$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft (raw, json) Hash identifier: e5yFp9BKgKY1Q+R2momT7hjSwW+H5dkC7aPnYUOqytw= Subject key identifier: 19:8A:84:63:18:8E:0D:40:9A:33:54:59:64:F9:F8:06:22:54:5F:D8 Authority key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Certificate issuer: /CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Certificate serial: 1E8264808EC401BDF25D39815CD258BB441D1257 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 23:53:16 +0000 Manifest this update: Sun 01 Mar 2026 23:48:16 +0000 Manifest next update: Tue 03 Mar 2026 01:28:16 +0000 Files and hashes: 1: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl (hash: oI/PA29L80Luud9G2OEGPE2Feh5w+m2HrNObQUIKD9Y=) 2: 3130332e3234382e36342e302f32322d3234203d3e20313734.roa (hash: px6AE7SQXhStcvqTWr1sR88ZE1P6lwzLMI6ygKVnPT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:82:64:80:8e:c4:01:bd:f2:5d:39:81:5c:d2:58:bb:44:1d:12:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Validity Not Before: Mar 1 23:48:16 2026 GMT Not After : Mar 3 01:28:16 2026 GMT Subject: CN=198A8463188E0D409A33545964F9F80622545FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:e9:3d:85:d9:af:0e:58:ba:1b:be:46:ce: b8:83:40:f0:ab:23:a5:1e:3d:ff:d9:6a:22:75:85: e6:9f:73:a8:a2:29:21:34:95:d3:64:27:af:4d:88: 37:74:23:0f:4e:da:71:2c:5d:19:68:37:cc:a7:85: fd:58:d5:09:d6:1c:b6:d0:15:f0:6e:99:d0:24:a1: 4e:59:2c:64:cc:ec:94:af:5d:2c:31:19:1f:69:13: 42:04:fe:ef:ef:ea:98:d4:d0:b5:6c:80:08:bb:7e: 93:09:3f:7e:dd:85:68:15:04:c6:14:c9:67:d9:7f: 4f:28:dd:77:2b:88:2b:a7:6b:8c:e8:e5:bd:bc:bb: b1:51:5f:18:51:88:52:78:2e:45:8c:64:db:56:33: 9a:6e:16:93:5c:7c:39:a9:58:05:df:f8:3f:ba:f7: 25:00:f3:71:de:51:2a:9d:9d:bd:3e:e6:f5:ff:c2: 80:16:96:1e:de:d0:f5:be:d9:4a:a3:d8:43:3b:c2: 7e:11:a1:44:26:3c:ce:37:5f:6b:b3:d5:37:4a:f6: 5f:ce:f0:71:0a:99:35:a8:07:9f:28:10:d3:f4:c1: ca:38:2f:b5:bd:8d:1f:35:10:b1:aa:25:91:13:a3: a2:29:28:91:12:8e:d1:e0:ad:fc:fe:cf:a9:97:2f: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8A:84:63:18:8E:0D:40:9A:33:54:59:64:F9:F8:06:22:54:5F:D8 X509v3 Authority Key Identifier: keyid:4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a4:f6:ec:2e:d4:e9:b8:dc:11:53:84:bb:c2:99:6d:31:e1: 5a:67:02:15:a4:64:06:91:f7:d4:a1:c8:1f:97:e0:3d:56:65: 06:0a:8b:d7:8e:10:0b:60:f1:c9:2d:f9:49:0a:5f:b2:da:7f: 4f:b9:1b:54:fb:a3:96:34:0d:ee:6c:7e:38:ff:2c:d3:e8:be: 0f:c7:98:30:ba:c0:57:97:3f:67:b3:6b:c7:ea:2e:62:49:8b: c9:1b:dc:cf:d5:5a:f9:2f:e8:aa:95:62:6d:48:e4:1f:40:ce: 76:1f:27:cc:77:d9:0a:d6:d1:d9:e7:5b:33:b1:b4:82:40:3c: 50:15:26:f1:c4:a2:88:a4:9d:f4:29:4a:25:c3:87:21:84:61: f2:0c:31:6b:d3:ca:cc:2a:7a:ab:92:3c:8b:5a:da:e8:9c:bf: f7:65:6c:db:76:a8:cb:f7:42:f8:ad:bd:9d:2a:0d:e4:f2:ca: 59:46:4e:7a:06:fc:8d:ed:75:4d:99:b5:a9:8b:84:20:2f:38: 3c:a1:8a:10:f1:11:32:18:09:f9:bb:9f:42:42:f6:3e:bf:7a: b7:27:f4:c3:ba:65:0c:17:04:ac:b4:3d:0e:ed:51:92:81:b7: 40:0b:b8:b0:a5:be:55:67:89:8c:5a:37:37:0e:e4:9c:97:15: c7:c8:f4:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHoJkgI7EAb3yXTmBXNJYu0QdElcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0 QzRGRjI0MjAeFw0yNjAzMDEyMzQ4MTZaFw0yNjAzMDMwMTI4MTZaMDMxMTAvBgNV BAMTKDE5OEE4NDYzMTg4RTBENDA5QTMzNTQ1OTY0RjlGODA2MjI1NDVGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6L+k9hdmvDli6G75GzriDQPCr I6UePf/ZaiJ1heafc6iiKSE0ldNkJ69NiDd0Iw9O2nEsXRloN8ynhf1Y1QnWHLbQ FfBumdAkoU5ZLGTM7JSvXSwxGR9pE0IE/u/v6pjU0LVsgAi7fpMJP37dhWgVBMYU yWfZf08o3XcriCuna4zo5b28u7FRXxhRiFJ4LkWMZNtWM5puFpNcfDmpWAXf+D+6 9yUA83HeUSqdnb0+5vX/woAWlh7e0PW+2Uqj2EM7wn4RoUQmPM43X2uz1TdK9l/O 8HEKmTWoB58oENP0wco4L7W9jR81ELGqJZETo6IpKJESjtHgrfz+z6mXL9O3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGYqEYxiODUCaM1RZZPn4BiJUX9gwHwYDVR0j BBgwFoAUSyvlCyeCtEKsuT5vfNEAxExP8kIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjI0NDk5NC8wLzRCMkJFNTBCMjc4MkI0NDJBQ0I5M0U2RjdDRDEw MEM0NEM0RkYyNDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIyNDQ5OTQvMC80QjJCRTUwQjI3ODJC NDQyQUNCOTNFNkY3Q0QxMDBDNDRDNEZGMjQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqT27C7U6bjc EVOEu8KZbTHhWmcCFaRkBpH31KHIH5fgPVZlBgqL144QC2DxyS35SQpfstp/T7kb VPujljQN7mx+OP8s0+i+D8eYMLrAV5c/Z7Nrx+ouYkmLyRvcz9Va+S/oqpVibUjk H0DOdh8nzHfZCtbR2edbM7G0gkA8UBUm8cSiiKSd9ClKJcOHIYRh8gwxa9PKzCp6 q5I8i1ra6Jy/92Vs23aoy/dC+K29nSoN5PLKWUZOegb8je11TZm1qYuEIC84PKGK EPERMhgJ+bufQkL2Pr96tyf0w7plDBcErLQ9Du1RkoG3QAu4sKW+VWeJjFo3Nw7k nJcVx8j0qw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:21:23 2026 by rpki-client