$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft File: 909D556251A0BE5F9234514028EBD37CE8E1280A.mft (raw, json) Hash identifier: 9Wh2KK6tnngqkFLgq/D3iVM3D7YNkwW0YS3AVgr3Epo= Subject key identifier: A5:CC:57:8C:89:62:A6:E1:DE:BD:D5:62:9E:E2:C8:A3:F1:20:E4:92 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 4C4829BF676514D98BDF388339027C0B0EF486CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 12:03:39 +0000 Manifest this update: Thu 12 Mar 2026 11:58:39 +0000 Manifest next update: Fri 13 Mar 2026 14:11:39 +0000 Files and hashes: 1: 3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (hash: 4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=) 2: 3132332e34392e3233372e302f32342d3234203d3e2034353135.roa (hash: jJftpG3x4g3cL1YrT7aEpgobH6HBDOkt05jsoCJTJ2Q=) 3: 3132332e34392e3234352e302f32342d3234203d3e203633363431.roa (hash: URY/fnRSKZtxcyZMIV2zonyjJhXZIXVlZKxZiD23qHc=) 4: 3132332e34392e3233372e302f32342d3234203d3e203633363431.roa (hash: 7pKQkhzkq1U210D2cZU/h7MDDRd2cNlncacV8dcNrfg=) 5: 3132332e34392e3234362e302f32342d3234203d3e2034353135.roa (hash: iOY+HPVvGy3/dXGKhLG1Kw8dLVPZsso+CaY41zAgyRY=) 6: 909D556251A0BE5F9234514028EBD37CE8E1280A.crl (hash: ASqEDdxp+vIIZMOAqh+u8hg44uWtM0gUCK7T84OsAQ4=) 7: 3132332e34392e3234372e302f32342d3234203d3e203633363431.roa (hash: p79j4YGmWW4IV+Ou8ryXl//w37lh9IuSadq/jTt/hgA=) 8: 3132332e34392e3234322e302f32342d3234203d3e2034353135.roa (hash: KwDAtrxOe3gPNr0PBcclw0t4c/e2Kbrw4nqX1PJIpDY=) 9: 3132332e34392e3234312e302f32342d3234203d3e2034353135.roa (hash: TQFKLb6QXJghjcVvTOVEQ+qkJHS6U3QD78fM7fDfLRo=) 10: 3132332e34392e3139362e302f32342d3234203d3e203633363431.roa (hash: 0iTDK2jBtrXhBc+FRVAS0NVqOcMAurUMKS5nPe1dw2E=) 11: 3132332e34392e3234362e302f32342d3234203d3e203633363431.roa (hash: ZLaSbqkhr0ckiAj1yXpXnIu2V3obfSobsdCH83ZzjdY=) 12: 3132332e34392e3234372e302f32342d3234203d3e2034353135.roa (hash: kAVWZq0A9zD+vWiTRlhRcXBRkWNI+ZpkNQpWt0I2T2w=) 13: 3132332e34392e3234352e302f32342d3234203d3e2034383132.roa (hash: eHtoU26S9uQP9D4qKQ0M3F2642XYQQ/3cUcRnCSD8Kw=) 14: 3132332e34392e3139352e302f32342d3234203d3e203633363431.roa (hash: rO+l5Qlk15uuhyb0exm7lOm58oejeBgyGycLSvlGIsA=) 15: 3132332e34392e3234312e302f32342d3234203d3e203633363431.roa (hash: oJWDFgNP10dQZ/IsB56YuUh2YzqysBIN0PTRtohD/D0=) 16: 3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (hash: AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:48:29:bf:67:65:14:d9:8b:df:38:83:39:02:7c:0b:0e:f4:86:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Mar 12 11:58:39 2026 GMT Not After : Mar 13 14:11:39 2026 GMT Subject: CN=A5CC578C8962A6E1DEBDD5629EE2C8A3F120E492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:51:fa:2d:4a:45:6d:5a:34:a4:c6:f4:f0:04: a5:e5:ed:2e:c9:cd:12:1a:36:52:61:0f:12:7d:42: 96:be:1e:ae:7f:ae:89:e4:95:a0:c0:c3:52:99:e0: bf:fa:dd:6b:31:a9:1f:c4:c7:fe:90:c5:bc:19:d9: a0:e7:38:1b:13:ab:21:0c:66:05:e0:0e:d5:be:06: df:44:a5:b0:25:3d:dc:57:a1:f8:f2:3a:ff:e6:7a: 0c:98:85:d3:b5:ce:32:25:a1:f1:cb:06:d8:91:3a: 1b:a9:a5:10:99:15:b8:5f:77:5f:40:a7:e1:ec:bc: 18:c3:87:3e:f3:80:9a:49:89:90:8f:e1:19:98:5a: 20:4b:c8:99:d3:8e:9d:67:f1:78:52:5e:4c:72:27: 70:04:7b:da:03:66:f6:98:c4:ce:15:ee:60:94:77: 4c:8a:75:da:f6:5e:30:7c:e5:e7:65:64:12:05:92: f7:9c:28:1b:6b:8b:c7:bd:e4:58:14:93:4a:44:04: 07:ac:f3:55:84:e0:2c:c1:c9:25:f7:60:e6:63:de: b4:2f:e9:e1:b9:73:61:d1:3e:17:77:42:38:1d:4e: 8a:2f:1c:b8:9d:a0:fa:91:3f:3c:b4:88:b6:47:51: 97:e8:c9:60:54:28:1e:10:6b:12:b3:1a:90:cc:76: f3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CC:57:8C:89:62:A6:E1:DE:BD:D5:62:9E:E2:C8:A3:F1:20:E4:92 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:83:f6:90:e4:ff:71:ce:2e:6e:5a:fd:ca:f5:18:17:6f:68: 6b:7b:50:cf:40:54:c4:7c:c7:78:22:d2:fd:2f:02:e1:c7:29: 52:ed:98:63:4a:3c:e6:e4:8b:1e:b0:30:6d:50:c2:fc:65:69: d5:5e:1e:8c:0d:d6:3f:8e:5e:ae:ca:34:60:0c:67:a2:b1:db: 82:8d:bd:c7:16:3e:bb:55:09:de:bb:ba:af:55:1e:47:5b:24: ea:31:26:ea:23:8c:c9:54:87:e7:2f:66:75:7d:88:70:96:d0: 74:c4:6f:2d:1f:df:b7:10:8d:4f:10:3c:00:73:0b:d6:40:b7: 07:3b:fc:f6:4b:e6:79:57:bc:a3:da:e9:6e:e9:f4:4b:b7:13: 0a:6b:a7:37:cd:3f:d6:28:7f:33:1e:bb:1e:92:6f:c2:a5:b6: ee:62:a1:e1:1b:73:ea:a4:c7:6b:40:a0:0a:74:bc:b6:b3:e7: 5a:29:bf:6f:c1:e1:65:28:3e:f8:57:65:f5:ef:eb:7a:ae:85: 98:ab:81:43:62:c3:1a:ea:62:11:fd:7e:44:6e:a9:a8:14:bd: b9:7a:d5:c4:c5:f6:f9:8d:ea:10:a7:25:4a:78:5f:e9:f1:db: 6d:a0:98:d6:3e:2d:7a:a8:73:4e:e0:45:c6:58:ba:00:db:fd: 23:4b:bc:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTEgpv2dlFNmL3ziDOQJ8Cw70hsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjAzMTIxMTU4MzlaFw0yNjAzMTMxNDExMzlaMDMxMTAvBgNV BAMTKEE1Q0M1NzhDODk2MkE2RTFERUJERDU2MjlFRTJDOEEzRjEyMEU0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwUfotSkVtWjSkxvTwBKXl7S7J zRIaNlJhDxJ9Qpa+Hq5/ronklaDAw1KZ4L/63WsxqR/Ex/6QxbwZ2aDnOBsTqyEM ZgXgDtW+Bt9EpbAlPdxXofjyOv/megyYhdO1zjIlofHLBtiROhuppRCZFbhfd19A p+HsvBjDhz7zgJpJiZCP4RmYWiBLyJnTjp1n8XhSXkxyJ3AEe9oDZvaYxM4V7mCU d0yKddr2XjB85edlZBIFkvecKBtri8e95FgUk0pEBAes81WE4CzBySX3YOZj3rQv 6eG5c2HRPhd3QjgdToovHLidoPqRPzy0iLZHUZfoyWBUKB4QaxKzGpDMdvPNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpcxXjIlipuHevdVinuLIo/Eg5JIwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3OTkxMDUvMC85MDlENTU2MjUxQTBC RTVGOTIzNDUxNDAyOEVCRDM3Q0U4RTEyODBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4P2kOT/cc4u blr9yvUYF29oa3tQz0BUxHzHeCLS/S8C4ccpUu2YY0o85uSLHrAwbVDC/GVp1V4e jA3WP45erso0YAxnorHbgo29xxY+u1UJ3ru6r1UeR1sk6jEm6iOMyVSH5y9mdX2I cJbQdMRvLR/ftxCNTxA8AHML1kC3Bzv89kvmeVe8o9rpbun0S7cTCmunN80/1ih/ Mx67HpJvwqW27mKh4Rtz6qTHa0CgCnS8trPnWim/b8HhZSg++Fdl9e/req6FmKuB Q2LDGupiEf1+RG6pqBS9uXrVxMX2+Y3qEKclSnhf6fHbbaCY1j4teqhzTuBFxli6 ANv9I0u8aA== -----END CERTIFICATE-----Generated at Thu Mar 12 21:29:23 2026 by rpki-client