$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft File: E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json) Hash identifier: zjU30oH/VN4BLsDqe5uG7N/z03U37zwfwJmsB7hS5u4= Subject key identifier: 51:0A:D5:9F:16:F3:7B:8E:4B:11:5A:C9:D0:07:60:E2:45:07:26:A2 Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232 Certificate serial: 716EBFE6C8813972E38CA4C862A69A62B205EA6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft Manifest number: 3B Signing time: Mon 02 Mar 2026 08:08:17 +0000 Manifest this update: Mon 02 Mar 2026 08:03:17 +0000 Manifest next update: Tue 03 Mar 2026 11:34:17 +0000 Files and hashes: 1: 3131362e3139392e3135322e302f32322d3234203d3e203231383539.roa (hash: QOyMyxL3BQmztpsRoWy1C75w1RphCCZxpH/MhVpOHKQ=) 2: 3130332e3135362e37382e302f32332d3234203d3e203231383539.roa (hash: Nc3wGfCMThvQd+bqUSNmuME0vCXe9XwNOalM21iiOq4=) 3: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=) 4: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=) 5: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: qZprq3Ag/IyrsL4rdyQo4HxuOqgPRuE9wWXt2a0Fdds=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6e:bf:e6:c8:81:39:72:e3:8c:a4:c8:62:a6:9a:62:b2:05:ea:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232 Validity Not Before: Mar 2 08:03:17 2026 GMT Not After : Mar 3 11:34:17 2026 GMT Subject: CN=510AD59F16F37B8E4B115AC9D00760E2450726A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:d4:03:d4:78:87:6b:4d:9a:f8:d2:81:2e: 73:30:06:3f:da:1d:c0:51:b6:10:6b:a4:ee:39:6c: 34:a7:a8:db:c7:d5:26:b2:77:b7:02:14:2c:6e:68: 43:28:e1:9c:94:fb:25:1e:60:73:9e:35:d3:ad:22: 5e:a2:b6:f4:5e:ad:ba:61:83:df:66:a3:12:c6:d6: c8:98:3a:bb:26:8b:df:71:5a:76:54:00:c4:21:87: 0b:19:ca:ff:b0:e6:ef:1e:ae:fa:4b:02:c2:8c:34: 30:18:06:c6:b6:21:ed:e8:67:08:03:a5:2c:6b:02: 8a:1d:62:9e:cb:e9:f9:fa:89:3c:1e:89:11:28:dd: e1:4e:f9:fe:d0:e3:bc:9a:96:cf:b5:ff:c6:70:f1: 10:51:e2:eb:5d:cf:8d:91:b7:c3:fa:c7:04:5f:d9: af:62:5a:d7:49:77:70:56:16:41:ac:cb:dc:73:a2: 48:8b:98:7a:ea:7c:9e:80:78:c7:e7:7b:86:64:84: 11:b9:5b:13:18:c2:90:9b:f4:02:32:f2:a0:76:d9: a1:54:57:cf:20:3a:e8:86:3f:6a:40:bd:e6:ed:7e: 39:c8:5a:3b:41:e1:9f:3d:a1:ba:30:64:4b:6b:fe: f1:bc:11:ac:14:13:40:94:ef:e4:d5:15:1a:6c:4f: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:D5:9F:16:F3:7B:8E:4B:11:5A:C9:D0:07:60:E2:45:07:26:A2 X509v3 Authority Key Identifier: keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:da:db:1d:75:b6:c8:d1:f7:47:da:c8:15:42:5d:b4:fe:f6: 09:ee:eb:13:c3:f8:fd:21:0b:b1:1e:a1:e1:16:1e:c5:e7:d3: d7:18:d6:93:69:3e:f8:e7:a7:c2:54:d9:b5:f9:0b:7b:97:3e: 84:ee:7e:89:12:4c:af:0e:bb:50:5e:97:1e:65:c4:4d:ee:80: dc:17:68:b8:69:ab:cc:36:ec:4a:a2:58:c4:95:e5:cb:64:ef: e8:1a:99:93:8d:36:8c:41:68:b3:c5:1c:57:93:f4:e0:31:a3: 56:5f:2e:da:b1:4e:4e:7d:16:79:9d:10:d8:07:45:9d:96:b0: c5:c2:bd:ae:ec:d0:dc:fe:36:ae:0c:0d:8f:8b:9d:a0:a0:d0: 6d:fe:f5:fc:43:96:fb:92:1b:a8:5b:2a:53:9c:ef:1e:34:c1: f0:2d:07:68:c1:e4:64:fd:62:29:0a:10:80:83:8a:34:8c:9b: 5d:88:ee:92:a7:9f:73:e3:f3:70:3d:fd:35:68:39:a7:ae:43: 2d:13:33:e2:85:07:61:c3:c2:01:df:89:b0:07:8b:4a:2c:07: a0:31:a9:4f:2e:40:e1:73:13:dd:8c:dd:64:bb:3f:83:48:eb: ed:c4:84:b6:b0:fc:31:0d:eb:56:98:7c:c3:fd:66:48:45:e5: a9:0a:96:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcW6/5siBOXLjjKTIYqaaYrIF6m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz MDgzMDIzMjAeFw0yNjAzMDIwODAzMTdaFw0yNjAzMDMxMTM0MTdaMDMxMTAvBgNV BAMTKDUxMEFENTlGMTZGMzdCOEU0QjExNUFDOUQwMDc2MEUyNDUwNzI2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlNQD1HiHa02a+NKBLnMwBj/a HcBRthBrpO45bDSnqNvH1Sayd7cCFCxuaEMo4ZyU+yUeYHOeNdOtIl6itvRerbph g99moxLG1siYOrsmi99xWnZUAMQhhwsZyv+w5u8ervpLAsKMNDAYBsa2Ie3oZwgD pSxrAoodYp7L6fn6iTweiREo3eFO+f7Q47yals+1/8Zw8RBR4utdz42Rt8P6xwRf 2a9iWtdJd3BWFkGsy9xzokiLmHrqfJ6AeMfne4ZkhBG5WxMYwpCb9AIy8qB22aFU V88gOuiGP2pAvebtfjnIWjtB4Z89obowZEtr/vG8EawUE0CU7+TVFRpsT+O9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUQrVnxbze45LEVrJ0Adg4kUHJqIwHwYDVR0j BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1 NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC9FMjNDNDgwMENBNDUy QjFBOEU2MjE0OTIzQzAxNTQwRTMwODMwMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtrbHXW2yNH3 R9rIFUJdtP72Ce7rE8P4/SELsR6h4RYexefT1xjWk2k++OenwlTZtfkLe5c+hO5+ iRJMrw67UF6XHmXETe6A3BdouGmrzDbsSqJYxJXly2Tv6BqZk402jEFos8UcV5P0 4DGjVl8u2rFOTn0WeZ0Q2AdFnZawxcK9ruzQ3P42rgwNj4udoKDQbf71/EOW+5Ib qFsqU5zvHjTB8C0HaMHkZP1iKQoQgIOKNIybXYjukqefc+PzcD39NWg5p65DLRMz 4oUHYcPCAd+JsAeLSiwHoDGpTy5A4XMT3YzdZLs/g0jr7cSEtrD8MQ3rVph8w/1m SEXlqQqWdA== -----END CERTIFICATE-----Generated at Mon Mar 2 19:23:16 2026 by rpki-client