: 07:9d:cc:46:39:5b:a2:91:ec:e6:35:8b:8c:1b:1a:1c:f6:75: 76:fa:3f:09:47:40:57:c5:3b:13:ea:1a:cc:df:9a:2a:99:e5: 2b:64:18:a3:6a:14:e2:cf:bd:c3:93:85:52:9e:5b:c9:37:e6: 4a:d1:bd:be:fe:69:9e:3e:96:d1:46:81:ff:3f:6b:18:4b:97: 85:db:a2:b0:1b:0b:5b:27:d2:20:10:10:9a:06:ba:34:0e:db: 1f:fa:d3:7c:fe:75:7b:5d:ce:17:b3:94:d2:23:45:10:b3:a4: 48:c6:db:02:d4:92:cb:45:0e:f7:fb:be:5c:e6:45:f9:87:fe: a5:aa:28:22:98:12:e3:a6:a5:93:82:61:87:e9:11:a8:62:68: 61:e9:dd:43:62:f8:34:ef:37:91:97:93:21:ed:c7:9a:08:f2: 18:2a:cc:79:59:59:3a:8f:65:2e:7c:40:94:92:89:e2:b0:0c: 89:12:02:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKl+NU7IG9/0Wy6WCmTcvo/VRXC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjAzMjYxMTU4MjhaFw0yNjAzMjcxMzQyMjhaMDMxMTAvBgNV BAMTKDExRThCNjYzMTlCRkVFMTZENUY4QzREQTM1MzZBQkRCMEE3M0RCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76QggTF+nsbtZg2UOk1uT9E9x Y1iVH0/8alXQbGd14qs/LUM5djhp7H7URLFwRRO34H1ufuLsiQW7wbNbHq7vFoWL POA4Mqdda7JLVp4voEAm7/Ri8MdUGviQ4FuAcBvSjH9xmyaj8a66MpNhX5tZA2QQ FJvU1aZIFmRiGb7Jf1hCvaiJLrMcSjVTuDz1Ki392YqiUyNiGSx5vhxLKJ1qQlVO hIProXazuBxTLkaWe3KwDZMWgiikTJ2OcnLbPfZE/AS/xiL1RNBgD75R65nUt1um Tz9k59R8v7GXheI9hOkTGIK32jqkdK4P1GoU7YmI9DwE32q0O/C6mj8KFQBRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEei2Yxm/7hbV+MTaNTar2wpz24EwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXY3ZWpoLwhZ 0pjvfDxkXhhTWC0NXBg62/zYf1czLynxNeHjnVoNYmlBvSgDeg+vxcrYdqS/zHzV z7PpqvUkl8UDaKOP2YqeB53MRjlbopHs5jWLjBsaHPZ1dvo/CUdAV8U7E+oazN+a KpnlK2QYo2oU4s+9w5OFUp5byTfmStG9vv5pnj6W0UaB/z9rGEuXhduisBsLWyfS IBAQmga6NA7bH/rTfP51e13OF7OU0iNFELOkSMbbAtSSy0UO9/u+XOZF+Yf+paoo IpgS46alk4Jhh+kRqGJoYendQ2L4NO83kZeTIe3HmgjyGCrMeVlZOo9lLnxAlJKJ 4rAMiRICdA== -----END CERTIFICATE-----Generated at Fri Mar 27 05:22:57 2026 by rpki-client