$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft File: C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json) Hash identifier: Zh2pPNvHC4BU53gY3WVgCjYjH+tgtm6yVbpfPSwInfU= Subject key identifier: D9:8F:A4:86:69:C0:86:64:10:20:C2:66:81:74:9F:D7:D9:F5:DB:A7 Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D Certificate issuer: /CN=C47353D21D668838E2523770D8C0FD078215052D Certificate serial: 7F18F3513FBE983DD201E608535C3AAE0493D2C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 12:48:17 +0000 Manifest this update: Mon 02 Mar 2026 12:43:17 +0000 Manifest next update: Tue 03 Mar 2026 13:14:17 +0000 Files and hashes: 1: 3136302e31392e38322e302f32342d3332203d3e20313531323631.roa (hash: wIryNUkq+SQIuh9QyxK3ngEMwqyiwq3cbzW2X3MdysU=) 2: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: pAirrZqC7hqb+mLhbGbhhrMZyDsPwCN6nnWaNOEAxno=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:18:f3:51:3f:be:98:3d:d2:01:e6:08:53:5c:3a:ae:04:93:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D Validity Not Before: Mar 2 12:43:17 2026 GMT Not After : Mar 3 13:14:17 2026 GMT Subject: CN=D98FA48669C086641020C26681749FD7D9F5DBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:c9:02:41:ec:19:37:ef:ca:d7:57:ad:7d: dc:d5:26:9d:5d:cf:bd:68:b8:2b:12:2c:c3:b9:ec: b7:5f:7e:e6:40:8e:f3:e0:98:39:3a:a6:d4:eb:dd: b3:3e:ee:95:f4:4d:9b:50:61:3e:69:dc:2c:e3:c4: c2:85:26:95:55:f4:87:16:51:db:f4:5a:08:6b:26: de:c7:8c:16:de:dd:39:8b:69:9a:30:35:c7:e1:38: 37:7d:87:38:2c:63:89:5d:ee:13:73:1a:93:a7:8f: 0f:6b:93:bf:f0:91:02:c8:2e:31:2b:bb:7c:0b:f4: 64:ed:3e:db:0a:8e:1e:6f:60:18:ef:94:7e:39:60: ab:b9:88:3b:8d:e7:b9:d5:39:eb:2c:50:b6:b4:7a: c6:c6:79:16:15:90:97:fa:24:c1:5b:27:c2:5f:e4: 0d:22:48:b4:e8:3d:51:1e:e9:4a:78:20:90:c5:dc: ad:30:0e:41:a2:88:d4:bc:22:31:21:59:d5:9d:7f: 7f:81:73:55:b6:03:ea:6b:13:59:8f:04:da:90:1f: 22:30:a3:e3:a0:d3:bd:02:f2:8d:be:47:de:c9:5b: 86:b1:43:c4:53:2b:82:3d:bd:13:4e:3f:9c:a7:0c: a9:4f:2d:cf:b5:67:03:cc:39:f6:3d:be:64:9d:bc: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8F:A4:86:69:C0:86:64:10:20:C2:66:81:74:9F:D7:D9:F5:DB:A7 X509v3 Authority Key Identifier: keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:d7:d8:23:44:6c:e3:c7:46:cf:ec:fb:3d:e1:4e:42:ed: 82:2a:fe:1d:ce:0a:39:85:50:32:69:b3:0d:e6:3b:9c:68:0e: c2:90:e1:31:a1:0d:cf:cf:b4:3d:1c:09:ec:04:21:41:06:01: d9:28:2d:22:82:06:19:6d:41:1c:9a:d6:87:32:15:78:e7:ff: 54:a7:d4:32:d8:f5:a3:04:77:c4:28:4b:5e:8d:e3:0e:8f:25: 17:3c:15:1e:93:97:b1:85:f5:a8:8a:3f:a4:3e:2c:cc:ce:a3: eb:48:85:53:bf:f6:69:6e:d6:06:83:4d:47:55:37:c0:26:b1: 51:a4:ec:6d:3b:3b:8a:c3:b5:26:50:0a:a9:c6:00:17:c3:55: 21:6b:a7:6c:a6:5a:1a:ce:8b:90:40:de:c1:3e:f0:de:fe:01: f2:e5:5a:f2:a4:27:22:19:e4:d7:e1:d8:69:bd:9c:ad:2f:b8: 63:54:db:0c:5b:c1:95:8f:fd:22:29:fe:5a:d7:f7:a1:b4:bc: 46:93:fb:6e:34:93:b3:97:21:87:da:b7:3c:1f:0f:37:a1:93: 20:78:f2:34:fd:4a:e4:68:df:52:1e:49:d4:21:14:2d:fe:b6: 7e:7c:a0:39:7f:a2:39:7e:03:95:18:f2:ce:2f:75:1a:98:72: 57:c3:ed:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfxjzUT++mD3SAeYIU1w6rgST0sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4 MjE1MDUyRDAeFw0yNjAzMDIxMjQzMTdaFw0yNjAzMDMxMzE0MTdaMDMxMTAvBgNV BAMTKEQ5OEZBNDg2NjlDMDg2NjQxMDIwQzI2NjgxNzQ5RkQ3RDlGNURCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhskCQewZN+/K11etfdzVJp1d z71ouCsSLMO57LdffuZAjvPgmDk6ptTr3bM+7pX0TZtQYT5p3CzjxMKFJpVV9IcW Udv0WghrJt7HjBbe3TmLaZowNcfhODd9hzgsY4ld7hNzGpOnjw9rk7/wkQLILjEr u3wL9GTtPtsKjh5vYBjvlH45YKu5iDuN57nVOessULa0esbGeRYVkJf6JMFbJ8Jf 5A0iSLToPVEe6Up4IJDF3K0wDkGiiNS8IjEhWdWdf3+Bc1W2A+prE1mPBNqQHyIw o+Og070C8o2+R97JW4axQ8RTK4I9vRNOP5ynDKlPLc+1ZwPMOfY9vmSdvI6VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2Y+khmnAhmQQIMJmgXSf19n126cwHwYDVR0j BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4 ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXTX2CNEbOPH Rs/s+z3hTkLtgir+Hc4KOYVQMmmzDeY7nGgOwpDhMaENz8+0PRwJ7AQhQQYB2Sgt IoIGGW1BHJrWhzIVeOf/VKfUMtj1owR3xChLXo3jDo8lFzwVHpOXsYX1qIo/pD4s zM6j60iFU7/2aW7WBoNNR1U3wCaxUaTsbTs7isO1JlAKqcYAF8NVIWunbKZaGs6L kEDewT7w3v4B8uVa8qQnIhnk1+HYab2crS+4Y1TbDFvBlY/9Iin+Wtf3obS8RpP7 bjSTs5chh9q3PB8PN6GTIHjyNP1K5GjfUh5J1CEULf62fnygOX+iOX4DlRjyzi91 GphyV8Pt+w== -----END CERTIFICATE-----Generated at Mon Mar 2 22:16:01 2026 by rpki-client