$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: MxXutHrz+8W8dpshVw8WPM/yKEZDAyHkHFj8ag5WHH4= Subject key identifier: 36:E6:21:84:4A:12:73:2E:3F:21:33:47:CD:39:2E:07:D1:BE:60:16 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 22BD30E35E031482070AA8B51D86C12ACA7D0D08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 15:48:17 +0000 Manifest this update: Mon 02 Mar 2026 15:43:17 +0000 Manifest next update: Tue 03 Mar 2026 18:09:17 +0000 Files and hashes: 1: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 2: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: Bscj/iYszhpbBzsfHf84EBxURdaEOEu3pY0qAa0/pQM=) 3: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bd:30:e3:5e:03:14:82:07:0a:a8:b5:1d:86:c1:2a:ca:7d:0d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Mar 2 15:43:17 2026 GMT Not After : Mar 3 18:09:17 2026 GMT Subject: CN=36E621844A12732E3F213347CD392E07D1BE6016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:66:31:df:70:d8:18:d3:7d:4f:8f:6e:84: 95:96:0e:fc:ca:e7:e1:5a:88:e2:28:e5:38:94:40: 9e:18:e9:89:38:db:87:de:96:c1:b5:7b:a9:71:64: 34:83:19:53:46:f2:e6:7b:aa:92:6a:e6:a8:31:43: 5f:89:7d:5a:77:df:d0:80:58:46:a8:a2:39:03:02: 1d:55:81:47:d0:47:c4:9c:3e:10:c9:65:e1:be:97: 9e:db:ce:73:44:12:54:0a:72:77:1e:f8:f4:0a:52: 4f:46:61:da:5c:43:19:d6:3c:ef:2a:d6:dc:56:f6: 88:32:0d:90:df:e0:d7:97:ab:54:47:e5:87:ff:e9: 8c:4e:48:b4:8b:c1:bc:d0:47:c3:8a:5a:be:91:20: 06:7b:df:8e:60:18:23:79:fc:15:62:55:30:18:1f: ea:8a:d5:01:6b:e2:a4:13:8b:e2:dc:c1:66:d1:2a: 79:e9:93:41:f1:6d:1e:e0:02:c7:d7:89:7c:43:4e: 7d:62:61:08:75:a4:d5:9b:8b:73:eb:7a:9c:8b:f9: 2a:5c:cc:23:03:07:f4:88:1d:fb:c1:c9:be:e8:1b: 1f:65:25:3b:7d:74:8a:d2:a7:54:8c:51:7f:6a:70: ac:6f:6d:9e:ce:5c:22:fd:e9:3a:ae:35:90:eb:1c: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E6:21:84:4A:12:73:2E:3F:21:33:47:CD:39:2E:07:D1:BE:60:16 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3e:aa:b0:f1:4d:99:c5:22:e6:13:67:8a:5f:f8:6c:68:86: 53:19:03:48:e8:fb:a6:f5:cc:18:f9:96:99:cf:41:75:4b:f1: 13:57:9c:72:c2:4a:e0:3a:bc:ee:d9:d7:a1:c2:e8:ec:15:82: 4b:58:40:d6:91:8f:e4:29:d7:76:05:d6:a3:ad:ea:82:66:aa: 57:90:95:46:c3:a0:98:54:1e:1d:c3:96:46:1c:02:0d:cb:27: 72:c4:ab:32:7f:33:d4:7a:09:70:b7:9b:50:60:2b:ff:2c:0f: 0d:55:99:98:24:b0:b0:fe:09:9a:44:7c:96:65:79:d6:f4:b5: 56:c6:fd:32:29:d6:ef:3e:58:72:a9:17:a0:97:99:f9:b6:99: 83:88:ca:53:61:a5:11:98:68:f9:8b:e8:34:6c:c6:1b:38:6d: e9:3e:16:4a:14:22:ff:37:7b:a5:9b:c7:28:6a:e2:81:56:41: c4:64:a5:4c:ba:6e:6b:7e:99:3d:76:f7:12:03:14:27:f3:35: d9:ee:30:84:58:5b:50:76:d9:f5:34:d2:d0:0a:87:07:5f:b5: 32:55:5e:16:ed:7c:f3:f6:4b:32:9e:ca:40:99:97:ae:2b:c9: 7f:87:fa:9f:26:66:75:83:ed:2b:b2:87:49:ac:ef:0f:f6:0c: 03:ca:88:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIr0w414DFIIHCqi1HYbBKsp9DQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjAzMDIxNTQzMTdaFw0yNjAzMDMxODA5MTdaMDMxMTAvBgNV BAMTKDM2RTYyMTg0NEExMjczMkUzRjIxMzM0N0NEMzkyRTA3RDFCRTYwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZZGYx33DYGNN9T49uhJWWDvzK 5+FaiOIo5TiUQJ4Y6Yk424felsG1e6lxZDSDGVNG8uZ7qpJq5qgxQ1+JfVp339CA WEaoojkDAh1VgUfQR8ScPhDJZeG+l57bznNEElQKcnce+PQKUk9GYdpcQxnWPO8q 1txW9ogyDZDf4NeXq1RH5Yf/6YxOSLSLwbzQR8OKWr6RIAZ7345gGCN5/BViVTAY H+qK1QFr4qQTi+LcwWbRKnnpk0HxbR7gAsfXiXxDTn1iYQh1pNWbi3PrepyL+Spc zCMDB/SIHfvByb7oGx9lJTt9dIrSp1SMUX9qcKxvbZ7OXCL96TquNZDrHEyNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNuYhhEoScy4/ITNHzTkuB9G+YBYwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHT6qsPFNmcUi 5hNnil/4bGiGUxkDSOj7pvXMGPmWmc9BdUvxE1eccsJK4Dq87tnXocLo7BWCS1hA 1pGP5CnXdgXWo63qgmaqV5CVRsOgmFQeHcOWRhwCDcsncsSrMn8z1HoJcLebUGAr /ywPDVWZmCSwsP4JmkR8lmV51vS1Vsb9MinW7z5YcqkXoJeZ+baZg4jKU2GlEZho +YvoNGzGGzht6T4WShQi/zd7pZvHKGrigVZBxGSlTLpua36ZPXb3EgMUJ/M12e4w hFhbUHbZ9TTS0AqHB1+1MlVeFu188/ZLMp7KQJmXrivJf4f6nyZmdYPtK7KHSazv D/YMA8qIVA== -----END CERTIFICATE-----Generated at Tue Mar 3 02:09:14 2026 by rpki-client