$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft File: EDAEF642B728F950499E8F90EDC704EB965E54A5.mft (raw, json) Hash identifier: 3gQZMudY8wNCTypB+SSpnM9bKoMmoJ3THRMaI7rf4fc= Subject key identifier: 2C:B0:9E:EF:C3:F4:05:4F:01:F7:C5:47:D5:06:10:E7:EF:F2:90:A9 Authority key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 Certificate issuer: /CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Certificate serial: 38955CE1C40485036CECFC9E3F214F6EEBAE0298 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft Manifest number: 35 Signing time: Mon 02 Mar 2026 14:08:17 +0000 Manifest this update: Mon 02 Mar 2026 14:03:17 +0000 Manifest next update: Tue 03 Mar 2026 14:38:17 +0000 Files and hashes: 1: EDAEF642B728F950499E8F90EDC704EB965E54A5.crl (hash: WSTXUpv0gmLcIm7uWit4APho4mcHHJmOje0FKEmTJKI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:95:5c:e1:c4:04:85:03:6c:ec:fc:9e:3f:21:4f:6e:eb:ae:02:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5 Validity Not Before: Mar 2 14:03:17 2026 GMT Not After : Mar 3 14:38:17 2026 GMT Subject: CN=2CB09EEFC3F4054F01F7C547D50610E7EFF290A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:a2:4e:b6:9c:53:31:b8:88:99:a0:39:6a: ad:4a:76:9b:62:a8:a5:25:a5:28:be:64:20:62:07: 8b:b0:b4:59:4d:d3:ba:37:70:ce:f2:78:47:aa:eb: dc:a3:51:db:c5:49:51:e7:51:80:73:3b:15:a8:b9: 03:c4:7d:21:fe:27:49:44:f0:4c:51:e1:45:5d:95: 7c:00:2d:2e:58:fb:7a:3d:13:fe:f1:91:c7:8f:c1: 84:22:4b:2b:15:91:9c:fe:75:d4:b3:a8:f7:09:7b: 94:0f:a1:a5:20:1b:db:7b:bb:4d:14:eb:53:e0:47: 64:cd:05:57:f3:0f:43:8b:58:f5:7d:92:2c:d5:02: 5a:88:a8:55:30:a7:d2:6a:2a:bf:d5:65:28:87:e2: ef:0d:1f:4d:6b:8f:70:aa:aa:3e:38:92:a9:b2:65: 65:56:ee:d5:75:b6:d6:80:06:7b:d0:a6:ee:48:83: d4:25:7c:8f:1d:e1:c8:3f:56:14:52:aa:78:be:68: 2a:7c:f5:eb:98:0f:49:90:e4:1e:b7:4f:f5:1c:54: e7:ff:ac:ca:20:74:3e:ae:01:1f:b2:83:71:d6:27: 41:67:68:31:33:b2:4d:64:e4:fc:b4:08:91:11:c1: 35:ae:65:ec:a0:73:fa:7b:c5:b9:96:47:a0:db:06: 7d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B0:9E:EF:C3:F4:05:4F:01:F7:C5:47:D5:06:10:E7:EF:F2:90:A9 X509v3 Authority Key Identifier: keyid:ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f0:72:3f:0f:30:fc:a3:78:5e:0f:a9:51:51:83:67:47:4f: eb:bc:da:2a:73:42:ad:49:4d:57:ee:43:b4:23:3b:7f:b3:bc: a3:7c:e0:96:b4:4d:cc:fa:20:4f:6b:0d:59:cf:4c:4a:aa:ac: b9:7c:b1:72:ec:65:4a:0d:c1:db:52:ed:6c:9a:ca:9e:f7:25: ba:bb:fe:4c:8a:0b:3d:a4:c0:fe:3a:e5:19:41:0f:8b:ef:5a: ab:66:7e:8d:62:7d:99:b0:0b:e1:2c:3e:c4:8c:5b:be:56:fa: 97:11:bf:38:24:12:bf:b8:4b:98:fa:83:0f:7c:7d:94:97:c1: 34:1c:d6:42:4a:3d:6b:a9:3b:6c:45:dd:55:9d:0a:fe:27:5e: 14:d4:76:5a:3e:db:19:ac:9b:e3:91:95:27:e9:36:8f:b7:7e: a9:4c:d5:5b:8f:fb:12:9f:a2:be:52:f7:56:4f:8f:ff:ce:41: b6:88:88:64:11:11:db:b8:59:a9:1f:31:2c:35:af:0a:87:e3: 5b:8a:33:55:57:9c:7d:e3:2e:c5:93:64:8a:4a:4d:a5:f0:13: 06:b9:ad:42:1e:7a:24:87:4f:f8:b5:c5:d4:99:82:47:a7:0f: 11:3a:6a:8f:ab:85:1c:a5:5a:08:9d:a4:eb:fb:97:be:1b:4b: 09:fa:24:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOJVc4cQEhQNs7PyePyFPbuuuApgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5 NjVFNTRBNTAeFw0yNjAzMDIxNDAzMTdaFw0yNjAzMDMxNDM4MTdaMDMxMTAvBgNV BAMTKDJDQjA5RUVGQzNGNDA1NEYwMUY3QzU0N0Q1MDYxMEU3RUZGMjkwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNqJOtpxTMbiImaA5aq1Kdpti qKUlpSi+ZCBiB4uwtFlN07o3cM7yeEeq69yjUdvFSVHnUYBzOxWouQPEfSH+J0lE 8ExR4UVdlXwALS5Y+3o9E/7xkcePwYQiSysVkZz+ddSzqPcJe5QPoaUgG9t7u00U 61PgR2TNBVfzD0OLWPV9kizVAlqIqFUwp9JqKr/VZSiH4u8NH01rj3Cqqj44kqmy ZWVW7tV1ttaABnvQpu5Ig9QlfI8d4cg/VhRSqni+aCp89euYD0mQ5B63T/UcVOf/ rMogdD6uAR+yg3HWJ0FnaDEzsk1k5Py0CJERwTWuZeygc/p7xbmWR6DbBn3NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULLCe78P0BU8B98VH1QYQ5+/ykKkwHwYDVR0j BBgwFoAU7a72Qrco+VBJno+Q7ccE65ZeVKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NjczNzU3NjAwMzUwMjA4MS8wL0VEQUVGNjQyQjcyOEY5NTA0OTlFOEY5MEVEQzcw NEVCOTY1RTU0QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5NjVFNTRBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjY3Mzc1NzYwMDM1MDIwODEvMC9FREFFRjY0MkI3MjhG OTUwNDk5RThGOTBFREM3MDRFQjk2NUU1NEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPByPw8w/KN4 Xg+pUVGDZ0dP67zaKnNCrUlNV+5DtCM7f7O8o3zglrRNzPogT2sNWc9MSqqsuXyx cuxlSg3B21LtbJrKnvclurv+TIoLPaTA/jrlGUEPi+9aq2Z+jWJ9mbAL4Sw+xIxb vlb6lxG/OCQSv7hLmPqDD3x9lJfBNBzWQko9a6k7bEXdVZ0K/ideFNR2Wj7bGayb 45GVJ+k2j7d+qUzVW4/7Ep+ivlL3Vk+P/85BtoiIZBER27hZqR8xLDWvCofjW4oz VVecfeMuxZNkikpNpfATBrmtQh56JIdP+LXF1JmCR6cPETpqj6uFHKVaCJ2k6/uX vhtLCfokOA== -----END CERTIFICATE-----Generated at Tue Mar 3 00:38:55 2026 by rpki-client