$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: IF2mYenbejt0Ks5O1dp4xmOubN6tKQt9z5qWBrTRvXs= Subject key identifier: B4:82:1B:E2:56:E1:74:D6:F4:AB:4A:54:85:5D:9A:A0:33:4A:5C:BB Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 73DAB1FF315B3E265BE2F883FEEF913129D970AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 09:38:17 +0000 Manifest this update: Mon 02 Mar 2026 09:33:17 +0000 Manifest next update: Tue 03 Mar 2026 09:47:17 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: SuXGPTa/hfp89UOo83VBRulY3Dg+h/VizU2hLB6WeNc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:da:b1:ff:31:5b:3e:26:5b:e2:f8:83:fe:ef:91:31:29:d9:70:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Mar 2 09:33:17 2026 GMT Not After : Mar 3 09:47:17 2026 GMT Subject: CN=B4821BE256E174D6F4AB4A54855D9AA0334A5CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:b9:cd:c1:77:ee:d9:7b:9b:f9:d1:83:3b: 9b:bb:c2:fd:23:8e:3c:56:7f:cb:03:d5:2d:05:6c: 8d:85:dd:2f:6b:56:4d:84:6a:9c:9f:a9:e0:21:b9: 71:73:0d:73:be:18:ae:db:85:c1:8e:df:f9:85:87: bd:61:eb:b9:a9:f8:c7:36:eb:4d:b9:75:bd:3f:03: f3:92:24:96:5f:35:91:45:02:65:4a:f8:7d:b1:6d: a3:e7:e9:74:b8:28:7b:ae:2d:1c:71:04:20:13:63: a9:3c:ba:c5:2b:f6:88:b5:32:63:4b:fa:65:a3:32: 14:76:75:a1:f8:c5:75:92:a9:1f:da:20:20:16:08: 5a:8e:55:80:af:ea:73:53:2b:83:c8:7b:7d:6a:8c: 8d:3f:55:6b:9e:f2:23:66:d7:b7:a5:c7:c5:1e:79: a9:2a:5f:fa:17:65:b7:69:71:1e:3a:0b:ac:cd:55: 64:1c:b2:1a:9e:e7:a7:a5:50:b0:2f:da:b1:41:15: 8f:a8:f1:e7:c6:92:3f:22:46:69:72:f0:63:52:ca: 3e:de:55:70:96:21:52:50:8d:52:59:eb:10:33:a7: 2e:05:0b:16:2d:6b:e6:bf:ed:3c:c7:12:76:97:a8: 1b:7a:3f:fb:a6:10:0a:e3:6f:0d:04:9d:75:83:ba: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:82:1B:E2:56:E1:74:D6:F4:AB:4A:54:85:5D:9A:A0:33:4A:5C:BB X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4e:9f:27:c5:3e:db:d7:64:53:80:bc:48:33:27:1b:7c:2a: 65:ec:22:3f:42:1c:11:9b:68:a3:8c:27:b2:0c:7c:18:b0:bc: 1c:c0:5a:3e:7b:33:b4:64:56:6f:d4:0c:d1:6f:90:84:4b:8c: 75:31:78:31:9b:52:aa:c1:ca:22:21:7b:9a:33:4e:c1:b1:67: 56:d3:6f:ad:3a:0b:87:e1:95:d5:99:6d:70:0b:1a:9a:d5:7a: 1c:52:d5:db:00:f1:c4:04:cf:5d:01:9f:c0:91:9b:de:3d:90: e7:44:98:6a:13:c9:10:63:7c:77:6d:d7:74:22:9e:83:19:d0: 0c:3f:96:c7:e6:d3:c3:47:2b:09:07:10:4e:46:e3:22:28:84: 43:f4:8a:e0:e1:30:ff:2f:b8:1f:b0:da:cb:11:11:05:34:8d: cf:4d:b2:d1:98:c4:f3:28:8d:79:13:61:80:d2:4a:72:b9:7b: 49:3d:34:44:e2:40:3d:a9:4e:cc:ca:ee:e0:cc:ab:d5:3e:10: 9a:d6:86:ce:e5:52:fb:ff:ca:d6:01:35:01:ec:11:50:01:a1: 4d:d8:ff:a3:af:b5:f4:3c:7d:c1:91:0d:72:91:9f:96:dc:8e: 7c:80:27:a9:dd:74:b4:d7:05:1b:68:a6:50:31:1e:b1:c9:3d: 63:e3:f7:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc9qx/zFbPiZb4viD/u+RMSnZcK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjAzMDIwOTMzMTdaFw0yNjAzMDMwOTQ3MTdaMDMxMTAvBgNV BAMTKEI0ODIxQkUyNTZFMTc0RDZGNEFCNEE1NDg1NUQ5QUEwMzM0QTVDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLLnNwXfu2Xub+dGDO5u7wv0j jjxWf8sD1S0FbI2F3S9rVk2EapyfqeAhuXFzDXO+GK7bhcGO3/mFh71h67mp+Mc2 6025db0/A/OSJJZfNZFFAmVK+H2xbaPn6XS4KHuuLRxxBCATY6k8usUr9oi1MmNL +mWjMhR2daH4xXWSqR/aICAWCFqOVYCv6nNTK4PIe31qjI0/VWue8iNm17elx8Ue eakqX/oXZbdpcR46C6zNVWQcshqe56elULAv2rFBFY+o8efGkj8iRmly8GNSyj7e VXCWIVJQjVJZ6xAzpy4FCxYta+a/7TzHEnaXqBt6P/umEArjbw0EnXWDuriTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtIIb4lbhdNb0q0pUhV2aoDNKXLswHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXk6fJ8U+29dk U4C8SDMnG3wqZewiP0IcEZtoo4wnsgx8GLC8HMBaPnsztGRWb9QM0W+QhEuMdTF4 MZtSqsHKIiF7mjNOwbFnVtNvrToLh+GV1ZltcAsamtV6HFLV2wDxxATPXQGfwJGb 3j2Q50SYahPJEGN8d23XdCKegxnQDD+Wx+bTw0crCQcQTkbjIiiEQ/SK4OEw/y+4 H7DayxERBTSNz02y0ZjE8yiNeRNhgNJKcrl7ST00ROJAPalOzMru4Myr1T4QmtaG zuVS+//K1gE1AewRUAGhTdj/o6+19Dx9wZENcpGfltyOfIAnqd10tNcFG2imUDEe sck9Y+P3qw== -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:11 2026 by rpki-client