$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: aSIKAssCi51g8ouyVS19BEJqcDOUVWNl7CkRuzi1ooQ= Subject key identifier: F5:0B:BB:B1:92:F0:02:9F:83:F4:62:7A:A7:21:05:92:DC:A0:3E:CB Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 48490CFC5C0C29CCA960F5C0304D3B8BED7424E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 11:13:28 +0000 Manifest this update: Thu 26 Mar 2026 11:08:28 +0000 Manifest next update: Fri 27 Mar 2026 12:46:28 +0000 Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 3: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: OBCL25Afj91mLKh2t272IYMRBzkAew4TIlYNZjo5StQ=) 4: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:49:0c:fc:5c:0c:29:cc:a9:60:f5:c0:30:4d:3b:8b:ed:74:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Mar 26 11:08:28 2026 GMT Not After : Mar 27 12:46:28 2026 GMT Subject: CN=F50BBBB192F0029F83F4627AA7210592DCA03ECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d9:aa:54:c5:ba:e9:7f:e5:3f:58:d7:29:88: a1:b7:10:7e:af:79:1d:b1:07:15:f5:6f:c5:cf:05: 96:f9:eb:d5:8e:3c:f2:01:b8:94:a0:d7:17:ce:97: 68:f6:91:b8:31:d6:fe:3a:7b:7d:be:c5:90:f0:90: d6:68:b5:e9:b7:6d:ee:e8:dc:e2:5a:c5:de:4e:52: ff:5d:0f:07:4b:fe:35:c2:27:e1:3f:84:b6:87:18: 79:e1:68:38:57:32:a4:33:c5:a7:46:c4:a7:77:1d: ae:a8:e2:c3:95:32:d0:2e:35:6a:67:fa:c3:06:f2: 14:b0:e2:71:d1:e1:29:72:aa:35:d0:b5:ad:37:24: 0e:df:39:a1:e7:ea:42:53:0c:67:92:da:93:fe:47: a2:8c:73:f8:9a:45:87:72:9c:49:52:b3:39:02:d0: 74:7e:88:3d:58:4a:d4:25:21:e9:e8:bf:ab:f5:00: e0:8e:bb:03:60:b7:ee:c2:2c:17:ca:29:75:15:7e: fe:f7:90:61:a6:fb:09:a3:db:62:79:8e:52:d3:6c: aa:4e:c7:c0:85:ed:55:ad:c6:00:6d:4d:98:d3:24: c3:2d:73:c6:ed:3a:39:1f:17:d1:5e:f1:eb:fe:f6: 4b:e9:bf:4e:76:fc:83:68:56:05:07:51:51:99:15: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0B:BB:B1:92:F0:02:9F:83:F4:62:7A:A7:21:05:92:DC:A0:3E:CB X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:4f:61:31:5f:85:20:81:9a:fb:bc:e3:0d:6d:3e:5e:43:de: 15:79:1b:cd:98:e4:9b:ab:c5:43:12:1c:c1:04:cb:53:e0:b0: b5:e3:49:ab:c2:26:0c:9d:4b:c0:e5:f3:f5:2b:c9:c4:94:88: 7a:63:e2:ee:ee:70:cc:ff:c8:8a:7b:c8:98:ac:3d:b4:3d:6f: 22:68:43:d8:00:57:80:b9:e6:ec:01:c2:56:7d:b1:b6:20:d6: 51:00:09:76:a0:3d:61:0f:31:dc:42:5c:78:d6:e4:05:43:d1: aa:85:69:a2:f8:09:57:51:ba:b5:4e:61:b7:e3:64:4f:fd:bb: e4:c7:9d:66:be:3c:2f:a1:47:80:1e:26:23:db:40:c9:96:9d: 7d:96:23:b2:0e:b7:b7:04:b4:f1:5a:69:37:2c:91:69:cd:a5: a1:b2:33:1d:11:ce:80:3b:8e:d7:d0:77:ea:f8:11:07:eb:5f: 4f:f5:70:5b:2a:03:b6:da:1e:a0:56:bd:e5:67:0e:71:78:05: 48:25:95:68:fb:8e:b6:d6:59:b0:ad:c4:27:af:4c:1b:43:07: 81:f6:e1:d9:4c:c2:0b:a1:e2:8d:ae:9c:39:4f:ea:df:65:4c: 6b:0d:e7:dc:ef:48:88:4b:fb:b0:06:94:f4:38:14:a9:32:e1: df:e7:b0:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSEkM/FwMKcypYPXAME07i+10JOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjAzMjYxMTA4MjhaFw0yNjAzMjcxMjQ2MjhaMDMxMTAvBgNV BAMTKEY1MEJCQkIxOTJGMDAyOUY4M0Y0NjI3QUE3MjEwNTkyRENBMDNFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2apUxbrpf+U/WNcpiKG3EH6v eR2xBxX1b8XPBZb569WOPPIBuJSg1xfOl2j2kbgx1v46e32+xZDwkNZotem3be7o 3OJaxd5OUv9dDwdL/jXCJ+E/hLaHGHnhaDhXMqQzxadGxKd3Ha6o4sOVMtAuNWpn +sMG8hSw4nHR4SlyqjXQta03JA7fOaHn6kJTDGeS2pP+R6KMc/iaRYdynElSszkC 0HR+iD1YStQlIenov6v1AOCOuwNgt+7CLBfKKXUVfv73kGGm+wmj22J5jlLTbKpO x8CF7VWtxgBtTZjTJMMtc8btOjkfF9Fe8ev+9kvpv052/INoVgUHUVGZFTP/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9Qu7sZLwAp+D9GJ6pyEFktygPsswHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2E9hMV+FIIGa +7zjDW0+XkPeFXkbzZjkm6vFQxIcwQTLU+CwteNJq8ImDJ1LwOXz9SvJxJSIemPi 7u5wzP/IinvImKw9tD1vImhD2ABXgLnm7AHCVn2xtiDWUQAJdqA9YQ8x3EJceNbk BUPRqoVpovgJV1G6tU5ht+NkT/275MedZr48L6FHgB4mI9tAyZadfZYjsg63twS0 8VppNyyRac2lobIzHRHOgDuO19B36vgRB+tfT/VwWyoDttoeoFa95WcOcXgFSCWV aPuOttZZsK3EJ69MG0MHgfbh2UzCC6Hija6cOU/q32VMaw3n3O9IiEv7sAaU9DgU qTLh3+ew9A== -----END CERTIFICATE-----Generated at Fri Mar 27 05:01:32 2026 by rpki-client