$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json) Hash identifier: alTbXVU0nqbwCmLHUlCW0hrSZ6q0gA3A6h04EWNlbjU= Subject key identifier: 20:FC:2C:EB:F6:B8:D6:7A:D5:00:41:94:67:DA:AD:27:DB:08:B1:51 Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 49DA3B904B3C5F8633484EB84429C1AE0F273A89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 04:38:16 +0000 Manifest this update: Mon 02 Mar 2026 04:33:16 +0000 Manifest next update: Tue 03 Mar 2026 07:33:16 +0000 Files and hashes: 1: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: +JSnLpYxDn/nDNRmDbMS7K+AEQT9ynBkJToJQ2TnTPc=) 2: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=) 3: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=) 4: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=) 5: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=) 6: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=) 7: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:da:3b:90:4b:3c:5f:86:33:48:4e:b8:44:29:c1:ae:0f:27:3a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: Mar 2 04:33:16 2026 GMT Not After : Mar 3 07:33:16 2026 GMT Subject: CN=20FC2CEBF6B8D67AD500419467DAAD27DB08B151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:0b:31:5a:d4:4a:5c:01:f3:c0:40:d1:90: 6f:0b:5a:71:ed:63:ec:d4:d5:fc:42:83:7b:aa:56: b4:89:d8:05:81:6b:d8:96:d3:10:f0:f3:68:a1:af: 18:fd:0e:85:50:db:a0:81:04:0e:f8:c1:db:84:68: bf:cb:89:7d:c1:d7:64:11:ca:18:6c:af:08:59:9d: 3b:97:75:60:38:7e:89:8f:72:85:a7:50:a2:0b:33: 35:60:81:38:d5:42:46:7a:01:53:64:75:fa:f0:10: 7c:23:0b:80:34:f7:12:2b:62:8f:20:ae:6a:00:8a: 70:d7:ff:bf:8a:e9:f4:63:dd:19:fc:8a:9e:da:c2: 75:24:0c:60:bb:9a:2a:67:0c:d1:cd:fb:73:46:55: 02:68:1b:d9:31:6b:50:9a:2b:62:03:bb:63:d6:7b: d4:92:f0:fb:86:4d:07:c8:71:27:69:fa:38:a8:45: bb:3c:87:96:af:3d:23:6d:56:06:51:f1:07:e6:94: 03:ca:7e:2c:62:6f:06:64:24:be:81:af:19:eb:ad: a8:ec:34:35:67:54:8d:d1:3e:33:b1:f7:a2:fa:05: 55:4a:36:44:8f:54:8f:ce:c6:7c:69:77:52:af:ce: 28:03:d5:6d:e4:f5:68:86:71:f9:44:96:3c:2e:51: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FC:2C:EB:F6:B8:D6:7A:D5:00:41:94:67:DA:AD:27:DB:08:B1:51 X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:19:d6:76:ba:bf:75:32:f8:a3:0e:be:df:46:c0:14:22:62: fa:ec:7f:cb:7b:d1:26:8e:0b:7a:89:ef:6d:13:00:b6:9a:6e: 70:c8:aa:73:35:7b:2a:34:2d:c4:10:e0:11:77:89:85:2e:0d: fe:ae:a6:2b:86:1e:66:b8:e4:16:34:35:75:98:50:db:30:a6: 31:09:69:51:b6:ce:6c:6e:70:ff:d9:0f:f9:df:55:9f:67:5f: 4d:3f:c6:b9:62:7e:cd:61:fe:20:80:b8:3c:f3:19:93:1d:96: 3a:34:17:c5:9f:0a:1c:d1:00:4f:60:26:cd:c1:1f:cb:41:c1: 1f:b1:ce:d8:d0:db:6f:e3:2b:81:b2:19:5b:c5:91:b3:93:8b: 0e:e9:e7:2a:d9:2c:e0:b9:c4:cd:86:c6:90:72:bd:8c:8a:e1: eb:30:88:3b:9f:b2:9e:7d:55:8a:84:64:74:0c:58:88:4c:83: 03:d4:2d:21:8e:4a:9a:6e:90:c8:56:20:52:03:1f:84:48:4d: 2a:df:23:8a:76:0c:42:e7:64:74:30:5b:ba:07:b0:61:57:7e: ca:1c:38:38:fe:84:0a:13:fd:79:fe:1b:0a:47:19:46:fe:a7: fe:16:59:71:d8:0a:d8:7a:de:e0:af:b8:0d:2b:2c:5a:93:a6: 51:b1:36:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSdo7kEs8X4YzSE64RCnBrg8nOokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjAzMDIwNDMzMTZaFw0yNjAzMDMwNzMzMTZaMDMxMTAvBgNV BAMTKDIwRkMyQ0VCRjZCOEQ2N0FENTAwNDE5NDY3REFBRDI3REIwOEIxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYAsxWtRKXAHzwEDRkG8LWnHt Y+zU1fxCg3uqVrSJ2AWBa9iW0xDw82ihrxj9DoVQ26CBBA74wduEaL/LiX3B12QR yhhsrwhZnTuXdWA4fomPcoWnUKILMzVggTjVQkZ6AVNkdfrwEHwjC4A09xIrYo8g rmoAinDX/7+K6fRj3Rn8ip7awnUkDGC7mipnDNHN+3NGVQJoG9kxa1CaK2IDu2PW e9SS8PuGTQfIcSdp+jioRbs8h5avPSNtVgZR8QfmlAPKfixibwZkJL6Brxnrrajs NDVnVI3RPjOx96L6BVVKNkSPVI/Oxnxpd1KvzigD1W3k9WiGcflEljwuUXmbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIPws6/a41nrVAEGUZ9qtJ9sIsVEwHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0NjU4NTgvMC9BNTlGQjU1RjhCM0U0 MDY5NDI3ODc4QkQ1QkE3RkY0MUExNjkxQjVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxnWdrq/dTL4 ow6+30bAFCJi+ux/y3vRJo4LeonvbRMAtppucMiqczV7KjQtxBDgEXeJhS4N/q6m K4YeZrjkFjQ1dZhQ2zCmMQlpUbbObG5w/9kP+d9Vn2dfTT/GuWJ+zWH+IIC4PPMZ kx2WOjQXxZ8KHNEAT2AmzcEfy0HBH7HO2NDbb+MrgbIZW8WRs5OLDunnKtks4LnE zYbGkHK9jIrh6zCIO5+ynn1VioRkdAxYiEyDA9QtIY5Kmm6QyFYgUgMfhEhNKt8j inYMQudkdDBbugewYVd+yhw4OP6EChP9ef4bCkcZRv6n/hZZcdgK2Hre4K+4DSss WpOmUbE2FQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:23:46 2026 by rpki-client