$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: BSzQYJKvtx7xHyKfwuAcf9GyVBVwiZl1NGEu3sBYxfA= Subject key identifier: B2:24:0C:DF:D9:58:25:FE:5A:DC:FE:CA:2B:E2:8B:DA:47:51:58:1F Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 6596EE55C6C5ABCF2C5F6ACA8E7FB17E91148B95 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 02:03:16 +0000 Manifest this update: Mon 02 Mar 2026 01:58:16 +0000 Manifest next update: Tue 03 Mar 2026 04:54:16 +0000 Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 3: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) 4: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: 3L6PX/qVQMyf/6/bvmEceK/oJOU2/Ga6t2RZ9V6haCw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:96:ee:55:c6:c5:ab:cf:2c:5f:6a:ca:8e:7f:b1:7e:91:14:8b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: Mar 2 01:58:16 2026 GMT Not After : Mar 3 04:54:16 2026 GMT Subject: CN=B2240CDFD95825FE5ADCFECA2BE28BDA4751581F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:78:8b:23:da:f6:26:57:1f:60:ce:00:12: 76:68:a8:22:34:c2:76:a9:d1:9c:6e:af:0e:11:6e: 55:07:6a:47:03:1c:71:39:6d:bb:a5:de:c4:05:2a: 78:a9:f2:b6:d1:e4:5c:0b:35:1b:e5:0b:e8:70:73: b5:b7:c7:b7:41:3c:39:8c:36:49:76:4a:48:c5:85: f3:aa:e3:06:3f:78:f5:6e:b9:fd:9f:f0:35:c2:ff: 79:88:52:28:a7:a9:60:f6:d3:a1:1f:b2:94:51:41: bc:90:87:72:17:7d:6e:f5:65:58:17:dd:15:61:6e: 82:16:89:6c:22:30:5f:40:4f:16:17:0a:68:f6:5f: 6f:cf:95:66:53:ce:d3:19:3e:a1:19:ac:fb:c8:62: 7b:5e:97:39:4e:6e:56:ba:3c:0d:d6:fd:af:8b:76: 78:53:b6:14:a3:7b:67:5f:4f:89:34:39:8d:fc:b0: ee:99:95:3c:fb:2b:d3:57:ce:ed:9e:48:3c:42:97: d5:80:a0:07:77:30:c6:4e:74:73:2a:0b:04:e6:9d: a9:8b:d7:19:2d:82:f7:8e:d9:41:76:7b:52:7f:b8: b3:85:0f:c6:a9:0f:48:f2:ce:1b:ef:78:a7:c3:7f: f3:fc:f5:ff:fb:25:75:d1:76:74:f6:39:15:b0:2b: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:24:0C:DF:D9:58:25:FE:5A:DC:FE:CA:2B:E2:8B:DA:47:51:58:1F X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:42:a7:a2:e6:bd:a9:ba:7c:89:45:5f:89:8e:9b:43:db:e4: 62:8c:72:08:26:12:97:1e:d8:d6:49:2e:7f:2c:0c:e8:fd:07: 9e:77:5d:23:82:07:0b:48:58:51:ee:39:2d:f8:35:80:36:bb: 48:d1:cd:49:ae:64:b0:e1:ed:76:e4:9e:e0:46:e5:4e:c3:24: c5:18:25:4b:82:ed:96:24:5d:b8:96:cd:bb:86:af:ab:e4:5e: 25:81:0c:34:c7:51:5a:87:68:f5:91:a8:29:f4:dc:bf:2a:bb: 8b:05:60:93:17:8a:a1:16:58:48:81:e7:2c:aa:59:ae:3a:75: 3e:5e:bc:38:50:03:fd:b9:0e:0e:52:62:e4:55:1c:a4:f3:34: fc:d2:67:17:b9:12:5a:84:44:11:9d:ce:a1:67:e9:43:6d:93: ab:99:0f:19:42:19:b0:ff:f4:85:96:ad:81:78:1d:44:a8:1d: e7:e2:5b:59:c2:94:14:72:57:61:4d:3e:c2:5e:0d:ac:4a:36: de:06:03:28:6b:f6:b2:a7:47:80:a7:28:8a:2e:fb:ce:b4:b3: 19:6e:db:8e:2c:15:08:94:5c:42:0e:02:96:04:cc:43:b9:8a: eb:c6:7c:7f:49:2d:e6:d3:9e:f0:e8:d5:2c:6f:6b:15:14:fe: b2:b8:8d:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZZbuVcbFq88sX2rKjn+xfpEUi5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjAzMDIwMTU4MTZaFw0yNjAzMDMwNDU0MTZaMDMxMTAvBgNV BAMTKEIyMjQwQ0RGRDk1ODI1RkU1QURDRkVDQTJCRTI4QkRBNDc1MTU4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPXiLI9r2JlcfYM4AEnZoqCI0 wnap0Zxurw4RblUHakcDHHE5bbul3sQFKnip8rbR5FwLNRvlC+hwc7W3x7dBPDmM Nkl2SkjFhfOq4wY/ePVuuf2f8DXC/3mIUiinqWD206EfspRRQbyQh3IXfW71ZVgX 3RVhboIWiWwiMF9ATxYXCmj2X2/PlWZTztMZPqEZrPvIYntelzlObla6PA3W/a+L dnhTthSje2dfT4k0OY38sO6ZlTz7K9NXzu2eSDxCl9WAoAd3MMZOdHMqCwTmnamL 1xktgveO2UF2e1J/uLOFD8apD0jyzhvveKfDf/P89f/7JXXRdnT2ORWwK1WRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsiQM39lYJf5a3P7KK+KL2kdRWB8wHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUKnoua9qbp8 iUVfiY6bQ9vkYoxyCCYSlx7Y1kkufywM6P0HnnddI4IHC0hYUe45Lfg1gDa7SNHN Sa5ksOHtduSe4EblTsMkxRglS4LtliRduJbNu4avq+ReJYEMNMdRWodo9ZGoKfTc vyq7iwVgkxeKoRZYSIHnLKpZrjp1Pl68OFAD/bkODlJi5FUcpPM0/NJnF7kSWoRE EZ3OoWfpQ22Tq5kPGUIZsP/0hZatgXgdRKgd5+JbWcKUFHJXYU0+wl4NrEo23gYD KGv2sqdHgKcoii77zrSzGW7bjiwVCJRcQg4ClgTMQ7mK68Z8f0kt5tOe8OjVLG9r FRT+sriNPQ== -----END CERTIFICATE-----Generated at Mon Mar 2 22:32:06 2026 by rpki-client