$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft File: 2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft (raw, json) Hash identifier: /ZQXYhOSK9IXJCao/7hzkszaomKA8rLye9n4Hv+/NAA= Subject key identifier: EE:78:01:2F:28:E4:70:8E:1D:E5:05:3E:73:69:EA:36:33:47:14:74 Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 5CB0C694FCA5036AF1BD403655617FEB7FC4250C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft Manifest number: 03 Signing time: Thu 26 Mar 2026 18:28:28 +0000 Manifest this update: Thu 26 Mar 2026 18:23:28 +0000 Manifest next update: Fri 27 Mar 2026 19:00:28 +0000 Files and hashes: 1: 2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl (hash: 7DKbpEZ5xnQygc4d71mNUsnKybMMAET07St30X/EwoA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b0:c6:94:fc:a5:03:6a:f1:bd:40:36:55:61:7f:eb:7f:c4:25:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Mar 26 18:23:28 2026 GMT Not After : Mar 27 19:00:28 2026 GMT Subject: CN=EE78012F28E4708E1DE5053E7369EA3633471474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6b:e1:ae:85:aa:98:8b:88:5c:e3:da:2a:a2: 63:3c:2f:f9:cd:ba:70:92:8d:61:1c:2c:73:3a:5c: 91:39:7b:d2:61:1d:4c:73:37:9b:98:a5:91:ee:3b: 67:99:65:78:34:2d:af:36:c7:d2:73:c2:8e:cd:82: 76:1e:9c:6d:e5:60:9d:6a:de:aa:cf:f9:b1:47:2e: a4:23:81:c3:9c:ea:89:e8:c0:80:2d:31:f2:42:96: 3a:f8:5b:69:16:70:cd:fc:7d:d9:94:72:ed:c8:b6: 73:bb:8e:2e:c9:e5:86:5b:d0:78:83:bd:50:f8:4f: 80:ff:b6:84:2e:ac:b2:52:49:31:ef:46:1e:26:f3: a7:87:8f:d2:af:3e:4c:89:db:3a:ca:e3:26:9d:e1: 79:87:bc:d9:42:68:0f:d1:55:2e:f3:8c:1f:ae:9c: fb:67:22:7a:f4:fb:97:a9:7b:a3:2c:a3:15:5d:de: e9:42:81:19:dc:92:a9:ef:5c:f5:5a:3d:ba:2c:c1: 3a:c9:13:68:d1:26:4c:74:2c:e1:2b:03:32:1e:c7: c5:d0:9b:ca:90:a6:ed:19:e2:2f:cc:8f:95:28:b7: ed:d6:89:9c:6a:16:f2:58:a1:a8:12:e2:0a:ac:58: 90:01:4d:85:4c:ed:62:fc:29:af:52:ec:82:48:be: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:78:01:2F:28:E4:70:8E:1D:E5:05:3E:73:69:EA:36:33:47:14:74 X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9f:8c:68:07:f0:33:9d:d6:8f:60:d9:41:f1:b5:66:94:b0: 36:23:cc:23:e0:56:3e:03:41:50:21:73:31:24:dc:bf:6f:34: a8:52:e8:6b:0e:4e:41:ab:39:20:41:c8:60:a2:07:74:c5:a0: bb:59:48:70:28:25:46:36:32:f4:a7:76:f7:94:13:f8:25:9b: 17:68:d6:2f:5b:6e:a5:9d:b1:82:3c:e4:56:0e:8b:1f:10:4a: f6:08:85:81:6f:dd:57:32:85:c2:ee:d2:5c:2d:6c:4d:69:7e: 3a:f7:08:40:85:d9:06:54:b2:af:f9:90:c1:ea:4d:b7:1f:9b: 27:37:a6:1f:f6:76:74:1f:ed:61:73:19:a3:44:f0:47:81:62: 04:c4:46:f4:c1:8e:87:e0:7a:44:1b:02:b5:6e:c0:05:47:f1: ba:d6:ed:9a:e9:6b:de:18:b2:fe:e9:16:26:ed:df:7d:00:71: cb:ec:9b:09:67:55:c4:a0:5b:99:44:58:27:9c:26:eb:45:05: 32:ad:c9:d9:c4:bd:8b:a2:48:16:ce:bb:e5:e1:7f:63:44:91: 52:94:4d:5f:32:a9:36:41:d1:89:59:b9:c1:0b:f1:3a:e8:f7: a4:cd:dd:3a:71:68:7e:56:6e:9e:42:28:46:f8:8b:e6:52:f5: bd:de:7c:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXLDGlPylA2rxvUA2VWF/63/EJQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjAzMjYxODIzMjhaFw0yNjAzMjcxOTAwMjhaMDMxMTAvBgNV BAMTKEVFNzgwMTJGMjhFNDcwOEUxREU1MDUzRTczNjlFQTM2MzM0NzE0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOa+GuhaqYi4hc49oqomM8L/nN unCSjWEcLHM6XJE5e9JhHUxzN5uYpZHuO2eZZXg0La82x9Jzwo7NgnYenG3lYJ1q 3qrP+bFHLqQjgcOc6onowIAtMfJCljr4W2kWcM38fdmUcu3ItnO7ji7J5YZb0HiD vVD4T4D/toQurLJSSTHvRh4m86eHj9KvPkyJ2zrK4yad4XmHvNlCaA/RVS7zjB+u nPtnInr0+5epe6MsoxVd3ulCgRnckqnvXPVaPboswTrJE2jRJkx0LOErAzIex8XQ m8qQpu0Z4i/Mj5Uot+3WiZxqFvJYoagS4gqsWJABTYVM7WL8Ka9S7IJIvn2NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7ngBLyjkcI4d5QU+c2nqNjNHFHQwHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODkwNjIxNDA5MjIyOTgzNzAvMC8yMjY1QzJFODFCQ0ND QzRFOTIyQUIxMUM1ODFBREUzMUJGMjdCMjAyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ+MaAfwM53W j2DZQfG1ZpSwNiPMI+BWPgNBUCFzMSTcv280qFLoaw5OQas5IEHIYKIHdMWgu1lI cCglRjYy9Kd295QT+CWbF2jWL1tupZ2xgjzkVg6LHxBK9giFgW/dVzKFwu7SXC1s TWl+OvcIQIXZBlSyr/mQwepNtx+bJzemH/Z2dB/tYXMZo0TwR4FiBMRG9MGOh+B6 RBsCtW7ABUfxutbtmulr3hiy/ukWJu3ffQBxy+ybCWdVxKBbmURYJ5wm60UFMq3J 2cS9i6JIFs675eF/Y0SRUpRNXzKpNkHRiVm5wQvxOuj3pM3dOnFoflZunkIoRviL 5lL1vd58og== -----END CERTIFICATE-----Generated at Fri Mar 27 01:38:42 2026 by rpki-client