$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json) Hash identifier: o/vxM+cvF/q0WHNRh17ZXWyKcm0E2U+ycvhxxe4JA/0= Subject key identifier: 71:20:4C:A3:35:4F:60:EE:D3:EB:D8:D7:28:14:42:3F:53:59:FD:DC Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Certificate serial: 632EEE4B26D6594C578F023C91FA6D5B277A6D02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 02:38:16 +0000 Manifest this update: Mon 02 Mar 2026 02:33:16 +0000 Manifest next update: Tue 03 Mar 2026 02:46:16 +0000 Files and hashes: 1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: qkEfX53eIp17F88tHdkmCoz/7Z7NCU3tOQaK27yNzEs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2e:ee:4b:26:d6:59:4c:57:8f:02:3c:91:fa:6d:5b:27:7a:6d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Validity Not Before: Mar 2 02:33:16 2026 GMT Not After : Mar 3 02:46:16 2026 GMT Subject: CN=71204CA3354F60EED3EBD8D72814423F5359FDDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:d4:35:ce:03:b1:fa:ff:a2:91:26:c6:59: e1:22:d2:58:9e:5c:58:d0:16:71:e2:5e:fe:5e:a1: 35:4f:8b:37:39:ad:b4:2d:e1:13:33:8a:ca:c1:ea: 20:ac:ed:6c:d7:6a:e6:ea:e7:2d:31:19:a5:3c:9d: df:98:b9:71:b3:f7:57:f7:44:f0:3f:28:60:e6:0b: 36:fd:15:ff:02:15:9c:f0:b8:8b:99:d6:64:de:a8: 74:f0:17:b9:d8:f9:e8:bb:9a:cd:f9:d6:cb:d3:dd: ad:f1:06:28:f1:ae:32:43:19:e6:7f:80:53:aa:26: 1c:be:ec:48:33:cc:b8:ff:90:df:f6:02:4f:95:b8: a6:ad:86:dc:9f:16:bb:6b:fa:08:8d:59:c0:f7:98: d5:62:8b:68:00:dd:4e:f4:f6:78:88:89:d1:9e:c5: 12:4a:73:42:c8:72:96:cd:02:c2:48:f1:a5:6a:f6: 6d:2d:90:6d:f3:d6:f8:2c:90:df:d3:39:6c:39:da: fe:00:ff:f2:5b:0d:0a:b9:62:7f:24:7d:83:33:d9: 0c:ee:26:5d:2d:31:d7:30:aa:fa:64:70:75:cc:b3: e0:59:26:bd:5d:3d:9b:88:3c:04:80:f0:00:27:46: 7c:b9:6c:5c:8a:6b:c0:1c:c4:85:30:37:5f:2b:5a: 21:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:20:4C:A3:35:4F:60:EE:D3:EB:D8:D7:28:14:42:3F:53:59:FD:DC X509v3 Authority Key Identifier: keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c4:9b:f9:68:77:39:86:2b:41:8e:5a:df:04:44:b0:a8:84: 73:8c:4f:24:3b:6c:c2:7e:d8:19:8c:74:dc:fa:69:13:d9:01: 5f:6f:2c:8a:40:e3:d1:87:b5:20:e9:74:37:c0:97:f2:6e:d9: d8:b5:6b:c4:38:1f:e9:db:19:63:b6:b1:f3:85:8d:63:11:44: 85:6f:25:bb:c6:85:24:e2:7e:77:dd:9f:77:35:6c:7b:82:0a: bc:a2:9f:17:fa:eb:cd:30:9d:26:07:64:eb:02:75:6d:12:45: f0:6a:68:28:d8:b4:05:95:70:18:2d:53:f5:18:d0:58:e6:3c: a7:cc:26:35:b2:9e:ad:91:31:64:ef:53:18:35:d7:e9:e5:6d: 9c:36:42:8a:27:36:c0:36:09:27:46:5d:01:69:03:94:d1:12: 28:af:39:c5:a1:bb:72:4d:45:25:c4:e0:8b:f2:9a:73:c5:bc: d9:18:6e:88:07:dd:0d:90:f8:a0:b7:8c:38:56:da:8f:eb:08: ca:4c:16:7b:da:e0:b1:a2:d6:1e:3a:e3:9a:be:6f:49:cd:7e: 4a:cc:de:23:93:56:8a:eb:e0:68:69:af:b2:20:81:90:af:ce: fc:34:a5:73:72:a2:76:d9:17:f7:ac:3f:b9:4c:bc:8e:da:2b: 7e:b6:42:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYy7uSybWWUxXjwI8kfptWyd6bQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4 MEU5RThENTAeFw0yNjAzMDIwMjMzMTZaFw0yNjAzMDMwMjQ2MTZaMDMxMTAvBgNV BAMTKDcxMjA0Q0EzMzU0RjYwRUVEM0VCRDhENzI4MTQ0MjNGNTM1OUZEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIdQ1zgOx+v+ikSbGWeEi0lie XFjQFnHiXv5eoTVPizc5rbQt4RMzisrB6iCs7WzXaubq5y0xGaU8nd+YuXGz91f3 RPA/KGDmCzb9Ff8CFZzwuIuZ1mTeqHTwF7nY+ei7ms351svT3a3xBijxrjJDGeZ/ gFOqJhy+7EgzzLj/kN/2Ak+VuKathtyfFrtr+giNWcD3mNVii2gA3U709niIidGe xRJKc0LIcpbNAsJI8aVq9m0tkG3z1vgskN/TOWw52v4A//JbDQq5Yn8kfYMz2Qzu Jl0tMdcwqvpkcHXMs+BZJr1dPZuIPASA8AAnRny5bFyKa8AcxIUwN18rWiHvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcSBMozVPYO7T69jXKBRCP1NZ/dwwHwYDVR0j BBgwFoAUTReeXLokVPeW/ygX/mLiC4Dp6NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8xLzREMTc5RTVDQkEyNDU0Rjc5NkZGMjgxN0ZFNjJF MjBCODBFOUU4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4MEU5RThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMS80RDE3OUU1Q0JBMjQ1 NEY3OTZGRjI4MTdGRTYyRTIwQjgwRTlFOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8Sb+Wh3OYYr QY5a3wREsKiEc4xPJDtswn7YGYx03PppE9kBX28sikDj0Ye1IOl0N8CX8m7Z2LVr xDgf6dsZY7ax84WNYxFEhW8lu8aFJOJ+d92fdzVse4IKvKKfF/rrzTCdJgdk6wJ1 bRJF8GpoKNi0BZVwGC1T9RjQWOY8p8wmNbKerZExZO9TGDXX6eVtnDZCiic2wDYJ J0ZdAWkDlNESKK85xaG7ck1FJcTgi/Kac8W82RhuiAfdDZD4oLeMOFbaj+sIykwW e9rgsaLWHjrjmr5vSc1+SszeI5NWiuvgaGmvsiCBkK/O/DSlc3KidtkX96w/uUy8 jtorfrZCnQ== -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:12 2026 by rpki-client