$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft File: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft (raw, json) Hash identifier: 61tVACFnXmQCPkBW+2t858OeuT/CrLhxd5fjN0TejLU= Subject key identifier: 49:B9:BA:26:E6:1F:86:E0:12:41:2F:B6:36:D3:99:D7:93:3C:23:3F Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 202A12A36C9ABB7950B228D60B98D8DA03F3DDDB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 11:23:39 +0000 Manifest this update: Thu 12 Mar 2026 11:18:39 +0000 Manifest next update: Fri 13 Mar 2026 14:55:39 +0000 Files and hashes: 1: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl (hash: sJ0sbPGQq89xS5HnQXJkIySpXhUmTD6uCjZ7ylUD4Mk=) 2: 34332e3234382e3138342e302f32312d3231203d3e203133333738.roa (hash: cZXFx+hGVQSvEp1aG6rRR7RighYF8GI9Orf34BHUPzc=) 3: 34332e3234382e38302e302f32302d3230203d3e203633353637.roa (hash: VkQGCtVJyviO04wqgZyxJPSPG8lvhM5uDjyNdvHCq8s=) 4: 34332e3234382e3138342e302f32312d3231203d3e2034383337.roa (hash: jawpvfpnIh9qGodp6c/NHrzmXHiczZ41m82UYVYjACE=) 5: 34332e3234382e3138342e302f32312d3231203d3e203633353637.roa (hash: AIOWf2rnd3G5ICGkvrsyQlCoBqqePcJfvboxXn3EeP4=) 6: 34332e3232362e39362e302f32302d3230203d3e203633353637.roa (hash: Fmf8TYs3zzXnLl9iq8IFZg7QuqhisyZN3WSiZItCZJA=) 7: 34332e3234372e39322e302f32322d3232203d3e203633353637.roa (hash: TWBPIceMErTmM3bBa5s13kmWazMVd/xcv4XaT8mek6s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2a:12:a3:6c:9a:bb:79:50:b2:28:d6:0b:98:d8:da:03:f3:dd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Mar 12 11:18:39 2026 GMT Not After : Mar 13 14:55:39 2026 GMT Subject: CN=49B9BA26E61F86E012412FB636D399D7933C233F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:27:b0:07:3b:4c:ff:c6:05:f3:a5:f3:fe: 60:d6:99:a1:34:45:79:a2:de:aa:d8:55:b8:00:d0: 97:24:b0:3a:79:e8:50:09:c6:26:f6:df:1a:eb:df: a9:b5:8e:e4:5d:d4:6a:28:bd:f0:e6:be:0b:f4:7f: 19:03:17:fb:32:3f:3e:9d:48:ba:04:03:fc:5b:b0: ff:f0:85:43:93:ae:77:71:ef:d9:51:d2:23:2c:3c: e9:e6:73:9a:e6:08:93:3d:d4:0c:3e:a3:78:e1:b9: a0:72:ef:ff:67:9e:96:76:9e:81:87:8c:c4:77:9e: fb:56:ef:92:04:bd:75:75:a4:cf:7a:d7:0a:23:99: f3:c2:ee:92:c4:a4:3c:52:0f:39:80:67:37:19:a3: b1:a2:6f:80:05:32:53:b8:7a:e6:9a:0b:90:77:3e: 65:d9:82:f2:5a:86:0c:d9:0e:e2:c3:85:e2:79:6d: d1:54:ba:3a:42:9c:09:b0:75:02:0d:dc:0e:96:92: a1:0b:47:38:1a:84:09:f5:5c:bc:b4:56:b8:75:40: 21:ca:27:54:f0:04:4c:f2:f8:6b:c2:53:7b:1a:c4: 56:f2:e0:68:51:11:9d:de:a4:88:8c:71:c5:f2:77: e4:80:e3:b0:2b:bc:72:e2:86:ce:b8:13:e2:8f:63: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B9:BA:26:E6:1F:86:E0:12:41:2F:B6:36:D3:99:D7:93:3C:23:3F X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f2:f2:56:41:bb:9b:2e:24:7d:10:25:9a:22:37:3a:79:f3: 7e:0a:1e:bb:cf:77:d6:4f:c4:32:90:66:8b:56:b4:37:53:65: a6:c3:f1:24:0a:cd:67:8a:20:bf:be:02:0e:b3:3a:c5:33:a8: a9:e9:63:b2:0b:5c:de:96:8c:1f:af:41:09:55:01:9e:ae:3e: dd:cf:95:68:56:c8:73:91:7f:36:c2:cc:72:a7:2c:46:34:3b: 20:c4:93:ac:8b:46:80:59:62:49:17:74:da:ed:78:11:e3:60: 02:e3:f8:ec:ca:f0:d6:81:89:e6:f8:f9:e7:24:4f:00:e3:3c: df:c4:97:74:dd:ad:c9:10:65:54:3b:b1:b2:bc:d4:e5:b3:08: 5d:dc:8f:03:f2:9c:01:56:30:e7:29:49:68:03:e4:53:99:c7: 9b:73:0f:65:29:38:83:13:0f:73:18:e2:79:bc:da:d1:83:0a: 3c:f9:60:82:17:19:55:f7:85:0d:55:20:fb:be:83:49:62:a4: c0:05:12:e0:67:37:3a:7c:d6:51:7b:96:a7:4c:8a:b0:94:33: 9f:0b:11:d2:ba:50:5b:24:9c:d3:08:6d:d0:0a:d9:05:f5:06: 99:9f:3f:ff:2e:e6:2e:13:7c:52:b9:1b:9e:67:0d:01:80:ea: 99:d4:ed:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUICoSo2yau3lQsijWC5jY2gPz3dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAzMTIxMTE4MzlaFw0yNjAzMTMxNDU1MzlaMDMxMTAvBgNV BAMTKDQ5QjlCQTI2RTYxRjg2RTAxMjQxMkZCNjM2RDM5OUQ3OTMzQzIzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiiewBztM/8YF86Xz/mDWmaE0 RXmi3qrYVbgA0JcksDp56FAJxib23xrr36m1juRd1GoovfDmvgv0fxkDF/syPz6d SLoEA/xbsP/whUOTrndx79lR0iMsPOnmc5rmCJM91Aw+o3jhuaBy7/9nnpZ2noGH jMR3nvtW75IEvXV1pM961wojmfPC7pLEpDxSDzmAZzcZo7Gib4AFMlO4euaaC5B3 PmXZgvJahgzZDuLDheJ5bdFUujpCnAmwdQIN3A6WkqELRzgahAn1XLy0Vrh1QCHK J1TwBEzy+GvCU3saxFby4GhREZ3epIiMccXyd+SA47ArvHLihs64E+KPY0elAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSbm6JuYfhuASQS+2NtOZ15M8Iz8wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC83MUM5QkZFNEM4RkQ3 RTc3N0ExQzlFNTVERkE2MEEzQUMyOUEyNTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/LyVkG7my4k fRAlmiI3Onnzfgoeu8931k/EMpBmi1a0N1NlpsPxJArNZ4ogv74CDrM6xTOoqelj sgtc3paMH69BCVUBnq4+3c+VaFbIc5F/NsLMcqcsRjQ7IMSTrItGgFliSRd02u14 EeNgAuP47Mrw1oGJ5vj55yRPAOM838SXdN2tyRBlVDuxsrzU5bMIXdyPA/KcAVYw 5ylJaAPkU5nHm3MPZSk4gxMPcxjiebza0YMKPPlgghcZVfeFDVUg+76DSWKkwAUS 4Gc3OnzWUXuWp0yKsJQznwsR0rpQWySc0wht0ArZBfUGmZ8//y7mLhN8UrkbnmcN AYDqmdTtNg== -----END CERTIFICATE-----Generated at Thu Mar 12 18:20:17 2026 by rpki-client