$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: LVMi2JaAeY4xFFx7xVuexvEJNB4hx+by4oATJfEXYMs= Subject key identifier: CC:14:E8:3D:BE:0B:9D:D4:E7:6C:EA:EA:E5:49:E2:37:3A:B6:CA:DD Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 5945DF4DAABCAC583BEB0E7AE3658E5F88A4C9F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 5D Signing time: Sun 29 Mar 2026 18:08:32 +0000 Manifest this update: Sun 29 Mar 2026 18:03:32 +0000 Manifest next update: Mon 30 Mar 2026 21:33:32 +0000 Files and hashes: 1: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 2: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 3: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) 4: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: PVB9qTHLy4fzksDkQBRD95qxiI+/yAUBd+fgTInCjSg=) 5: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 10:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:45:df:4d:aa:bc:ac:58:3b:eb:0e:7a:e3:65:8e:5f:88:a4:c9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Mar 29 18:03:32 2026 GMT Not After : Mar 30 21:33:32 2026 GMT Subject: CN=CC14E83DBE0B9DD4E76CEAEAE549E2373AB6CADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:61:a6:47:b6:24:57:f3:cb:21:04:cf:ab: da:7d:25:ac:e6:20:06:55:22:9b:9a:24:d8:97:61: ab:11:c2:c5:ca:0a:2a:e8:00:2a:5e:32:e7:8a:4d: 01:e8:f1:d7:c4:0c:cb:05:8f:9d:a6:d4:32:4c:a8: 33:6d:58:08:df:bd:6c:a1:e8:c2:e6:7a:d0:20:5e: ed:39:6a:90:c9:69:3a:67:c9:3b:52:db:de:d6:1b: a5:ca:64:b0:a7:b8:19:b2:c4:70:d0:d7:c9:70:60: d6:80:76:67:20:2c:b9:98:ed:a0:3c:46:5a:8d:8f: 69:0a:4b:a8:77:e8:ac:aa:28:22:78:f7:8c:93:eb: ff:ec:fc:06:fc:ab:b0:0d:9b:43:e3:a1:e9:20:27: 93:8e:25:94:d5:84:ac:cc:7b:dd:d0:fc:35:cc:f3: 9a:d7:2d:42:39:bf:b9:04:43:27:b7:8c:1a:d7:e2: d1:d8:a3:68:09:22:03:67:fc:2b:d4:fd:f9:85:3f: c5:b3:c2:13:7d:13:4b:0c:18:2e:39:96:70:8d:cb: 48:ce:71:16:be:0e:c1:4a:1b:c9:a2:9e:de:6d:45: 12:6e:19:ba:c7:a8:6a:e3:33:71:ce:83:1f:cf:fa: 9a:b4:fe:48:ce:65:8f:25:bc:01:a7:73:f9:09:7c: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:14:E8:3D:BE:0B:9D:D4:E7:6C:EA:EA:E5:49:E2:37:3A:B6:CA:DD X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8e:cd:05:a5:c7:4e:56:55:17:a7:ce:f3:24:07:a4:ab:66: 4d:03:52:60:20:77:e9:35:1e:98:aa:14:b4:ce:2f:fe:92:f8: 87:7d:27:d0:9c:e0:86:01:5a:69:65:44:33:94:87:00:a7:50: 49:98:45:1b:32:6e:4e:6c:70:04:31:42:0f:8f:14:fb:86:6d: f9:12:4b:f2:6b:9c:dc:6c:13:14:2c:7b:da:05:2e:bf:d1:65: 54:65:d6:92:2b:d2:38:2d:f8:58:c9:ad:98:03:e3:64:5f:d1: c9:a0:7f:10:e7:cf:bb:ca:b0:5d:46:ed:84:5b:09:8d:47:4a: 87:99:d0:20:c0:89:99:89:2f:02:f9:18:b7:81:2d:40:b3:23: 2b:c5:fc:84:d9:4c:26:91:85:39:ed:1e:fd:7e:a1:2d:1f:3d: 8a:f6:13:5d:d6:c7:b7:83:ad:87:47:f6:66:c3:f6:59:8d:ee: 5c:b6:77:a6:f5:3a:b2:95:2d:76:6b:ec:c4:6a:80:25:bd:5a: 0d:c0:07:43:36:65:b1:5f:1a:3c:23:84:6f:d8:ce:ca:d0:6e: 66:81:6b:e2:1f:4e:44:a1:46:37:0b:c0:12:2f:9a:6b:44:f6: eb:b4:01:76:48:82:ae:47:6b:32:39:0c:0b:9e:91:c4:b6:8b: 0f:0e:e3:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWUXfTaq8rFg76w5642WOX4ikyfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjAzMjkxODAzMzJaFw0yNjAzMzAyMTMzMzJaMDMxMTAvBgNV BAMTKENDMTRFODNEQkUwQjlERDRFNzZDRUFFQUU1NDlFMjM3M0FCNkNBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUbmGmR7YkV/PLIQTPq9p9Jazm IAZVIpuaJNiXYasRwsXKCiroACpeMueKTQHo8dfEDMsFj52m1DJMqDNtWAjfvWyh 6MLmetAgXu05apDJaTpnyTtS297WG6XKZLCnuBmyxHDQ18lwYNaAdmcgLLmY7aA8 RlqNj2kKS6h36KyqKCJ494yT6//s/Ab8q7ANm0PjoekgJ5OOJZTVhKzMe93Q/DXM 85rXLUI5v7kEQye3jBrX4tHYo2gJIgNn/CvU/fmFP8WzwhN9E0sMGC45lnCNy0jO cRa+DsFKG8mint5tRRJuGbrHqGrjM3HOgx/P+pq0/kjOZY8lvAGnc/kJfBQDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzBToPb4LndTnbOrq5UniNzq2yt0wHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY7NBaXHTlZV F6fO8yQHpKtmTQNSYCB36TUemKoUtM4v/pL4h30n0JzghgFaaWVEM5SHAKdQSZhF GzJuTmxwBDFCD48U+4Zt+RJL8muc3GwTFCx72gUuv9FlVGXWkivSOC34WMmtmAPj ZF/RyaB/EOfPu8qwXUbthFsJjUdKh5nQIMCJmYkvAvkYt4EtQLMjK8X8hNlMJpGF Oe0e/X6hLR89ivYTXdbHt4Oth0f2ZsP2WY3uXLZ3pvU6spUtdmvsxGqAJb1aDcAH QzZlsV8aPCOEb9jOytBuZoFr4h9ORKFGNwvAEi+aa0T267QBdkiCrkdrMjkMC56R xLaLDw7juw== -----END CERTIFICATE-----Generated at Mon Mar 30 01:30:50 2026 by rpki-client