$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: v2OqExIWD1/fcz01UUPYDtaoH3RlWK6ef/4WxWAYM3c= Subject key identifier: A5:FD:76:E8:14:D2:C9:90:FF:F7:B0:A2:53:28:75:B5:C6:8B:75:1A Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 236288BD6B8D75E6AE2905924143EC284E695273 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 08:43:28 +0000 Manifest this update: Thu 26 Mar 2026 08:38:28 +0000 Manifest next update: Fri 27 Mar 2026 11:42:28 +0000 Files and hashes: 1: 323430313a353138303a3a2f33322d3332203d3e203331323136.roa (hash: c2BFIJVN4JIT5LRTdXldbHvwV8Z329mItcC2iWdKyZo=) 2: 323430313a353138303a3a2f33322d3332203d3e203539303030.roa (hash: TRLluA6jf4NdFyOWtNNpbTdRhqAOQP2P0L4Vhj+33WU=) 3: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: PNXfMPacBl13nEE1uCeNw2p30fJUX+MFFS9V75MiSVk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:62:88:bd:6b:8d:75:e6:ae:29:05:92:41:43:ec:28:4e:69:52:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Mar 26 08:38:28 2026 GMT Not After : Mar 27 11:42:28 2026 GMT Subject: CN=A5FD76E814D2C990FFF7B0A2532875B5C68B751A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:37:d3:26:3c:a4:f0:ff:e2:1a:d6:5d:1b: 65:12:87:48:91:2a:1a:4b:10:b9:3d:64:0a:09:fa: b4:a1:2f:d1:7f:bc:93:80:d3:77:4d:18:be:e2:d5: 2b:ba:46:36:95:a3:43:a5:d2:3e:fb:b8:1e:7c:57: f0:0e:42:40:c4:65:42:1c:11:0f:4e:54:ca:03:68: a5:02:06:99:a3:31:3c:11:17:6a:e4:9e:a3:04:e2: 0f:69:a3:5c:8a:ab:bb:9f:52:f2:8f:0a:d0:f4:d5: aa:d7:b1:3c:f9:80:b5:40:9a:46:ad:11:d6:5d:bc: d5:e7:d1:cd:61:18:24:0c:88:62:22:a4:c8:ef:bf: b1:72:f8:73:6e:77:46:a2:1e:f2:66:9d:16:fe:da: 94:8f:83:50:48:f4:da:54:7f:93:a4:70:bd:33:bf: 74:79:1f:74:08:a3:cd:8b:94:54:71:06:61:ef:f0: 2a:6d:8b:e1:33:7f:f9:45:16:01:94:0e:77:00:0a: f0:c6:d1:b3:75:00:07:90:13:65:ed:81:1a:5a:54: 51:54:8c:7a:e5:c0:f7:d8:a8:f3:af:bd:dc:94:ab: 99:ef:65:a0:5b:b4:26:4e:3c:d8:60:99:bc:bd:09: ba:b3:79:07:0d:f8:20:eb:89:5d:2d:4b:89:a9:fc: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FD:76:E8:14:D2:C9:90:FF:F7:B0:A2:53:28:75:B5:C6:8B:75:1A X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:98:80:e3:1b:ee:84:9e:8e:bc:9c:c4:df:6d:70:1f:86:b6: 30:44:cd:dd:a4:0f:79:7e:29:a3:40:fb:43:dc:6e:a1:87:20: b3:10:8c:b6:5c:1f:84:2c:bb:f3:c1:61:15:d0:91:59:87:13: 5e:05:e8:9c:4d:e3:f2:f3:39:67:e4:72:c6:f2:8b:de:ba:4e: 06:2b:d5:c3:43:3a:52:45:d6:36:bb:46:39:f8:1e:3d:e7:cd: fe:57:76:00:64:7a:09:aa:66:d2:ea:ea:38:17:3b:9a:34:02: 44:27:d1:b8:85:4e:09:25:0a:9b:c1:69:57:a6:27:10:ea:1c: fb:15:8f:03:01:ac:ef:43:c9:78:bc:85:c1:16:e6:6e:3c:77: 8a:92:d7:1d:93:dc:65:7e:44:99:c7:68:7f:1e:2e:f4:2f:f9: d3:26:b9:90:77:ae:26:ec:43:ef:b8:70:0e:f0:ee:a7:56:77: 41:32:66:15:ad:a9:29:06:9c:9b:f6:44:a6:7e:83:9c:2e:9c: 42:e3:00:33:26:b3:29:60:13:5c:66:53:94:44:ca:71:0a:5e: 28:d7:07:56:86:bf:55:74:dc:ce:2b:3d:2e:76:30:c9:81:12: 65:68:6d:c1:ea:6a:be:8d:c3:d2:88:8a:d8:60:c1:4a:55:20: 68:a9:c3:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI2KIvWuNdeauKQWSQUPsKE5pUnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjAzMjYwODM4MjhaFw0yNjAzMjcxMTQyMjhaMDMxMTAvBgNV BAMTKEE1RkQ3NkU4MTREMkM5OTBGRkY3QjBBMjUzMjg3NUI1QzY4Qjc1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jTfTJjyk8P/iGtZdG2USh0iR KhpLELk9ZAoJ+rShL9F/vJOA03dNGL7i1Su6RjaVo0Ol0j77uB58V/AOQkDEZUIc EQ9OVMoDaKUCBpmjMTwRF2rknqME4g9po1yKq7ufUvKPCtD01arXsTz5gLVAmkat EdZdvNXn0c1hGCQMiGIipMjvv7Fy+HNud0aiHvJmnRb+2pSPg1BI9NpUf5OkcL0z v3R5H3QIo82LlFRxBmHv8Cpti+Ezf/lFFgGUDncACvDG0bN1AAeQE2XtgRpaVFFU jHrlwPfYqPOvvdyUq5nvZaBbtCZOPNhgmby9CbqzeQcN+CDriV0tS4mp/IA3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpf126BTSyZD/97CiUyh1tcaLdRowHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJiA4xvuhJ6O vJzE321wH4a2METN3aQPeX4po0D7Q9xuoYcgsxCMtlwfhCy788FhFdCRWYcTXgXo nE3j8vM5Z+RyxvKL3rpOBivVw0M6UkXWNrtGOfgePefN/ld2AGR6Capm0urqOBc7 mjQCRCfRuIVOCSUKm8FpV6YnEOoc+xWPAwGs70PJeLyFwRbmbjx3ipLXHZPcZX5E mcdofx4u9C/50ya5kHeuJuxD77hwDvDup1Z3QTJmFa2pKQacm/ZEpn6DnC6cQuMA MyazKWATXGZTlETKcQpeKNcHVoa/VXTczis9LnYwyYESZWhtwepqvo3D0oiK2GDB SlUgaKnDkg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:41:19 2026 by rpki-client