$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json) Hash identifier: 2HfK0d8e6+z38JmxtNhoIqOqbWBnWkbs0pS/1I9BDPU= Subject key identifier: B3:50:16:34:E9:D1:F8:D7:DC:93:DF:B2:F7:27:DB:55:C1:E1:5A:FC Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 4405A0CF13EE2290659E6E3FCB21ACB78A825EC9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft Manifest number: 51 Signing time: Thu 26 Mar 2026 05:48:28 +0000 Manifest this update: Thu 26 Mar 2026 05:43:28 +0000 Manifest next update: Fri 27 Mar 2026 08:57:28 +0000 Files and hashes: 1: 312e3131382e33362e302f32342d3234203d3e20313337373533.roa (hash: wX3KXCFY3ZU/rDO+Um660eZhmmPPFKIuR9ybyalQ4a8=) 2: 312e3131382e33322e302f32322d3234203d3e20313337373533.roa (hash: 3olER77Eb/qrnFQ6fryREN7c/oB5Od6mzJn5VRZWU3M=) 3: 312e3131382e36342e302f31392d3234203d3e20313337373533.roa (hash: tObk82ypt899Ae71gDcnATLW2DJAnEZ18kmyPZI+N2c=) 4: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: EaxywpXDBNyjZZFw1t3eBmTJ/PKV7zihLVEnNaD/PWY=) 5: 312e3131382e332e302f32342d3234203d3e203136353039.roa (hash: +sGAlSoNhJAnufejm1rjSFdGhkbm95UUnsMG7/4cIj8=) 6: 312e3131382e332e302f32342d3234203d3e203134363138.roa (hash: Z80TJPKgWBszaQisJj/8BpK4zah/4emmNvfcSctsSwU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:05:a0:cf:13:ee:22:90:65:9e:6e:3f:cb:21:ac:b7:8a:82:5e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Mar 26 05:43:28 2026 GMT Not After : Mar 27 08:57:28 2026 GMT Subject: CN=B3501634E9D1F8D7DC93DFB2F727DB55C1E15AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:11:9a:64:a5:0c:85:db:7a:fc:4c:70:15:81: 9c:7f:9b:f1:f3:3e:f5:b1:23:f0:2c:08:b6:8c:30: 2f:24:af:16:0e:68:e4:f2:5f:c7:41:ea:32:c9:b9: bb:34:e7:dc:f0:3b:eb:a6:5a:76:94:03:7f:be:79: 28:aa:53:bf:77:90:48:2d:66:c0:fc:15:f7:22:45: 0c:64:6b:c5:6e:76:63:aa:0a:5c:3c:11:32:3a:a1: 70:c0:b9:7c:91:8c:33:84:21:5e:c6:e7:5a:f3:2f: 66:57:37:b5:8a:81:0e:2f:4c:5d:93:d4:d8:46:75: f1:16:6e:7f:48:a0:67:23:c3:e8:73:d8:7d:45:e1: 22:65:de:e2:8c:15:ba:71:b3:84:13:a0:d9:43:5e: 66:79:4d:d7:42:c3:bc:ff:89:2a:46:d9:61:88:58: 78:2f:9c:03:eb:71:0e:ca:a4:01:1b:6a:5d:1d:95: 47:70:64:28:f0:ec:39:28:97:34:9c:32:13:d6:36: 6e:fc:e4:8f:89:f8:00:72:3d:74:c7:3e:bd:99:73: a9:d9:ac:cd:8e:5f:86:1c:ef:af:9a:95:cd:cd:2a: cc:f4:f6:ab:0f:69:a3:97:37:dd:00:1f:db:cf:38: f4:b9:f4:ec:13:33:e0:36:5d:02:33:cf:29:68:c0: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:50:16:34:E9:D1:F8:D7:DC:93:DF:B2:F7:27:DB:55:C1:E1:5A:FC X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:65:5a:b2:6b:e8:fa:b8:83:c6:12:61:93:80:37:9a:d1:91: 0e:28:9f:5c:b2:b4:d9:77:48:e5:87:13:6d:73:b8:17:40:a6: 40:91:f7:a6:ad:fb:b6:68:44:e6:d9:65:8a:0e:d8:0b:d6:cb: b4:87:49:ac:70:5b:05:08:c4:5f:e8:45:9f:59:1d:2f:81:ca: 68:80:a8:f0:33:7b:27:a2:3f:f6:43:fe:1f:ba:60:d4:91:2d: 0a:07:dd:f6:c0:b1:b1:93:9a:85:6a:d1:05:31:59:1c:f0:ae: 10:17:c6:f6:61:74:d3:c8:54:58:db:11:cc:78:5c:f1:15:b7: 73:13:39:90:d8:16:98:07:57:17:34:71:78:c6:b6:a5:6e:65: 66:b4:5a:3f:2b:9e:fd:08:32:b9:64:31:26:6e:8b:85:40:79: 20:c0:76:56:89:b8:ba:70:43:f4:ea:ae:7a:d5:47:a0:18:32: e9:66:e0:c4:41:42:0d:a6:44:0a:d5:28:73:af:96:d6:3b:6d: d4:ef:20:21:bc:59:30:12:85:08:d8:50:bf:fe:63:6d:f4:0d: 3c:d2:51:83:df:2c:9f:84:c0:d1:05:32:d7:f9:16:68:36:1b: 26:0b:64:fc:43:fb:a1:87:9c:4f:6f:67:4d:48:01:1a:e9:4b: 55:1a:3a:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURAWgzxPuIpBlnm4/yyGst4qCXskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjAzMjYwNTQzMjhaFw0yNjAzMjcwODU3MjhaMDMxMTAvBgNV BAMTKEIzNTAxNjM0RTlEMUY4RDdEQzkzREZCMkY3MjdEQjU1QzFFMTVBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEZpkpQyF23r8THAVgZx/m/Hz PvWxI/AsCLaMMC8krxYOaOTyX8dB6jLJubs059zwO+umWnaUA3++eSiqU793kEgt ZsD8FfciRQxka8VudmOqClw8ETI6oXDAuXyRjDOEIV7G51rzL2ZXN7WKgQ4vTF2T 1NhGdfEWbn9IoGcjw+hz2H1F4SJl3uKMFbpxs4QToNlDXmZ5TddCw7z/iSpG2WGI WHgvnAPrcQ7KpAEbal0dlUdwZCjw7DkolzScMhPWNm785I+J+AByPXTHPr2Zc6nZ rM2OX4Yc76+alc3NKsz09qsPaaOXN90AH9vPOPS59OwTM+A2XQIzzylowLsHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs1AWNOnR+Nfck9+y9yfbVcHhWvwwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9ENjgwNURCMzA5MDU3 NjEyQ0M5MjcyQ0IyQzg1QkE2Q0IwRDM4OUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimVasmvo+riD xhJhk4A3mtGRDiifXLK02XdI5YcTbXO4F0CmQJH3pq37tmhE5tllig7YC9bLtIdJ rHBbBQjEX+hFn1kdL4HKaICo8DN7J6I/9kP+H7pg1JEtCgfd9sCxsZOahWrRBTFZ HPCuEBfG9mF008hUWNsRzHhc8RW3cxM5kNgWmAdXFzRxeMa2pW5lZrRaPyue/Qgy uWQxJm6LhUB5IMB2Vom4unBD9OquetVHoBgy6WbgxEFCDaZECtUoc6+W1jtt1O8g IbxZMBKFCNhQv/5jbfQNPNJRg98sn4TA0QUy1/kWaDYbJgtk/EP7oYecT29nTUgB GulLVRo6ug== -----END CERTIFICATE-----Generated at Thu Mar 26 21:26:26 2026 by rpki-client