$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft File: C95DC06ABAF176962C0E90D36D939FA729AAC050.mft (raw, json) Hash identifier: EFl/lg02KQtp7bqTtZ9Ni+rgcBLxMIJf7jY+rkrOpME= Subject key identifier: A7:56:6E:50:4C:85:82:AB:B8:B5:B7:B9:7A:0D:E0:A1:4C:B4:26:5F Authority key identifier: C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50 Certificate issuer: /CN=C95DC06ABAF176962C0E90D36D939FA729AAC050 Certificate serial: 3AA8833DBE6745E37E53F7E5DE37588EB01E2465 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft Manifest number: 26 Signing time: Thu 26 Mar 2026 12:08:28 +0000 Manifest this update: Thu 26 Mar 2026 12:03:28 +0000 Manifest next update: Fri 27 Mar 2026 13:58:28 +0000 Files and hashes: 1: 3134342e37392e3134382e302f32332d3234203d3e20313337373731.roa (hash: SAeCRFVxu1ERGhOcXkGGGkwcAEAXwuDqhIvQaUGtLYA=) 2: C95DC06ABAF176962C0E90D36D939FA729AAC050.crl (hash: owcoeyEthRUKqYS7xlUEsDQGuP+fr74pCTT6YGYff4U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a8:83:3d:be:67:45:e3:7e:53:f7:e5:de:37:58:8e:b0:1e:24:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C95DC06ABAF176962C0E90D36D939FA729AAC050 Validity Not Before: Mar 26 12:03:28 2026 GMT Not After : Mar 27 13:58:28 2026 GMT Subject: CN=A7566E504C8582ABB8B5B7B97A0DE0A14CB4265F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:48:c8:41:3d:ec:17:6f:7f:77:84:43:b9: e2:44:fc:c5:9f:4c:e6:1d:37:87:90:a6:34:a7:6f: 84:ae:fb:c1:82:f3:1b:35:36:5a:52:30:ee:2a:2c: 3d:e1:84:d4:19:04:f9:03:a0:88:df:7f:e2:98:72: da:b6:41:4b:db:5e:ba:22:2e:7a:b3:7b:f1:b4:93: 5b:89:29:0d:d6:97:88:52:27:7f:8e:9c:fb:b6:9a: cf:aa:50:17:cd:c5:7c:93:d0:fc:7d:15:75:75:75: bd:8c:c4:d4:6b:94:ae:26:51:7e:bd:1c:00:ad:88: f8:1a:e7:f8:ae:fc:f5:66:f7:50:72:3d:3b:e3:4f: 0c:1c:b8:95:24:d4:97:63:ac:fa:1f:d9:a5:82:ed: 10:42:fd:6d:48:c4:55:d4:10:b1:6d:7b:5b:4b:5e: 43:63:1d:01:80:f3:44:58:b5:11:f9:cd:31:3f:8d: 08:3f:42:52:e9:e7:2f:2c:27:59:57:33:5b:ff:5b: 8f:d8:03:75:fb:25:c9:9b:fa:6c:5f:bd:62:3d:22: 70:dc:f5:40:06:06:fb:09:9f:5e:ee:0a:d7:8a:f4: 9c:2b:4a:db:cc:20:bd:83:64:09:6a:a0:dd:d9:ba: 43:f3:bd:d0:74:be:75:e2:37:29:84:ce:2a:88:70: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:56:6E:50:4C:85:82:AB:B8:B5:B7:B9:7A:0D:E0:A1:4C:B4:26:5F X509v3 Authority Key Identifier: keyid:C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:02:66:4e:4e:b0:4d:bb:af:d5:35:08:6a:73:5a:f0:50:7e: 85:fd:0c:82:75:c6:9d:c2:5c:84:b0:bb:fd:fb:50:46:5b:2f: fd:35:88:4f:b0:55:72:8a:b6:cb:8b:c2:58:70:98:e2:88:85: 20:10:d0:a5:6a:d7:43:b3:0f:ae:96:11:a7:ab:0b:22:cd:99: e7:19:99:5b:68:5a:35:fc:4a:fa:c6:d9:c3:0b:2a:34:00:7b: 26:23:1c:a5:29:21:09:bf:c7:68:d7:60:14:14:00:87:7c:13: d2:8d:60:1c:4b:7a:55:e8:83:c0:d9:d0:8a:26:c1:20:da:2c: f9:5b:9d:57:49:27:7f:65:6d:28:d2:56:a0:bf:33:7f:2c:3c: 83:7b:0f:1e:8d:96:f6:0d:b9:f4:39:23:2e:7a:86:8f:76:38: 63:f8:9c:f6:5b:91:84:ba:8c:e9:1b:09:ac:7d:f9:48:5d:7d: 69:25:3f:64:3a:a4:cc:2e:5d:c0:d3:92:e4:43:89:74:00:ae: 64:88:86:61:96:a4:e9:fb:e0:4f:d3:87:22:26:ca:50:b2:89: 0c:93:1a:ae:b7:71:4f:26:4c:c7:9d:22:d4:54:00:14:10:bd: 48:fb:19:51:93:53:11:fb:71:9e:f4:0c:91:25:3d:5f:1a:cd: 98:b6:f2:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOqiDPb5nReN+U/fl3jdYjrAeJGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1REMwNkFCQUYxNzY5NjJDMEU5MEQzNkQ5MzlGQTcy OUFBQzA1MDAeFw0yNjAzMjYxMjAzMjhaFw0yNjAzMjcxMzU4MjhaMDMxMTAvBgNV BAMTKEE3NTY2RTUwNEM4NTgyQUJCOEI1QjdCOTdBMERFMEExNENCNDI2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0b0jIQT3sF29/d4RDueJE/MWf TOYdN4eQpjSnb4Su+8GC8xs1NlpSMO4qLD3hhNQZBPkDoIjff+KYctq2QUvbXroi Lnqze/G0k1uJKQ3Wl4hSJ3+OnPu2ms+qUBfNxXyT0Px9FXV1db2MxNRrlK4mUX69 HACtiPga5/iu/PVm91ByPTvjTwwcuJUk1JdjrPof2aWC7RBC/W1IxFXUELFte1tL XkNjHQGA80RYtRH5zTE/jQg/QlLp5y8sJ1lXM1v/W4/YA3X7Jcmb+mxfvWI9InDc 9UAGBvsJn17uCteK9JwrStvMIL2DZAlqoN3ZukPzvdB0vnXiNymEziqIcAs5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp1ZuUEyFgqu4tbe5eg3goUy0Jl8wHwYDVR0j BBgwFoAUyV3AarrxdpYsDpDTbZOfpymqwFAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8xL0M5NURDMDZBQkFGMTc2OTYyQzBFOTBEMzZEOTM5 RkE3MjlBQUMwNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzk1REMwNkFCQUYxNzY5NjJDMEU5MEQzNkQ5MzlGQTcyOUFBQzA1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMS9DOTVEQzA2QUJBRjE3 Njk2MkMwRTkwRDM2RDkzOUZBNzI5QUFDMDUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQJmTk6wTbuv 1TUIanNa8FB+hf0MgnXGncJchLC7/ftQRlsv/TWIT7BVcoq2y4vCWHCY4oiFIBDQ pWrXQ7MPrpYRp6sLIs2Z5xmZW2haNfxK+sbZwwsqNAB7JiMcpSkhCb/HaNdgFBQA h3wT0o1gHEt6VeiDwNnQiibBINos+VudV0knf2VtKNJWoL8zfyw8g3sPHo2W9g25 9DkjLnqGj3Y4Y/ic9luRhLqM6RsJrH35SF19aSU/ZDqkzC5dwNOS5EOJdACuZIiG YZak6fvgT9OHIibKULKJDJMarrdxTyZMx50i1FQAFBC9SPsZUZNTEftxnvQMkSU9 XxrNmLby6A== -----END CERTIFICATE-----Generated at Fri Mar 27 03:28:02 2026 by rpki-client