$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: H9/fK4gor57z60hRhr8emQQN7IV05T/6/KQO7Fs5M4I= Subject key identifier: E7:4D:A5:07:E1:C3:A5:9D:7E:89:C7:8B:D3:F1:29:7C:AC:F0:19:BB Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 1129BA59199E82CE7DAE9E7B7BC78F9DC1C4B0D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: 4E Signing time: Thu 26 Mar 2026 17:18:28 +0000 Manifest this update: Thu 26 Mar 2026 17:13:28 +0000 Manifest next update: Fri 27 Mar 2026 20:49:28 +0000 Files and hashes: 1: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: 9Cd+K/HNbRxUVqm2VV4uorIiPUWC2swbaojQRhaYl8E=) 2: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (hash: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=) 3: 3130332e36312e3137362e302f32322d3234203d3e20333939313338.roa (hash: lfso3iitwNXOWpDhN+K/LYRuYJB9b0kiLHNKSA+teTM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:29:ba:59:19:9e:82:ce:7d:ae:9e:7b:7b:c7:8f:9d:c1:c4:b0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: Mar 26 17:13:28 2026 GMT Not After : Mar 27 20:49:28 2026 GMT Subject: CN=E74DA507E1C3A59D7E89C78BD3F1297CACF019BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:85:86:a4:f8:cb:47:b7:44:b6:9c:8e:f1:71: a8:04:2b:da:1f:6c:6a:8c:7d:fb:f5:9e:78:2a:44: 96:9a:ca:21:e3:3a:5b:6d:8b:9f:7b:ab:df:e3:d9: 0b:12:7a:37:4b:47:f9:84:d6:fa:71:fc:aa:16:c2: f9:72:f8:ca:8a:a7:c1:eb:38:74:68:88:19:04:fc: 9d:e6:33:b5:30:5f:7f:82:8d:48:d0:4f:e9:6d:5d: e2:e5:37:cb:da:a2:10:ba:8f:a9:21:83:e0:87:23: c7:4d:13:80:6a:0d:4e:3c:3e:ad:20:50:41:db:59: d3:d6:d5:6b:f1:b2:42:2e:25:d0:83:10:92:0b:02: 1c:3b:3e:c4:54:a8:12:8b:dc:cb:13:f9:73:ee:35: 29:ec:d4:7f:e8:75:1b:36:73:c2:bd:b6:38:aa:fd: ad:f2:77:3e:3d:54:2c:3a:61:ee:00:82:cf:95:43: 7d:6b:7d:a3:8f:09:35:10:ab:c4:2f:43:47:1e:57: 9a:6a:06:70:82:b6:b5:68:b9:c9:01:84:97:ff:99: 8f:11:e5:50:ee:6c:6e:21:66:80:34:6f:c8:55:d6: c6:05:08:7b:6b:18:37:9b:f0:c1:d3:ab:7d:76:54: 3a:cf:19:5a:d5:17:4b:45:bb:19:78:7c:de:36:9b: a8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4D:A5:07:E1:C3:A5:9D:7E:89:C7:8B:D3:F1:29:7C:AC:F0:19:BB X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:04:e2:e1:fc:35:1e:b4:93:4f:8a:50:b0:24:63:64:40:b4: ba:c3:2d:8a:3c:66:90:2c:42:aa:e1:ea:97:4a:c9:ad:98:3a: a0:eb:eb:f7:19:5c:91:c0:2a:4c:1c:99:d1:ff:12:5a:73:90: 67:96:ed:bc:7f:1c:f8:cb:28:3e:59:3e:e2:ec:07:6d:09:30: b7:b7:4a:84:7c:36:77:36:56:8e:98:59:a6:ec:6d:53:13:0e: d9:b5:ad:cd:6f:09:30:eb:1f:b4:fd:62:7c:c0:a0:b7:75:7f: 84:66:84:da:de:f3:cb:19:13:48:86:02:cd:50:e7:de:4a:4f: d3:45:7a:53:56:a9:40:a8:6f:86:fd:d9:59:ff:62:64:54:af: 5f:a3:d2:67:f4:be:76:f7:a4:af:b8:80:a7:a5:54:6b:90:9d: ba:71:14:1e:89:1d:cb:de:93:69:f8:83:d9:73:4b:f6:61:ed: d4:74:25:97:95:b6:f7:9b:b3:23:01:b2:15:05:21:b6:a5:ce: be:53:7e:60:70:01:bc:f3:42:07:0e:9d:a7:71:99:6a:15:2f: 61:53:e5:02:c6:9c:5f:36:90:65:78:37:48:ac:ad:b8:67:5a: 6e:b3:e5:91:2a:b3:20:8b:1b:8b:39:cc:1b:84:71:65:04:a2: ab:46:8a:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUESm6WRmegs59rp57e8ePncHEsNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjAzMjYxNzEzMjhaFw0yNjAzMjcyMDQ5MjhaMDMxMTAvBgNV BAMTKEU3NERBNTA3RTFDM0E1OUQ3RTg5Qzc4QkQzRjEyOTdDQUNGMDE5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDehYak+MtHt0S2nI7xcagEK9of bGqMffv1nngqRJaayiHjOltti597q9/j2QsSejdLR/mE1vpx/KoWwvly+MqKp8Hr OHRoiBkE/J3mM7UwX3+CjUjQT+ltXeLlN8vaohC6j6khg+CHI8dNE4BqDU48Pq0g UEHbWdPW1WvxskIuJdCDEJILAhw7PsRUqBKL3MsT+XPuNSns1H/odRs2c8K9tjiq /a3ydz49VCw6Ye4Ags+VQ31rfaOPCTUQq8QvQ0ceV5pqBnCCtrVouckBhJf/mY8R 5VDubG4hZoA0b8hV1sYFCHtrGDeb8MHTq312VDrPGVrVF0tFuxl4fN42m6jtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU502lB+HDpZ1+iceL0/EpfKzwGbswHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgTi4fw1HrST T4pQsCRjZEC0usMtijxmkCxCquHql0rJrZg6oOvr9xlckcAqTByZ0f8SWnOQZ5bt vH8c+MsoPlk+4uwHbQkwt7dKhHw2dzZWjphZpuxtUxMO2bWtzW8JMOsftP1ifMCg t3V/hGaE2t7zyxkTSIYCzVDn3kpP00V6U1apQKhvhv3ZWf9iZFSvX6PSZ/S+dvek r7iAp6VUa5CdunEUHokdy96TafiD2XNL9mHt1HQll5W295uzIwGyFQUhtqXOvlN+ YHABvPNCBw6dp3GZahUvYVPlAsacXzaQZXg3SKytuGdabrPlkSqzIIsbiznMG4Rx ZQSiq0aKcg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:09:21 2026 by rpki-client