$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: m7hv6H95l99yyiiUd/hca2y+2NSq9IX5SoGES6Ez5g8= Subject key identifier: CA:80:FB:14:A7:B8:1E:89:E7:C7:EA:93:FD:11:09:B6:02:76:9C:C7 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 6DF7C86896582DF685AD55911E78775FE716815E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 03:38:16 +0000 Manifest this update: Mon 02 Mar 2026 03:33:16 +0000 Manifest next update: Tue 03 Mar 2026 07:29:16 +0000 Files and hashes: 1: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: p+GEDVBrtvXiGGJWi8ehS6IyxpO0kRixn7111osNK0Y=) 2: 3130332e34342e3134342e302f32322d3232203d3e203535393931.roa (hash: 9QpEwcLlTSumOVyS9dHL6HMKkLj+qy0YVIHIa2L518I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f7:c8:68:96:58:2d:f6:85:ad:55:91:1e:78:77:5f:e7:16:81:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Mar 2 03:33:16 2026 GMT Not After : Mar 3 07:29:16 2026 GMT Subject: CN=CA80FB14A7B81E89E7C7EA93FD1109B602769CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:fe:ea:05:84:2f:72:90:c3:7b:85:dd:51: f5:bc:92:0f:96:17:d9:09:c5:5a:40:0b:c9:12:db: b2:1f:6b:82:04:ab:78:fe:18:78:89:3b:69:8a:31: 00:86:52:b2:dc:11:65:95:37:60:6b:fd:fe:b7:77: 1d:92:53:d2:83:dc:82:05:84:59:fb:96:a1:3e:0b: 26:aa:65:ad:56:0a:64:0d:00:0f:5c:96:6c:f9:35: 10:6d:7c:12:80:3b:7c:85:9b:ba:81:45:e5:8d:79: 4f:a6:55:d3:0b:49:96:20:4e:89:e9:0f:af:16:9f: e1:8c:4e:d0:45:72:fc:33:8b:16:99:42:52:71:ea: e7:a8:ad:25:d9:98:70:cb:b1:03:11:79:a0:2f:f1: 12:70:05:a8:00:b8:67:f5:4f:02:c3:c6:67:0f:5e: 26:d8:5c:2f:78:45:a1:5a:8c:de:36:f5:8f:95:f3: 91:e2:8d:b6:65:18:bd:ec:f2:fd:83:c7:27:68:ea: 1f:86:7f:05:df:e3:a0:7f:4f:98:da:c0:b6:20:eb: 7f:ab:6d:6e:71:c2:55:f3:cc:60:d8:81:c8:4a:06: d9:69:50:ee:8a:19:34:a5:43:9e:38:4f:f1:78:28: 8b:2f:7a:d6:2b:9b:70:cb:fd:dc:64:ee:b2:b2:c7: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:80:FB:14:A7:B8:1E:89:E7:C7:EA:93:FD:11:09:B6:02:76:9C:C7 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:58:f8:e8:a5:c3:5e:ae:09:b4:27:ce:c3:c1:b5:ae:30:1e: 26:d8:20:66:e8:67:e0:0c:4c:ad:40:01:d5:52:6a:29:e2:1c: ca:51:03:b1:b9:9a:f4:16:cd:be:9f:ba:29:a6:a0:ff:2d:24: 05:4b:29:e1:b6:0d:8d:99:9c:d8:75:8d:07:88:0b:c5:cc:f9: b5:39:ad:e7:41:e5:25:d3:0c:01:97:bd:5e:a8:2b:71:c7:89: d3:94:e3:90:b6:8e:51:95:b6:5a:a8:56:d8:c4:04:3b:fc:38: 35:f5:a7:84:09:a0:f8:f9:56:b9:8c:a2:30:6c:9e:5c:70:59: fa:0e:82:23:1e:09:ee:7d:23:0d:4b:8b:bd:34:ed:9e:72:b4: 02:ee:25:93:36:73:f5:df:72:55:e6:fa:62:5e:8c:7c:52:18: 92:3d:56:f0:45:ed:f2:58:9d:6f:21:9a:d2:ed:ac:8c:9e:0e: f2:70:e8:8d:f0:86:7f:e1:67:66:23:74:79:0a:e0:95:96:ab: d4:71:05:5e:42:74:5a:9e:2d:6b:f9:43:d8:0a:23:fb:25:15: be:a4:de:ed:3b:44:f3:18:f6:f7:72:8e:40:59:90:ab:65:4d: d4:a8:45:c4:51:ca:ef:10:fe:4f:d8:38:bb:29:32:61:cb:fd: 96:8e:fa:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbffIaJZYLfaFrVWRHnh3X+cWgV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjAzMDIwMzMzMTZaFw0yNjAzMDMwNzI5MTZaMDMxMTAvBgNV BAMTKENBODBGQjE0QTdCODFFODlFN0M3RUE5M0ZEMTEwOUI2MDI3NjlDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMv7qBYQvcpDDe4XdUfW8kg+W F9kJxVpAC8kS27Ifa4IEq3j+GHiJO2mKMQCGUrLcEWWVN2Br/f63dx2SU9KD3IIF hFn7lqE+CyaqZa1WCmQNAA9clmz5NRBtfBKAO3yFm7qBReWNeU+mVdMLSZYgTonp D68Wn+GMTtBFcvwzixaZQlJx6ueorSXZmHDLsQMReaAv8RJwBagAuGf1TwLDxmcP XibYXC94RaFajN429Y+V85HijbZlGL3s8v2Dxydo6h+GfwXf46B/T5jawLYg63+r bW5xwlXzzGDYgchKBtlpUO6KGTSlQ544T/F4KIsvetYrm3DL/dxk7rKyx/MRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyoD7FKe4Honnx+qT/REJtgJ2nMcwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlj46KXDXq4J tCfOw8G1rjAeJtggZuhn4AxMrUAB1VJqKeIcylEDsbma9BbNvp+6Kaag/y0kBUsp 4bYNjZmc2HWNB4gLxcz5tTmt50HlJdMMAZe9XqgrcceJ05TjkLaOUZW2WqhW2MQE O/w4NfWnhAmg+PlWuYyiMGyeXHBZ+g6CIx4J7n0jDUuLvTTtnnK0Au4lkzZz9d9y Veb6Yl6MfFIYkj1W8EXt8lidbyGa0u2sjJ4O8nDojfCGf+FnZiN0eQrglZar1HEF XkJ0Wp4ta/lD2Aoj+yUVvqTe7TtE8xj293KOQFmQq2VN1KhFxFHK7xD+T9g4uyky Ycv9lo76GA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:21:16 2026 by rpki-client