$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft File: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json) Hash identifier: ecvM/60y3j9PrnyPB+ckc+hMwQRnedRjAsCDc8e6b6o= Subject key identifier: 2C:DE:85:6F:2A:BA:02:00:5A:A1:4C:C2:DB:47:4A:01:30:00:45:75 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 716BF748CDABA7E3CF9D89169E12A4DBB2B6F88D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 05:38:28 +0000 Manifest this update: Thu 26 Mar 2026 05:33:28 +0000 Manifest next update: Fri 27 Mar 2026 05:38:28 +0000 Files and hashes: 1: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=) 2: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=) 3: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=) 4: 3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa (hash: gwsYWrqcYK0ktFka8dQFWvrHKpCXna1yR/uwRK4K9H4=) 5: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=) 6: 3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa (hash: edMuLWIKpK7nnE5WfHg22oT2gpNprnepwqo5yESrIQg=) 7: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=) 8: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=) 9: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: IAFQRUw7s5k1DyhdtcjOJTXQViIeFMzX3WQidslSWnQ=) 10: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=) 11: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=) 12: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (hash: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs=) 13: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=) 14: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=) 15: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=) 16: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6b:f7:48:cd:ab:a7:e3:cf:9d:89:16:9e:12:a4:db:b2:b6:f8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: Mar 26 05:33:28 2026 GMT Not After : Mar 27 05:38:28 2026 GMT Subject: CN=2CDE856F2ABA02005AA14CC2DB474A0130004575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:16:4b:25:65:97:bd:b8:23:e6:70:99:b7: ea:ae:5b:b3:8e:70:8a:92:43:9b:b6:2d:52:41:f5: 93:88:8b:3d:2a:58:01:9c:ab:2c:06:44:0e:47:d4: e3:94:97:df:c9:5c:5f:2c:38:c4:1d:fa:e6:2f:fe: fe:f3:e1:38:b7:a0:03:ca:d6:b5:2e:6c:d2:09:c7: 8f:de:9a:8a:7b:d4:12:85:d8:84:8f:28:24:b0:a1: fb:6e:26:9e:ea:7a:ef:6c:d8:1b:fd:c6:60:67:da: e6:da:f0:ed:7e:5d:a0:ab:f4:4a:bf:e5:0a:e5:95: 2f:95:08:13:32:14:c0:1a:0d:d8:14:43:4c:41:8d: 8c:39:ff:03:6f:a0:bd:7e:01:75:c9:32:e7:a1:66: 45:df:b2:ad:e8:40:0b:a8:73:13:22:bf:57:da:18: 2b:b7:8a:9e:c9:4a:6f:b5:34:1f:77:ed:09:d4:15: d4:16:88:5a:3b:87:0a:92:cb:a2:b5:04:0f:fb:e3: 4d:fe:a6:f4:2d:55:4e:5a:0c:f1:c4:3a:7f:a8:47: b0:84:b8:d4:34:cf:95:a8:22:60:dc:cc:27:7e:9e: 5e:cb:71:f0:c6:40:4d:4e:62:c4:39:52:fc:8c:04: 64:c0:5a:20:65:02:2f:fd:55:9c:70:ba:91:5a:2e: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:85:6F:2A:BA:02:00:5A:A1:4C:C2:DB:47:4A:01:30:00:45:75 X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:07:e2:ff:fc:40:21:37:80:1c:61:7c:70:45:7a:fd:8c:32: ab:d4:e7:61:18:68:96:66:86:30:ff:0f:eb:9b:b3:83:9a:1f: 39:1f:1a:26:1f:0e:b4:d9:c4:2e:08:bc:9c:26:44:3a:67:97: 3f:f0:97:12:e9:d8:7d:5e:14:85:59:5d:5a:ce:0a:14:32:24: 13:a4:e3:7e:c8:b6:37:6c:02:0c:69:4c:0a:f4:7a:4c:b7:e9: b0:e0:34:21:49:78:96:a6:c3:8a:8c:e7:0c:40:21:58:0a:6d: c6:10:0c:21:dd:61:db:51:e5:e3:e2:4f:d3:46:2f:9e:52:96: 1d:be:f5:9f:db:72:1a:95:9d:05:d7:47:3f:88:1f:f8:16:93: 5b:29:8e:12:f3:3d:74:df:16:bd:3b:87:59:06:fc:ee:9e:77: d3:e2:3a:4b:85:7a:22:63:e8:77:4d:88:1c:1b:7d:f5:60:cf: 27:a0:f9:a2:24:e9:ca:4d:46:e2:4e:a9:fc:23:9a:f6:eb:a8: 80:e6:52:a9:ad:d7:ce:94:0b:8b:f4:a0:a5:2b:c2:42:ae:70: c9:be:e1:20:17:02:a7:4b:86:99:9d:d0:d9:7a:01:77:78:c9: 66:30:12:4c:e6:f1:77:d2:17:69:c8:d0:36:0b:8f:1c:e8:52: bf:3d:ed:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcWv3SM2rp+PPnYkWnhKk27K2+I0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjAzMjYwNTMzMjhaFw0yNjAzMjcwNTM4MjhaMDMxMTAvBgNV BAMTKDJDREU4NTZGMkFCQTAyMDA1QUExNENDMkRCNDc0QTAxMzAwMDQ1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBBZLJWWXvbgj5nCZt+quW7OO cIqSQ5u2LVJB9ZOIiz0qWAGcqywGRA5H1OOUl9/JXF8sOMQd+uYv/v7z4Ti3oAPK 1rUubNIJx4/emop71BKF2ISPKCSwoftuJp7qeu9s2Bv9xmBn2uba8O1+XaCr9Eq/ 5QrllS+VCBMyFMAaDdgUQ0xBjYw5/wNvoL1+AXXJMuehZkXfsq3oQAuocxMiv1fa GCu3ip7JSm+1NB937QnUFdQWiFo7hwqSy6K1BA/7403+pvQtVU5aDPHEOn+oR7CE uNQ0z5WoImDczCd+nl7LcfDGQE1OYsQ5UvyMBGTAWiBlAi/9VZxwupFaLl4bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULN6Fbyq6AgBaoUzC20dKATAARXUwHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0MDAzMjEvMC83MTk1MkIwRkY5QkNB N0NFNTQzNkIwREI1MDA5Q0EwOUY2MTBGM0MwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgfi//xAITeA HGF8cEV6/Ywyq9TnYRholmaGMP8P65uzg5ofOR8aJh8OtNnELgi8nCZEOmeXP/CX EunYfV4UhVldWs4KFDIkE6Tjfsi2N2wCDGlMCvR6TLfpsOA0IUl4lqbDioznDEAh WAptxhAMId1h21Hl4+JP00YvnlKWHb71n9tyGpWdBddHP4gf+BaTWymOEvM9dN8W vTuHWQb87p530+I6S4V6ImPod02IHBt99WDPJ6D5oiTpyk1G4k6p/COa9uuogOZS qa3XzpQLi/SgpSvCQq5wyb7hIBcCp0uGmZ3Q2XoBd3jJZjASTObxd9IXacjQNguP HOhSvz3tvQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:35 2026 by rpki-client