$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft File: EDAEF642B728F950499E8F90EDC704EB965E54A5.mft (raw, json) Hash identifier: fTDvTYq4QN+Q2bFTYDArmghfniFuRMdlig7qCim3nqk= Subject key identifier: 2E:F2:E4:AF:33:ED:6B:E0:D1:BD:7F:6A:D6:B0:62:E7:38:1E:99:09 Authority key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 Certificate issuer: /CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Certificate serial: 08146804161AFA1FA941A30A511F9A459C86D04C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft Manifest number: 55 Signing time: Thu 26 Mar 2026 18:33:28 +0000 Manifest this update: Thu 26 Mar 2026 18:28:28 +0000 Manifest next update: Fri 27 Mar 2026 19:59:28 +0000 Files and hashes: 1: EDAEF642B728F950499E8F90EDC704EB965E54A5.crl (hash: R+iOVGmtcIvx0e6GJeozCv5wv9wQ/PRl8RRbTmiZMOk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:14:68:04:16:1a:fa:1f:a9:41:a3:0a:51:1f:9a:45:9c:86:d0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Validity Not Before: Mar 26 18:28:28 2026 GMT Not After : Mar 27 19:59:28 2026 GMT Subject: CN=2EF2E4AF33ED6BE0D1BD7F6AD6B062E7381E9909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:4d:f1:75:b5:27:10:86:78:f2:01:aa:d8: ee:67:19:dd:72:1c:14:f8:14:2c:0a:c1:8a:98:be: 13:28:8e:cf:e9:d7:80:b6:99:fb:34:80:53:51:c6: d1:7d:38:7b:11:3a:37:e1:3a:f6:ce:da:a0:65:b5: 0b:43:f2:c8:dd:82:f1:88:82:63:50:a4:12:a4:8f: 85:24:85:58:fc:2f:df:0c:be:44:f3:06:77:30:7a: c2:5f:7d:54:a7:5d:4e:21:2d:b9:9a:e6:f9:b2:0b: ab:5d:1a:4d:9e:c1:9b:8d:46:be:f4:cc:77:c6:65: 9d:c2:4c:37:d7:43:ff:46:5e:4b:9f:69:f6:83:8e: 9d:f0:b4:23:99:77:05:77:79:a9:3f:b0:00:ea:e7: 2f:57:1d:27:1d:7d:61:18:b7:0f:84:c3:34:27:76: da:41:3c:c4:09:2a:3c:f7:94:be:ff:fb:9e:b5:c7: ec:a1:2f:a1:62:70:67:5d:6d:6a:f2:13:cc:cb:c1: 8c:af:2c:79:80:cb:38:7f:c8:66:fe:96:ff:d3:7f: 15:57:ab:00:a3:6a:95:9e:cc:1f:ae:49:c6:34:0f: 65:de:92:e6:e3:3e:91:fb:04:f0:2c:43:6f:6f:7f: c0:9e:07:2c:c9:97:4d:d8:69:fb:dc:0a:7d:f7:6a: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F2:E4:AF:33:ED:6B:E0:D1:BD:7F:6A:D6:B0:62:E7:38:1E:99:09 X509v3 Authority Key Identifier: keyid:ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ee:bc:c5:dd:f6:b9:6a:61:0a:b1:a6:14:4d:73:06:cb:88: 81:be:8b:f6:d7:45:f4:45:8f:0c:c2:1f:46:88:de:79:7a:19: 0d:52:ea:4b:95:d4:cf:bc:c4:d5:80:69:24:72:80:85:d8:81: 89:37:27:db:df:86:6e:ab:28:4e:76:6d:91:1c:26:d3:11:0e: d3:25:93:d4:e2:cf:cf:fb:d1:45:8e:a5:90:35:f2:30:bd:34: 74:c1:3a:b1:f1:65:91:4c:7b:30:48:a6:01:8c:ff:c9:fe:2f: 90:07:3e:81:fa:28:2c:ab:be:a5:78:39:14:87:6e:35:3b:2c: dc:b7:61:aa:c4:5a:c2:2c:bc:46:3d:b9:21:a4:e5:ba:00:7f: fe:8a:50:4f:aa:29:6c:fc:af:7a:6d:1e:22:88:fb:bb:78:af: e2:35:ee:ed:9c:1d:53:29:30:9e:c7:7c:3f:2c:2a:be:84:26: 18:41:0e:40:d9:44:d8:7f:b1:62:d1:c9:4d:89:4e:f5:76:b8: d8:eb:f4:12:04:e9:6e:de:0f:11:2f:6e:13:78:67:5e:4e:78: e5:6f:b5:b9:b2:77:c6:7f:42:0b:f7:bb:b2:ba:93:e3:58:e2: 6a:9c:df:ef:1e:80:6c:3b:67:45:ab:55:cc:e7:db:a8:27:df: 23:a4:58:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCBRoBBYa+h+pQaMKUR+aRZyG0EwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5 NjVFNTRBNTAeFw0yNjAzMjYxODI4MjhaFw0yNjAzMjcxOTU5MjhaMDMxMTAvBgNV BAMTKDJFRjJFNEFGMzNFRDZCRTBEMUJEN0Y2QUQ2QjA2MkU3MzgxRTk5MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfI03xdbUnEIZ48gGq2O5nGd1y HBT4FCwKwYqYvhMojs/p14C2mfs0gFNRxtF9OHsROjfhOvbO2qBltQtD8sjdgvGI gmNQpBKkj4UkhVj8L98MvkTzBncwesJffVSnXU4hLbma5vmyC6tdGk2ewZuNRr70 zHfGZZ3CTDfXQ/9GXkufafaDjp3wtCOZdwV3eak/sADq5y9XHScdfWEYtw+EwzQn dtpBPMQJKjz3lL7/+561x+yhL6FicGddbWryE8zLwYyvLHmAyzh/yGb+lv/TfxVX qwCjapWezB+uScY0D2XekubjPpH7BPAsQ29vf8CeByzJl03YafvcCn33aqNTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULvLkrzPta+DRvX9q1rBi5zgemQkwHwYDVR0j BBgwFoAU7a72Qrco+VBJno+Q7ccE65ZeVKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NjczNzU3NjAwMzUwMjA4MS8wL0VEQUVGNjQyQjcyOEY5NTA0OTlFOEY5MEVEQzcw NEVCOTY1RTU0QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5NjVFNTRBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjY3Mzc1NzYwMDM1MDIwODEvMC9FREFFRjY0MkI3MjhG OTUwNDk5RThGOTBFREM3MDRFQjk2NUU1NEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+68xd32uWph CrGmFE1zBsuIgb6L9tdF9EWPDMIfRojeeXoZDVLqS5XUz7zE1YBpJHKAhdiBiTcn 29+GbqsoTnZtkRwm0xEO0yWT1OLPz/vRRY6lkDXyML00dME6sfFlkUx7MEimAYz/ yf4vkAc+gfooLKu+pXg5FIduNTss3LdhqsRawiy8Rj25IaTlugB//opQT6opbPyv em0eIoj7u3iv4jXu7ZwdUykwnsd8PywqvoQmGEEOQNlE2H+xYtHJTYlO9Xa42Ov0 EgTpbt4PES9uE3hnXk545W+1ubJ3xn9CC/e7srqT41jiapzf7x6AbDtnRatVzOfb qCffI6RYtA== -----END CERTIFICATE-----Generated at Fri Mar 27 05:05:19 2026 by rpki-client