$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json) Hash identifier: f6xhut8vNgbyXlYLqCv12xKFXjQTVw7v+MW+ic26PJo= Subject key identifier: 53:38:6B:A5:C6:68:0A:7D:15:65:0D:40:20:AC:5D:B3:81:DA:08:A1 Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 233A7544262717478BE384F9035082E74EE71DC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 13:18:16 +0000 Manifest this update: Sun 01 Mar 2026 13:13:16 +0000 Manifest next update: Mon 02 Mar 2026 15:30:16 +0000 Files and hashes: 1: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: SDQZcDRKTjM1BCuFzGgdamxHEHpSEx12AL4V9lBZ94s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 14:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3a:75:44:26:27:17:47:8b:e3:84:f9:03:50:82:e7:4e:e7:1d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Mar 1 13:13:16 2026 GMT Not After : Mar 2 15:30:16 2026 GMT Subject: CN=53386BA5C6680A7D15650D4020AC5DB381DA08A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:18:e3:e2:08:77:4f:00:7c:2d:d0:d0:2b: a5:fe:49:ce:e3:87:25:21:08:c0:8c:69:23:8a:c6: ba:80:ac:d6:fa:c2:8b:e7:22:71:9f:48:9f:80:fe: d1:d9:af:29:c5:bc:d0:cc:29:61:92:1a:30:44:a9: af:ca:c3:32:01:e3:7c:2d:de:06:32:23:5b:87:c5: 72:61:d8:62:70:07:24:23:a1:c8:8c:ee:42:28:9a: 80:c6:5b:97:5f:3f:e8:c8:e7:8b:09:82:26:17:c5: 01:df:5e:e7:cb:1b:83:db:17:1b:e0:e1:f1:b1:16: 8d:a6:de:61:8f:71:96:c1:80:56:10:2e:e6:c5:2b: 16:76:af:a7:d1:4e:7b:c3:cc:2e:ec:01:1b:09:82: 48:93:b9:63:f9:ef:72:3d:31:b5:b3:d9:f2:7a:00: a6:68:e8:b5:a8:73:2c:18:4f:be:a8:69:c1:49:d4: 60:81:e4:90:d1:1d:14:93:43:f7:74:23:ba:2f:03: e0:ca:71:3c:22:e3:b5:a5:43:f0:99:36:42:b9:4b: 01:38:ee:42:b5:96:69:12:1c:ad:f1:97:14:44:c7: f7:fa:17:45:0b:9e:45:3e:e9:95:66:6c:ad:07:9d: 57:3d:e4:7c:b0:12:5a:5d:96:e7:e7:06:7d:81:da: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:38:6B:A5:C6:68:0A:7D:15:65:0D:40:20:AC:5D:B3:81:DA:08:A1 X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:8a:b2:73:a4:c6:a6:3e:b4:bf:71:d2:46:e6:3d:72:6e: 35:f4:f2:9e:80:14:a7:85:74:ed:25:de:8d:1d:db:c9:75:70: c3:54:40:67:08:d5:5f:e3:23:90:14:65:25:d9:d5:75:44:5c: e0:67:57:6f:e9:20:47:0e:19:1d:09:a0:f0:c5:b4:fa:c8:9a: d9:6f:d3:6f:74:a5:a2:5e:d0:82:68:63:f7:2c:a5:de:a9:72: d2:31:a4:32:03:64:f1:be:8a:ca:b7:95:fe:f7:20:44:c9:7d: ad:ea:5b:a7:6f:6a:e5:04:9a:8b:cd:45:4f:f9:34:da:c6:52: 3f:58:c4:58:45:44:1d:d1:eb:06:a1:f3:46:d2:d6:7d:ad:a0: 9d:2e:c5:e7:3c:b0:5f:54:aa:c7:b7:3e:4c:96:cf:4f:02:ed: fb:26:b8:c8:d8:62:2e:3f:1b:b4:61:d5:d7:a9:02:12:e7:a5: f9:f0:51:8c:30:9f:0d:df:5a:2f:e5:1b:55:fb:2f:77:df:7b: a6:fe:3a:0c:9d:3f:f3:dd:11:1e:ef:db:02:11:2c:bc:87:47: 7d:b7:84:1a:21:71:b4:ff:fb:f7:86:e0:77:93:30:c0:50:8c: 36:fd:57:d6:01:1d:72:a5:82:51:fa:a8:f4:23:5a:88:b9:63: 33:7c:71:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIzp1RCYnF0eL44T5A1CC507nHcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjAzMDExMzEzMTZaFw0yNjAzMDIxNTMwMTZaMDMxMTAvBgNV BAMTKDUzMzg2QkE1QzY2ODBBN0QxNTY1MEQ0MDIwQUM1REIzODFEQTA4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NBjj4gh3TwB8LdDQK6X+Sc7j hyUhCMCMaSOKxrqArNb6wovnInGfSJ+A/tHZrynFvNDMKWGSGjBEqa/KwzIB43wt 3gYyI1uHxXJh2GJwByQjociM7kIomoDGW5dfP+jI54sJgiYXxQHfXufLG4PbFxvg 4fGxFo2m3mGPcZbBgFYQLubFKxZ2r6fRTnvDzC7sARsJgkiTuWP573I9MbWz2fJ6 AKZo6LWocywYT76oacFJ1GCB5JDRHRSTQ/d0I7ovA+DKcTwi47WlQ/CZNkK5SwE4 7kK1lmkSHK3xlxREx/f6F0ULnkU+6ZVmbK0HnVc95HywElpdlufnBn2B2hx/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUzhrpcZoCn0VZQ1AIKxds4HaCKEwHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8wMUZCNTYwOUZEMkFB NTY3QUQ3QUY2OUNEMjBDQzRBQjNFQkQxMENBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpeKsnOkxqY+ tL9x0kbmPXJuNfTynoAUp4V07SXejR3byXVww1RAZwjVX+MjkBRlJdnVdURc4GdX b+kgRw4ZHQmg8MW0+sia2W/Tb3Slol7Qgmhj9yyl3qly0jGkMgNk8b6KyreV/vcg RMl9repbp29q5QSai81FT/k02sZSP1jEWEVEHdHrBqHzRtLWfa2gnS7F5zywX1Sq x7c+TJbPTwLt+ya4yNhiLj8btGHV16kCEuel+fBRjDCfDd9aL+UbVfsvd997pv46 DJ0/890RHu/bAhEsvIdHfbeEGiFxtP/794bgd5MwwFCMNv1X1gEdcqWCUfqo9CNa iLljM3xxbg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:44:16 2026 by rpki-client