$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json) Hash identifier: 5JSu526T7bV0YtMh92ummHx0Pciu3B5emBCMOaeclgk= Subject key identifier: FB:5E:2B:67:11:0D:6E:1A:DD:0E:D3:00:3A:36:B6:36:4A:F7:40:8A Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Certificate serial: 0D27F13D2BB73D2E223D787F3E8475937345037F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 07:33:16 +0000 Manifest this update: Mon 02 Mar 2026 07:28:16 +0000 Manifest next update: Tue 03 Mar 2026 09:41:16 +0000 Files and hashes: 1: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: GMIH0v5GqEWOsplRBJKCPXjIPL+FkgQEkQw1ytwx5EI=) 2: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QHP6i0URLcoEUo8SGK+7kXUZkIMj8cNOFacHv1WMPHU=) 3: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: pBwER9sTJhTwYDQM7K5BzzFLDuRowL/EfrGMCdxJtro=) 4: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=) 5: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: PnRTCZodwFvvxLNCVBWc71hkMeLqFF+kuYfdErpIm54=) 6: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=) 7: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:27:f1:3d:2b:b7:3d:2e:22:3d:78:7f:3e:84:75:93:73:45:03:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Validity Not Before: Mar 2 07:28:16 2026 GMT Not After : Mar 3 09:41:16 2026 GMT Subject: CN=FB5E2B67110D6E1ADD0ED3003A36B6364AF7408A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:a2:bb:6e:2a:8c:63:39:a8:e7:a8:5a:31: 77:1c:f0:bb:1e:ae:f7:03:4f:20:fd:18:be:6d:b2: 37:20:d3:0e:78:66:f1:e3:79:46:0e:de:78:f6:59: f6:be:78:10:38:d4:2f:9f:1a:3b:c9:a0:2f:d9:21: 7f:99:93:19:a5:08:84:7e:94:b9:55:0d:f9:b5:6f: 75:4b:6d:33:89:58:5d:df:ef:fc:12:03:86:5f:4c: d1:96:59:bd:0f:dd:f8:4c:ca:a5:3a:c1:c2:14:9f: 26:db:de:fa:06:ee:6c:4e:6a:ed:e4:bb:63:c6:53: e1:d8:cb:06:0d:98:6a:00:79:90:3e:6d:d2:5e:c7: 31:17:bc:a8:9c:cd:62:89:e0:49:bd:79:e5:9e:6e: 8c:56:74:3c:d2:5e:9d:57:0a:5e:72:d2:6c:a0:64: 18:ee:50:21:d5:40:4b:65:56:7c:68:61:1c:fe:ce: 8f:66:75:3d:bb:99:d9:ba:58:a0:ef:2e:de:16:4c: ae:41:eb:59:be:9d:84:dc:96:fa:df:20:21:5f:c2: 41:82:59:19:36:08:87:db:35:08:0a:d8:a9:53:b0: 72:d0:c6:f5:d1:34:b5:ad:ec:fc:0b:8e:df:bc:5c: 15:b8:a0:b9:db:37:67:01:bb:8e:d8:5c:a6:c6:dd: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5E:2B:67:11:0D:6E:1A:DD:0E:D3:00:3A:36:B6:36:4A:F7:40:8A X509v3 Authority Key Identifier: keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b4:83:3a:26:c2:de:af:fb:52:da:47:4c:a5:9b:df:f2:56: f4:6b:6a:70:51:4f:ef:a8:4f:5e:80:2b:4e:64:b9:08:6f:92: 6d:bf:e2:8a:38:89:cd:72:7c:a3:30:96:9b:f4:e8:7b:e0:6c: a8:02:a7:9f:ce:dc:ac:0b:85:7a:91:8e:8a:74:3f:79:18:6e: a9:97:68:66:91:9e:49:3e:09:61:06:e5:62:b0:91:2a:59:7c: 37:39:83:bd:02:c4:9b:4e:a1:eb:80:56:52:f3:89:b5:46:58: ca:2c:d5:3e:c0:02:27:33:fe:1b:2e:7d:ac:b9:7f:88:86:07: 4f:c3:f1:30:74:04:af:df:af:03:1f:22:65:91:21:0d:bd:a8: e6:89:20:31:3e:dc:f7:57:0a:2d:61:d3:ed:cc:87:d9:67:1d: d9:d3:c2:d9:31:b9:46:99:69:da:95:42:c0:2e:a7:ab:fe:95: 01:a9:01:23:09:f7:20:a8:4c:77:a4:ad:eb:4d:f0:9a:c5:05: 10:82:bc:d9:dd:24:98:fa:cf:08:04:bd:f1:f3:5d:90:7f:aa: 34:d4:a3:a4:25:4f:54:25:e8:61:80:aa:a1:39:2d:84:ec:d7: 4c:7f:51:a8:d9:0c:9e:25:55:d8:28:53:12:24:e2:9b:7e:84: d6:30:45:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDSfxPSu3PS4iPXh/PoR1k3NFA38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURF Njk3MDBCRjAeFw0yNjAzMDIwNzI4MTZaFw0yNjAzMDMwOTQxMTZaMDMxMTAvBgNV BAMTKEZCNUUyQjY3MTEwRDZFMUFERDBFRDMwMDNBMzZCNjM2NEFGNzQwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAaK7biqMYzmo56haMXcc8Lse rvcDTyD9GL5tsjcg0w54ZvHjeUYO3nj2Wfa+eBA41C+fGjvJoC/ZIX+ZkxmlCIR+ lLlVDfm1b3VLbTOJWF3f7/wSA4ZfTNGWWb0P3fhMyqU6wcIUnybb3voG7mxOau3k u2PGU+HYywYNmGoAeZA+bdJexzEXvKiczWKJ4Em9eeWeboxWdDzSXp1XCl5y0myg ZBjuUCHVQEtlVnxoYRz+zo9mdT27mdm6WKDvLt4WTK5B61m+nYTclvrfICFfwkGC WRk2CIfbNQgK2KlTsHLQxvXRNLWt7PwLjt+8XBW4oLnbN2cBu47YXKbG3dJHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+14rZxENbhrdDtMAOja2Nkr3QIowHwYDVR0j BBgwFoAUCjesiOMD9LuDTBgLBvJQreaXAL8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzI2OTI1MC8wLzBBMzdBQzg4RTMwM0Y0QkI4MzRDMTgwQjA2RjI1 MEFERTY5NzAwQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzcyNjkyNTAvMC8wQTM3QUM4OEUzMDNG NEJCODM0QzE4MEIwNkYyNTBBREU2OTcwMEJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbSDOibC3q/7 UtpHTKWb3/JW9GtqcFFP76hPXoArTmS5CG+Sbb/iijiJzXJ8ozCWm/Toe+BsqAKn n87crAuFepGOinQ/eRhuqZdoZpGeST4JYQblYrCRKll8NzmDvQLEm06h64BWUvOJ tUZYyizVPsACJzP+Gy59rLl/iIYHT8PxMHQEr9+vAx8iZZEhDb2o5okgMT7c91cK LWHT7cyH2Wcd2dPC2TG5Rplp2pVCwC6nq/6VAakBIwn3IKhMd6St603wmsUFEIK8 2d0kmPrPCAS98fNdkH+qNNSjpCVPVCXoYYCqoTkthOzXTH9RqNkMniVV2ChTEiTi m36E1jBF5g== -----END CERTIFICATE-----Generated at Mon Mar 2 17:02:25 2026 by rpki-client