$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: q2EjuVd7R2G8tsGczGArUxUhIkBl1z6IHNhyeqOKOCU= Subject key identifier: 31:16:B5:4F:70:F1:04:25:06:8F:3F:F3:E7:35:4B:67:CE:1E:40:71 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 5E64E2E3835AE47F7BC1FF5F3CACF5D0A59454AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 09:13:17 +0000 Manifest this update: Mon 02 Mar 2026 09:08:17 +0000 Manifest next update: Tue 03 Mar 2026 12:03:17 +0000 Files and hashes: 1: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) 2: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: M1X+oSJs2sMA23Dl02ZFvFlHEVYHIIuqrWmJmjMQpww=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:64:e2:e3:83:5a:e4:7f:7b:c1:ff:5f:3c:ac:f5:d0:a5:94:54:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Mar 2 09:08:17 2026 GMT Not After : Mar 3 12:03:17 2026 GMT Subject: CN=3116B54F70F10425068F3FF3E7354B67CE1E4071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:c4:a5:b1:06:b6:a1:99:8a:f2:b6:21:2a: 96:be:bf:d7:8f:cd:94:ad:49:db:61:4f:71:04:90: e4:bd:7a:d9:10:4d:4b:90:41:43:98:ff:c1:a5:79: 40:a9:f8:36:e2:a2:5b:ce:d7:74:77:70:0c:23:ec: a1:be:4b:45:62:98:89:62:d4:b2:9d:0a:3a:3b:96: 6f:20:42:e4:10:6b:f2:0e:bb:4d:82:7a:e9:70:d8: 3a:03:21:a9:0b:ea:40:4b:d9:46:17:99:cd:41:31: 27:db:4d:04:18:e8:c9:16:49:7d:1d:0a:0c:c7:4f: 8b:39:3c:3a:91:31:4d:5e:0a:a5:ba:a9:93:58:1d: 25:fd:11:b1:26:82:c1:1a:90:e5:b4:88:fd:ba:e6: c5:c3:81:30:68:89:2b:96:d5:f1:89:bd:cc:a3:76: c6:38:99:53:aa:51:3a:80:0c:e3:0f:81:03:05:dc: 23:6b:8d:6c:89:9d:39:04:b6:04:ce:2a:43:22:99: 8f:6b:28:30:e4:ed:b4:90:cc:fc:7e:63:77:74:52: 1f:71:9e:3d:35:70:8c:0e:03:3a:7b:12:c1:40:08: cf:02:c3:49:1f:d5:b9:e1:6f:9d:e3:63:13:4c:ad: d6:f7:c1:c1:84:1a:ea:48:79:2a:f8:79:50:0c:24: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:16:B5:4F:70:F1:04:25:06:8F:3F:F3:E7:35:4B:67:CE:1E:40:71 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:44:4a:bf:e9:28:9a:a5:ea:8b:13:40:53:5b:74:24:b8:53: e4:f7:fe:15:72:45:f9:71:fb:ea:04:9d:47:bd:ba:86:5a:c5: fb:92:74:d9:87:e6:ba:bf:7f:30:8f:cd:b9:69:49:9e:76:23: 54:10:37:91:dc:c2:1e:9f:1d:df:7c:4f:ef:66:f2:a6:0c:da: 1d:f3:4c:8e:7f:a2:12:4d:c6:ec:bd:b7:d7:71:5f:5f:1c:9b: b7:9e:2a:0f:4e:09:d6:ae:60:5f:f7:23:00:ab:b5:ac:28:66: 74:32:77:15:53:7a:f6:22:f8:f0:2f:ac:c2:67:8f:db:3b:0e: 43:1a:82:1c:31:bf:81:6e:07:53:86:34:82:b9:e3:31:f2:0c: 0c:fd:0d:a2:c2:9a:cd:80:e0:7f:2e:05:67:85:a9:bc:5b:08: 45:61:80:3b:d5:e1:f5:16:aa:a1:41:93:d2:43:3c:9a:c7:df: 37:19:8b:6b:b3:8a:76:49:f0:2e:74:52:5b:49:18:6d:40:83: 57:3c:27:f2:52:f6:a7:01:cd:24:f8:64:95:3f:7f:4d:8b:4e: 18:05:c8:bd:51:1b:e0:bd:c8:71:44:3e:9b:e6:3e:45:1b:4f: 8a:ea:72:52:1f:ba:58:c6:45:5f:92:e9:46:fc:bb:d9:8e:c0: 74:e8:f2:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXmTi44Na5H97wf9fPKz10KWUVK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjAzMDIwOTA4MTdaFw0yNjAzMDMxMjAzMTdaMDMxMTAvBgNV BAMTKDMxMTZCNTRGNzBGMTA0MjUwNjhGM0ZGM0U3MzU0QjY3Q0UxRTQwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MSlsQa2oZmK8rYhKpa+v9eP zZStSdthT3EEkOS9etkQTUuQQUOY/8GleUCp+DbiolvO13R3cAwj7KG+S0VimIli 1LKdCjo7lm8gQuQQa/IOu02Ceulw2DoDIakL6kBL2UYXmc1BMSfbTQQY6MkWSX0d CgzHT4s5PDqRMU1eCqW6qZNYHSX9EbEmgsEakOW0iP265sXDgTBoiSuW1fGJvcyj dsY4mVOqUTqADOMPgQMF3CNrjWyJnTkEtgTOKkMimY9rKDDk7bSQzPx+Y3d0Uh9x nj01cIwOAzp7EsFACM8Cw0kf1bnhb53jYxNMrdb3wcGEGupIeSr4eVAMJJtfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMRa1T3DxBCUGjz/z5zVLZ84eQHEwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjURKv+komqXq ixNAU1t0JLhT5Pf+FXJF+XH76gSdR726hlrF+5J02Yfmur9/MI/NuWlJnnYjVBA3 kdzCHp8d33xP72bypgzaHfNMjn+iEk3G7L2313FfXxybt54qD04J1q5gX/cjAKu1 rChmdDJ3FVN69iL48C+swmeP2zsOQxqCHDG/gW4HU4Y0grnjMfIMDP0NosKazYDg fy4FZ4WpvFsIRWGAO9Xh9RaqoUGT0kM8msffNxmLa7OKdknwLnRSW0kYbUCDVzwn 8lL2pwHNJPhklT9/TYtOGAXIvVEb4L3IcUQ+m+Y+RRtPiupyUh+6WMZFX5LpRvy7 2Y7AdOjyJw== -----END CERTIFICATE-----Generated at Mon Mar 2 22:32:06 2026 by rpki-client