$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json) Hash identifier: i5sHxKvXqP/I9Bgp04CcRACr7DWCU24C7y9rjhOtVJA= Subject key identifier: 14:6E:AB:47:6F:BA:E9:2E:69:BA:31:7A:21:81:E6:B7:3A:05:D4:9C Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Certificate serial: 315F369498A9BB932DD9502EE3C6D645FBA92828 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 05:58:28 +0000 Manifest this update: Thu 26 Mar 2026 05:53:28 +0000 Manifest next update: Fri 27 Mar 2026 09:02:28 +0000 Files and hashes: 1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: tCVTZIHSxRM2tn4pAWCASMKh/VW7JA6UQ2FaeRFkZhk=) 2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5f:36:94:98:a9:bb:93:2d:d9:50:2e:e3:c6:d6:45:fb:a9:28:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Validity Not Before: Mar 26 05:53:28 2026 GMT Not After : Mar 27 09:02:28 2026 GMT Subject: CN=146EAB476FBAE92E69BA317A2181E6B73A05D49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:de:b6:05:40:24:58:05:9e:c5:2d:8a:1d: 83:c9:79:cb:8d:01:0e:ca:b8:34:a9:9b:7d:20:78: 60:e8:c5:b9:89:2f:0e:80:38:1c:ef:ad:3f:fd:5c: 25:56:4d:54:3f:2d:12:42:df:47:f4:a8:ab:b9:b5: 08:8c:6e:08:ff:c9:e9:71:a4:72:e2:c7:dd:3e:6f: 47:40:85:82:f8:10:08:19:37:aa:89:f0:68:e2:5f: 9e:38:15:6f:cc:17:a1:91:03:c1:1f:64:af:18:5e: ec:5e:2a:5a:15:bb:83:f3:74:c8:b6:07:07:39:1f: fd:c7:af:89:f5:a5:90:14:8e:e3:07:df:59:fa:da: 1a:2b:42:0f:4e:33:91:45:25:94:5b:43:27:c4:d7: fa:ae:dc:b9:4f:2d:88:05:04:3c:dc:c4:64:48:73: 0e:cd:e3:49:ee:3d:4a:ef:22:a1:bb:36:73:af:07: 80:59:67:c1:14:e4:06:28:85:91:e6:7f:7e:b3:8f: 6c:1d:d3:53:b1:21:ca:4d:71:73:de:36:ca:ed:a9: 31:11:6f:c0:76:8e:dc:48:5a:a5:b3:3b:93:ab:1e: cf:0e:48:f2:5c:90:5d:bf:a9:8c:c1:ad:ab:ed:9e: 65:5d:a7:46:f7:4f:61:f4:01:35:8d:cd:2a:30:e0: 3a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6E:AB:47:6F:BA:E9:2E:69:BA:31:7A:21:81:E6:B7:3A:05:D4:9C X509v3 Authority Key Identifier: keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:72:e1:ab:d9:d9:50:cb:04:fd:6f:40:d3:a1:00:c0:49:a0: 61:c8:6b:7c:ce:e1:ec:88:44:62:ff:6d:4d:d9:9d:3a:c3:03: e6:28:15:09:ed:95:6b:83:eb:ea:d8:07:07:d2:d3:7f:9a:fd: d0:ec:2a:d5:ef:8f:f2:58:fd:7d:31:aa:b4:69:a5:7d:98:84: 8c:53:5f:c8:95:b5:e3:88:b0:8e:19:4c:97:e5:6d:50:f7:56: 2c:2a:9f:bd:ce:8b:73:36:d3:3d:38:75:91:b0:ef:6a:7d:e2: e0:f0:88:48:5f:0b:77:dd:7c:bd:26:46:79:80:9c:65:ce:f8: db:ab:93:f2:57:6d:6f:03:8a:b2:11:39:60:ff:dc:a8:d1:0d: ec:57:79:25:3e:c1:87:92:28:52:40:a3:6c:c1:28:92:d2:15: 0e:b3:40:e2:74:65:35:90:e4:11:1a:9b:a9:00:51:48:4d:ac: 3c:63:9c:3f:4d:fa:96:63:9c:09:9a:e3:5f:4a:d8:3c:e9:4b: aa:af:21:8a:b4:c0:45:b4:7d:fb:d9:28:9b:57:17:99:98:b0: 94:14:b6:0a:86:28:ca:6f:b7:5a:9d:98:aa:c3:7c:11:17:51: bc:49:c6:cd:0b:53:d2:69:45:ce:a7:14:6e:0a:43:30:5a:88: a2:64:bd:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMV82lJipu5Mt2VAu48bWRfupKCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1 ODFBNUM4NTAeFw0yNjAzMjYwNTUzMjhaFw0yNjAzMjcwOTAyMjhaMDMxMTAvBgNV BAMTKDE0NkVBQjQ3NkZCQUU5MkU2OUJBMzE3QTIxODFFNkI3M0EwNUQ0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlt62BUAkWAWexS2KHYPJecuN AQ7KuDSpm30geGDoxbmJLw6AOBzvrT/9XCVWTVQ/LRJC30f0qKu5tQiMbgj/yelx pHLix90+b0dAhYL4EAgZN6qJ8GjiX544FW/MF6GRA8EfZK8YXuxeKloVu4PzdMi2 Bwc5H/3Hr4n1pZAUjuMH31n62horQg9OM5FFJZRbQyfE1/qu3LlPLYgFBDzcxGRI cw7N40nuPUrvIqG7NnOvB4BZZ8EU5AYohZHmf36zj2wd01OxIcpNcXPeNsrtqTER b8B2jtxIWqWzO5OrHs8OSPJckF2/qYzBravtnmVdp0b3T2H0ATWNzSow4DpZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFG6rR2+66S5pujF6IYHmtzoF1JwwHwYDVR0j BBgwFoAULmvn7gQ6AdPNSD8wLDReRlgaXIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzU0NjQ5OS8wLzJFNkJFN0VFMDQzQTAxRDNDRDQ4M0YzMDJDMzQ1 RTQ2NTgxQTVDODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc1NDY0OTkvMC8yRTZCRTdFRTA0M0Ew MUQzQ0Q0ODNGMzAyQzM0NUU0NjU4MUE1Qzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXLhq9nZUMsE /W9A06EAwEmgYchrfM7h7IhEYv9tTdmdOsMD5igVCe2Va4Pr6tgHB9LTf5r90Owq 1e+P8lj9fTGqtGmlfZiEjFNfyJW144iwjhlMl+VtUPdWLCqfvc6LczbTPTh1kbDv an3i4PCISF8Ld918vSZGeYCcZc7426uT8ldtbwOKshE5YP/cqNEN7Fd5JT7Bh5Io UkCjbMEoktIVDrNA4nRlNZDkERqbqQBRSE2sPGOcP036lmOcCZrjX0rYPOlLqq8h irTARbR9+9kom1cXmZiwlBS2CoYoym+3Wp2YqsN8ERdRvEnGzQtT0mlFzqcUbgpD MFqIomS9CA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:22 2026 by rpki-client