$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json) Hash identifier: oSN6bIUZ5Jj7lbjiqKqqNLAlIUFT1u9IDQ2qudACBhY= Subject key identifier: D9:04:92:B9:D9:D5:89:F7:7C:B0:B6:FE:7D:C6:47:BB:97:6E:8D:91 Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Certificate serial: 4B05CFF5AE218544DD61BD7AE87E04633957140B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft Manifest number: 5C Signing time: Thu 26 Mar 2026 08:43:28 +0000 Manifest this update: Thu 26 Mar 2026 08:38:28 +0000 Manifest next update: Fri 27 Mar 2026 12:13:28 +0000 Files and hashes: 1: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=) 2: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=) 3: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: 4e+MzyoFisLILt36p7pn0pfqnU3xoj3hZ2cPbtzBle8=) 4: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=) 5: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=) 6: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=) 7: AS9808.roa (hash: E/6QOHAzgXf03QFXs8qc4cA7hdE0GEiziY0xLK1ClFM=) 8: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=) 9: AS244400.roa (hash: bhI1UKxrm3GLN+fc8qGvC+xkunPjqFis517LeIEdzh8=) 10: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=) 11: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=) 12: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=) 13: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=) 14: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=) 15: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=) 16: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=) 17: AS24400.roa (hash: ql35zIap451HVcpWGnoICAb2sHI19dHkxqC8PGi+o/s=) 18: AS146788.roa (hash: zpRF+orMm1cXnAI2EXsq1WNqOE/Y017y0m/dOiaCEbE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:05:cf:f5:ae:21:85:44:dd:61:bd:7a:e8:7e:04:63:39:57:14:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Validity Not Before: Mar 26 08:38:28 2026 GMT Not After : Mar 27 12:13:28 2026 GMT Subject: CN=D90492B9D9D589F77CB0B6FE7DC647BB976E8D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:f6:b4:ee:a1:2b:22:ea:28:cf:6c:81:9d: 2e:7a:98:48:ee:97:58:af:5d:45:a9:4a:3e:55:65: 9b:8f:56:f5:82:64:f8:27:47:8c:e4:ef:d1:ac:00: d8:2b:36:9c:e5:01:2d:09:a6:1f:84:8a:c3:d3:e8: 66:b1:31:96:42:74:84:30:c4:95:56:31:5e:74:9b: 8d:79:e2:26:9d:f9:9d:ce:44:8f:05:39:5e:b9:fc: 0b:2d:45:0e:25:e1:88:8f:b5:8f:cf:22:c0:f7:48: 99:83:0e:44:8f:cd:11:11:cb:13:db:8a:43:b6:68: cc:ea:27:7e:0b:9b:c5:2c:70:8a:19:02:54:0d:3a: da:49:40:d4:09:57:c4:93:5d:4f:88:f3:b9:2d:d7: 04:fc:ba:4c:07:a2:73:8d:f9:6c:1c:86:0e:39:1c: 74:5a:2d:23:18:3c:8c:df:8b:7f:7b:fa:b9:90:e6: 61:ee:f6:78:2b:4d:1c:13:fb:70:8d:7c:4d:ae:55: e2:49:9b:40:b3:b3:3f:cc:9b:53:e1:31:0c:c6:8b: 5d:52:38:7a:b9:03:6a:49:ce:cc:45:88:05:c5:ed: f8:a4:f6:2b:cc:8b:f1:f9:ec:85:e5:5b:54:0e:39: bd:2c:fd:d8:6a:bb:e4:5b:1b:82:72:83:ea:b9:a0: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:04:92:B9:D9:D5:89:F7:7C:B0:B6:FE:7D:C6:47:BB:97:6E:8D:91 X509v3 Authority Key Identifier: keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1a:ad:6e:2f:2c:dc:03:5a:e5:cf:b1:dd:6a:69:75:a1:49: 2b:4e:72:ed:58:fe:19:b9:ca:ec:bb:f3:74:bd:ef:b2:6c:bd: ce:54:f3:37:8d:df:e7:84:01:17:7a:43:1e:e8:c8:40:9f:41: 9e:9a:d9:80:dc:56:0b:1c:40:4c:7b:c4:74:d7:05:be:85:fe: 2f:8d:e2:41:6b:06:3b:49:c5:7d:ec:53:1e:38:fe:32:e0:8e: 2e:b3:68:8e:60:1d:65:2e:2e:2e:21:91:7c:11:07:a1:a9:c4: c9:71:3b:a1:8b:09:0e:19:b7:64:0b:5e:ed:ab:05:ea:49:15: 99:02:30:51:a7:73:d6:91:dd:a8:40:2f:fe:0c:5b:1b:1f:aa: 9b:5d:10:8c:8e:7e:f9:36:f9:82:94:9e:12:88:c0:10:07:fa: cb:71:ab:88:4e:1e:1d:0c:5e:df:90:0a:7e:01:ed:59:54:ae: 0c:23:f7:b1:02:b3:c9:f7:4c:fd:79:b8:ab:1e:81:a1:68:64: 73:d7:c8:d7:42:c0:df:13:36:3c:e8:66:40:35:e7:78:e6:d2: 9d:0b:11:15:b0:ee:03:96:de:04:99:fe:2f:65:21:9d:3e:3b: 4f:3e:12:3a:b0:22:cd:f8:82:ea:a4:43:7a:cb:d3:91:d4:c1: 80:c7:72:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSwXP9a4hhUTdYb166H4EYzlXFAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2 Nzk2RjBGNjAeFw0yNjAzMjYwODM4MjhaFw0yNjAzMjcxMjEzMjhaMDMxMTAvBgNV BAMTKEQ5MDQ5MkI5RDlENTg5Rjc3Q0IwQjZGRTdEQzY0N0JCOTc2RThEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQva07qErIuooz2yBnS56mEju l1ivXUWpSj5VZZuPVvWCZPgnR4zk79GsANgrNpzlAS0Jph+EisPT6GaxMZZCdIQw xJVWMV50m4154iad+Z3ORI8FOV65/AstRQ4l4YiPtY/PIsD3SJmDDkSPzRERyxPb ikO2aMzqJ34Lm8UscIoZAlQNOtpJQNQJV8STXU+I87kt1wT8ukwHonON+Wwchg45 HHRaLSMYPIzfi397+rmQ5mHu9ngrTRwT+3CNfE2uVeJJm0Czsz/Mm1PhMQzGi11S OHq5A2pJzsxFiAXF7fik9ivMi/H57IXlW1QOOb0s/dhqu+RbG4Jyg+q5oAVJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2QSSudnVifd8sLb+fcZHu5dujZEwHwYDVR0j BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4 OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC84NDVCQjMwN0UyQTEx MDBFODlGQTBDOTM5QTkzODk2ODY3OTZGMEY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxqtbi8s3ANa 5c+x3WppdaFJK05y7Vj+GbnK7LvzdL3vsmy9zlTzN43f54QBF3pDHujIQJ9BnprZ gNxWCxxATHvEdNcFvoX+L43iQWsGO0nFfexTHjj+MuCOLrNojmAdZS4uLiGRfBEH oanEyXE7oYsJDhm3ZAte7asF6kkVmQIwUadz1pHdqEAv/gxbGx+qm10QjI5++Tb5 gpSeEojAEAf6y3GriE4eHQxe35AKfgHtWVSuDCP3sQKzyfdM/Xm4qx6BoWhkc9fI 10LA3xM2POhmQDXneObSnQsRFbDuA5beBJn+L2UhnT47Tz4SOrAizfiC6qRDesvT kdTBgMdyzg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:55:57 2026 by rpki-client