$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json) Hash identifier: FKX11Qj9WIeAXWGSzQTnwmm0vBAiXmRqj6oJHRTBqZM= Subject key identifier: 15:CA:60:0D:9A:55:2A:EE:A7:C2:58:A5:EE:3A:97:C5:DC:7B:D5:35 Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 4BC8E61A02C4E24A73C8B367A6068FE4E0849AB1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft Manifest number: 44 Signing time: Tue 10 Mar 2026 09:08:36 +0000 Manifest this update: Tue 10 Mar 2026 09:03:36 +0000 Manifest next update: Wed 11 Mar 2026 11:38:36 +0000 Files and hashes: 1: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=) 2: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: NtEDpx673AzdAWEwVnLj/NJPnAI3n07E6qb7DjE0bdg=) 3: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=) 4: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=) 5: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 11:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c8:e6:1a:02:c4:e2:4a:73:c8:b3:67:a6:06:8f:e4:e0:84:9a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Mar 10 09:03:36 2026 GMT Not After : Mar 11 11:38:36 2026 GMT Subject: CN=15CA600D9A552AEEA7C258A5EE3A97C5DC7BD535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:dc:5d:fd:45:bf:47:37:e7:b9:53:5e:7b: e4:64:59:8f:4c:b5:8a:e6:e0:56:1b:b4:a9:6f:57: 22:6a:26:0f:d7:25:f8:ae:58:00:f7:31:ab:92:73: ad:65:1d:e5:ec:2e:5a:74:a0:50:37:31:7b:96:e2: 25:b2:61:94:1f:aa:a1:ab:33:90:4b:93:1f:5f:8e: f0:6d:38:cf:ef:f7:56:11:c3:1d:59:de:31:cc:1f: a7:72:e9:93:56:11:18:10:ad:c7:92:1a:5d:39:0e: 4f:43:34:16:f2:19:76:d6:85:07:60:cc:c9:5f:f5: 36:49:6c:b6:ed:94:5a:06:f8:9c:33:93:c0:74:25: a3:40:7a:05:d1:3c:81:7e:f1:78:74:28:1e:28:aa: 44:cc:c2:96:4b:58:e9:80:25:8e:28:fd:30:d5:89: 79:07:21:a2:6b:65:c4:8a:9f:6d:f6:c4:ca:fe:4d: c4:ca:d2:ac:d8:58:ad:1c:c1:ff:6f:97:65:a4:0f: 58:30:d5:f2:8a:a1:1a:50:8f:b4:db:7e:71:c3:63: e5:49:6b:91:c5:8a:52:49:77:cf:a6:61:77:e9:18: ae:91:41:54:97:41:2c:da:5b:de:5e:e0:9d:9b:81: 24:53:8b:a9:14:56:0a:ff:76:c2:66:c8:32:32:87: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CA:60:0D:9A:55:2A:EE:A7:C2:58:A5:EE:3A:97:C5:DC:7B:D5:35 X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e0:e6:6a:05:68:f2:68:90:70:a2:73:b2:de:df:05:5b:83: 30:a0:b3:fa:8c:ba:7f:fa:60:d1:d5:40:f4:7f:30:16:db:81: 7e:f8:de:ed:66:97:4c:80:b7:1c:96:44:c9:88:ea:59:ab:c4: 0e:78:7a:6f:74:d6:7a:6d:ac:3a:f1:81:84:f7:b2:3a:e8:87: 22:44:ea:0b:f0:85:d0:44:f0:9f:aa:49:f5:e6:ae:65:c8:9e: e0:2b:32:ea:65:7c:2b:15:79:2a:e9:f8:3b:2b:c7:60:e2:ec: 44:44:39:22:25:c0:59:f8:ac:db:49:b9:76:9d:7e:e6:f6:7a: 29:79:77:8a:dd:b3:c9:f1:70:0a:aa:8a:a5:8d:4b:96:7c:a9: be:38:65:29:81:41:9a:bf:6c:47:83:7d:68:db:f2:d0:aa:fa: cc:66:7b:6c:58:d5:94:79:a1:b4:f6:2d:f5:2f:d2:9b:a5:ad: 60:9d:c1:78:7f:07:e8:54:82:e8:36:d6:1f:5a:b2:c3:8c:04: 0d:61:99:d9:ea:d5:06:42:d9:8f:d9:62:3c:5c:36:bb:cb:7f: 2b:de:b9:0f:ed:93:d3:6b:3a:7b:c3:d8:69:58:5d:b3:9e:2b: 39:1a:f0:5b:85:62:f6:f4:cc:a9:4a:9b:5c:50:cf:5d:6c:33: f6:4f:b5:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS8jmGgLE4kpzyLNnpgaP5OCEmrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjAzMTAwOTAzMzZaFw0yNjAzMTExMTM4MzZaMDMxMTAvBgNV BAMTKDE1Q0E2MDBEOUE1NTJBRUVBN0MyNThBNUVFM0E5N0M1REM3QkQ1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblNxd/UW/RzfnuVNee+RkWY9M tYrm4FYbtKlvVyJqJg/XJfiuWAD3MauSc61lHeXsLlp0oFA3MXuW4iWyYZQfqqGr M5BLkx9fjvBtOM/v91YRwx1Z3jHMH6dy6ZNWERgQrceSGl05Dk9DNBbyGXbWhQdg zMlf9TZJbLbtlFoG+Jwzk8B0JaNAegXRPIF+8Xh0KB4oqkTMwpZLWOmAJY4o/TDV iXkHIaJrZcSKn232xMr+TcTK0qzYWK0cwf9vl2WkD1gw1fKKoRpQj7TbfnHDY+VJ a5HFilJJd8+mYXfpGK6RQVSXQSzaW95e4J2bgSRTi6kUVgr/dsJmyDIyh+1JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFcpgDZpVKu6nwlil7jqXxdx71TUwHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC9COEMxNTAzNjkzMjE3 NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+DmagVo8miQ cKJzst7fBVuDMKCz+oy6f/pg0dVA9H8wFtuBfvje7WaXTIC3HJZEyYjqWavEDnh6 b3TWem2sOvGBhPeyOuiHIkTqC/CF0ETwn6pJ9eauZcie4Csy6mV8KxV5Kun4OyvH YOLsREQ5IiXAWfis20m5dp1+5vZ6KXl3it2zyfFwCqqKpY1LlnypvjhlKYFBmr9s R4N9aNvy0Kr6zGZ7bFjVlHmhtPYt9S/Sm6WtYJ3BeH8H6FSC6DbWH1qyw4wEDWGZ 2erVBkLZj9liPFw2u8t/K965D+2T02s6e8PYaVhds54rORrwW4Vi9vTMqUqbXFDP XWwz9k+1sA== -----END CERTIFICATE-----Generated at Wed Mar 11 00:53:04 2026 by rpki-client