$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: bMfjL6xn7T5CvVJyrzUFB1z+ccoIJiirt3RqBOFOER8= Subject key identifier: 33:A1:25:2A:AD:64:AD:BD:17:37:F6:48:DC:B4:5D:3C:C3:29:70:06 Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 2ABA35B463395673763B3EDB03223C21E5E8CC01 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: 26 Signing time: Thu 26 Mar 2026 16:23:28 +0000 Manifest this update: Thu 26 Mar 2026 16:18:28 +0000 Manifest next update: Fri 27 Mar 2026 17:35:28 +0000 Files and hashes: 1: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) 2: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: 3JVhylKCbMq36tAbnlEGw6jA2VBvMuZclDg2cqAfO1Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ba:35:b4:63:39:56:73:76:3b:3e:db:03:22:3c:21:e5:e8:cc:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: Mar 26 16:18:28 2026 GMT Not After : Mar 27 17:35:28 2026 GMT Subject: CN=33A1252AAD64ADBD1737F648DCB45D3CC3297006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:2a:bf:22:0a:f1:21:72:66:51:ac:70:72: 3a:01:97:08:d2:08:5a:db:87:11:eb:fc:e2:a2:c9: 1a:9b:91:23:67:c9:46:61:56:ea:4e:ac:17:82:5d: cf:a1:b3:3c:53:28:05:69:6e:ab:4e:2b:4d:04:09: bb:7c:cd:2a:7a:18:d2:f9:97:e1:93:38:be:f1:b4: e9:54:dd:30:2b:58:b4:a4:05:3b:92:df:1a:2c:3d: e5:f6:59:a1:a8:e5:19:51:02:5a:ef:cf:92:73:89: c8:3a:ab:8a:42:c6:4a:e7:32:03:a7:4c:f7:e1:e2: 28:1b:0a:5d:da:e7:2a:61:9e:43:97:ae:79:01:9d: 94:15:c8:4d:12:c2:42:15:4e:8d:e2:24:b5:68:20: e2:0d:07:67:bc:7d:b0:b2:4e:a7:12:e7:f6:34:12: fd:1b:ef:76:50:c7:de:fd:f4:68:b9:f5:22:5d:dc: 03:dd:e7:96:50:46:29:4f:d3:53:dc:1a:74:ad:33: 34:c0:66:5e:e0:18:6b:4e:7c:7e:1c:05:22:0d:0e: 35:e8:82:a8:84:d1:f2:5e:12:6d:af:7d:71:6c:82: ef:65:e7:ce:23:ed:1e:76:47:30:3d:69:c8:1e:73: 8c:20:a1:ad:a3:b6:7f:46:76:78:0e:46:7f:90:59: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A1:25:2A:AD:64:AD:BD:17:37:F6:48:DC:B4:5D:3C:C3:29:70:06 X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:79:47:f6:65:f8:43:3c:23:11:f0:5d:85:ee:9e:fe:7d:21: 27:7e:27:76:69:45:52:ab:54:f8:dd:35:8a:4a:1e:4f:03:81: 4d:2f:73:76:e5:46:b5:59:f7:db:a4:75:9f:3a:f0:8d:02:7a: 05:41:4e:c6:4b:17:62:44:d8:98:b8:b6:38:9c:fb:f1:a8:d7: ad:8e:e9:be:f5:36:ed:25:60:3a:c7:c9:9b:86:73:7a:ba:8e: 73:90:4c:62:6e:0c:2e:94:cb:96:57:9d:dc:71:60:33:a8:68: a2:85:57:67:2e:9c:ec:37:0d:c2:0f:ac:a0:85:55:e0:12:99: 07:66:98:91:63:6c:ab:7b:b8:64:a7:49:73:93:68:d9:4d:00: 48:1b:6c:f4:48:60:c6:71:d6:83:dc:24:a4:02:f7:26:b6:76: 18:37:5c:8e:de:49:ed:00:fc:33:e2:51:17:d0:3a:04:b8:84: 31:d5:25:51:69:2e:52:99:4b:77:3e:70:29:87:af:b8:69:d1: 7e:81:8f:ca:19:5a:5b:3e:d2:74:01:24:fd:89:6a:fb:23:87: bc:22:e3:3a:44:6a:95:b0:58:55:04:af:41:e3:fe:61:c3:a4: c9:28:60:b3:bd:43:5d:d9:ce:6e:62:fd:9a:de:93:dc:7d:45: 15:cb:c6:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKro1tGM5VnN2Oz7bAyI8IeXozAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjAzMjYxNjE4MjhaFw0yNjAzMjcxNzM1MjhaMDMxMTAvBgNV BAMTKDMzQTEyNTJBQUQ2NEFEQkQxNzM3RjY0OERDQjQ1RDNDQzMyOTcwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlCq/IgrxIXJmUaxwcjoBlwjS CFrbhxHr/OKiyRqbkSNnyUZhVupOrBeCXc+hszxTKAVpbqtOK00ECbt8zSp6GNL5 l+GTOL7xtOlU3TArWLSkBTuS3xosPeX2WaGo5RlRAlrvz5Jzicg6q4pCxkrnMgOn TPfh4igbCl3a5yphnkOXrnkBnZQVyE0SwkIVTo3iJLVoIOINB2e8fbCyTqcS5/Y0 Ev0b73ZQx9799Gi59SJd3APd55ZQRilP01PcGnStMzTAZl7gGGtOfH4cBSINDjXo gqiE0fJeEm2vfXFsgu9l584j7R52RzA9acgec4wgoa2jtn9GdngORn+QWc4dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM6ElKq1krb0XN/ZI3LRdPMMpcAYwHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXlH9mX4Qzwj EfBdhe6e/n0hJ34ndmlFUqtU+N01ikoeTwOBTS9zduVGtVn326R1nzrwjQJ6BUFO xksXYkTYmLi2OJz78ajXrY7pvvU27SVgOsfJm4ZzerqOc5BMYm4MLpTLlled3HFg M6hoooVXZy6c7DcNwg+soIVV4BKZB2aYkWNsq3u4ZKdJc5No2U0ASBts9EhgxnHW g9wkpAL3JrZ2GDdcjt5J7QD8M+JRF9A6BLiEMdUlUWkuUplLdz5wKYevuGnRfoGP yhlaWz7SdAEk/Ylq+yOHvCLjOkRqlbBYVQSvQeP+YcOkyShgs71DXdnObmL9mt6T 3H1FFcvGLQ== -----END CERTIFICATE-----Generated at Fri Mar 27 04:44:31 2026 by rpki-client