$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: Oud1FaNZK6ooB6Z8GUbsHrET/9llWHHlKP5Ft399wX4= Subject key identifier: E3:76:8D:6F:C8:FC:31:0E:7C:7B:40:13:7D:77:73:78:19:C0:A6:42 Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 2EF8DF742BE012AFEB0E42BD94866588E2D903E3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 23:48:16 +0000 Manifest this update: Sun 01 Mar 2026 23:43:16 +0000 Manifest next update: Tue 03 Mar 2026 01:42:16 +0000 Files and hashes: 1: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: q1N0LF/ccGKaEVCCj6tytQzLL66VQqUAce1YPbPx9Qw=) 2: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f8:df:74:2b:e0:12:af:eb:0e:42:bd:94:86:65:88:e2:d9:03:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Mar 1 23:43:16 2026 GMT Not After : Mar 3 01:42:16 2026 GMT Subject: CN=E3768D6FC8FC310E7C7B40137D77737819C0A642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:ee:e6:ed:39:25:bc:a9:1a:f8:09:a4:de: 7d:f6:6e:83:87:c5:5e:7f:93:a6:ed:22:bc:d8:a8: 61:8b:ef:b7:a4:c5:41:8f:e0:a7:fa:d3:36:3a:15: b2:97:20:bc:0b:3a:e2:8c:d9:42:3b:7a:24:3f:3a: 9e:9c:46:95:27:91:1d:d2:ff:0d:3b:22:8f:2e:c6: c3:ed:e3:12:7c:af:cc:1a:d7:ad:dc:3e:02:a7:9a: 6a:4f:f2:53:5b:3b:4e:b7:ac:47:3a:44:7c:46:17: 39:74:47:70:3c:5e:51:f9:ec:cf:45:f6:29:0e:28: a1:39:b9:4b:3c:df:a3:bc:c6:6d:6f:2d:8b:27:05: 8c:61:7d:1d:b8:19:50:a2:60:6c:60:1d:ae:6c:69: 18:d2:52:4d:d0:34:6b:cd:68:1c:4e:d4:eb:ec:cb: de:9e:9a:e4:64:8c:d5:82:9f:ce:d3:80:84:55:fd: 70:8d:e1:e0:fc:c9:d2:8f:c6:f3:0f:a0:1c:20:20: 82:4c:91:38:6a:3d:19:2b:eb:e9:ae:e4:1e:06:62: 62:03:db:a5:28:b0:33:bd:fa:ed:b0:f1:53:c3:b3: 0a:49:eb:73:b3:f2:c9:21:14:5c:ad:ec:52:ff:12: 16:4d:11:e4:67:11:db:44:cb:b8:1f:c5:a3:32:cc: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:76:8D:6F:C8:FC:31:0E:7C:7B:40:13:7D:77:73:78:19:C0:A6:42 X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:9b:6c:42:3e:16:7a:44:31:c9:61:83:03:dc:b2:f4:b1:3f: bb:99:5a:da:91:51:8e:32:62:b8:04:f9:6c:17:84:ff:6b:1c: 87:df:25:50:65:6a:8a:e9:47:39:e5:41:96:95:6e:dd:fb:37: b3:12:19:7e:79:ad:ea:65:c4:43:a7:d5:41:8e:78:98:99:c9: 40:dc:48:97:e3:a6:49:86:99:d7:9f:7e:24:41:31:2e:64:cb: 5a:90:d8:ad:d3:83:f3:ab:2b:64:07:32:23:0a:3d:18:06:48: 0d:7c:c6:92:75:af:08:6d:bd:e5:28:19:2e:18:27:16:ae:5d: dd:a9:7d:c6:2a:76:10:56:62:2a:b6:f2:45:9b:ba:a9:80:b1: 2e:f9:cc:42:90:36:16:a7:a6:d6:63:fb:19:a6:d5:cd:f5:b7: 4a:db:21:02:e7:56:d1:b0:0b:91:91:35:7f:eb:ba:fa:86:ac: d1:88:b4:6f:da:ec:c2:2d:02:74:01:52:f5:81:9b:da:d2:bd: 28:97:35:b6:c3:32:61:6f:23:46:06:bb:fe:00:18:fb:e2:2f: 59:b1:45:5c:a1:62:99:db:93:59:a2:99:24:5e:98:eb:a3:ff: fe:1a:90:c4:2f:95:57:8a:1a:f2:6c:00:17:ce:10:ee:72:8d: e6:7c:7c:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULvjfdCvgEq/rDkK9lIZliOLZA+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjAzMDEyMzQzMTZaFw0yNjAzMDMwMTQyMTZaMDMxMTAvBgNV BAMTKEUzNzY4RDZGQzhGQzMxMEU3QzdCNDAxMzdENzc3Mzc4MTlDMEE2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1O7m7TklvKka+Amk3n32boOH xV5/k6btIrzYqGGL77ekxUGP4Kf60zY6FbKXILwLOuKM2UI7eiQ/Op6cRpUnkR3S /w07Io8uxsPt4xJ8r8wa163cPgKnmmpP8lNbO063rEc6RHxGFzl0R3A8XlH57M9F 9ikOKKE5uUs836O8xm1vLYsnBYxhfR24GVCiYGxgHa5saRjSUk3QNGvNaBxO1Ovs y96emuRkjNWCn87TgIRV/XCN4eD8ydKPxvMPoBwgIIJMkThqPRkr6+mu5B4GYmID 26UosDO9+u2w8VPDswpJ63Oz8skhFFyt7FL/EhZNEeRnEdtEy7gfxaMyzIYvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU43aNb8j8MQ58e0ATfXdzeBnApkIwHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy5tsQj4WekQx yWGDA9yy9LE/u5la2pFRjjJiuAT5bBeE/2sch98lUGVqiulHOeVBlpVu3fs3sxIZ fnmt6mXEQ6fVQY54mJnJQNxIl+OmSYaZ159+JEExLmTLWpDYrdOD86srZAcyIwo9 GAZIDXzGknWvCG295SgZLhgnFq5d3al9xip2EFZiKrbyRZu6qYCxLvnMQpA2Fqem 1mP7GabVzfW3StshAudW0bALkZE1f+u6+oas0Yi0b9rswi0CdAFS9YGb2tK9KJc1 tsMyYW8jRga7/gAY++IvWbFFXKFimduTWaKZJF6Y66P//hqQxC+VV4oa8mwAF84Q 7nKN5nx8aA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:21:32 2026 by rpki-client