$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json) Hash identifier: 3NXm48rKnyYEYfGKvVGUq3jVMLWN9rBiNs8ItE4bVMw= Subject key identifier: 28:06:56:94:BE:38:5B:C8:5B:39:D7:37:27:CA:B7:BB:34:07:67:9D Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Certificate serial: 2AE3580034F11ECD316AAA6099F782908B1C9DD0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft Manifest number: 4D Signing time: Thu 26 Mar 2026 19:03:28 +0000 Manifest this update: Thu 26 Mar 2026 18:58:28 +0000 Manifest next update: Fri 27 Mar 2026 20:08:28 +0000 Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: maeFl4ArEn1YSByru7XVUkvPBoaNUM2dJ4SPkNvVYE4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e3:58:00:34:f1:1e:cd:31:6a:aa:60:99:f7:82:90:8b:1c:9d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Validity Not Before: Mar 26 18:58:28 2026 GMT Not After : Mar 27 20:08:28 2026 GMT Subject: CN=28065694BE385BC85B39D73727CAB7BB3407679D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:51:6f:dd:04:c7:ef:c2:a7:78:70:35:4b: fd:15:08:6d:c6:64:7d:46:3f:ba:e6:60:ec:13:ee: 89:ed:eb:26:14:b8:80:43:f8:cc:60:de:25:9f:5e: f6:ff:75:a9:a3:b5:88:a3:82:6e:0e:23:39:77:ca: c7:fb:e5:19:ef:3f:6a:c7:bb:34:15:08:c3:fe:66: 91:1c:7e:0c:9b:18:92:fb:3a:1c:e3:0f:09:7e:67: 0a:7a:dc:93:3a:8e:95:f5:da:46:aa:17:bb:1d:80: 53:ab:0b:01:d7:83:7b:20:9d:7e:3e:a3:ba:59:c0: 2c:57:3f:f9:10:df:71:ce:14:c4:d6:f2:84:8f:97: ce:6b:1b:4c:d8:f6:6c:e6:76:0b:15:c3:a9:9c:34: 0e:aa:c1:f6:91:09:0f:24:a6:7c:26:45:c6:60:e1: af:2a:2d:58:d2:96:a0:47:3e:85:c6:e0:2b:c6:92: 5f:99:ec:83:86:b7:fe:5f:b5:93:f4:3a:6d:68:0c: 93:6c:57:68:62:bc:97:3b:f5:21:cf:94:51:c2:75: c3:72:a6:45:cf:42:73:c6:d3:6b:19:54:86:6f:0d: c7:86:0b:1e:cd:8a:98:18:c9:de:16:ed:fd:15:4f: 4e:2a:83:54:5c:e5:19:6d:f0:d6:d7:71:e1:4c:c4: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:06:56:94:BE:38:5B:C8:5B:39:D7:37:27:CA:B7:BB:34:07:67:9D X509v3 Authority Key Identifier: keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f4:ae:ed:05:17:e5:b0:22:33:c1:ae:66:a3:eb:5d:31:da: 66:e5:93:9a:a2:00:0f:06:44:ce:d5:ee:a3:dd:78:07:0e:88: 52:5a:5c:56:a4:58:68:e0:07:3a:f7:81:e9:8b:2d:23:4a:2e: 7d:23:12:4a:c1:a9:05:d8:c9:eb:31:44:70:63:11:45:a2:d7: d9:db:c3:36:ad:7e:fb:0b:60:d1:7e:12:00:af:3b:89:3e:2e: 57:de:b3:c0:6c:52:e8:ef:0b:db:44:89:4c:03:d8:8b:05:b2: 6d:b8:52:93:34:f0:db:c9:7e:7f:75:ec:ba:fc:fb:5f:2e:f3: 95:0d:87:fe:08:d7:98:ea:bf:5d:61:4d:1d:75:eb:29:8e:e8: 3a:3a:42:9c:a1:10:ab:62:12:5e:b7:3b:d2:2c:ac:8e:91:bc: 54:b4:88:af:12:54:26:4a:3d:03:9a:9c:af:77:3d:6a:a0:56: fa:9b:db:44:33:82:9f:98:3d:00:89:f0:3d:2d:db:38:84:16: b6:3a:85:d3:6d:a5:34:a2:d3:09:9b:ce:8b:70:a8:e1:26:b2: 6a:8d:34:f7:fa:cc:74:5b:49:e2:43:23:63:60:a0:be:fb:4d: 8e:9d:0f:29:be:d7:c2:5a:47:1f:31:91:fd:2d:50:ab:01:68: 8e:d4:48:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKuNYADTxHs0xaqpgmfeCkIscndAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2 MkY5RjQ4NTAeFw0yNjAzMjYxODU4MjhaFw0yNjAzMjcyMDA4MjhaMDMxMTAvBgNV BAMTKDI4MDY1Njk0QkUzODVCQzg1QjM5RDczNzI3Q0FCN0JCMzQwNzY3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl01Fv3QTH78KneHA1S/0VCG3G ZH1GP7rmYOwT7ont6yYUuIBD+Mxg3iWfXvb/damjtYijgm4OIzl3ysf75RnvP2rH uzQVCMP+ZpEcfgybGJL7OhzjDwl+Zwp63JM6jpX12kaqF7sdgFOrCwHXg3sgnX4+ o7pZwCxXP/kQ33HOFMTW8oSPl85rG0zY9mzmdgsVw6mcNA6qwfaRCQ8kpnwmRcZg 4a8qLVjSlqBHPoXG4CvGkl+Z7IOGt/5ftZP0Om1oDJNsV2hivJc79SHPlFHCdcNy pkXPQnPG02sZVIZvDceGCx7NipgYyd4W7f0VT04qg1Rc5Rlt8NbXceFMxKX3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKAZWlL44W8hbOdc3J8q3uzQHZ50wHwYDVR0j BBgwFoAU8OK0VtTNcRMjJiHsv3kvSmL59IUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODc3ODQ5OC8wL0YwRTJCNDU2RDRDRDcxMTMyMzI2MjFFQ0JGNzky RjRBNjJGOUY0ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2MkY5RjQ4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3Nzg0OTgvMC9GMEUyQjQ1NkQ0Q0Q3 MTEzMjMyNjIxRUNCRjc5MkY0QTYyRjlGNDg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPSu7QUX5bAi M8GuZqPrXTHaZuWTmqIADwZEztXuo914Bw6IUlpcVqRYaOAHOveB6YstI0oufSMS SsGpBdjJ6zFEcGMRRaLX2dvDNq1++wtg0X4SAK87iT4uV96zwGxS6O8L20SJTAPY iwWybbhSkzTw28l+f3Xsuvz7Xy7zlQ2H/gjXmOq/XWFNHXXrKY7oOjpCnKEQq2IS Xrc70iysjpG8VLSIrxJUJko9A5qcr3c9aqBW+pvbRDOCn5g9AInwPS3bOIQWtjqF 022lNKLTCZvOi3Co4Sayao009/rMdFtJ4kMjY2CgvvtNjp0PKb7XwlpHHzGR/S1Q qwFojtRI9A== -----END CERTIFICATE-----Generated at Fri Mar 27 01:38:42 2026 by rpki-client