$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: tZAflaYtDTZ/nwHYgiy7niNQAdari2RJjXBYjZRcyxA= Subject key identifier: 60:D2:E6:61:FA:BD:16:E7:22:01:76:F4:2A:11:A8:92:49:DA:3A:58 Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 46A3F57DFCAD17015EA0385D5AA409A617615570 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:38:28 +0000 Manifest this update: Thu 26 Mar 2026 12:33:28 +0000 Manifest next update: Fri 27 Mar 2026 14:45:28 +0000 Files and hashes: 1: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: ByhZf5CxDX00nDsaaSZ0yiGan07qqFuRk38mKvSG+nc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a3:f5:7d:fc:ad:17:01:5e:a0:38:5d:5a:a4:09:a6:17:61:55:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: Mar 26 12:33:28 2026 GMT Not After : Mar 27 14:45:28 2026 GMT Subject: CN=60D2E661FABD16E7220176F42A11A89249DA3A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:4d:8d:24:bf:6c:57:d5:0d:43:4d:a5:cc: fa:7d:e3:c7:c0:f6:5a:65:be:d0:2a:98:53:69:ea: 8a:30:96:06:39:ca:17:4b:94:63:6b:7f:21:65:88: 19:5c:74:4f:c1:3d:b0:51:8b:4c:36:b0:fe:a7:17: 87:72:56:09:8d:d3:3a:5e:f7:04:b4:48:c7:12:84: 2c:8c:86:a4:c7:36:54:f3:fb:5d:8f:45:69:75:c6: b9:28:1f:4c:b0:e3:84:ea:56:cd:84:77:4b:58:8e: de:4a:41:e1:52:bb:e0:9f:b8:52:b8:4c:33:0d:2a: 09:5a:33:0f:de:a0:ab:2e:f3:3f:3a:a8:52:74:e3: 71:10:0b:8e:ae:69:ee:5e:5e:d9:b9:20:57:54:01: 25:d5:95:04:2d:61:e8:d9:e4:02:ab:e3:df:fd:f6: 42:ab:d6:3b:8a:48:8a:6d:73:fc:56:2a:6f:b7:bb: 71:68:6a:06:af:87:6a:b6:8b:82:05:a9:dc:a2:0c: 11:eb:64:a7:0c:16:5b:93:b9:3f:10:f6:76:e9:d3: 35:cf:00:61:e0:b0:6d:85:8f:43:3f:60:b8:3b:bc: 67:a7:88:63:4d:fe:80:7b:fb:e1:89:cf:8b:fa:e3: f9:43:5d:2e:1b:fd:33:5b:00:8f:68:88:b0:e5:1e: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D2:E6:61:FA:BD:16:E7:22:01:76:F4:2A:11:A8:92:49:DA:3A:58 X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a5:ea:07:67:09:e9:9d:0f:22:45:0b:1a:40:b3:f5:c5:8f: bc:02:2d:9a:b9:f9:fe:5b:37:37:db:81:f2:81:38:f1:47:f4: 4a:31:8c:8e:50:96:8f:fa:bb:ee:a8:06:2a:d4:38:ce:29:a8: db:80:8a:d0:bc:47:e3:c7:af:8a:57:01:3a:63:79:2b:05:9a: 2c:1b:37:d8:3f:8c:8e:b4:69:6b:4d:92:b2:c1:54:40:7a:26: 2b:d5:8f:6e:b9:d9:a6:02:a7:89:fe:e0:29:21:75:7b:fc:d4: 3f:95:93:00:39:82:eb:97:c5:31:72:b5:54:96:c8:ed:40:43: 25:94:1e:51:d1:f2:d5:f2:2a:72:cd:9a:e8:92:0e:42:dc:fc: 00:99:bc:1f:ec:b5:60:dc:b9:ca:5f:65:76:c0:b0:dd:e1:12: 27:e4:47:9b:02:b8:9d:23:4f:1e:a7:c2:22:5d:0d:70:94:9c: 38:c4:20:07:3e:10:f1:13:27:04:3f:4e:73:a2:8a:88:55:61: 64:1d:af:bc:91:27:1b:18:0c:bf:70:68:4b:0d:be:31:1b:60: 4e:14:80:2d:df:1e:ea:1f:de:d4:c2:f6:8e:cd:6b:bb:92:e0: 2b:d7:d5:c4:4c:b4:c4:42:d5:f9:a3:33:9c:37:d3:85:9b:df: 2a:ce:4c:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURqP1ffytFwFeoDhdWqQJphdhVXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjAzMjYxMjMzMjhaFw0yNjAzMjcxNDQ1MjhaMDMxMTAvBgNV BAMTKDYwRDJFNjYxRkFCRDE2RTcyMjAxNzZGNDJBMTFBODkyNDlEQTNBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrk2NJL9sV9UNQ02lzPp948fA 9lplvtAqmFNp6oowlgY5yhdLlGNrfyFliBlcdE/BPbBRi0w2sP6nF4dyVgmN0zpe 9wS0SMcShCyMhqTHNlTz+12PRWl1xrkoH0yw44TqVs2Ed0tYjt5KQeFSu+CfuFK4 TDMNKglaMw/eoKsu8z86qFJ043EQC46uae5eXtm5IFdUASXVlQQtYejZ5AKr49/9 9kKr1juKSIptc/xWKm+3u3Foagavh2q2i4IFqdyiDBHrZKcMFluTuT8Q9nbp0zXP AGHgsG2Fj0M/YLg7vGeniGNN/oB7++GJz4v64/lDXS4b/TNbAI9oiLDlHjYRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYNLmYfq9FuciAXb0KhGokknaOlgwHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKXqB2cJ6Z0P IkULGkCz9cWPvAItmrn5/ls3N9uB8oE48Uf0SjGMjlCWj/q77qgGKtQ4zimo24CK 0LxH48evilcBOmN5KwWaLBs32D+MjrRpa02SssFUQHomK9WPbrnZpgKnif7gKSF1 e/zUP5WTADmC65fFMXK1VJbI7UBDJZQeUdHy1fIqcs2a6JIOQtz8AJm8H+y1YNy5 yl9ldsCw3eESJ+RHmwK4nSNPHqfCIl0NcJScOMQgBz4Q8RMnBD9Oc6KKiFVhZB2v vJEnGxgMv3BoSw2+MRtgThSALd8e6h/e1ML2js1ru5LgK9fVxEy0xELV+aMznDfT hZvfKs5Mng== -----END CERTIFICATE-----Generated at Fri Mar 27 07:08:35 2026 by rpki-client