$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft File: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft (raw, json) Hash identifier: zsnyGJXaPn6mUm0NDWJUpWLtHqZR2OB8kv/dzgC7GkY= Subject key identifier: 3B:A1:86:8D:E6:17:2C:C1:9B:AA:79:80:E9:63:F7:EA:63:69:E6:8B Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Certificate serial: 236C25D754DE8CDC4A424B86B9045F888A6C2720 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 05:43:16 +0000 Manifest this update: Mon 02 Mar 2026 05:38:16 +0000 Manifest next update: Tue 03 Mar 2026 06:42:16 +0000 Files and hashes: 1: 3130332e3231302e3136302e302f32322d3232203d3e203633313939.roa (hash: B/mJbtPu0UVWmsBqfhu4FLdB1gzXkN1btMchb8wEDGA=) 2: 34332e3235352e3231322e302f32322d3232203d3e203536303430.roa (hash: VLiXiRL9m9UaxtL5IIpzNqXZ0El1YmwJlVWUpR3X+4M=) 3: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl (hash: k1WxC64PAaYC+IXIEy/rarPB5yoH3DcpDKkTOq4wkhI=) 4: 34332e3235352e3231322e302f32322d3232203d3e20313334373634.roa (hash: nvpX3+tQBlD7o4JRzeJzJ8SBqs6nbVPAwRAZ8Hg23Rs=) 5: 34332e3235352e3231322e302f32322d3232203d3e20313336393538.roa (hash: mP/WzKqlnEhqwDkLhudrruXO2O7e8o0TzyuISBE0WWA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6c:25:d7:54:de:8c:dc:4a:42:4b:86:b9:04:5f:88:8a:6c:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Validity Not Before: Mar 2 05:38:16 2026 GMT Not After : Mar 3 06:42:16 2026 GMT Subject: CN=3BA1868DE6172CC19BAA7980E963F7EA6369E68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:2b:94:df:c9:37:83:ce:9c:bd:91:b9:d4: bb:e2:fe:25:e5:be:29:3e:77:ae:81:be:ba:1a:8b: f4:8a:a0:11:29:48:1a:fa:6f:02:d4:ab:a9:73:15: 17:13:33:35:98:55:e3:e2:80:35:4c:6b:a4:45:e8: fd:54:63:07:85:39:3e:1f:2d:24:3f:ea:ed:04:22: 00:9a:18:c3:9e:6f:94:92:7c:33:20:32:41:0e:70: ad:4b:97:63:f2:82:2a:8e:66:9f:bf:79:6f:66:1a: da:74:62:c4:ab:01:fd:12:ec:9b:2b:d6:ed:68:0b: 09:6e:f0:ec:ce:03:c4:c3:5a:a7:c3:1b:f8:7b:87: e2:d5:68:7c:10:05:1f:12:48:c0:7b:cd:de:5e:4d: a5:98:ae:07:ae:79:c4:e4:f2:4f:48:29:69:20:d3: 26:f1:8e:b8:bb:8d:1a:35:31:73:50:cf:90:1e:98: 3d:f8:f9:f8:a8:ed:54:37:7e:90:ba:4e:ed:ee:1e: a6:8d:74:bd:61:85:14:e1:04:1a:0d:bb:49:e4:51: f5:16:3a:b7:52:7a:7a:3d:5c:6f:22:75:7a:60:bd: a0:03:a3:8e:3d:94:0b:86:ff:cf:ab:74:a4:27:60: 13:fa:06:cd:47:3b:8a:94:fe:c5:fe:11:ec:0b:24: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A1:86:8D:E6:17:2C:C1:9B:AA:79:80:E9:63:F7:EA:63:69:E6:8B X509v3 Authority Key Identifier: keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5f:a9:11:ce:0e:fa:a9:6a:05:81:61:68:c6:e5:c8:70:ac: c7:02:ee:a7:2e:5d:65:3b:de:92:07:05:19:e9:54:42:26:eb: 69:b5:57:52:70:d2:be:a9:8f:2b:d5:56:4d:2a:3a:c0:19:31: 5e:76:94:b7:24:68:c7:15:1b:52:75:2c:4a:8b:94:a3:8d:11: f6:3a:89:74:39:b3:52:9c:be:60:79:c1:b6:61:04:43:12:0a: c7:d7:a1:f5:40:f6:4a:83:36:c9:08:d9:e5:ff:ac:75:59:e8: 27:d4:6a:00:0c:49:a2:97:db:a6:e7:95:41:42:12:dc:99:5a: aa:98:ad:aa:30:bd:a1:6d:db:41:f5:05:2c:00:99:03:13:de: 97:78:f1:37:dd:ac:d2:88:00:4a:3f:38:15:fb:9f:af:99:87: 3d:64:39:72:85:e8:5c:fa:65:3a:b0:88:57:d4:73:ef:62:08: 0c:4e:5f:52:34:08:29:7b:dc:a4:0a:9a:4e:67:04:ff:e6:20: 79:01:1a:02:14:19:06:c5:ca:0d:80:47:a3:3a:5c:33:0c:7e: 23:61:72:cf:8b:e0:0a:4b:95:14:04:fd:d1:62:4f:77:1b:73: 87:54:52:bc:de:25:34:7f:c3:b2:22:11:12:d2:60:52:8a:22: 8c:4d:79:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI2wl11TejNxKQkuGuQRfiIpsJyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw NEZENjlERDAeFw0yNjAzMDIwNTM4MTZaFw0yNjAzMDMwNjQyMTZaMDMxMTAvBgNV BAMTKDNCQTE4NjhERTYxNzJDQzE5QkFBNzk4MEU5NjNGN0VBNjM2OUU2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuiuU38k3g86cvZG51Lvi/iXl vik+d66Bvroai/SKoBEpSBr6bwLUq6lzFRcTMzWYVePigDVMa6RF6P1UYweFOT4f LSQ/6u0EIgCaGMOeb5SSfDMgMkEOcK1Ll2PygiqOZp+/eW9mGtp0YsSrAf0S7Jsr 1u1oCwlu8OzOA8TDWqfDG/h7h+LVaHwQBR8SSMB7zd5eTaWYrgeuecTk8k9IKWkg 0ybxjri7jRo1MXNQz5AemD34+fio7VQ3fpC6Tu3uHqaNdL1hhRThBBoNu0nkUfUW OrdSeno9XG8idXpgvaADo449lAuG/8+rdKQnYBP6Bs1HO4qU/sX+EewLJES1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO6GGjeYXLMGbqnmA6WP36mNp5oswHwYDVR0j BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMC81MDQ3MDgzQjQ2MzdB M0YwMkRGOURFRUJBNjdCRUREQzA0RkQ2OURELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVV+pEc4O+qlq BYFhaMblyHCsxwLupy5dZTvekgcFGelUQibrabVXUnDSvqmPK9VWTSo6wBkxXnaU tyRoxxUbUnUsSouUo40R9jqJdDmzUpy+YHnBtmEEQxIKx9eh9UD2SoM2yQjZ5f+s dVnoJ9RqAAxJopfbpueVQUIS3JlaqpitqjC9oW3bQfUFLACZAxPel3jxN92s0ogA Sj84Ffufr5mHPWQ5coXoXPplOrCIV9Rz72IIDE5fUjQIKXvcpAqaTmcE/+YgeQEa AhQZBsXKDYBHozpcMwx+I2Fyz4vgCkuVFAT90WJPdxtzh1RSvN4lNH/DsiIREtJg UooijE15Eg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:35:36 2026 by rpki-client