$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json) Hash identifier: fb4E9WS01zDfPuzkLQCGAz0z9LV32SwsZpC/h2oKFWI= Subject key identifier: F9:8A:38:17:FD:20:7A:25:84:86:2F:CB:92:3C:13:7E:56:96:C7:B5 Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Certificate serial: 3C4AA80A6EE3113E3207220B49522E5EECE05520 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft Manifest number: 45 Signing time: Thu 26 Mar 2026 17:48:28 +0000 Manifest this update: Thu 26 Mar 2026 17:43:28 +0000 Manifest next update: Fri 27 Mar 2026 20:06:28 +0000 Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: aAH1+oQbNVTGLFEZ2SdzOLPMihT5fclGKMdHQeCMiiU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4a:a8:0a:6e:e3:11:3e:32:07:22:0b:49:52:2e:5e:ec:e0:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Validity Not Before: Mar 26 17:43:28 2026 GMT Not After : Mar 27 20:06:28 2026 GMT Subject: CN=F98A3817FD207A2584862FCB923C137E5696C7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:87:ab:44:0d:39:b9:73:ba:63:a1:1e:e8:77: d1:52:cb:0d:2e:a5:aa:72:62:c5:30:c2:47:cd:87: fb:9d:09:70:37:f9:46:b6:6a:01:10:ea:26:2f:d7: f0:b4:39:c4:7d:17:26:38:bd:a7:57:37:17:85:61: 62:0b:75:58:4d:19:fe:d8:61:1d:5f:24:b5:c6:26: 47:da:f3:44:9a:90:f1:51:e6:a4:33:46:e9:e1:79: f7:5f:fd:fb:27:39:1d:70:1d:7d:75:46:e3:db:86: e3:3a:3f:49:35:3b:8c:94:f3:ec:7d:8b:8e:79:12: 72:fc:95:a1:46:70:96:24:93:ec:2b:74:31:f7:5d: 2a:96:e6:d7:d9:5d:f4:ab:cb:1d:b3:ea:ae:90:cc: 3a:76:b6:77:f7:91:2c:f2:08:69:f3:d5:88:5c:5a: 8a:43:51:64:8d:bb:d3:fe:12:68:62:d2:60:e2:c5: cd:db:94:58:7b:08:dd:36:2b:a1:9b:05:7f:68:9c: b2:bb:1b:f5:f1:08:09:25:f2:75:74:bc:d0:74:46: 7f:6f:0f:2d:77:f2:81:d8:65:d7:b8:1d:94:32:d2: 06:e8:5b:5c:24:de:34:89:ef:b0:84:1f:9f:36:bb: ee:02:7b:bb:33:67:d4:b8:91:21:b5:a8:fc:b2:31: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8A:38:17:FD:20:7A:25:84:86:2F:CB:92:3C:13:7E:56:96:C7:B5 X509v3 Authority Key Identifier: keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:19:71:02:82:71:4f:0e:9d:6e:1a:38:30:a4:99:e4:74:52: 1d:64:88:27:d1:11:12:47:90:ce:86:68:ce:44:01:08:95:ed: 8a:af:d7:c7:17:8d:ad:fa:2e:09:85:23:cf:d6:e0:61:7c:4f: 21:d4:89:fb:4b:93:79:6a:ec:39:63:c7:27:37:36:f5:48:4e: 49:f3:da:c7:35:4b:77:15:cf:4d:47:cb:a6:a0:66:55:92:5b: 02:f3:6d:56:11:22:dc:6f:54:0d:71:40:b3:96:4a:f8:49:58: 29:b4:f8:6c:a9:ee:7e:6b:81:91:b8:40:17:40:c8:a9:1c:96: 33:c2:bf:1f:5e:2b:c8:8d:04:a8:74:dd:3b:85:ec:e7:3c:45: 04:11:dd:05:34:37:08:c9:c3:eb:ab:87:a6:e4:0c:96:d0:ae: 05:16:19:ca:69:a8:c8:00:64:ff:97:6f:a1:fe:e9:71:65:3c: 8d:f3:ce:eb:1e:fb:f7:e7:26:27:44:77:27:7c:d1:3d:a4:2d: 81:36:33:9c:af:ca:1c:47:74:a6:e9:d4:8a:e1:a2:e6:9d:5f: e0:7f:53:21:bf:45:8a:45:0a:bc:00:14:75:f9:50:08:8f:22: 54:2f:f5:a2:12:dd:8f:b0:7f:ed:14:da:be:51:bf:47:65:9b: c2:65:22:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPEqoCm7jET4yByILSVIuXuzgVSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdF NzVBNTc0QTAeFw0yNjAzMjYxNzQzMjhaFw0yNjAzMjcyMDA2MjhaMDMxMTAvBgNV BAMTKEY5OEEzODE3RkQyMDdBMjU4NDg2MkZDQjkyM0MxMzdFNTY5NkM3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzh6tEDTm5c7pjoR7od9FSyw0u papyYsUwwkfNh/udCXA3+Ua2agEQ6iYv1/C0OcR9FyY4vadXNxeFYWILdVhNGf7Y YR1fJLXGJkfa80SakPFR5qQzRunhefdf/fsnOR1wHX11RuPbhuM6P0k1O4yU8+x9 i455EnL8laFGcJYkk+wrdDH3XSqW5tfZXfSryx2z6q6QzDp2tnf3kSzyCGnz1Yhc WopDUWSNu9P+Emhi0mDixc3blFh7CN02K6GbBX9onLK7G/XxCAkl8nV0vNB0Rn9v Dy138oHYZde4HZQy0gboW1wk3jSJ77CEH582u+4Ce7szZ9S4kSG1qPyyMXt5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+Yo4F/0geiWEhi/LkjwTflaWx7UwHwYDVR0j BBgwFoAU89IYnnnYyrqm5janBuOIJ+daV0owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzQ4MDE5NS8wL0YzRDIxODlFNzlEOENBQkFBNkU2MzZBNzA2RTM4 ODI3RTc1QTU3NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdFNzVBNTc0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM0ODAxOTUvMC9GM0QyMTg5RTc5RDhD QUJBQTZFNjM2QTcwNkUzODgyN0U3NUE1NzRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRlxAoJxTw6d bho4MKSZ5HRSHWSIJ9EREkeQzoZozkQBCJXtiq/XxxeNrfouCYUjz9bgYXxPIdSJ +0uTeWrsOWPHJzc29UhOSfPaxzVLdxXPTUfLpqBmVZJbAvNtVhEi3G9UDXFAs5ZK +ElYKbT4bKnufmuBkbhAF0DIqRyWM8K/H14ryI0EqHTdO4Xs5zxFBBHdBTQ3CMnD 66uHpuQMltCuBRYZymmoyABk/5dvof7pcWU8jfPO6x779+cmJ0R3J3zRPaQtgTYz nK/KHEd0punUiuGi5p1f4H9TIb9FikUKvAAUdflQCI8iVC/1ohLdj7B/7RTavlG/ R2WbwmUiVA== -----END CERTIFICATE-----Generated at Fri Mar 27 04:44:33 2026 by rpki-client