$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: fJkF+Ir9C6hCy/k0q+zl3qvOiJObm/Y7VZdFl2Qxrqw= Subject key identifier: 93:F6:ED:10:33:C4:4F:30:2F:50:D8:46:8A:A5:E1:C5:16:DC:01:AC Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 3A0A748F58CDCA0EDA742C2821AE148019DE1444 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: 68 Signing time: Thu 26 Mar 2026 13:18:28 +0000 Manifest this update: Thu 26 Mar 2026 13:13:28 +0000 Manifest next update: Fri 27 Mar 2026 14:19:28 +0000 Files and hashes: 1: 3130332e3133392e39322e302f32332d3234203d3e20313534333231.roa (hash: MYZCf4PNOWzqElmrRXg430VY4rTe8Gvz2xJ1eEg6fPM=) 2: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: HFaRXzwf7ofvf3hywhOXIi36K3XzWXYfPCIfl/GbRNs=) 3: 3130332e3231382e39322e302f32322d3234203d3e20313534333231.roa (hash: 433AW0+hhEE8q7JCu17vzxwpDNdnp1FKFB4cC73VXRY=) 4: 3130332e3139372e3138302e302f32322d3234203d3e20313534333231.roa (hash: /sYnbyNE8n5tD7rL8BZspwNAMdcCPAdNW+N/JljypYg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0a:74:8f:58:cd:ca:0e:da:74:2c:28:21:ae:14:80:19:de:14:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Mar 26 13:13:28 2026 GMT Not After : Mar 27 14:19:28 2026 GMT Subject: CN=93F6ED1033C44F302F50D8468AA5E1C516DC01AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:a9:f6:85:01:7c:2f:64:c8:0b:3b:11:94: 6f:8c:1a:49:9e:7b:61:78:d4:86:da:a8:46:2e:11: f6:8f:61:10:d4:7f:92:19:8d:2e:56:46:92:fc:11: bc:a3:cb:7d:0c:23:c0:f4:6d:0a:9f:07:d5:0c:4f: 00:c2:1a:ec:3a:06:a7:4f:81:48:57:00:a7:90:ec: 84:47:bb:92:2a:cf:43:fe:9c:97:d5:83:fb:14:5e: a7:01:2b:a2:18:00:70:46:b2:96:76:cd:f2:75:88: 70:f1:55:cf:07:c2:7f:a0:3d:ac:1f:44:3a:7b:5a: c4:d5:17:7f:bd:ec:78:49:43:c1:47:cf:8e:d2:c0: fe:60:68:c2:5e:4c:20:75:04:3d:7f:d3:5a:76:c6: 54:ff:1f:02:51:bc:44:ba:1d:ab:f4:47:04:37:0a: 72:94:4d:1e:46:b6:0d:fa:ed:27:b4:00:67:f8:88: 4a:42:15:e3:5d:e3:fa:13:99:e0:56:ea:a0:5d:a1: 46:88:87:f7:de:95:7c:6e:a5:d7:c1:04:82:19:53: 5c:af:a7:ff:f7:56:cc:16:09:de:ad:c6:b1:8c:ee: 77:92:17:e5:33:10:33:f6:c4:67:72:21:a8:6d:4d: 27:99:42:f2:df:a3:e1:93:36:75:1d:bb:f2:84:f2: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F6:ED:10:33:C4:4F:30:2F:50:D8:46:8A:A5:E1:C5:16:DC:01:AC X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1f:92:0b:4f:0e:6f:b2:4f:23:ef:00:e4:27:e0:36:4a:1c: 29:5b:3f:a5:98:b8:41:ff:de:85:19:cf:ac:22:22:e4:70:2f: e2:a8:40:69:c9:87:4a:3b:69:f7:1d:eb:40:87:cb:16:e9:6d: fc:e7:5d:53:f4:27:be:39:9b:f8:12:51:51:51:a1:27:08:d9: f6:a7:81:6a:60:59:bd:16:37:39:33:d4:f7:1a:13:df:fa:ea: 99:02:fa:51:ea:63:9d:bf:99:12:22:f8:9c:39:7e:d3:6d:d3: dc:48:f9:7a:69:8b:6f:40:fd:c8:f8:eb:a3:db:ce:90:2a:75: eb:9c:bd:fa:d8:2e:52:13:aa:f8:6a:80:e3:02:d3:8b:a1:d2: 0a:cc:ae:6d:0f:08:fa:16:d6:a9:a7:5e:72:3a:af:98:46:c4: d6:c0:01:9b:9d:1b:69:f5:75:97:c0:6c:d4:7d:9c:ba:47:c7: 4f:04:ec:18:93:aa:f2:e3:09:58:dc:d2:af:52:9d:4c:06:94: 40:89:04:c2:61:2b:71:65:7c:98:7f:26:e2:a9:57:e0:5e:b8: 32:d2:7c:05:d5:f7:85:83:ad:e8:cc:2e:b4:f8:7c:9d:ad:85: ad:03:aa:2a:72:c8:c4:5f:7b:80:4a:6e:fb:b0:9e:7a:d1:41: b4:24:ae:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOgp0j1jNyg7adCwoIa4UgBneFEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjAzMjYxMzEzMjhaFw0yNjAzMjcxNDE5MjhaMDMxMTAvBgNV BAMTKDkzRjZFRDEwMzNDNDRGMzAyRjUwRDg0NjhBQTVFMUM1MTZEQzAxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTan2hQF8L2TICzsRlG+MGkme e2F41IbaqEYuEfaPYRDUf5IZjS5WRpL8Ebyjy30MI8D0bQqfB9UMTwDCGuw6BqdP gUhXAKeQ7IRHu5Iqz0P+nJfVg/sUXqcBK6IYAHBGspZ2zfJ1iHDxVc8Hwn+gPawf RDp7WsTVF3+97HhJQ8FHz47SwP5gaMJeTCB1BD1/01p2xlT/HwJRvES6Hav0RwQ3 CnKUTR5Gtg367Se0AGf4iEpCFeNd4/oTmeBW6qBdoUaIh/felXxupdfBBIIZU1yv p//3VswWCd6txrGM7neSF+UzEDP2xGdyIahtTSeZQvLfo+GTNnUdu/KE8pItAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk/btEDPETzAvUNhGiqXhxRbcAawwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB+SC08Ob7JP I+8A5CfgNkocKVs/pZi4Qf/ehRnPrCIi5HAv4qhAacmHSjtp9x3rQIfLFult/Odd U/Qnvjmb+BJRUVGhJwjZ9qeBamBZvRY3OTPU9xoT3/rqmQL6Uepjnb+ZEiL4nDl+ 023T3Ej5emmLb0D9yPjro9vOkCp165y9+tguUhOq+GqA4wLTi6HSCsyubQ8I+hbW qadecjqvmEbE1sABm50bafV1l8Bs1H2cukfHTwTsGJOq8uMJWNzSr1KdTAaUQIkE wmErcWV8mH8m4qlX4F64MtJ8BdX3hYOt6MwutPh8na2FrQOqKnLIxF97gEpu+7Ce etFBtCSuYQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:49 2026 by rpki-client