$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: 6daICcx3RMuoUwjJp22270Z+SOkSFLv8zfOAALqIhNY= Subject key identifier: 4C:2E:C2:0B:B7:16:04:3F:41:63:30:A3:41:2E:81:D6:4B:8E:F9:4D Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 21E85C3294C8399FE142CDE0E7755DC7FC5E8A66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 07:38:28 +0000 Manifest this update: Thu 26 Mar 2026 07:33:28 +0000 Manifest next update: Fri 27 Mar 2026 10:12:28 +0000 Files and hashes: 1: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 2: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 3: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: nJ6T6pcDkb+f21Jj2bKO7gA0w5ZRbXmSWZ/dIxo5CXs=) 4: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 5: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 6: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 7: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e8:5c:32:94:c8:39:9f:e1:42:cd:e0:e7:75:5d:c7:fc:5e:8a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Mar 26 07:33:28 2026 GMT Not After : Mar 27 10:12:28 2026 GMT Subject: CN=4C2EC20BB716043F416330A3412E81D64B8EF94D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a5:09:8c:22:6c:a2:8e:12:8b:4e:e0:64:3d: c7:56:95:8c:b4:e3:80:e2:32:20:cd:6c:40:b8:30: 68:27:62:b9:76:cc:76:bc:ee:58:de:3b:94:83:35: 54:25:ac:e4:f9:b3:8b:c5:cf:82:cb:dc:25:9b:eb: a9:72:cf:a9:61:27:7b:10:ac:80:dd:a3:3e:bd:d9: b2:e3:d5:39:5e:25:b0:e3:08:68:d1:c7:a7:c5:36: 99:7c:d2:fa:77:da:bd:17:6c:cf:4e:93:85:58:58: ad:e2:81:34:35:06:e8:3b:6c:36:52:82:22:82:41: 98:0f:3c:63:f3:f3:ae:c5:a7:b6:89:8c:76:80:d7: 98:2e:23:27:e5:d2:06:d2:45:5a:0e:34:61:73:af: 6a:29:ab:16:aa:2e:84:1b:3e:77:dd:6f:eb:48:97: 19:55:a3:d7:45:98:b6:7d:47:08:9c:0f:0f:a7:96: 6a:0b:2a:f1:6b:5b:72:28:82:0e:91:c9:8c:cd:88: 98:ee:5c:a0:60:0f:81:9b:17:d9:0e:7d:3f:0d:69: f2:55:04:98:b2:fa:73:14:b5:82:19:a8:9a:fa:ca: 06:63:7f:45:0d:9d:56:5d:20:cc:16:b6:ff:bf:da: ff:2b:08:9b:49:32:c8:1d:d0:e2:02:47:c5:7e:2c: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2E:C2:0B:B7:16:04:3F:41:63:30:A3:41:2E:81:D6:4B:8E:F9:4D X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:0e:23:ff:ae:1b:14:9b:cd:ef:30:ea:57:8f:a3:0a:06:64: b6:41:25:27:2c:fe:a0:ad:ac:e7:ba:b8:fd:8a:44:b1:14:ad: 86:84:28:8c:d4:bc:ce:dc:dc:d2:b5:82:9d:e9:a0:21:1c:9a: 37:fc:76:43:e2:be:4c:17:91:15:e9:cc:82:5d:fc:7f:f3:ac: 8d:35:d0:13:21:36:a4:3d:2b:99:03:33:f3:cc:e0:28:e8:3f: a2:9b:c3:3a:b6:c4:3c:4c:8e:84:b6:25:35:55:26:7b:30:da: 53:03:20:a5:19:eb:45:fd:55:a3:39:7d:96:e0:99:f6:61:62: ab:ae:a1:af:f2:5c:03:7c:24:40:08:41:64:64:0c:34:26:05: f2:32:a2:9a:71:f0:70:76:02:d3:dd:51:51:49:49:2c:d6:b4: 91:75:39:c6:75:66:3d:91:02:36:dd:52:36:c3:41:18:0b:13: 9e:1c:dc:99:d1:02:88:8f:a4:21:28:3a:b8:0e:87:1b:54:14: d9:24:1f:61:c5:92:5f:bd:39:a4:4d:aa:31:56:e0:3e:31:74: 59:eb:e6:8b:1a:b8:6d:9d:5c:3d:2a:7a:11:05:3a:96:7a:d3: b5:68:8f:0d:65:c8:78:e2:b6:31:18:26:9e:80:76:14:85:9e: 70:19:b5:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIehcMpTIOZ/hQs3g53Vdx/xeimYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjAzMjYwNzMzMjhaFw0yNjAzMjcxMDEyMjhaMDMxMTAvBgNV BAMTKDRDMkVDMjBCQjcxNjA0M0Y0MTYzMzBBMzQxMkU4MUQ2NEI4RUY5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwpQmMImyijhKLTuBkPcdWlYy0 44DiMiDNbEC4MGgnYrl2zHa87ljeO5SDNVQlrOT5s4vFz4LL3CWb66lyz6lhJ3sQ rIDdoz692bLj1TleJbDjCGjRx6fFNpl80vp32r0XbM9Ok4VYWK3igTQ1Bug7bDZS giKCQZgPPGPz867Fp7aJjHaA15guIyfl0gbSRVoONGFzr2opqxaqLoQbPnfdb+tI lxlVo9dFmLZ9RwicDw+nlmoLKvFrW3Iogg6RyYzNiJjuXKBgD4GbF9kOfT8NafJV BJiy+nMUtYIZqJr6ygZjf0UNnVZdIMwWtv+/2v8rCJtJMsgd0OICR8V+LLM1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTC7CC7cWBD9BYzCjQS6B1kuO+U0wHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQ4j/64bFJvN 7zDqV4+jCgZktkElJyz+oK2s57q4/YpEsRSthoQojNS8ztzc0rWCnemgIRyaN/x2 Q+K+TBeRFenMgl38f/OsjTXQEyE2pD0rmQMz88zgKOg/opvDOrbEPEyOhLYlNVUm ezDaUwMgpRnrRf1Vozl9luCZ9mFiq66hr/JcA3wkQAhBZGQMNCYF8jKimnHwcHYC 091RUUlJLNa0kXU5xnVmPZECNt1SNsNBGAsTnhzcmdECiI+kISg6uA6HG1QU2SQf YcWSX705pE2qMVbgPjF0Wevmixq4bZ1cPSp6EQU6lnrTtWiPDWXIeOK2MRgmnoB2 FIWecBm13A== -----END CERTIFICATE-----Generated at Thu Mar 26 19:52:55 2026 by rpki-client