$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: VVkvuXbxp/nkwhkFBUwqddQ7z6J5+cDN7eAAZLQlB2g= Subject key identifier: 47:E2:FF:7B:87:FE:19:32:99:7B:26:26:0D:EC:D4:A4:FE:CB:F7:D5 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 5205851A0617C26DB1373F99071B41997E74FF4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 03:33:16 +0000 Manifest this update: Mon 02 Mar 2026 03:28:16 +0000 Manifest next update: Tue 03 Mar 2026 04:41:16 +0000 Files and hashes: 1: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: kiX5GcBk7JPXGnP/K4+D35fH9eMFR0XQBgfT3R7BGjc=) 2: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 3: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 4: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 5: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 6: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:05:85:1a:06:17:c2:6d:b1:37:3f:99:07:1b:41:99:7e:74:ff:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Mar 2 03:28:16 2026 GMT Not After : Mar 3 04:41:16 2026 GMT Subject: CN=47E2FF7B87FE1932997B26260DECD4A4FECBF7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:89:4e:de:bd:b1:6d:d4:d8:10:a6:25:b9:48: 96:65:61:6e:a1:07:34:3e:a6:b2:3b:42:04:09:2d: 5c:42:f4:eb:7d:0b:52:70:8a:c9:b8:0b:c2:ee:48: a0:08:01:02:6e:85:0f:3d:fd:ce:2c:2b:54:bf:ba: 14:8d:e7:08:86:97:a1:00:b4:1e:9a:4a:e5:44:e4: 5b:60:5b:34:69:2e:c5:34:22:ed:e0:93:d2:e3:9c: 32:dd:21:99:38:14:fd:1e:1d:17:3b:e4:5c:66:b9: a7:9d:b5:bc:1d:e6:c6:5a:0c:9d:61:97:b0:c0:0c: 6f:f2:b9:f1:7b:24:04:67:7c:a2:68:fd:e1:25:17: 45:95:59:19:31:ed:ec:a4:5f:15:5c:d1:7d:9d:58: 6f:4e:02:09:e7:f2:c4:36:f8:eb:38:8e:9f:13:0a: b8:48:76:86:22:cf:24:f0:30:fc:c7:3d:bd:0c:65: cd:a6:ef:bc:4d:21:d2:db:ed:e1:3e:78:5b:1d:ca: 71:f6:d3:c6:f9:3e:49:f5:aa:6e:18:2f:85:3a:a1: 90:46:1f:b7:e9:20:a9:a2:50:05:10:ca:e5:0d:58: 95:44:2e:8f:ca:60:6f:b8:d9:7a:9e:1d:9a:65:78: 18:d8:96:92:a6:dc:c4:77:5c:45:ad:c8:31:3e:2b: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E2:FF:7B:87:FE:19:32:99:7B:26:26:0D:EC:D4:A4:FE:CB:F7:D5 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:80:28:40:09:f9:bd:1b:4c:c1:8e:99:6c:e1:7e:e1:69:fb: 92:61:6e:86:be:27:a5:10:0a:ff:a4:25:54:de:bc:9f:0c:ff: 5d:0f:e8:43:af:b0:4c:c6:41:59:1d:3b:37:37:76:e6:2e:56: c1:a3:73:b9:25:44:ec:30:5c:e1:7a:94:fb:e5:52:7d:67:cc: b5:08:f5:cc:38:38:3c:28:11:d4:fb:e1:cf:e9:39:51:5f:4e: 21:28:97:c1:84:ae:2b:ed:0e:34:bc:22:47:38:bc:3d:fe:f7: d4:e1:fe:3d:00:e7:86:c4:6a:29:f0:e5:fd:cb:51:be:e7:4f: 07:90:4c:84:e9:c3:89:bf:34:e8:87:ea:2a:13:75:2a:fe:b4: ad:09:b3:f8:66:96:e4:d6:d0:c4:3e:f3:94:1d:2a:4a:6f:66: 3d:1d:71:1a:b7:04:f0:93:77:b7:b6:e9:a9:ac:85:1a:c7:a4: 83:46:da:61:e0:98:f2:db:8f:79:cd:75:3e:14:f2:e0:fb:e0: e7:e5:71:38:ca:bc:bf:12:2d:8c:36:05:ba:3b:0b:91:a2:95: b3:a6:3b:7f:82:11:4a:7f:6d:a0:2e:1a:0c:fc:7a:a5:d7:66: 55:bd:c7:f8:e7:f3:eb:a6:80:f9:6d:79:82:08:ae:6b:b7:a1: 05:81:4d:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUgWFGgYXwm2xNz+ZBxtBmX50/0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjAzMDIwMzI4MTZaFw0yNjAzMDMwNDQxMTZaMDMxMTAvBgNV BAMTKDQ3RTJGRjdCODdGRTE5MzI5OTdCMjYyNjBERUNENEE0RkVDQkY3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+iU7evbFt1NgQpiW5SJZlYW6h BzQ+prI7QgQJLVxC9Ot9C1Jwism4C8LuSKAIAQJuhQ89/c4sK1S/uhSN5wiGl6EA tB6aSuVE5FtgWzRpLsU0Iu3gk9LjnDLdIZk4FP0eHRc75Fxmuaedtbwd5sZaDJ1h l7DADG/yufF7JARnfKJo/eElF0WVWRkx7eykXxVc0X2dWG9OAgnn8sQ2+Os4jp8T CrhIdoYizyTwMPzHPb0MZc2m77xNIdLb7eE+eFsdynH208b5Pkn1qm4YL4U6oZBG H7fpIKmiUAUQyuUNWJVELo/KYG+42XqeHZpleBjYlpKm3MR3XEWtyDE+K1jrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR+L/e4f+GTKZeyYmDezUpP7L99UwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx4AoQAn5vRtM wY6ZbOF+4Wn7kmFuhr4npRAK/6QlVN68nwz/XQ/oQ6+wTMZBWR07Nzd25i5WwaNz uSVE7DBc4XqU++VSfWfMtQj1zDg4PCgR1Pvhz+k5UV9OISiXwYSuK+0ONLwiRzi8 Pf731OH+PQDnhsRqKfDl/ctRvudPB5BMhOnDib806IfqKhN1Kv60rQmz+GaW5NbQ xD7zlB0qSm9mPR1xGrcE8JN3t7bpqayFGsekg0baYeCY8tuPec11PhTy4Pvg5+Vx OMq8vxItjDYFujsLkaKVs6Y7f4IRSn9toC4aDPx6pddmVb3H+Ofz66aA+W15ggiu a7ehBYFNwQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:35:13 2026 by rpki-client