$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: n1D7M719BAXRqmAB+HT94PBZoPtW92lf5BaZG2nBeAA= Subject key identifier: 5A:CC:11:88:61:C1:04:3A:86:CA:F2:9E:DC:18:E0:33:D0:69:93:7A Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 16B685B23B836078480E235BC852381DE0D7F917 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 06:13:16 +0000 Manifest this update: Mon 02 Mar 2026 06:08:16 +0000 Manifest next update: Tue 03 Mar 2026 09:44:16 +0000 Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) 2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: D7G26HG0REK5aEuXZpriXrHgTkEwniIsDp0grkLbtCA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b6:85:b2:3b:83:60:78:48:0e:23:5b:c8:52:38:1d:e0:d7:f9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Mar 2 06:08:16 2026 GMT Not After : Mar 3 09:44:16 2026 GMT Subject: CN=5ACC118861C1043A86CAF29EDC18E033D069937A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:73:bf:c6:c5:6f:26:f2:8e:be:74:ce:98: cb:6a:9e:30:cc:b9:e0:69:93:ac:ea:d8:89:a4:79: 17:d4:d9:fd:cc:ef:b9:d4:ac:01:05:b7:3b:75:e1: 77:79:1e:be:c6:82:00:68:8c:98:eb:c2:64:3a:aa: 4e:0a:b9:6d:e6:b6:f6:8b:da:65:2d:fb:94:ab:88: a8:66:9e:ac:25:94:dd:5a:b7:24:3e:d2:99:50:16: 4e:b5:09:46:56:e4:eb:74:99:c1:1f:b6:c4:3f:f3: 78:1f:10:c0:7e:1b:19:d4:c9:86:82:61:13:37:d5: 97:60:85:00:ef:c8:82:19:94:8b:45:5d:98:92:6d: 00:58:4c:34:49:e2:de:ea:4f:66:36:de:ba:4a:6f: 51:a2:63:f2:5f:12:f8:cb:9c:54:68:13:3b:3f:b4: fb:09:9b:1c:d1:38:85:57:27:db:db:88:97:32:8e: 5c:a0:e6:2e:97:8a:d2:f0:1c:11:c6:42:3e:ad:60: ac:d7:0f:31:d4:db:fd:a2:40:3e:66:41:4e:35:2f: f5:dd:ed:0c:c6:45:e9:74:47:c7:6f:7b:52:23:55: 3f:54:64:69:98:91:f3:d9:21:03:2a:ab:94:66:94: c9:07:81:11:d5:cb:71:77:82:34:f5:92:bd:14:b0: 9e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CC:11:88:61:C1:04:3A:86:CA:F2:9E:DC:18:E0:33:D0:69:93:7A X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:81:44:16:18:26:8f:91:f5:c0:cb:0d:20:01:48:85:50:9f: 67:da:3e:2e:db:25:8f:00:41:20:74:a4:28:a7:f8:bb:8f:62: d3:b2:19:fe:6a:d4:d2:8b:b7:5f:3c:3f:52:6f:9c:ea:8c:6b: b9:da:51:c0:0c:e7:08:98:55:64:e3:63:af:af:84:f3:c7:f5: d7:ee:d9:ce:9f:22:2b:7d:03:28:ed:5f:3d:15:30:6c:ac:e9: 53:c6:7e:0e:7b:d9:72:cd:6d:82:63:20:a4:82:05:34:62:32: 74:f2:9d:54:30:7b:4e:83:a0:df:3a:71:72:a4:46:10:db:66: 7b:3b:1f:62:85:22:68:99:25:ac:44:26:b5:25:ef:0b:96:58: 92:93:4c:ec:cb:b9:f7:3d:1f:fc:42:53:47:86:c7:81:19:b6: 84:f0:6c:77:b4:12:50:85:ab:91:ba:04:98:7b:58:a6:bb:a7: a5:9d:39:b1:07:6e:46:f6:b8:2a:6e:c2:e3:10:c1:97:f0:6c: 17:27:a3:a1:3d:de:f8:76:d5:28:06:76:be:29:3c:6a:3f:5d: d6:43:43:1c:7d:62:0c:63:ad:73:90:ff:b7:e4:59:13:fc:56: b6:37:21:f5:f7:0c:6d:d6:85:ec:db:82:a6:0c:ec:1c:83:c0: 4c:72:a9:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFraFsjuDYHhIDiNbyFI4HeDX+RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjAzMDIwNjA4MTZaFw0yNjAzMDMwOTQ0MTZaMDMxMTAvBgNV BAMTKDVBQ0MxMTg4NjFDMTA0M0E4NkNBRjI5RURDMThFMDMzRDA2OTkzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4HO/xsVvJvKOvnTOmMtqnjDM ueBpk6zq2ImkeRfU2f3M77nUrAEFtzt14Xd5Hr7GggBojJjrwmQ6qk4KuW3mtvaL 2mUt+5SriKhmnqwllN1atyQ+0plQFk61CUZW5Ot0mcEftsQ/83gfEMB+GxnUyYaC YRM31ZdghQDvyIIZlItFXZiSbQBYTDRJ4t7qT2Y23rpKb1GiY/JfEvjLnFRoEzs/ tPsJmxzROIVXJ9vbiJcyjlyg5i6XitLwHBHGQj6tYKzXDzHU2/2iQD5mQU41L/Xd 7QzGRel0R8dve1IjVT9UZGmYkfPZIQMqq5RmlMkHgRHVy3F3gjT1kr0UsJ7VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWswRiGHBBDqGyvKe3BjgM9Bpk3owHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYFEFhgmj5H1 wMsNIAFIhVCfZ9o+LtsljwBBIHSkKKf4u49i07IZ/mrU0ou3Xzw/Um+c6oxrudpR wAznCJhVZONjr6+E88f11+7Zzp8iK30DKO1fPRUwbKzpU8Z+DnvZcs1tgmMgpIIF NGIydPKdVDB7ToOg3zpxcqRGENtmezsfYoUiaJklrEQmtSXvC5ZYkpNM7Mu59z0f /EJTR4bHgRm2hPBsd7QSUIWrkboEmHtYprunpZ05sQduRva4Km7C4xDBl/BsFyej oT3e+HbVKAZ2vik8aj9d1kNDHH1iDGOtc5D/t+RZE/xWtjch9fcMbdaF7NuCpgzs HIPATHKpwQ== -----END CERTIFICATE-----Generated at Mon Mar 2 19:36:19 2026 by rpki-client