$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: 5uuW+M+SpR6OHtVByUf+fQbPIYZeC4jI/bQ/zi9z/vA= Subject key identifier: 5C:71:E1:1D:BF:B2:EC:5A:2D:6B:FC:E5:1F:6D:6F:58:C8:C2:27:3C Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 1E50DD1BD46316627D6D5AD1057E39AC8CF6BB61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 03:18:16 +0000 Manifest this update: Mon 02 Mar 2026 03:13:16 +0000 Manifest next update: Tue 03 Mar 2026 05:58:16 +0000 Files and hashes: 1: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: d98JRo8JznvSkl4fyRDWXEHVKKsnZm14GraYkAn32k0=) 2: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) 3: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:50:dd:1b:d4:63:16:62:7d:6d:5a:d1:05:7e:39:ac:8c:f6:bb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Mar 2 03:13:16 2026 GMT Not After : Mar 3 05:58:16 2026 GMT Subject: CN=5C71E11DBFB2EC5A2D6BFCE51F6D6F58C8C2273C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:2b:1b:bf:fd:37:e9:03:50:1f:0f:97:d2: e5:15:e1:74:8b:58:8e:d1:91:47:b6:99:11:68:e9: 0b:d5:0a:ca:77:cd:36:4b:b7:4b:7f:38:e5:c4:54: 16:bc:6d:87:5e:65:4b:1f:72:93:2d:d2:d7:e6:5c: f2:95:04:a9:3f:6f:dd:96:1e:84:47:ec:04:7c:00: 83:da:f2:45:0b:45:0b:ad:ef:04:74:25:f2:d6:54: 8e:ad:ae:2e:bf:b1:70:e0:8c:b1:fa:00:9e:85:8f: 9d:60:d9:bf:37:6b:00:f8:0b:67:06:e8:c0:6f:a8: 1d:b0:54:55:5a:cb:2e:5e:2e:0b:d6:e8:ee:9e:6c: 8a:a2:4c:c9:d4:05:cd:4d:ee:38:2d:04:7b:a3:02: 17:e8:8b:de:d4:72:4c:33:06:aa:d7:81:34:ca:be: 9e:4d:3d:db:5b:44:02:c9:9d:a2:55:a8:f1:37:46: 84:00:3f:60:77:b4:42:57:d7:de:64:ff:fe:50:4a: 30:51:cd:33:2b:79:63:b8:9f:6a:c8:7a:f1:ae:00: bb:4d:40:33:99:df:47:ff:29:c8:0a:86:1a:da:27: 88:08:c3:18:42:b4:1c:4e:5c:50:81:39:08:ce:a4: 09:d7:99:e0:dc:8b:b9:f3:bb:63:11:b3:88:9a:f6: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:71:E1:1D:BF:B2:EC:5A:2D:6B:FC:E5:1F:6D:6F:58:C8:C2:27:3C X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c5:4f:9f:21:6e:36:9e:93:ba:39:e0:71:8b:99:21:40:e0: 5d:fb:42:17:49:fc:8a:1a:70:70:9e:80:4d:6e:1a:bd:ca:41: 11:5d:cd:d7:06:f9:b8:8a:ac:66:b4:bd:83:6d:4e:ff:c8:2a: 71:73:d4:d6:a3:eb:45:ea:1e:1e:c8:f4:65:e3:ed:9e:11:7b: ed:bf:39:80:f4:f0:75:ad:45:fc:2f:fb:6f:68:02:0e:94:2b: 72:9b:d8:ff:66:14:20:04:8e:02:a9:9e:19:d0:89:94:be:74: 89:d6:e2:1e:8b:f2:43:12:1c:f0:4f:ef:26:29:00:ae:8a:3d: 31:e2:92:f3:47:77:15:89:f8:cc:12:d2:0c:2f:3f:0b:b6:e4: 0b:1b:bc:11:bb:2e:e8:e9:d4:79:96:b4:d0:74:3d:05:b2:c7: 23:0f:4e:82:6b:9c:18:7e:c6:17:33:4e:40:2d:a8:30:7e:e3: 5f:5d:9d:b5:68:6b:72:69:18:35:91:c4:d8:33:1f:50:b8:6c: e2:78:9c:d6:f0:14:63:9b:a5:1e:ad:35:75:15:66:e4:75:6a: 58:f2:20:c3:a0:6b:7b:7f:95:bb:04:e7:e5:e9:76:76:96:44: 43:57:a2:15:16:ed:86:0d:23:9b:e9:36:67:51:09:8e:b4:1a: 0d:11:ab:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHlDdG9RjFmJ9bVrRBX45rIz2u2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjAzMDIwMzEzMTZaFw0yNjAzMDMwNTU4MTZaMDMxMTAvBgNV BAMTKDVDNzFFMTFEQkZCMkVDNUEyRDZCRkNFNTFGNkQ2RjU4QzhDMjI3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mysbv/036QNQHw+X0uUV4XSL WI7RkUe2mRFo6QvVCsp3zTZLt0t/OOXEVBa8bYdeZUsfcpMt0tfmXPKVBKk/b92W HoRH7AR8AIPa8kULRQut7wR0JfLWVI6tri6/sXDgjLH6AJ6Fj51g2b83awD4C2cG 6MBvqB2wVFVayy5eLgvW6O6ebIqiTMnUBc1N7jgtBHujAhfoi97UckwzBqrXgTTK vp5NPdtbRALJnaJVqPE3RoQAP2B3tEJX195k//5QSjBRzTMreWO4n2rIevGuALtN QDOZ30f/KcgKhhraJ4gIwxhCtBxOXFCBOQjOpAnXmeDci7nzu2MRs4ia9gMJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXHHhHb+y7Fota/zlH21vWMjCJzwwHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcVPnyFuNp6T ujngcYuZIUDgXftCF0n8ihpwcJ6ATW4avcpBEV3N1wb5uIqsZrS9g21O/8gqcXPU 1qPrReoeHsj0ZePtnhF77b85gPTwda1F/C/7b2gCDpQrcpvY/2YUIASOAqmeGdCJ lL50idbiHovyQxIc8E/vJikAroo9MeKS80d3FYn4zBLSDC8/C7bkCxu8Ebsu6OnU eZa00HQ9BbLHIw9OgmucGH7GFzNOQC2oMH7jX12dtWhrcmkYNZHE2DMfULhs4nic 1vAUY5ulHq01dRVm5HVqWPIgw6Bre3+VuwTn5el2dpZEQ1eiFRbthg0jm+k2Z1EJ jrQaDRGrOg== -----END CERTIFICATE-----Generated at Mon Mar 2 18:19:46 2026 by rpki-client