$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft (raw, json) Hash identifier: pRAw87IEucr3NSnb2n3B6hhNnIPT+4oqYRfc1gk37BU= Subject key identifier: D7:EB:AF:DF:3C:86:C9:58:58:21:CA:CE:C9:93:88:BB:E3:0D:10:8D Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 6C85F1081BF739D36ACAD57FE31DE011C841AD15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 09:43:17 +0000 Manifest this update: Mon 02 Mar 2026 09:38:17 +0000 Manifest next update: Tue 03 Mar 2026 10:47:17 +0000 Files and hashes: 1: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (hash: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c=) 2: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (hash: B9+LIF0F2jOmyBOP5MaMAIvmuw1Q1Po92LV0UMNnbWk=) 3: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl (hash: g8iYjmexJUbCxrTt/kzG8pX5TS7DKo83q5dVte+D+Vk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:85:f1:08:1b:f7:39:d3:6a:ca:d5:7f:e3:1d:e0:11:c8:41:ad:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Mar 2 09:38:17 2026 GMT Not After : Mar 3 10:47:17 2026 GMT Subject: CN=D7EBAFDF3C86C9585821CACEC99388BBE30D108D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0c:c8:ab:c5:fb:c1:35:76:07:81:cf:11:26: c7:86:0b:27:6a:2f:aa:4e:d5:e2:e8:da:58:b0:ce: fb:73:86:f7:ef:60:0d:03:c6:36:12:ed:a1:2c:06: 27:33:29:2d:0d:f7:d7:26:4d:29:f4:85:a2:c2:e8: c1:bb:72:99:d3:a3:db:19:c2:0a:c3:aa:7c:36:3e: 4e:2a:bc:bd:d2:ab:5e:e6:fc:8f:05:67:60:16:c2: 36:29:9a:87:76:38:d8:8a:4f:b4:fd:dc:00:81:24: 36:18:f4:0b:48:a3:a3:b2:a4:a7:e9:e1:7d:12:c8: 8e:5e:87:e2:33:cb:c8:84:81:6f:8b:ae:ce:4d:47: d2:42:b4:3e:76:b6:1c:3e:76:c5:d0:8a:79:19:d7: 52:f8:6e:7f:96:ae:32:61:90:80:96:f0:0a:63:0b: e8:7d:23:f7:3a:83:a4:23:25:90:d4:d0:38:9c:16: 81:ba:39:0b:a2:7b:d6:67:c3:36:8f:19:8e:45:d4: 05:82:fa:3d:2f:e4:6a:eb:0a:28:f8:0c:b1:0e:66: aa:f5:0d:89:21:6d:ed:18:f3:f0:bb:9b:57:ef:04: c6:fe:6c:b9:84:0c:bf:dc:86:02:f1:b4:19:08:61: d2:80:65:b6:7d:28:a5:f4:09:bd:10:67:2c:83:24: 16:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EB:AF:DF:3C:86:C9:58:58:21:CA:CE:C9:93:88:BB:E3:0D:10:8D X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:af:8a:cf:88:1c:9b:7b:97:32:9b:7a:37:ee:aa:51:89:de: de:b1:fc:45:ca:c5:d7:78:6f:5f:96:a0:4a:10:cf:cc:0a:61: 74:fa:65:72:f0:54:22:ae:35:04:b8:bf:d8:1e:68:68:61:ab: f7:10:18:15:ad:3f:22:81:19:57:ae:31:ec:4f:29:70:09:d8: 73:e0:b0:13:b9:d4:52:41:72:1b:de:6b:2d:cc:5a:aa:d5:60: d2:d9:aa:b7:3e:57:8e:07:23:aa:24:67:4f:aa:e4:a6:2e:fb: 8c:89:00:ef:b9:3b:5d:e8:5a:3b:db:04:52:fe:45:6e:92:6d: 6f:72:c7:68:10:c4:a6:15:10:af:07:67:44:61:e2:1d:4c:95: dc:c6:85:c8:72:77:0e:e5:96:97:3b:c1:e8:f2:91:99:f2:04: d0:8d:81:b2:f5:de:a3:1d:f6:6c:c8:71:59:f5:78:b0:88:3e: 2c:b7:96:3e:b5:09:41:83:26:88:fe:81:26:8a:55:2a:20:24: 04:ae:64:b3:16:5c:e7:67:e3:53:4b:d3:78:f9:49:ba:78:df: 98:e4:53:da:c0:9a:35:5e:28:57:60:37:e3:dc:63:6d:33:72: 4c:07:93:ec:85:db:0a:18:48:59:9a:13:32:67:6e:66:fa:4c: fa:6b:2d:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbIXxCBv3OdNqytV/4x3gEchBrRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjAzMDIwOTM4MTdaFw0yNjAzMDMxMDQ3MTdaMDMxMTAvBgNV BAMTKEQ3RUJBRkRGM0M4NkM5NTg1ODIxQ0FDRUM5OTM4OEJCRTMwRDEwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDMirxfvBNXYHgc8RJseGCydq L6pO1eLo2liwzvtzhvfvYA0DxjYS7aEsBiczKS0N99cmTSn0haLC6MG7cpnTo9sZ wgrDqnw2Pk4qvL3Sq17m/I8FZ2AWwjYpmod2ONiKT7T93ACBJDYY9AtIo6OypKfp 4X0SyI5eh+Izy8iEgW+Lrs5NR9JCtD52thw+dsXQinkZ11L4bn+WrjJhkICW8Apj C+h9I/c6g6QjJZDU0DicFoG6OQuie9ZnwzaPGY5F1AWC+j0v5GrrCij4DLEOZqr1 DYkhbe0Y8/C7m1fvBMb+bLmEDL/chgLxtBkIYdKAZbZ9KKX0Cb0QZyyDJBY3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1+uv3zyGyVhYIcrOyZOIu+MNEI0wHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC81REY4MDg2RDNFRkEx NzY0ODdBMUMzNzZCN0JDQ0YzRTgzQUIyMzM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6+Kz4gcm3uX Mpt6N+6qUYne3rH8RcrF13hvX5agShDPzAphdPplcvBUIq41BLi/2B5oaGGr9xAY Fa0/IoEZV64x7E8pcAnYc+CwE7nUUkFyG95rLcxaqtVg0tmqtz5XjgcjqiRnT6rk pi77jIkA77k7XehaO9sEUv5FbpJtb3LHaBDEphUQrwdnRGHiHUyV3MaFyHJ3DuWW lzvB6PKRmfIE0I2BsvXeox32bMhxWfV4sIg+LLeWPrUJQYMmiP6BJopVKiAkBK5k sxZc52fjU0vTePlJunjfmORT2sCaNV4oV2A349xjbTNyTAeT7IXbChhIWZoTMmdu ZvpM+mst/A== -----END CERTIFICATE-----Generated at Mon Mar 2 17:34:59 2026 by rpki-client