$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: +RbAr32Vd5GhITFudBoohD7KyPBNKmdSJ+3VV/7L9q8= Subject key identifier: 1E:C5:24:6A:AA:7B:5C:3D:95:E1:93:7F:46:E0:96:B9:13:6D:21:81 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 1A789491BF835A17C920DB0BD5AC675772E78E01 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 02:03:16 +0000 Manifest this update: Mon 02 Mar 2026 01:58:16 +0000 Manifest next update: Tue 03 Mar 2026 05:33:16 +0000 Files and hashes: 1: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 2: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 3: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) 4: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 5: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: /7yrleeBQn6rU4aGdxmGD1D0gud+sYkbRtdq6MD3o+c=) 6: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 7: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:78:94:91:bf:83:5a:17:c9:20:db:0b:d5:ac:67:57:72:e7:8e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Mar 2 01:58:16 2026 GMT Not After : Mar 3 05:33:16 2026 GMT Subject: CN=1EC5246AAA7B5C3D95E1937F46E096B9136D2181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:09:cb:c1:d2:88:aa:64:9e:f6:ff:eb:0a:e3: a5:04:2c:60:4b:2a:8a:29:a7:48:4c:96:20:af:32: b8:9d:55:c1:92:7f:4e:04:0a:11:7c:04:6a:c7:45: d4:81:37:01:19:7d:8f:81:30:45:76:20:39:85:1f: 96:bf:be:60:63:f5:c8:56:7a:1a:f1:5b:ab:85:10: 6c:3f:cf:f8:74:4c:43:27:6e:72:bd:59:59:ce:f7: 23:33:94:08:66:42:af:19:b4:d6:c9:8a:f8:70:0b: 36:95:99:3a:04:02:32:02:b2:88:a4:97:7e:39:68: a7:1f:5a:c2:d8:c2:66:27:6f:f3:37:97:b3:8b:1a: f4:50:c3:05:13:2f:7a:71:22:22:f4:2e:9e:50:72: 13:55:fc:5c:44:98:12:59:79:8b:26:95:a5:a9:3f: 44:d5:9f:a7:83:02:12:c6:6c:0b:0b:35:de:62:34: 39:08:63:6a:74:2b:4a:0f:76:cb:0b:64:98:2c:19: ec:63:97:10:09:1d:df:0e:cf:c6:92:56:7d:79:48: cd:61:81:07:ed:a4:2d:6d:f7:75:a6:d5:c7:8b:3a: fd:b1:3b:67:6f:3f:43:53:25:15:ff:9b:de:77:eb: c9:e3:6c:5f:00:da:f3:93:3d:21:3a:10:3d:55:1a: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C5:24:6A:AA:7B:5C:3D:95:E1:93:7F:46:E0:96:B9:13:6D:21:81 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:03:4d:49:fc:66:30:1d:8b:e2:5e:f7:04:2e:c7:11:7f:37: a8:8f:72:d1:a9:15:55:f9:4d:2c:19:59:93:8e:72:be:25:ef: ea:a0:2f:f8:58:6f:b7:fe:56:ae:24:2c:d4:1c:97:a6:33:74: e2:cb:23:9b:b9:7c:48:0e:a1:79:6f:db:d0:b1:06:af:74:63: 72:dc:a6:12:f0:51:4b:05:2b:c8:e5:9d:75:3b:f4:ef:7e:9f: 1b:bf:ee:03:0e:04:b9:7c:73:ca:ae:49:da:4a:ec:8d:b3:65: a5:ba:3e:01:ca:f7:0b:67:0c:66:ec:cd:ec:c2:c2:89:46:5a: 96:dc:72:82:a5:6f:14:4d:02:d5:04:cf:31:1d:a9:81:bd:a9: 54:37:64:55:3b:96:31:69:62:6a:2b:2b:c7:46:66:a4:68:16: c8:4a:18:10:f6:01:91:94:45:79:31:3c:bd:ae:2b:32:2e:6a: 89:1b:5d:e3:fd:8e:7f:52:d0:b3:1f:fd:6e:7d:15:9c:77:9f: 14:28:44:2d:4b:98:91:79:fd:ce:ea:fc:ae:54:5f:ac:b3:56: 30:81:7c:e8:56:1f:ed:9f:7a:2c:9f:87:42:df:7f:a6:bd:0d: 76:bc:77:45:fd:ba:53:46:07:ad:4e:6f:ac:99:3a:8d:52:40: 3c:bb:a9:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGniUkb+DWhfJINsL1axnV3LnjgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjAzMDIwMTU4MTZaFw0yNjAzMDMwNTMzMTZaMDMxMTAvBgNV BAMTKDFFQzUyNDZBQUE3QjVDM0Q5NUUxOTM3RjQ2RTA5NkI5MTM2RDIxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCcvB0oiqZJ72/+sK46UELGBL Koopp0hMliCvMridVcGSf04EChF8BGrHRdSBNwEZfY+BMEV2IDmFH5a/vmBj9chW ehrxW6uFEGw/z/h0TEMnbnK9WVnO9yMzlAhmQq8ZtNbJivhwCzaVmToEAjICsoik l345aKcfWsLYwmYnb/M3l7OLGvRQwwUTL3pxIiL0Lp5QchNV/FxEmBJZeYsmlaWp P0TVn6eDAhLGbAsLNd5iNDkIY2p0K0oPdssLZJgsGexjlxAJHd8Oz8aSVn15SM1h gQftpC1t93Wm1ceLOv2xO2dvP0NTJRX/m95368njbF8A2vOTPSE6ED1VGvvFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHsUkaqp7XD2V4ZN/RuCWuRNtIYEwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtANNSfxmMB2L 4l73BC7HEX83qI9y0akVVflNLBlZk45yviXv6qAv+Fhvt/5WriQs1ByXpjN04ssj m7l8SA6heW/b0LEGr3RjctymEvBRSwUryOWddTv0736fG7/uAw4EuXxzyq5J2krs jbNlpbo+Acr3C2cMZuzN7MLCiUZaltxygqVvFE0C1QTPMR2pgb2pVDdkVTuWMWli aisrx0ZmpGgWyEoYEPYBkZRFeTE8va4rMi5qiRtd4/2Of1LQsx/9bn0VnHefFChE LUuYkXn9zur8rlRfrLNWMIF86FYf7Z96LJ+HQt9/pr0Ndrx3Rf26U0YHrU5vrJk6 jVJAPLupbw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:11:48 2026 by rpki-client