$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json) Hash identifier: d4C/ILoc2xh4eOD++g436tTqwAPFtJEr39b+SvQwFE0= Subject key identifier: 40:77:F2:B4:7C:BF:07:B7:AC:0F:A6:0C:F5:47:CB:D9:C7:B1:94:C2 Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Certificate serial: 347D94EA990C3BCD5F9F444FC6BA6D0B067FD899 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 22:18:39 +0000 Manifest this update: Thu 12 Mar 2026 22:13:39 +0000 Manifest next update: Fri 13 Mar 2026 23:22:39 +0000 Files and hashes: 1: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=) 2: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=) 3: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=) 4: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=) 5: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=) 6: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: Q/e4NKY40gmXbbPvapRcNkUcdMRb+KZbOnCSfSBj+S0=) 7: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=) 8: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=) 9: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 23:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7d:94:ea:99:0c:3b:cd:5f:9f:44:4f:c6:ba:6d:0b:06:7f:d8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Validity Not Before: Mar 12 22:13:39 2026 GMT Not After : Mar 13 23:22:39 2026 GMT Subject: CN=4077F2B47CBF07B7AC0FA60CF547CBD9C7B194C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:9f:20:a4:af:18:74:e2:83:aa:e6:5b:fc: e0:37:19:97:b1:d8:ef:91:30:6f:9d:f1:a1:a9:4a: 6e:3d:72:9d:1c:d1:e3:ee:13:0d:78:c6:d7:74:09: a2:65:03:6c:a9:b8:67:ae:b7:6b:ca:1d:85:94:af: 84:cd:46:fb:c9:92:e0:7f:d6:f0:cf:23:54:39:52: dc:b8:b6:8d:16:d2:62:7f:04:d1:ae:d8:53:53:52: 29:3a:42:99:b9:ab:01:d4:4c:19:66:d7:6c:1e:42: 52:6a:e1:15:f6:a4:09:1f:52:5e:ea:56:35:64:c7: fb:5e:2d:ff:a8:8c:cf:11:1e:bc:90:0e:34:6e:d9: e2:bb:b7:b9:82:68:af:9a:b2:c3:e9:f8:86:7e:15: f5:13:d5:07:4d:86:b4:e3:a2:7f:35:8e:5e:cc:ce: bb:e8:7f:62:af:79:7b:fa:be:b2:cd:8f:b6:f3:49: fe:45:b4:e1:db:81:99:63:0d:c5:fa:5b:ec:94:02: 7d:28:bc:f8:98:39:62:6d:e8:1a:b8:e1:01:c0:cd: 16:cb:fd:bb:57:16:b8:d5:51:f2:4a:f2:ea:c1:4e: 4e:b9:f2:45:16:80:56:62:f5:9b:db:20:47:52:81: fc:a0:82:92:dd:ed:48:b8:ae:ab:cf:f0:a9:c5:1e: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:77:F2:B4:7C:BF:07:B7:AC:0F:A6:0C:F5:47:CB:D9:C7:B1:94:C2 X509v3 Authority Key Identifier: keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:49:18:7a:0e:6c:36:d7:c9:c8:83:bd:fd:e5:50:89:f3:8c: 01:1e:1b:a4:3f:55:2b:86:7a:ec:2e:46:e1:fe:f4:ec:fa:95: 92:af:c6:5b:a9:19:08:96:a3:44:e5:25:1c:3f:18:47:81:8c: 71:52:d9:27:27:cd:6b:e4:23:af:09:14:3b:ee:44:bb:0a:9e: f6:c2:90:1e:40:00:18:8b:27:14:ec:b0:3c:25:48:80:e4:41: c0:95:5c:4e:2b:47:a0:d6:f9:b7:ab:70:4e:d6:23:63:be:88: 24:82:a9:a5:ff:09:de:34:6c:b4:fb:d2:84:8d:f9:8d:98:d0: 39:f1:39:55:43:48:d0:2c:4f:87:0e:c7:36:42:0a:8c:28:8b: f4:21:c4:b0:46:ca:49:42:18:1b:2c:b9:85:96:27:4a:30:d1: 29:cb:d5:65:04:0f:13:69:5f:b8:12:84:9d:06:02:3b:3a:f4: ad:90:94:9a:1a:a9:78:cd:73:30:b9:7b:d1:08:59:45:e4:29: d0:31:86:8d:9c:ef:b2:af:81:2e:43:92:ca:b4:36:5d:73:fe: 70:6b:3f:33:4b:71:a3:28:63:41:81:28:74:55:51:31:29:7c: 26:f8:5c:e1:67:1b:8a:9e:cf:e4:7e:be:ca:53:63:f7:96:70: ce:10:76:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNH2U6pkMO81fn0RPxrptCwZ/2JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0 NjczREFDMDAeFw0yNjAzMTIyMjEzMzlaFw0yNjAzMTMyMzIyMzlaMDMxMTAvBgNV BAMTKDQwNzdGMkI0N0NCRjA3QjdBQzBGQTYwQ0Y1NDdDQkQ5QzdCMTk0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy758gpK8YdOKDquZb/OA3GZex 2O+RMG+d8aGpSm49cp0c0ePuEw14xtd0CaJlA2ypuGeut2vKHYWUr4TNRvvJkuB/ 1vDPI1Q5Uty4to0W0mJ/BNGu2FNTUik6Qpm5qwHUTBlm12weQlJq4RX2pAkfUl7q VjVkx/teLf+ojM8RHryQDjRu2eK7t7mCaK+assPp+IZ+FfUT1QdNhrTjon81jl7M zrvof2KveXv6vrLNj7bzSf5FtOHbgZljDcX6W+yUAn0ovPiYOWJt6Bq44QHAzRbL /btXFrjVUfJK8urBTk658kUWgFZi9ZvbIEdSgfyggpLd7Ui4rqvP8KnFHhTZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQHfytHy/B7esD6YM9UfL2cexlMIwHwYDVR0j BBgwFoAUCtNMBeiNEsMO1/4d0qvqVkZz2sAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8wLzBBRDM0QzA1RTg4RDEyQzMwRUQ3RkUxREQyQUJF QTU2NDY3M0RBQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0NjczREFDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMC8wQUQzNEMwNUU4OEQx MkMzMEVEN0ZFMUREMkFCRUE1NjQ2NzNEQUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEkYeg5sNtfJ yIO9/eVQifOMAR4bpD9VK4Z67C5G4f707PqVkq/GW6kZCJajROUlHD8YR4GMcVLZ JyfNa+QjrwkUO+5Euwqe9sKQHkAAGIsnFOywPCVIgORBwJVcTitHoNb5t6twTtYj Y76IJIKppf8J3jRstPvShI35jZjQOfE5VUNI0CxPhw7HNkIKjCiL9CHEsEbKSUIY Gyy5hZYnSjDRKcvVZQQPE2lfuBKEnQYCOzr0rZCUmhqpeM1zMLl70QhZReQp0DGG jZzvsq+BLkOSyrQ2XXP+cGs/M0txoyhjQYEodFVRMSl8Jvhc4Wcbip7P5H6+ylNj 95ZwzhB2DA== -----END CERTIFICATE-----Generated at Fri Mar 13 09:26:47 2026 by rpki-client