$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft File: 2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft (raw, json) Hash identifier: jMIupmrUcijpn4L2ykBu9KvPU4XHWB5Bxm3zQ5NzGNI= Subject key identifier: 4B:0E:9E:1B:AE:B3:BE:9B:04:FD:B8:B2:5E:EB:6A:A0:F1:49:20:00 Authority key identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF Certificate issuer: /CN=A918C4250000/serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF Certificate serial: 645B7AFC82C5896E622DF6DB9C03184636A0F935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft Manifest number: 6F Signing time: Thu 12 Mar 2026 17:54:44 +0000 Manifest this update: Thu 12 Mar 2026 17:49:44 +0000 Manifest next update: Fri 13 Mar 2026 21:34:44 +0000 Files and hashes: 1: 2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl (hash: rjtB9FfyiAuYpS1bIEC+Vzw5wJ2ACyNwK7NtMOGAlJ4=) 2: 3130332e3234352e32332e302f32342d3238203d3e203234343039.roa (hash: duHWy89Z7iqgGUpExL4w6MQRvREJpv2Qr6dID4AHNSQ=) 3: 3130332e3234352e32332e302f32342d3234203d3e2034383132.roa (hash: 5h9WITkSSeFvxeX0UNseRp5CvrfPtkhSN9QGPkwRyQU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 21:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5b:7a:fc:82:c5:89:6e:62:2d:f6:db:9c:03:18:46:36:a0:f9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF Validity Not Before: Mar 12 17:49:44 2026 GMT Not After : Mar 13 21:34:44 2026 GMT Subject: CN=4B0E9E1BAEB3BE9B04FDB8B25EEB6AA0F1492000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:38:a3:b0:da:32:4e:32:c7:19:fc:bd:0a:eb: 68:12:9c:58:e2:25:cc:62:23:4d:7b:03:2d:35:7d: 47:1d:5b:ec:b4:ea:3e:52:c6:6c:1e:cf:09:92:c7: 3d:f3:87:7e:7a:cc:39:48:48:21:f9:cb:d1:64:47: c8:76:58:2a:7b:31:05:89:b9:15:8b:22:90:e7:78: a2:52:9e:9d:12:25:86:ca:3b:a0:05:ff:65:87:92: 67:f2:cf:87:52:84:e4:09:6c:ec:46:0c:3c:94:8e: 65:05:7c:10:5d:24:d1:5f:7d:23:94:de:00:ce:33: a6:ea:cb:6a:b6:78:66:6b:63:c6:b7:fd:65:45:2a: f0:c9:f5:2f:48:3f:d9:9b:6b:54:51:cf:c4:70:89: 60:c5:19:11:a1:4b:5b:f3:82:13:22:69:88:a3:af: 6a:c5:82:7c:da:77:96:82:4c:2e:b5:46:31:fb:18: ca:d8:2e:ee:df:b2:4e:39:89:30:89:9b:b9:a4:87: 39:a9:3c:2d:66:f2:05:97:29:7c:20:94:0a:2c:c8: 19:9e:92:37:42:35:48:94:39:06:19:ea:f2:31:54: 19:0f:18:a8:2d:12:84:d1:40:cb:67:fe:4e:1c:52: d9:3d:63:d5:a3:d4:bc:a7:16:91:a3:3d:81:23:f3: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0E:9E:1B:AE:B3:BE:9B:04:FD:B8:B2:5E:EB:6A:A0:F1:49:20:00 X509v3 Authority Key Identifier: keyid:2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e0:c7:fe:fe:10:00:b1:ed:fc:60:4c:89:fa:53:29:df:a2: 90:dd:54:f7:ce:fc:c2:31:c9:dc:ae:f6:5f:10:1d:64:64:1e: 82:92:cd:83:7b:c1:75:50:90:91:6e:ec:b7:4a:3e:18:51:de: 2a:84:59:ce:04:75:38:8a:34:43:a0:89:3e:f1:ba:b9:47:b4: 9a:56:33:4b:4d:1c:ca:4d:e1:1a:27:18:0c:9a:0c:51:5f:e3: 8f:59:36:d7:c0:61:ec:36:47:e6:79:05:96:ea:54:c4:5b:56: 28:84:b3:c9:23:ff:fb:28:24:44:95:89:bc:06:6c:26:22:ff: 5b:cd:47:6e:eb:08:d5:c0:a2:68:e8:c7:5d:01:5b:41:6c:6b: 1a:8b:1a:27:66:8c:c2:3e:8e:ee:fd:d6:b8:a6:67:39:90:57: 78:64:8e:ae:37:a3:48:d4:b3:bc:a8:9b:92:93:60:9b:f5:44: d2:94:84:60:38:f5:fa:8b:ce:bd:6a:dd:6f:53:f2:1a:56:c1: 3f:7f:99:f9:57:98:f7:99:59:54:16:9c:3f:08:db:45:b0:90: a5:82:28:fe:dd:25:e0:9b:91:7f:d7:e5:38:12:dd:af:8e:c3: 3c:6b:54:78:81:0c:60:1c:f3:d9:04:fb:63:37:46:35:c9:da: c7:ed:6c:15 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZFt6/ILFiW5iLfbbnAMYRjag+TUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxOEM0MjUwMDAwMTEwLwYDVQQFEygyRUU0N0UzQzgx ODc0QTAxODNBOERBRjQyREVEOUFEOTk0QzQ3N0NGMB4XDTI2MDMxMjE3NDk0NFoX DTI2MDMxMzIxMzQ0NFowMzExMC8GA1UEAxMoNEIwRTlFMUJBRUIzQkU5QjA0RkRC OEIyNUVFQjZBQTBGMTQ5MjAwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOk4o7DaMk4yxxn8vQrraBKcWOIlzGIjTXsDLTV9Rx1b7LTqPlLGbB7PCZLH PfOHfnrMOUhIIfnL0WRHyHZYKnsxBYm5FYsikOd4olKenRIlhso7oAX/ZYeSZ/LP h1KE5Als7EYMPJSOZQV8EF0k0V99I5TeAM4zpurLarZ4Zmtjxrf9ZUUq8Mn1L0g/ 2ZtrVFHPxHCJYMUZEaFLW/OCEyJpiKOvasWCfNp3loJMLrVGMfsYytgu7t+yTjmJ MImbuaSHOak8LWbyBZcpfCCUCizIGZ6SN0I1SJQ5Bhnq8jFUGQ8YqC0ShNFAy2f+ ThxS2T1j1aPUvKcWkaM9gSPztNECAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRLDp4b rrO+mwT9uLJe62qg8UkgADAfBgNVHSMEGDAWgBQu5H48gYdKAYOo2vQt7ZrZlMR3 zzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1Mzg1NzE4NzY0OTI5MDI1LzAvMkVFNDdF M0M4MTg3NEEwMTgzQThEQUY0MkRFRDlBRDk5NEM0NzdDRi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvTHVSLVBJR0hT Z0dEcU5yMExlMmEyWlRFZDg4LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM4NTcxODc2 NDkyOTAyNS8wLzJFRTQ3RTNDODE4NzRBMDE4M0E4REFGNDJERUQ5QUQ5OTRDNDc3 Q0YubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCF4Mf+/hAAse38YEyJ+lMp36KQ3VT3zvzCMcncrvZfEB1k ZB6Cks2De8F1UJCRbuy3Sj4YUd4qhFnOBHU4ijRDoIk+8bq5R7SaVjNLTRzKTeEa JxgMmgxRX+OPWTbXwGHsNkfmeQWW6lTEW1YohLPJI//7KCRElYm8BmwmIv9bzUdu 6wjVwKJo6MddAVtBbGsaixonZozCPo7u/da4pmc5kFd4ZI6uN6NI1LO8qJuSk2Cb 9UTSlIRgOPX6i869at1vU/IaVsE/f5n5V5j3mVlUFpw/CNtFsJClgij+3SXgm5F/ 1+U4Et2vjsM8a1R4gQxgHPPZBPtjN0Y1ydrH7WwV -----END CERTIFICATE-----Generated at Thu Mar 12 21:29:30 2026 by rpki-client