$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: 0+iqbbMRdHqGhCpO3cnq31potvk87yS74ExBIVQjfqI= Subject key identifier: 28:5D:93:36:3F:1F:5E:2A:3B:83:19:BB:B5:BE:A7:8B:53:FE:7E:AC Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 1D493F8BFD0DB9876333C8AA518A0D0642F37DC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 04:13:16 +0000 Manifest this update: Mon 02 Mar 2026 04:08:16 +0000 Manifest next update: Tue 03 Mar 2026 05:58:16 +0000 Files and hashes: 1: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: qWphDOLoGD6RDD1X40y2yqaXy2E9OPropdvFrti6blA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 05:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:49:3f:8b:fd:0d:b9:87:63:33:c8:aa:51:8a:0d:06:42:f3:7d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Mar 2 04:08:16 2026 GMT Not After : Mar 3 05:58:16 2026 GMT Subject: CN=285D93363F1F5E2A3B8319BBB5BEA78B53FE7EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:cf:17:56:6a:c1:0e:41:67:2d:0e:c7:a2: b6:70:53:9a:b0:1e:9d:09:12:66:89:73:67:8a:01: 9a:7b:08:08:9f:76:7d:c4:ba:b4:0d:31:bf:27:d3: e9:03:ba:1c:a6:45:91:f6:17:77:f9:11:f0:32:71: 0e:77:9f:29:9d:c4:b4:1f:8f:54:97:39:41:63:93: 96:39:d1:69:b7:06:ce:c9:81:c5:cf:e3:22:cb:b6: 25:f1:55:b5:a7:ae:e1:be:95:38:e4:df:e8:76:32: 59:bf:e3:e0:2c:8f:15:ab:22:be:23:9c:eb:54:c7: a2:d1:8f:8f:d2:d2:87:f6:7e:1b:23:aa:e7:7e:75: 79:1d:a1:6e:6c:31:bf:d7:e8:5f:5b:f8:c4:c4:76: 1c:35:98:13:40:57:1b:cc:d8:24:42:94:12:75:6c: 7e:f1:10:d8:80:6b:28:2e:e7:b8:71:b3:d7:fc:3c: 55:9a:50:14:2a:92:34:94:e5:1f:21:d1:6e:5c:81: ff:9f:70:c6:0c:79:e3:65:2e:5b:30:10:3f:85:7d: e3:ea:b2:03:8a:9f:10:97:ed:da:d5:d3:c8:24:41: d8:7e:dc:22:f3:65:bd:aa:59:db:ac:d6:74:fe:22: 03:b5:28:56:99:84:67:12:6f:07:4b:75:09:78:89: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5D:93:36:3F:1F:5E:2A:3B:83:19:BB:B5:BE:A7:8B:53:FE:7E:AC X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:55:35:6c:9d:5e:c6:dc:d4:3b:41:9a:fd:e5:6d:06:41:c6: 0c:98:13:75:29:9e:2c:cf:cd:b1:83:e0:e9:e9:de:94:cb:66: ad:ca:f5:ae:c7:b3:eb:3e:c7:ac:53:f2:ea:4a:1f:6f:b4:96: a3:2a:85:6d:66:fd:82:a3:2d:a1:f5:31:dc:7f:b8:4d:55:99: 94:22:f7:84:fe:7b:7a:12:23:e6:2f:2a:14:e6:f4:1b:77:62: ba:14:e3:20:ea:c2:73:60:c1:79:05:d7:54:10:fa:0d:ed:4b: e5:b0:c5:f2:b2:54:e1:b5:cc:5c:ec:99:ce:d5:72:a5:1e:b9: 2c:0b:a3:09:20:55:0e:74:63:9a:54:b0:da:8c:49:f5:7a:3f: a6:db:2f:ee:f2:1d:86:05:2a:22:46:15:06:58:8b:4c:60:c7: e5:a8:3b:c4:81:e5:c2:43:8b:b5:60:8a:e2:15:6f:91:6e:7c: 07:5a:94:44:f7:86:b8:60:97:ca:25:0d:d4:88:af:1f:f4:cb: db:5a:39:2e:dd:7b:22:b1:1a:b2:fc:36:8d:55:2f:18:0c:6e: ed:c5:23:a5:d4:67:6e:49:5a:d1:13:61:8f:77:4e:18:01:9d: db:e0:d5:ef:f3:95:e9:4f:62:88:72:d1:1e:4c:54:07:11:ab: f5:4c:be:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHUk/i/0NuYdjM8iqUYoNBkLzfcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjAzMDIwNDA4MTZaFw0yNjAzMDMwNTU4MTZaMDMxMTAvBgNV BAMTKDI4NUQ5MzM2M0YxRjVFMkEzQjgzMTlCQkI1QkVBNzhCNTNGRTdFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQM8XVmrBDkFnLQ7HorZwU5qw Hp0JEmaJc2eKAZp7CAifdn3EurQNMb8n0+kDuhymRZH2F3f5EfAycQ53nymdxLQf j1SXOUFjk5Y50Wm3Bs7JgcXP4yLLtiXxVbWnruG+lTjk3+h2Mlm/4+AsjxWrIr4j nOtUx6LRj4/S0of2fhsjqud+dXkdoW5sMb/X6F9b+MTEdhw1mBNAVxvM2CRClBJ1 bH7xENiAaygu57hxs9f8PFWaUBQqkjSU5R8h0W5cgf+fcMYMeeNlLlswED+FfePq sgOKnxCX7drV08gkQdh+3CLzZb2qWdus1nT+IgO1KFaZhGcSbwdLdQl4ifLPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKF2TNj8fXio7gxm7tb6ni1P+fqwwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFU1bJ1extzU O0Ga/eVtBkHGDJgTdSmeLM/NsYPg6enelMtmrcr1rsez6z7HrFPy6kofb7SWoyqF bWb9gqMtofUx3H+4TVWZlCL3hP57ehIj5i8qFOb0G3diuhTjIOrCc2DBeQXXVBD6 De1L5bDF8rJU4bXMXOyZztVypR65LAujCSBVDnRjmlSw2oxJ9Xo/ptsv7vIdhgUq IkYVBliLTGDH5ag7xIHlwkOLtWCK4hVvkW58B1qURPeGuGCXyiUN1IivH/TL21o5 Lt17IrEasvw2jVUvGAxu7cUjpdRnbkla0RNhj3dOGAGd2+DV7/OV6U9iiHLRHkxU BxGr9Uy+qg== -----END CERTIFICATE-----Generated at Mon Mar 2 19:36:30 2026 by rpki-client