$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: QAgAmKVle5XR8m6ehEwVrnalWMJ9qyEF133TcFijrXU= Subject key identifier: 47:A6:DE:BA:F2:B7:83:87:80:A8:44:11:3E:02:50:4D:2E:98:18:BA Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 3168C593387D835141275D3D8E275B78414E495E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 3B Signing time: Tue 03 Mar 2026 15:48:20 +0000 Manifest this update: Tue 03 Mar 2026 15:43:20 +0000 Manifest next update: Wed 04 Mar 2026 19:45:20 +0000 Files and hashes: 1: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: 3y9txnar+oIUyM6AZkn/tWmSgCzALxjGEGp4D8T7C5k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:68:c5:93:38:7d:83:51:41:27:5d:3d:8e:27:5b:78:41:4e:49:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Mar 3 15:43:20 2026 GMT Not After : Mar 4 19:45:20 2026 GMT Subject: CN=47A6DEBAF2B7838780A844113E02504D2E9818BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:f5:c3:68:91:ef:cc:12:54:d9:4c:bc:13: 69:ce:e4:50:bd:4b:5b:17:a6:59:e1:14:f5:56:93: ac:38:98:86:4e:56:dd:8f:44:af:d8:86:fa:1a:cf: 4d:e6:10:1e:90:da:7d:ad:75:5f:26:ef:77:ba:9a: 3a:bc:11:e5:2d:bc:d3:e4:9b:a7:61:99:c2:4e:b3: af:48:25:a8:0a:a7:c0:51:fc:4d:72:a9:25:3d:b3: 33:1d:93:90:8d:17:fd:10:79:e2:b9:ac:1a:e5:90: 33:51:bf:89:d5:2a:4d:65:f2:a5:c1:41:28:23:14: 23:2d:70:3e:97:7f:25:2d:51:f0:b0:e8:11:2b:8c: da:95:b2:d2:db:7d:f3:d3:7a:af:1e:9a:36:0f:4c: fc:ed:b8:1d:0a:4d:90:7b:60:e0:d2:20:f7:33:6c: 7e:50:26:f3:78:3b:83:cf:e8:bb:38:d6:3f:cf:c9: cb:19:02:12:02:0d:05:df:62:ba:96:a2:b0:99:81: b6:21:63:ce:2d:7a:f8:b1:eb:7a:e7:99:42:ad:0b: f5:39:8b:12:58:00:c2:82:4e:66:af:4f:50:58:f5: 57:a1:34:7b:5e:31:e1:18:a9:bc:68:72:e0:c6:ef: eb:85:a5:71:fe:8e:d3:d9:b8:be:53:64:b6:58:6f: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A6:DE:BA:F2:B7:83:87:80:A8:44:11:3E:02:50:4D:2E:98:18:BA X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:8f:41:fd:86:e5:54:17:a7:1e:09:82:30:c7:7f:5c:40:fb: 82:67:3a:74:59:bc:e2:f2:16:12:12:fd:05:5d:eb:11:4b:6a: ff:71:f7:86:2d:5b:14:4c:79:92:ca:89:d4:c8:92:37:78:00: 12:78:83:58:15:e1:bf:2c:48:3b:f4:b7:56:f2:0d:6b:dc:5a: 49:28:c4:c7:70:23:92:39:13:0d:0b:a6:c9:39:57:80:83:b1: c6:dc:96:ae:f6:1d:f2:3b:d6:64:5f:78:7b:2b:09:5b:18:d5: 78:56:4f:9a:d4:bb:2c:f5:de:98:ce:19:71:6b:75:ee:b6:14: 81:09:cb:b3:94:6a:79:1e:3e:0e:74:0c:6d:83:de:cd:57:63: 19:66:2c:3a:5a:9d:d4:e4:6d:d2:ed:87:06:15:13:5a:0e:b0: 1f:8d:a5:60:ba:6d:fa:e1:60:b0:85:27:74:58:04:6c:5b:67: fe:d5:b0:a6:a9:e2:34:38:9c:68:70:54:5e:69:ce:fa:fe:1a: 62:00:aa:17:06:ab:57:97:bc:a9:ef:6d:0c:97:77:1e:a9:c7: 35:53:8a:f7:9d:4b:f5:ec:f2:9f:60:6a:df:41:18:46:6c:4f: ef:d0:21:27:8c:78:63:b6:e5:dc:1b:77:54:73:5c:c8:af:1c: 02:96:bf:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMWjFkzh9g1FBJ109jidbeEFOSV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjAzMDMxNTQzMjBaFw0yNjAzMDQxOTQ1MjBaMDMxMTAvBgNV BAMTKDQ3QTZERUJBRjJCNzgzODc4MEE4NDQxMTNFMDI1MDREMkU5ODE4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUfXDaJHvzBJU2Uy8E2nO5FC9 S1sXplnhFPVWk6w4mIZOVt2PRK/Yhvoaz03mEB6Q2n2tdV8m73e6mjq8EeUtvNPk m6dhmcJOs69IJagKp8BR/E1yqSU9szMdk5CNF/0QeeK5rBrlkDNRv4nVKk1l8qXB QSgjFCMtcD6XfyUtUfCw6BErjNqVstLbffPTeq8emjYPTPztuB0KTZB7YODSIPcz bH5QJvN4O4PP6Ls41j/PycsZAhICDQXfYrqWorCZgbYhY84tevix63rnmUKtC/U5 ixJYAMKCTmavT1BY9VehNHteMeEYqbxocuDG7+uFpXH+jtPZuL5TZLZYb0nBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR6beuvK3g4eAqEQRPgJQTS6YGLowHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzY9B/YblVBen HgmCMMd/XED7gmc6dFm84vIWEhL9BV3rEUtq/3H3hi1bFEx5ksqJ1MiSN3gAEniD WBXhvyxIO/S3VvINa9xaSSjEx3AjkjkTDQumyTlXgIOxxtyWrvYd8jvWZF94eysJ WxjVeFZPmtS7LPXemM4ZcWt17rYUgQnLs5RqeR4+DnQMbYPezVdjGWYsOlqd1ORt 0u2HBhUTWg6wH42lYLpt+uFgsIUndFgEbFtn/tWwpqniNDicaHBUXmnO+v4aYgCq FwarV5e8qe9tDJd3HqnHNVOK951L9ezyn2Bq30EYRmxP79AhJ4x4Y7bl3Bt3VHNc yK8cApa/YA== -----END CERTIFICATE-----Generated at Wed Mar 4 13:07:31 2026 by rpki-client