$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: kxLKEIJ1uGyHGRKbd5LhMxlNyutsOfLXBYg1fKuxNQg= Subject key identifier: 85:51:B4:82:00:78:9A:21:60:B3:D0:E2:20:C5:FB:CD:36:C7:B9:41 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 499E9320CFF16FECE8375044952DBE8A6401D1C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 68 Signing time: Mon 06 Apr 2026 03:13:56 +0000 Manifest this update: Mon 06 Apr 2026 03:08:56 +0000 Manifest next update: Tue 07 Apr 2026 06:46:56 +0000 Files and hashes: 1: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: 8DaPG46zSMHKZg7cLUs3OxutmnqYSWjlHIU4LGGsGgo=) 2: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 06:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9e:93:20:cf:f1:6f:ec:e8:37:50:44:95:2d:be:8a:64:01:d1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Apr 6 03:08:56 2026 GMT Not After : Apr 7 06:46:56 2026 GMT Subject: CN=8551B48200789A2160B3D0E220C5FBCD36C7B941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:96:82:56:0d:47:36:3f:94:0c:f8:c3:a9:0e: 8f:03:73:2d:51:c2:d2:0c:84:e0:e8:f7:4b:ff:01: 94:12:71:81:f1:f0:53:06:73:08:4e:54:cc:9f:1e: 85:c8:77:89:bf:60:3b:30:f9:24:93:94:9a:ea:39: e9:46:2c:4a:93:76:12:cc:36:e5:4c:b4:b2:ee:21: 1f:48:43:b8:8a:9a:d3:8b:61:18:bb:f5:ba:b3:55: 6c:5a:f3:c1:4e:e6:eb:77:71:44:68:ad:48:c0:45: 85:cf:a4:b3:f2:ae:cd:02:7d:ec:5d:64:21:f1:ed: 06:f0:4a:09:3e:db:85:c8:04:e7:4c:9c:0e:9e:dd: b3:c0:14:58:87:32:30:66:e2:04:a0:b1:27:44:99: d6:1f:b0:c4:69:fd:99:99:26:3f:4e:fd:f0:19:8e: 98:93:f0:d2:0e:72:b1:94:a7:85:35:a9:83:86:90: 9a:31:47:53:62:1e:78:72:ec:e5:86:fe:dc:c6:be: f6:17:aa:8a:03:3b:2e:99:3c:3b:44:b4:02:6e:f9: ea:d5:ef:52:dd:5a:b1:f7:84:0b:d9:50:0b:2b:0a: 5e:47:1e:71:76:80:1a:14:54:73:ef:9e:9d:ea:62: c4:41:1d:12:59:69:68:d7:f6:7f:d0:ab:dd:5d:78: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:51:B4:82:00:78:9A:21:60:B3:D0:E2:20:C5:FB:CD:36:C7:B9:41 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1d:a7:e4:47:36:d8:19:f0:97:5e:0e:f3:e9:64:7e:c5:bc: af:cc:a9:2e:e7:18:ee:9e:3f:3d:90:c2:a5:d4:a2:30:43:32: 54:ca:92:fd:6b:02:02:20:7c:98:37:50:ef:2b:a3:06:ea:92: fc:7e:b6:77:07:f3:83:86:9a:51:cb:b9:58:2b:4b:44:be:7c: 9a:9e:a1:66:6e:61:17:c5:43:f1:e3:87:7e:0a:3b:cd:90:97: 8d:df:cb:1a:d7:55:45:b2:19:83:95:42:6a:fb:90:fe:3f:b8: 24:64:88:2b:65:ca:db:4c:e6:45:f4:4b:7d:ac:85:6a:ca:b3: 4e:54:63:88:e2:fe:98:5c:9d:45:8e:c4:49:10:78:a2:10:91: ee:1b:09:69:29:fb:26:4f:59:29:7e:a5:38:c6:da:7b:2d:fc: 8a:3c:97:8e:da:c7:1c:db:c8:d3:df:01:4a:69:20:da:3b:e7: 3e:17:43:db:e7:4e:e2:12:99:6d:bd:6c:81:54:e8:24:59:f6: 08:76:72:90:ec:d6:d5:55:c9:be:05:c6:50:ff:1f:2a:78:e7: 48:d5:82:60:ab:5e:17:e5:00:99:d9:78:64:b3:b9:e2:85:28: 45:2d:f7:10:77:5d:64:58:f2:94:c4:7e:d0:20:3c:44:97:0d: 6d:33:a6:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSZ6TIM/xb+zoN1BElS2+imQB0cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjA0MDYwMzA4NTZaFw0yNjA0MDcwNjQ2NTZaMDMxMTAvBgNV BAMTKDg1NTFCNDgyMDA3ODlBMjE2MEIzRDBFMjIwQzVGQkNEMzZDN0I5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2loJWDUc2P5QM+MOpDo8Dcy1R wtIMhODo90v/AZQScYHx8FMGcwhOVMyfHoXId4m/YDsw+SSTlJrqOelGLEqTdhLM NuVMtLLuIR9IQ7iKmtOLYRi79bqzVWxa88FO5ut3cURorUjARYXPpLPyrs0Cfexd ZCHx7QbwSgk+24XIBOdMnA6e3bPAFFiHMjBm4gSgsSdEmdYfsMRp/ZmZJj9O/fAZ jpiT8NIOcrGUp4U1qYOGkJoxR1NiHnhy7OWG/tzGvvYXqooDOy6ZPDtEtAJu+erV 71LdWrH3hAvZUAsrCl5HHnF2gBoUVHPvnp3qYsRBHRJZaWjX9n/Qq91deF5RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhVG0ggB4miFgs9DiIMX7zTbHuUEwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlR2n5Ec22Bnw l14O8+lkfsW8r8ypLucY7p4/PZDCpdSiMEMyVMqS/WsCAiB8mDdQ7yujBuqS/H62 dwfzg4aaUcu5WCtLRL58mp6hZm5hF8VD8eOHfgo7zZCXjd/LGtdVRbIZg5VCavuQ /j+4JGSIK2XK20zmRfRLfayFasqzTlRjiOL+mFydRY7ESRB4ohCR7hsJaSn7Jk9Z KX6lOMbaey38ijyXjtrHHNvI098BSmkg2jvnPhdD2+dO4hKZbb1sgVToJFn2CHZy kOzW1VXJvgXGUP8fKnjnSNWCYKteF+UAmdl4ZLO54oUoRS33EHddZFjylMR+0CA8 RJcNbTOmfw== -----END CERTIFICATE-----Generated at Mon Apr 6 06:12:51 2026 by rpki-client