$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft File: DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft (raw, json) Hash identifier: hRqbO+OYk1lRC0uUUQCxMFFmeEd1hDgztbCrF4AAiOw= Subject key identifier: 3E:D1:08:28:4E:B0:3F:48:6D:E0:98:67:BD:4A:4C:1D:75:42:5F:93 Authority key identifier: DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53 Certificate issuer: /CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53 Certificate serial: 5287B0C5DFFF16C0361375BCE07574BFDA93B975 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 22:08:16 +0000 Manifest this update: Sun 01 Mar 2026 22:03:16 +0000 Manifest next update: Mon 02 Mar 2026 22:24:16 +0000 Files and hashes: 1: DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl (hash: TuHrNn5j+LEQUji/GOVKFtb18w+QZqKVndnR7KgG/g4=) 2: 3130332e3138362e3133362e302f32342d3234203d3e20313531343932.roa (hash: InwrIECCt/d1uf5gUh70LzEcOK0KjnpOZ5M8ME7z0jE=) 3: 3130332e3138362e3133372e302f32342d3234203d3e20313531343932.roa (hash: DgyUnrmbmAhUuHu4zrMRxBY+W4oz79eX6DQFbqVUlGw=) 4: 3130332e3138362e3133362e302f32332d3234203d3e203533353837.roa (hash: jUwWrvVyEMA+tDZ0w3uZEuSnj9gLwWG2Zx6MtgVCZw8=) 5: 3130332e3138362e3133362e302f32332d3233203d3e20313531343932.roa (hash: 5FeuQwhBzGw4onhkAawCUJ2pR3lDpw8rU7GY3g8+/Po=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 22:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:87:b0:c5:df:ff:16:c0:36:13:75:bc:e0:75:74:bf:da:93:b9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53 Validity Not Before: Mar 1 22:03:16 2026 GMT Not After : Mar 2 22:24:16 2026 GMT Subject: CN=3ED108284EB03F486DE09867BD4A4C1D75425F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:d1:f0:13:ce:0d:4d:f0:fb:7d:e1:5a:ef: 7b:e9:b0:b8:6d:3e:57:e6:9b:a2:f9:e6:8d:94:9c: b1:c6:b8:91:8d:50:47:23:0d:e1:34:ad:b4:cc:9a: 04:55:bb:38:2c:ec:e8:cb:13:b7:ab:31:c9:26:e0: d8:fa:30:cb:2e:61:b6:f0:30:5e:f7:ac:22:2b:95: df:bf:41:f4:7f:2b:8a:16:e8:16:16:21:78:5a:f9: ec:15:e5:a0:ff:8d:a8:6c:6d:17:41:55:2e:e4:35: d5:71:49:9d:68:fe:b2:dc:33:34:e6:27:ba:6c:73: 7d:57:98:a8:0e:72:2b:f2:af:e7:55:56:c9:fd:30: 1f:6f:97:0f:bd:9a:55:c4:35:10:1b:67:bf:96:e9: 9e:a8:be:c7:32:a0:ee:0e:3a:3e:6a:cd:bc:34:d8: 9f:c9:2b:ba:27:c5:7b:c3:42:0f:82:f1:47:e9:f5: d5:61:97:5f:fa:c8:63:2a:89:9f:7d:ce:f4:99:f5: 93:49:5e:63:d5:43:44:23:57:1d:51:72:b5:d5:f7: ef:2f:cf:13:cf:7d:76:ab:c3:2a:33:1d:b5:0b:ef: fe:12:39:9e:e1:71:dc:11:ef:c5:8e:85:8e:4e:c2: 9a:77:3d:7a:c7:50:f7:9d:96:c8:df:da:09:06:f4: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D1:08:28:4E:B0:3F:48:6D:E0:98:67:BD:4A:4C:1D:75:42:5F:93 X509v3 Authority Key Identifier: keyid:DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:75:bd:a5:b5:76:8e:86:2d:fb:68:4e:a0:69:10:5b:e0:0d: b1:4f:47:38:0e:64:a1:b1:90:1c:33:f0:76:d1:4e:ad:3a:d3: 5f:c6:4e:6e:c0:b6:45:ec:6b:15:87:3c:e5:71:a3:a7:f0:b4: 95:e6:54:70:7c:02:20:ab:ae:9f:d8:3c:80:c8:6b:d1:8f:7a: c7:d1:24:cf:cf:24:54:cd:df:29:6b:c3:b6:a6:7b:4b:ea:71: 11:f9:d9:4c:b5:f9:ba:64:57:82:42:fd:b4:e7:66:9d:f7:9f: e6:c9:49:95:78:86:09:6c:aa:6a:b7:8c:ee:06:90:ab:38:29: 2d:70:50:a5:14:6d:da:86:2e:26:5f:4f:cd:da:13:af:84:01: b7:43:c2:e1:bf:b0:9c:f7:cc:bc:66:d2:36:05:68:ce:77:74: 78:19:1e:c3:88:ca:1c:3f:c6:f2:e8:57:10:70:9d:86:8e:42: 11:98:37:b4:6d:7e:1c:0c:14:0f:04:e9:f5:82:a9:26:50:b7: 4c:95:c7:2b:fe:e5:14:d9:79:d1:50:e1:16:98:86:79:41:b0: cc:60:f0:b1:dd:0e:96:0c:69:41:65:c7:0f:27:48:ed:dd:cc: 50:16:50:16:e0:af:fe:b1:c3:ec:c3:a6:65:73:42:45:16:6e: 30:85:94:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUoewxd//FsA2E3W84HV0v9qTuXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDNkMzMTk5NEJBMjkyNDREMkRFRTFGODcyMDhGNDE2 RUVGN0U1MzAeFw0yNjAzMDEyMjAzMTZaFw0yNjAzMDIyMjI0MTZaMDMxMTAvBgNV BAMTKDNFRDEwODI4NEVCMDNGNDg2REUwOTg2N0JENEE0QzFENzU0MjVGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7tHwE84NTfD7feFa73vpsLht Plfmm6L55o2UnLHGuJGNUEcjDeE0rbTMmgRVuzgs7OjLE7erMckm4Nj6MMsuYbbw MF73rCIrld+/QfR/K4oW6BYWIXha+ewV5aD/jahsbRdBVS7kNdVxSZ1o/rLcMzTm J7psc31XmKgOcivyr+dVVsn9MB9vlw+9mlXENRAbZ7+W6Z6ovscyoO4OOj5qzbw0 2J/JK7onxXvDQg+C8Ufp9dVhl1/6yGMqiZ99zvSZ9ZNJXmPVQ0QjVx1RcrXV9+8v zxPPfXarwyozHbUL7/4SOZ7hcdwR78WOhY5Owpp3PXrHUPedlsjf2gkG9IIjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPtEIKE6wP0ht4JhnvUpMHXVCX5MwHwYDVR0j BBgwFoAU3cbDGZS6KSRNLe4fhyCPQW7vflMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTcxMDg1MC8wL0REQzZDMzE5OTRCQTI5MjQ0RDJERUUxRjg3MjA4 RjQxNkVFRjdFNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERDNkMzMTk5NEJBMjkyNDREMkRFRTFGODcyMDhGNDE2RUVGN0U1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3MTA4NTAvMC9EREM2QzMxOTk0QkEy OTI0NEQyREVFMUY4NzIwOEY0MTZFRUY3RTUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnW9pbV2joYt +2hOoGkQW+ANsU9HOA5kobGQHDPwdtFOrTrTX8ZObsC2RexrFYc85XGjp/C0leZU cHwCIKuun9g8gMhr0Y96x9Ekz88kVM3fKWvDtqZ7S+pxEfnZTLX5umRXgkL9tOdm nfef5slJlXiGCWyqareM7gaQqzgpLXBQpRRt2oYuJl9PzdoTr4QBt0PC4b+wnPfM vGbSNgVoznd0eBkew4jKHD/G8uhXEHCdho5CEZg3tG1+HAwUDwTp9YKpJlC3TJXH K/7lFNl50VDhFpiGeUGwzGDwsd0OlgxpQWXHDydI7d3MUBZQFuCv/rHD7MOmZXNC RRZuMIWUUA== -----END CERTIFICATE-----Generated at Mon Mar 2 08:55:06 2026 by rpki-client