$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft File: A162689F28161D4D4C3DF339D95097D5EF647370.mft (raw, json) Hash identifier: QWslz2ACDHR7UfKiAB6rd0KJffe4wtUXTZUi6gv8bL0= Subject key identifier: D5:B0:48:FE:FA:D9:70:5C:9F:CB:18:38:D5:35:A5:70:E9:8E:BA:B9 Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370 Certificate serial: 3D47CD80DB56F35BBE7B863367201830F3215916 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 21:38:16 +0000 Manifest this update: Sun 01 Mar 2026 21:33:16 +0000 Manifest next update: Mon 02 Mar 2026 22:50:16 +0000 Files and hashes: 1: A162689F28161D4D4C3DF339D95097D5EF647370.crl (hash: ZIWTF3pcAsyVR200tqO9iPMDe1q/AJvkNy53iH7fcx0=) 2: 3132342e31342e312e302f32342d3234203d3e2034383132.roa (hash: XFRJp6zS1ERcSGN1XE2RvWKAzZUpGDHg4WQCg4nt+Og=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 22:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:47:cd:80:db:56:f3:5b:be:7b:86:33:67:20:18:30:f3:21:59:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370 Validity Not Before: Mar 1 21:33:16 2026 GMT Not After : Mar 2 22:50:16 2026 GMT Subject: CN=D5B048FEFAD9705C9FCB1838D535A570E98EBAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:ee:87:e3:41:ea:f3:4b:94:b6:ad:da:e8: ad:23:24:69:36:0b:b5:f7:fd:69:40:34:93:f9:8a: b1:51:56:a3:b3:a1:4b:da:71:e6:af:7a:c5:f3:55: 20:3a:08:1e:ca:8e:0a:88:de:72:18:bc:d2:31:b3: e1:46:b2:58:04:40:80:4d:7a:5e:db:18:c0:40:df: 5b:a7:66:e9:8e:d1:35:6e:40:84:9f:fd:dc:5d:6b: 9c:bf:fd:a9:f5:a6:d2:9d:39:2e:11:c3:19:7f:01: be:94:fb:7c:a2:f8:dc:9e:56:e9:94:9c:e7:cd:e4: dc:b4:b1:85:0c:a3:ac:9e:de:25:39:67:fd:7f:e0: b5:84:c6:26:b9:29:04:52:f9:e2:68:a7:3a:de:dc: 4c:22:59:c9:5e:5c:1f:a6:15:07:7f:f2:f2:b7:6e: 9d:92:c8:00:66:bd:3b:7b:f7:fa:4c:8c:14:f5:14: d4:ac:b9:97:4f:24:ab:cc:67:2a:5a:8a:88:2c:ba: 67:62:3e:72:01:74:82:bc:ac:f0:ac:9a:29:5d:c1: 01:c6:55:0e:02:20:81:18:6b:ea:ad:53:4f:29:a0: 14:d5:b2:0f:40:27:ac:7e:70:45:e5:8d:f2:12:ec: cb:1a:19:e3:d3:97:42:f3:df:cc:0c:d6:af:c4:8b: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:48:FE:FA:D9:70:5C:9F:CB:18:38:D5:35:A5:70:E9:8E:BA:B9 X509v3 Authority Key Identifier: keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d3:3a:e7:46:1f:9d:75:f0:30:9b:d2:68:5e:cd:80:d2:ba: 16:80:33:8b:3d:95:0a:5f:56:74:e8:42:38:35:af:4b:36:44: f7:82:5c:fd:78:79:e4:d9:8f:6a:02:bb:55:14:b0:35:78:90: 54:55:c6:fa:c4:d7:cf:d5:3b:b9:74:07:2a:50:1b:e3:f4:f3: ca:7c:7a:f4:63:1f:7e:0a:b4:26:58:5e:5a:bd:3b:f3:e5:40: c8:40:cc:a2:a3:7a:9b:55:61:d3:62:d2:a1:2f:91:94:b2:a7: 7d:b3:e0:79:9b:a3:fb:dc:53:3e:f6:e0:5f:94:b5:34:30:64: 71:d0:d0:2e:8c:de:0b:c7:a1:79:a8:ae:10:d5:71:fa:d3:da: c6:7b:15:0d:fe:08:e3:5f:51:b3:ef:ac:3e:8b:d0:eb:7d:38: 10:39:82:5b:e4:e7:ff:c7:f7:ac:e2:47:d0:88:b8:86:fc:f8: 81:29:43:1f:d9:30:f6:fd:87:f4:53:66:25:61:ab:cd:9f:60: d3:ea:68:a2:1a:61:7c:ed:83:40:54:ac:85:56:f0:11:14:48: b4:66:30:25:31:a4:1a:2d:4f:42:01:1e:08:19:71:35:7b:f3: 91:1d:61:cb:d8:d9:a7:e7:51:3d:f3:fe:24:76:86:f4:93:80: a8:1c:48:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPUfNgNtW81u+e4YzZyAYMPMhWRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVF RjY0NzM3MDAeFw0yNjAzMDEyMTMzMTZaFw0yNjAzMDIyMjUwMTZaMDMxMTAvBgNV BAMTKEQ1QjA0OEZFRkFEOTcwNUM5RkNCMTgzOEQ1MzVBNTcwRTk4RUJBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVme6H40Hq80uUtq3a6K0jJGk2 C7X3/WlANJP5irFRVqOzoUvaceavesXzVSA6CB7KjgqI3nIYvNIxs+FGslgEQIBN el7bGMBA31unZumO0TVuQISf/dxda5y//an1ptKdOS4Rwxl/Ab6U+3yi+NyeVumU nOfN5Ny0sYUMo6ye3iU5Z/1/4LWExia5KQRS+eJopzre3EwiWcleXB+mFQd/8vK3 bp2SyABmvTt79/pMjBT1FNSsuZdPJKvMZypaiogsumdiPnIBdIK8rPCsmildwQHG VQ4CIIEYa+qtU08poBTVsg9AJ6x+cEXljfIS7MsaGePTl0Lz38wM1q/Ei2EnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1bBI/vrZcFyfyxg41TWlcOmOurkwHwYDVR0j BBgwFoAUoWJonygWHU1MPfM52VCX1e9kc3AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjkzMDE3Ny8wL0ExNjI2ODlGMjgxNjFENEQ0QzNERjMzOUQ5NTA5 N0Q1RUY2NDczNzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY5MzAxNzcvMC9BMTYyNjg5RjI4MTYx RDRENEMzREYzMzlEOTUwOTdENUVGNjQ3MzcwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9M650YfnXXw MJvSaF7NgNK6FoAziz2VCl9WdOhCODWvSzZE94Jc/Xh55NmPagK7VRSwNXiQVFXG +sTXz9U7uXQHKlAb4/Tzynx69GMffgq0JlheWr078+VAyEDMoqN6m1Vh02LSoS+R lLKnfbPgeZuj+9xTPvbgX5S1NDBkcdDQLozeC8eheaiuENVx+tPaxnsVDf4I419R s++sPovQ6304EDmCW+Tn/8f3rOJH0Ii4hvz4gSlDH9kw9v2H9FNmJWGrzZ9g0+po ohphfO2DQFSshVbwERRItGYwJTGkGi1PQgEeCBlxNXvzkR1hy9jZp+dRPfP+JHaG 9JOAqBxIKg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:27:05 2026 by rpki-client