$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft File: 7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft (raw, json) Hash identifier: 9/CdgneqdCX1P+Hjr3SFYnk+X3ExiueGDLYHX4uef+M= Subject key identifier: 94:B9:07:46:04:6D:98:B8:4D:77:11:E7:C0:2D:51:94:9C:93:FE:47 Authority key identifier: 77:01:FB:80:18:A7:6A:F3:02:CE:F7:E0:F3:29:A5:8E:96:44:BA:DC Certificate issuer: /CN=7701FB8018A76AF302CEF7E0F329A58E9644BADC Certificate serial: 7FD4B395DC843B920E31EB4D35EAA995CA312993 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7701FB8018A76AF302CEF7E0F329A58E9644BADC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft Manifest number: 19 Signing time: Fri 27 Mar 2026 03:38:28 +0000 Manifest this update: Fri 27 Mar 2026 03:33:28 +0000 Manifest next update: Sat 28 Mar 2026 07:31:28 +0000 Files and hashes: 1: 7701FB8018A76AF302CEF7E0F329A58E9644BADC.crl (hash: nP+1rhnLMwNyAm1gqGUTnuqW7pnpPKCpVpTsROSvJF0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.crl rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7701FB8018A76AF302CEF7E0F329A58E9644BADC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d4:b3:95:dc:84:3b:92:0e:31:eb:4d:35:ea:a9:95:ca:31:29:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7701FB8018A76AF302CEF7E0F329A58E9644BADC Validity Not Before: Mar 27 03:33:28 2026 GMT Not After : Mar 28 07:31:28 2026 GMT Subject: CN=94B90746046D98B84D7711E7C02D51949C93FE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:2f:a0:28:65:50:7a:b8:f2:29:cc:f0:e3: 5a:6d:b0:61:5d:32:53:7e:ac:f5:18:c1:ea:a3:10: ff:6b:19:ea:36:11:17:71:61:b5:56:42:a4:16:66: b1:9c:f5:a6:04:50:d9:2b:d0:48:b9:27:72:1d:c8: 21:33:17:e1:d9:85:2c:9a:43:42:3d:49:8d:83:d9: c6:b8:18:97:81:b9:ca:58:cb:14:23:e5:13:b2:05: 46:76:16:9b:63:52:66:5b:4c:2c:90:25:e2:12:e2: 7d:b2:27:7d:df:79:cd:fe:33:12:bd:56:f5:7a:1f: dd:36:e7:f4:dd:2b:f4:29:c8:8d:fa:a8:a6:38:3d: 5e:85:a6:85:05:49:5c:a5:fe:3e:c3:b8:6f:a3:ec: 6e:ed:9f:1b:a3:c5:fd:09:87:cb:e3:54:47:2b:52: b2:db:38:80:29:30:c6:d3:41:0e:a5:33:8b:4d:77: 86:8f:91:9a:c5:bd:8d:f6:08:cc:fd:30:64:32:49: b7:a6:40:ff:4e:06:b9:fe:47:68:29:54:b7:46:b3: bb:84:39:f0:43:99:b1:98:c1:75:d2:1a:b3:32:e9: 46:af:45:7c:4d:df:19:eb:7a:9c:1d:54:c5:47:ed: 24:26:0e:5f:e4:b5:96:52:f6:90:8d:58:3c:58:c3: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B9:07:46:04:6D:98:B8:4D:77:11:E7:C0:2D:51:94:9C:93:FE:47 X509v3 Authority Key Identifier: keyid:77:01:FB:80:18:A7:6A:F3:02:CE:F7:E0:F3:29:A5:8E:96:44:BA:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7701FB8018A76AF302CEF7E0F329A58E9644BADC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:36:37:5e:4b:75:23:91:49:61:9f:1f:0c:5a:d5:5c:b9:06: 22:12:d4:29:5b:ad:bb:1b:dd:3e:b8:e4:3e:63:00:f0:99:4e: 35:d1:43:a7:b0:6b:75:26:3e:ff:f1:d0:57:60:36:6a:61:02: cf:98:23:1d:07:9f:fd:c8:dc:7d:62:39:7c:36:1c:a9:27:02: 4f:0a:1c:c6:bf:2d:ab:65:cf:28:74:e5:b7:06:41:f8:75:76: 57:76:c4:c2:e2:9d:20:9c:b4:a3:30:8c:07:89:b1:a0:54:86: 4e:d2:27:60:b3:11:f0:c6:5a:a3:a0:35:2b:e5:75:ea:a5:35: 80:09:b7:1f:35:73:30:86:01:dc:7d:a6:1f:43:a8:62:bc:07: f3:30:e6:37:be:96:0e:60:44:d4:6a:ff:df:e3:f4:1b:5d:64: 7e:e4:7e:f9:a0:8d:fe:44:9a:99:d8:fd:37:44:ea:cd:50:03: ec:5b:8e:c1:35:ba:27:16:23:b6:6b:36:6a:65:9b:ff:2b:12: 2d:8a:23:9b:6d:71:4b:9e:37:52:03:49:ae:e4:c0:96:9d:d6: 56:89:bd:4e:07:22:ad:7a:be:51:d1:d6:4e:10:55:51:0c:8f: 73:69:42:af:90:f7:1b:56:d8:f4:83:51:a5:1e:58:71:a6:90: e4:2d:7e:64 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf9SzldyEO5IOMetNNeqplcoxKZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcwMUZCODAxOEE3NkFGMzAyQ0VGN0UwRjMyOUE1OEU5 NjQ0QkFEQzAeFw0yNjAzMjcwMzMzMjhaFw0yNjAzMjgwNzMxMjhaMDMxMTAvBgNV BAMTKDk0QjkwNzQ2MDQ2RDk4Qjg0RDc3MTFFN0MwMkQ1MTk0OUM5M0ZFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MC+gKGVQerjyKczw41ptsGFd MlN+rPUYweqjEP9rGeo2ERdxYbVWQqQWZrGc9aYEUNkr0Ei5J3IdyCEzF+HZhSya Q0I9SY2D2ca4GJeBucpYyxQj5ROyBUZ2FptjUmZbTCyQJeIS4n2yJ33fec3+MxK9 VvV6H9025/TdK/QpyI36qKY4PV6FpoUFSVyl/j7DuG+j7G7tnxujxf0Jh8vjVEcr UrLbOIApMMbTQQ6lM4tNd4aPkZrFvY32CMz9MGQySbemQP9OBrn+R2gpVLdGs7uE OfBDmbGYwXXSGrMy6UavRXxN3xnrepwdVMVH7SQmDl/ktZZS9pCNWDxYw7ebAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlLkHRgRtmLhNdxHnwC1RlJyT/kcwHwYDVR0j BBgwFoAUdwH7gBinavMCzvfg8ymljpZEutwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzIxMTQyOTIxMDc1MDk3Ny8wLzc3MDFGQjgwMThBNzZBRjMwMkNFRjdFMEYzMjlB NThFOTY0NEJBREMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzcwMUZCODAxOEE3NkFGMzAyQ0VGN0UwRjMyOUE1OEU5NjQ0QkFEQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODMyMTE0MjkyMTA3NTA5NzcvMC83NzAxRkI4MDE4QTc2 QUYzMDJDRUY3RTBGMzI5QTU4RTk2NDRCQURDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTY3Xkt1I5FJ YZ8fDFrVXLkGIhLUKVutuxvdPrjkPmMA8JlONdFDp7BrdSY+//HQV2A2amECz5gj HQef/cjcfWI5fDYcqScCTwocxr8tq2XPKHTltwZB+HV2V3bEwuKdIJy0ozCMB4mx oFSGTtInYLMR8MZao6A1K+V16qU1gAm3HzVzMIYB3H2mH0OoYrwH8zDmN76WDmBE 1Gr/3+P0G11kfuR++aCN/kSamdj9N0TqzVAD7FuOwTW6JxYjtms2amWb/ysSLYoj m21xS543UgNJruTAlp3WVom9TgcirXq+UdHWThBVUQyPc2lCr5D3G1bY9INRpR5Y caaQ5C1+ZA== -----END CERTIFICATE-----Generated at Fri Mar 27 06:02:59 2026 by rpki-client