$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft File: D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft (raw, json) Hash identifier: SofBoKI6WuDrztMt5yc2aTR02/3cFSo6MP0nSRi5CgE= Subject key identifier: 42:52:7D:3F:F2:2C:1B:16:45:44:5D:8A:EF:6D:CD:A2:B1:42:28:CB Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 34CC15DA76D21102A5867066A2BA1A460BFDC316 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft Manifest number: 04 Signing time: Thu 26 Mar 2026 07:28:28 +0000 Manifest this update: Thu 26 Mar 2026 07:23:28 +0000 Manifest next update: Fri 27 Mar 2026 10:38:28 +0000 Files and hashes: 1: D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl (hash: 3mbKZdwduYQj4x0lqGpN+zcBwHUtIeL/5mUilYedqnY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cc:15:da:76:d2:11:02:a5:86:70:66:a2:ba:1a:46:0b:fd:c3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Mar 26 07:23:28 2026 GMT Not After : Mar 27 10:38:28 2026 GMT Subject: CN=42527D3FF22C1B1645445D8AEF6DCDA2B14228CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:7d:9e:d5:58:66:8a:a4:5e:52:10:e0:71: 18:0b:02:12:9c:32:5f:cf:11:27:0c:0e:95:97:5d: e8:9c:d7:8c:8f:9c:db:b0:ab:b8:a7:22:49:45:29: 07:c6:3b:32:7a:49:1a:44:21:c1:16:73:e2:a8:d3: a7:4c:bd:e8:d3:45:90:56:64:04:83:31:9d:b8:7a: f9:ae:d0:a4:cd:0c:e5:de:21:57:3a:2f:39:b4:1c: 4c:22:9e:49:39:f4:bc:44:df:36:c3:fe:01:14:2e: f2:5c:a6:8d:31:28:ae:ac:53:61:e0:89:d3:fb:7e: 8d:3a:b5:b0:ea:a9:4c:78:bc:29:1b:19:df:8e:b9: 69:29:7b:54:3f:fb:ff:a7:9c:61:fc:60:47:7e:42: d2:e5:84:70:49:35:9d:15:f4:c5:9d:ab:6c:8c:5a: 3a:97:5d:98:8a:42:05:df:cb:bb:24:30:77:48:d3: 2a:0e:09:ae:4a:d2:49:96:00:c9:24:a4:92:6e:43: a1:0e:2c:cd:57:d3:05:7d:c2:74:1b:e4:c6:3d:43: 08:f9:13:c5:f3:f5:0a:14:a8:dd:d3:6d:ca:59:72: db:f7:b5:9e:51:2f:2f:58:fd:7e:27:b5:b1:59:8a: 7b:c0:a9:d5:70:2e:1f:a2:a8:f1:42:1f:fe:45:32: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:52:7D:3F:F2:2C:1B:16:45:44:5D:8A:EF:6D:CD:A2:B1:42:28:CB X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c2:32:db:27:82:5b:1a:65:7a:82:f3:28:b6:ba:43:fb:79: fa:2c:fe:f3:4b:88:60:c1:39:5f:21:a9:60:ac:09:9d:52:a7: 6f:41:8e:3c:95:a9:4e:c7:c7:80:39:7f:72:cb:d8:02:78:db: b5:bc:18:ab:75:5e:9f:97:29:d1:e5:18:5a:0d:b9:f3:c6:5f: 30:f0:2b:07:ee:15:cb:35:6f:84:cf:20:58:c8:ff:31:52:40: b0:cb:dc:c8:f9:93:30:d7:61:d8:a4:5d:b9:b8:50:88:80:bb: cd:0a:a8:f1:83:e5:c6:04:0c:96:1c:4d:73:bc:80:d4:05:60: b0:23:d9:08:e3:66:41:91:33:9c:e8:81:80:cd:74:e8:a2:63: 80:3c:93:bf:2a:f2:10:ec:c4:1c:88:b2:2f:83:e1:d9:7b:f1: 91:68:e2:56:b3:16:b8:37:17:69:1e:7f:39:27:39:62:54:58: 16:1b:a5:da:da:85:4a:71:55:19:ef:0e:17:e3:ac:48:fd:b1: 3e:90:48:8e:d1:39:11:fa:5b:64:d4:35:c7:d2:28:f5:b7:5d: 02:2b:92:aa:7d:00:c0:55:d7:e8:fd:d7:19:8a:4a:e3:6a:29: 9a:e6:c2:2e:5c:90:41:27:38:3a:46:b6:8d:1e:f3:10:97:27: 52:b6:22:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNMwV2nbSEQKlhnBmoroaRgv9wxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjAzMjYwNzIzMjhaFw0yNjAzMjcxMDM4MjhaMDMxMTAvBgNV BAMTKDQyNTI3RDNGRjIyQzFCMTY0NTQ0NUQ4QUVGNkRDREEyQjE0MjI4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3X2e1VhmiqReUhDgcRgLAhKc Ml/PEScMDpWXXeic14yPnNuwq7inIklFKQfGOzJ6SRpEIcEWc+Ko06dMvejTRZBW ZASDMZ24evmu0KTNDOXeIVc6Lzm0HEwinkk59LxE3zbD/gEULvJcpo0xKK6sU2Hg idP7fo06tbDqqUx4vCkbGd+OuWkpe1Q/+/+nnGH8YEd+QtLlhHBJNZ0V9MWdq2yM WjqXXZiKQgXfy7skMHdI0yoOCa5K0kmWAMkkpJJuQ6EOLM1X0wV9wnQb5MY9Qwj5 E8Xz9QoUqN3TbcpZctv3tZ5RLy9Y/X4ntbFZinvAqdVwLh+iqPFCH/5FMtXzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQlJ9P/IsGxZFRF2K723NorFCKMswHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODg2NTEwMTUxODEzMDM4MTAvMC9ENUVGMkE3OTIxNjZG OTRGQkUzMzM3N0UwMjM5MDM0RUQyRkMyRjgwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcIy2yeCWxpl eoLzKLa6Q/t5+iz+80uIYME5XyGpYKwJnVKnb0GOPJWpTsfHgDl/csvYAnjbtbwY q3Ven5cp0eUYWg2588ZfMPArB+4VyzVvhM8gWMj/MVJAsMvcyPmTMNdh2KRdubhQ iIC7zQqo8YPlxgQMlhxNc7yA1AVgsCPZCONmQZEznOiBgM106KJjgDyTvyryEOzE HIiyL4Ph2XvxkWjiVrMWuDcXaR5/OSc5YlRYFhul2tqFSnFVGe8OF+OsSP2xPpBI jtE5EfpbZNQ1x9Io9bddAiuSqn0AwFXX6P3XGYpK42opmubCLlyQQSc4Oka2jR7z EJcnUrYilg== -----END CERTIFICATE-----Generated at Fri Mar 27 01:38:41 2026 by rpki-client