$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft File: 4A07CD19A1B070EE064707237E6CE29C315163F0.mft (raw, json) Hash identifier: b+SADoyk/K+QNPpxOU515gsqPufECJPsPL5IApUkt9k= Subject key identifier: 42:70:59:69:1E:44:CD:DA:BA:06:C4:98:3F:DE:74:CA:2C:93:FC:04 Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Certificate issuer: /CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Certificate serial: 49777BC1BA38211F2D815C4E7F7B95B7416F108E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 07:28:16 +0000 Manifest this update: Mon 02 Mar 2026 07:23:16 +0000 Manifest next update: Tue 03 Mar 2026 10:53:16 +0000 Files and hashes: 1: 4A07CD19A1B070EE064707237E6CE29C315163F0.crl (hash: 5/AZNJHUD8qPaN7molukUxvDndgZnVC5Dz/sejyUUYI=) 2: 34322e3230312e33322e302f31392d3234203d3e20313333313131.roa (hash: IDeHzgazebfuTh7D8W2DOg/Mw+nL4PRKSNoL7vLG0vE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:77:7b:c1:ba:38:21:1f:2d:81:5c:4e:7f:7b:95:b7:41:6f:10:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Validity Not Before: Mar 2 07:23:16 2026 GMT Not After : Mar 3 10:53:16 2026 GMT Subject: CN=427059691E44CDDABA06C4983FDE74CA2C93FC04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:0a:0f:3d:91:0e:7e:25:5c:d8:05:60:5d: cf:db:04:3f:5c:07:44:67:72:63:da:1a:f7:2f:30: 07:86:89:cc:2b:6a:c0:2a:47:c3:84:4b:d2:8b:fe: 1e:9a:53:76:6d:f9:1c:5b:d5:45:cd:f3:e1:da:6b: d8:5f:04:cf:4d:b1:fa:86:6e:da:9e:d4:2a:27:06: 37:6c:38:10:30:89:3b:5e:ad:68:6b:38:71:13:10: 85:c6:4f:9f:c4:54:ef:16:bd:98:00:7e:63:47:33: 11:15:15:2c:61:8a:80:13:d2:8e:06:a2:d6:4a:35: 62:dc:c8:01:13:18:60:a2:9d:77:39:72:6b:cc:70: 02:0e:23:a3:0d:b8:d5:f1:28:dd:9f:ba:91:eb:07: db:a0:27:3b:b8:ad:e4:81:9b:32:9a:ce:78:e4:7e: ea:e7:51:56:52:97:b1:63:b2:cd:73:23:4e:cb:fd: 65:86:b9:df:f2:dc:de:40:6e:25:37:7a:a7:21:a6: 84:d0:09:fe:fe:55:ee:b1:3f:d1:65:80:40:cc:fe: c2:96:61:88:7f:60:d7:84:80:41:9f:df:33:c5:b8: 2b:b2:2b:96:96:98:fe:06:6c:92:2e:d5:e5:3e:79: bf:e2:68:35:d4:61:9a:85:71:ba:c9:20:f2:1d:c0: 3e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:70:59:69:1E:44:CD:DA:BA:06:C4:98:3F:DE:74:CA:2C:93:FC:04 X509v3 Authority Key Identifier: keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f7:19:7c:ad:bd:d5:1f:ed:c2:9e:32:8a:df:93:e7:50:87: 98:49:29:06:4f:1d:3a:94:4b:10:a0:f6:94:a0:5b:91:55:d2: bd:ee:13:6c:96:2f:49:33:c3:4e:54:df:8c:ce:fb:7b:18:09: d3:83:45:5d:fb:93:2a:c0:52:87:28:05:96:d3:17:6c:40:bb: 2a:64:33:b2:65:43:ce:73:dc:16:28:35:f6:0b:33:60:59:85: 85:ec:cf:70:50:60:d3:2f:d3:0e:d4:55:b8:30:e6:87:b0:96: dc:f5:86:30:91:3f:98:c3:96:a4:cd:d6:56:cf:64:3d:f9:ab: 1c:d2:e2:4c:1e:55:fe:b8:bc:86:8d:db:35:d5:2f:5a:68:8a: 7f:32:84:b5:ae:94:4d:a4:5d:ad:1e:7b:ef:7c:98:12:fd:ee: 82:4c:af:6f:8b:3c:a8:1a:7e:a0:85:7e:8f:0b:c6:58:e6:51: 6e:cf:b6:8f:9e:26:48:56:bf:95:82:d4:4d:3d:19:9a:7a:b1: 6a:ad:26:97:8e:70:4f:df:c2:dc:54:00:41:9d:07:74:5f:8f: 0c:f3:ca:2e:df:cb:97:f5:59:b1:f4:59:be:bd:62:8c:fc:79: fe:53:d6:3a:b5:61:cf:c7:ef:c5:46:fc:dc:0b:1b:58:de:40: cd:41:61:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSXd7wbo4IR8tgVxOf3uVt0FvEI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMz MTUxNjNGMDAeFw0yNjAzMDIwNzIzMTZaFw0yNjAzMDMxMDUzMTZaMDMxMTAvBgNV BAMTKDQyNzA1OTY5MUU0NENEREFCQTA2QzQ5ODNGREU3NENBMkM5M0ZDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1IgoPPZEOfiVc2AVgXc/bBD9c B0RncmPaGvcvMAeGicwrasAqR8OES9KL/h6aU3Zt+Rxb1UXN8+Haa9hfBM9NsfqG btqe1ConBjdsOBAwiTterWhrOHETEIXGT5/EVO8WvZgAfmNHMxEVFSxhioAT0o4G otZKNWLcyAETGGCinXc5cmvMcAIOI6MNuNXxKN2fupHrB9ugJzu4reSBmzKaznjk furnUVZSl7Fjss1zI07L/WWGud/y3N5AbiU3eqchpoTQCf7+Ve6xP9FlgEDM/sKW YYh/YNeEgEGf3zPFuCuyK5aWmP4GbJIu1eU+eb/iaDXUYZqFcbrJIPIdwD67AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQnBZaR5Ezdq6BsSYP950yiyT/AQwHwYDVR0j BBgwFoAUSgfNGaGwcO4GRwcjfmzinDFRY/AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTEwMTU2OS8wLzRBMDdDRDE5QTFCMDcwRUUwNjQ3MDcyMzdFNkNF MjlDMzE1MTYzRjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxMDE1NjkvMC80QTA3Q0QxOUExQjA3 MEVFMDY0NzA3MjM3RTZDRTI5QzMxNTE2M0YwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy/cZfK291R/t wp4yit+T51CHmEkpBk8dOpRLEKD2lKBbkVXSve4TbJYvSTPDTlTfjM77exgJ04NF XfuTKsBShygFltMXbEC7KmQzsmVDznPcFig19gszYFmFhezPcFBg0y/TDtRVuDDm h7CW3PWGMJE/mMOWpM3WVs9kPfmrHNLiTB5V/ri8ho3bNdUvWmiKfzKEta6UTaRd rR5773yYEv3ugkyvb4s8qBp+oIV+jwvGWOZRbs+2j54mSFa/lYLUTT0Zmnqxaq0m l45wT9/C3FQAQZ0HdF+PDPPKLt/Ll/VZsfRZvr1ijPx5/lPWOrVhz8fvxUb83Asb WN5AzUFhYg== -----END CERTIFICATE-----Generated at Mon Mar 2 21:07:51 2026 by rpki-client