$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft File: B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json) Hash identifier: GpFIZeSQFHH2bmrEbt9MV7TZW5DOKmi/nf3chSTZ06E= Subject key identifier: CB:B2:24:BA:78:37:D9:E1:72:CF:65:B4:84:25:54:96:4A:4C:06:F6 Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Certificate serial: 6D6AE492423B46CD41C50C4BB1EA8599AD661BCC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 17:43:16 +0000 Manifest this update: Sun 01 Mar 2026 17:38:16 +0000 Manifest next update: Mon 02 Mar 2026 19:05:16 +0000 Files and hashes: 1: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: u13KVHz1CYfs2a6HB0yRyX/Aj+HyhWkYS/2cobSTDns=) 2: 3130332e3130342e3135322e302f32322d3234203d3e203234343234.roa (hash: Dli5jEBU9Q5KjJmGy5qDqlEwCF16qg7imjDMUPHy1Ec=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 19:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6a:e4:92:42:3b:46:cd:41:c5:0c:4b:b1:ea:85:99:ad:66:1b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Validity Not Before: Mar 1 17:38:16 2026 GMT Not After : Mar 2 19:05:16 2026 GMT Subject: CN=CBB224BA7837D9E172CF65B4842554964A4C06F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:e5:f1:62:78:cc:07:36:6c:d1:08:af:a0: b2:0a:bf:a1:44:52:ed:a8:6e:4e:2c:a1:d0:52:da: 6b:79:e2:d2:ef:6b:04:03:2c:69:87:75:2e:ec:6a: 44:13:6b:c1:29:3a:9a:67:96:58:4c:8d:fa:5f:4f: a5:dd:7d:24:44:99:ec:ab:e9:81:b6:b9:25:73:49: cd:c0:37:95:41:fc:c2:98:64:7f:50:cc:99:e9:48: e8:ba:1a:a5:eb:14:68:3d:2e:81:9b:19:ee:38:33: 97:bc:79:58:b1:68:1e:2d:76:fc:b1:c3:48:18:f8: 45:0e:f2:57:f1:f0:12:88:1f:1c:7a:04:14:af:96: bc:07:2d:ed:76:b8:02:09:a9:26:24:42:b0:e2:0e: 0e:82:2b:0f:36:76:cd:f2:64:3a:7b:9f:e9:87:7e: 80:20:b7:53:e2:50:77:04:0d:03:2b:bd:b0:8c:ba: 71:60:eb:fa:05:1c:38:a1:45:ca:17:ee:b8:5f:27: 1d:55:aa:19:b4:2c:2d:0d:fc:68:c5:9d:0e:11:84: a1:13:f0:89:73:26:76:28:e0:d7:5c:2b:8a:04:8d: 19:28:6d:4f:e4:86:b5:11:5b:48:bc:c2:0a:cb:2a: 45:5b:af:15:0f:05:6d:2d:3f:5e:10:84:1e:39:f8: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B2:24:BA:78:37:D9:E1:72:CF:65:B4:84:25:54:96:4A:4C:06:F6 X509v3 Authority Key Identifier: keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:c0:8c:ec:0b:1e:7a:95:86:f1:9e:74:14:23:7f:18:34: 09:dd:fb:aa:c3:09:99:92:ff:a4:56:66:01:a8:f6:90:1f:fd: 7d:37:8d:31:81:90:fe:2b:9a:60:ae:a8:4f:d2:2a:64:82:8c: f8:6c:be:53:c3:4b:82:c4:4e:6d:f5:19:0b:e8:81:14:08:5c: ed:16:ec:b0:2d:7d:7e:d4:02:60:26:0b:08:6b:e8:70:16:0e: 0e:d5:c2:42:f3:7b:d9:15:6f:03:81:26:87:2e:62:21:25:37: b5:0e:98:8b:5f:04:6b:27:6e:36:78:2f:c7:f5:08:24:85:62: 71:e8:93:6b:75:bd:09:7d:f5:a3:05:a6:1d:3e:96:c0:a0:8b: a2:e3:ee:db:a0:41:95:59:d9:f6:69:49:8b:07:34:b0:e7:f1: 60:be:56:be:a7:7d:4c:89:6a:9a:65:e9:4e:71:c6:da:84:6f: 44:2b:f0:e2:8b:f9:c4:25:8b:84:e1:0e:03:14:4e:61:4a:42: 10:53:a7:aa:82:25:e5:8c:52:5d:5b:4c:cc:92:c1:89:67:ea: 03:d1:a6:7b:09:2c:ec:f0:3a:52:ee:1f:e3:08:03:ec:d4:cd: 6b:46:38:b7:97:31:30:b8:fa:e0:ae:b1:d0:28:ac:d7:63:21: 6f:c2:20:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbWrkkkI7Rs1BxQxLseqFma1mG8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1 NjhCMDBEODAeFw0yNjAzMDExNzM4MTZaFw0yNjAzMDIxOTA1MTZaMDMxMTAvBgNV BAMTKENCQjIyNEJBNzgzN0Q5RTE3MkNGNjVCNDg0MjU1NDk2NEE0QzA2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7COXxYnjMBzZs0QivoLIKv6FE Uu2obk4sodBS2mt54tLvawQDLGmHdS7sakQTa8EpOppnllhMjfpfT6XdfSREmeyr 6YG2uSVzSc3AN5VB/MKYZH9QzJnpSOi6GqXrFGg9LoGbGe44M5e8eVixaB4tdvyx w0gY+EUO8lfx8BKIHxx6BBSvlrwHLe12uAIJqSYkQrDiDg6CKw82ds3yZDp7n+mH foAgt1PiUHcEDQMrvbCMunFg6/oFHDihRcoX7rhfJx1Vqhm0LC0N/GjFnQ4RhKET 8IlzJnYo4NdcK4oEjRkobU/khrURW0i8wgrLKkVbrxUPBW0tP14QhB45+GrTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy7Ikung32eFyz2W0hCVUlkpMBvYwHwYDVR0j BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwMDg5NjMvMC9CMzYxQzc1N0I2RDcw QzMxN0ZEMDE4Q0U5MjFDQzEzRjU2OEIwMEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjbAjOwLHnqV hvGedBQjfxg0Cd37qsMJmZL/pFZmAaj2kB/9fTeNMYGQ/iuaYK6oT9IqZIKM+Gy+ U8NLgsRObfUZC+iBFAhc7RbssC19ftQCYCYLCGvocBYODtXCQvN72RVvA4Emhy5i ISU3tQ6Yi18EayduNngvx/UIJIViceiTa3W9CX31owWmHT6WwKCLouPu26BBlVnZ 9mlJiwc0sOfxYL5Wvqd9TIlqmmXpTnHG2oRvRCvw4ov5xCWLhOEOAxROYUpCEFOn qoIl5YxSXVtMzJLBiWfqA9Gmewks7PA6Uu4f4wgD7NTNa0Y4t5cxMLj64K6x0Cis 12Mhb8IgJg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:52:00 2026 by rpki-client