$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json) Hash identifier: gKfll1CNqkSPX5VxjGpN3Xaqrr5IqQPvdzqN7iHKGJs= Subject key identifier: E8:A0:E3:50:3A:CA:54:E0:B3:C4:64:01:43:BA:CD:75:77:E6:C7:E5 Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE Certificate serial: 79666D9265DB397ED0B3D37A94C422090E95FD74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 01:43:16 +0000 Manifest this update: Mon 02 Mar 2026 01:38:16 +0000 Manifest next update: Tue 03 Mar 2026 04:50:16 +0000 Files and hashes: 1: 3230332e3133302e35302e302f32342d3234203d3e203534393934.roa (hash: Ujrh8dXiv3ar3WusLzYw5/Zpebj94GN0ZVIqrzqX81U=) 2: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: deFhbi06py8xXLrx8ELfrX6QOkWkWDyBw0jA3WrJXg4=) 3: 3232302e3234332e3234382e302f32342d3234203d3e203534393934.roa (hash: ktVeTgessk6xRjmQOhmm5CHyeA7OAmRW1PFH8DCbCvo=) 4: 3230332e3133302e36332e302f32342d3234203d3e203534393934.roa (hash: UBRqylYTLGDVfK3g4RFGUeCrUxzDzQEIc6ZZPYpaGWE=) 5: 3230332e3133302e35322e302f32342d3234203d3e203534393934.roa (hash: et7fLev1+45NO77skAOlV3NvfYmJj7KbgAsloiOQxpo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:66:6d:92:65:db:39:7e:d0:b3:d3:7a:94:c4:22:09:0e:95:fd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE Validity Not Before: Mar 2 01:38:16 2026 GMT Not After : Mar 3 04:50:16 2026 GMT Subject: CN=E8A0E3503ACA54E0B3C4640143BACD7577E6C7E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:ad:d5:fc:2f:aa:9d:38:cf:e6:c7:b0:d7: f3:43:e0:4d:49:fe:09:e3:60:c7:8c:75:7d:de:5a: 55:b8:a1:2e:22:77:2b:87:89:b3:1c:be:f3:50:c3: 5e:c5:de:65:ae:a1:8c:c6:bc:34:3a:51:2b:b3:1c: 13:11:f5:60:3a:33:49:a2:fc:f8:7b:e8:54:91:1e: 44:37:6d:98:81:0e:74:68:3a:90:5d:a8:2f:93:ab: 18:4f:81:d7:5b:81:d8:e3:5c:8e:03:aa:75:9c:dd: e2:88:44:02:a7:5a:b3:42:93:2f:bb:4f:fb:e7:04: 28:15:e1:56:18:76:f3:70:14:eb:56:dd:85:73:36: 22:36:d1:89:3a:3c:81:b2:d3:87:8b:c2:98:f9:80: f7:8b:82:97:6a:88:1d:7d:4b:32:f8:08:f2:63:24: 54:f9:7b:c0:c5:ad:fb:60:5a:db:95:b4:6d:53:b4: b0:73:ee:8b:df:df:13:9b:34:1e:56:09:c5:07:c8: 1b:dc:9d:29:0b:46:f2:ef:ac:c1:79:76:2d:15:c0: 9d:22:2f:33:30:e5:83:44:14:fd:c9:79:5b:8b:8c: 53:c3:73:d0:36:d8:27:73:04:2b:4b:4c:ec:0b:1e: 8e:23:b0:8b:99:d8:e6:f3:5a:c9:09:74:6d:15:46: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A0:E3:50:3A:CA:54:E0:B3:C4:64:01:43:BA:CD:75:77:E6:C7:E5 X509v3 Authority Key Identifier: keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:76:5c:56:a8:10:fd:57:48:f0:27:1a:26:2e:b4:6b:85:27: d7:36:9f:6a:ba:d5:e6:75:62:7c:67:89:c9:36:98:34:2e:a0: 77:0b:cc:9b:13:e1:51:97:ca:a8:85:ab:15:85:73:09:88:ff: 56:ea:40:5e:29:aa:97:e0:57:89:7d:f5:ce:7f:72:a0:d0:86: 00:54:2a:4b:8a:99:54:d7:a9:0a:6d:62:f4:81:d3:d6:98:46: f4:61:07:c1:0a:0d:1b:af:6b:34:2e:ba:7a:d8:33:e0:68:1e: fc:e5:77:c2:cf:f9:ba:ba:a9:b9:5a:c8:00:35:52:d4:c7:d5: 98:16:ed:5c:8b:f0:99:2c:53:c5:c2:79:16:ec:23:b9:96:f1: fd:bf:ac:9e:22:7f:15:9a:e8:96:f6:de:33:8c:89:9e:ea:30: 81:8b:cf:11:61:5c:51:7b:26:e1:cc:a2:9b:a5:21:8c:63:db: 11:b8:7f:b8:b7:62:c9:c6:65:a3:52:4a:a1:e0:83:41:06:12: 86:14:4d:66:fb:c0:62:b0:a9:4e:72:77:0e:79:f4:9b:f4:e8: 87:5e:e2:53:53:f5:76:f2:23:05:1e:89:7e:2c:52:a8:f0:ca: c7:e7:42:7d:a0:55:4d:b4:ed:01:e0:77:56:18:95:36:2b:80: ad:43:cb:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeWZtkmXbOX7Qs9N6lMQiCQ6V/XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0 MjNBOTBBRTAeFw0yNjAzMDIwMTM4MTZaFw0yNjAzMDMwNDUwMTZaMDMxMTAvBgNV BAMTKEU4QTBFMzUwM0FDQTU0RTBCM0M0NjQwMTQzQkFDRDc1NzdFNkM3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdL63V/C+qnTjP5sew1/ND4E1J /gnjYMeMdX3eWlW4oS4idyuHibMcvvNQw17F3mWuoYzGvDQ6USuzHBMR9WA6M0mi /Ph76FSRHkQ3bZiBDnRoOpBdqC+TqxhPgddbgdjjXI4DqnWc3eKIRAKnWrNCky+7 T/vnBCgV4VYYdvNwFOtW3YVzNiI20Yk6PIGy04eLwpj5gPeLgpdqiB19SzL4CPJj JFT5e8DFrftgWtuVtG1TtLBz7ovf3xObNB5WCcUHyBvcnSkLRvLvrMF5di0VwJ0i LzMw5YNEFP3JeVuLjFPDc9A22CdzBCtLTOwLHo4jsIuZ2ObzWskJdG0VRotpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6KDjUDrKVOCzxGQBQ7rNdXfmx+UwHwYDVR0j BBgwFoAU1VSQ+4hVUjB6HSceAlE7TUI6kK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTk4Mjg1MC8wL0Q1NTQ5MEZCODg1NTUyMzA3QTFEMjcxRTAyNTEz QjRENDIzQTkwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5ODI4NTAvMC9ENTU0OTBGQjg4NTU1 MjMwN0ExRDI3MUUwMjUxM0I0RDQyM0E5MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHZcVqgQ/VdI 8CcaJi60a4Un1zafarrV5nVifGeJyTaYNC6gdwvMmxPhUZfKqIWrFYVzCYj/VupA Ximql+BXiX31zn9yoNCGAFQqS4qZVNepCm1i9IHT1phG9GEHwQoNG69rNC66etgz 4Gge/OV3ws/5urqpuVrIADVS1MfVmBbtXIvwmSxTxcJ5FuwjuZbx/b+sniJ/FZro lvbeM4yJnuowgYvPEWFcUXsm4cyim6UhjGPbEbh/uLdiycZlo1JKoeCDQQYShhRN ZvvAYrCpTnJ3Dnn0m/Toh17iU1P1dvIjBR6JfixSqPDKx+dCfaBVTbTtAeB3VhiV NiuArUPLnA== -----END CERTIFICATE-----Generated at Mon Mar 2 19:28:05 2026 by rpki-client