$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: 4Pk59ilYMQGfPvntdj5lHK38XQNHh8/PAdawZV1dqe8= Subject key identifier: A0:89:B3:A9:22:A8:2A:4D:B8:30:72:AE:3C:A4:C1:86:6F:59:2C:F6 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 13D3F3007175A18F32E1819CEFAA9AF4991F62E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 46 Signing time: Thu 12 Mar 2026 19:23:39 +0000 Manifest this update: Thu 12 Mar 2026 19:18:39 +0000 Manifest next update: Fri 13 Mar 2026 21:09:39 +0000 Files and hashes: 1: 3130332e34342e3134342e302f32322d3232203d3e203535393931.roa (hash: 9QpEwcLlTSumOVyS9dHL6HMKkLj+qy0YVIHIa2L518I=) 2: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: Yt4+nLFfqCBMDqBMXJm/kP6lyJa7NXqcLLPkXl829+o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d3:f3:00:71:75:a1:8f:32:e1:81:9c:ef:aa:9a:f4:99:1f:62:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Mar 12 19:18:39 2026 GMT Not After : Mar 13 21:09:39 2026 GMT Subject: CN=A089B3A922A82A4DB83072AE3CA4C1866F592CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:54:86:4a:be:b4:95:a1:28:49:af:93:3e: 44:34:6a:b6:ca:4f:51:f7:e6:f5:84:e0:8f:15:77: 9e:da:6c:5b:61:3c:3c:50:ec:8b:57:92:03:ba:8d: ea:cb:7b:95:8d:76:96:f4:fa:ab:9c:fc:b9:fb:71: fd:14:64:48:0e:d5:58:18:fa:f0:05:29:ef:c0:63: ba:8d:8f:6d:86:71:fe:7f:ea:00:4a:59:37:3f:d7: 40:73:4a:a6:75:8b:6e:1a:ab:47:17:47:2a:2c:70: e6:5a:b6:c1:38:93:3c:b2:42:ae:7a:47:00:2b:49: 07:4c:ff:f1:d6:2d:04:88:7f:a2:fa:01:f1:75:7f: af:46:80:da:26:93:02:d3:40:fb:90:24:94:d5:f2: e1:1f:32:2a:fe:65:ff:18:5a:de:e7:a1:e4:12:a9: e7:cc:03:3c:a0:18:5b:9d:53:20:8b:d5:36:1f:cc: 0a:86:8b:4c:db:98:94:5b:3e:82:3f:4c:d5:bf:ce: 22:0f:33:f5:47:6e:8e:94:4f:84:77:a7:31:75:b8: 5e:69:b0:c3:24:f6:4c:6d:7d:88:22:96:28:1f:f7: f4:65:41:57:fe:2b:c0:f0:f4:d4:ae:74:e3:33:3b: 71:c3:05:44:4c:07:c7:58:a3:0d:99:a5:97:89:2b: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:89:B3:A9:22:A8:2A:4D:B8:30:72:AE:3C:A4:C1:86:6F:59:2C:F6 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:42:76:ac:73:e8:94:9d:4c:73:aa:22:a3:af:5a:31:83:6d: a0:e0:e8:ee:af:07:14:04:14:b8:ae:65:ad:db:1a:46:2f:db: 54:34:b3:6f:83:17:eb:23:e8:b8:26:4a:3e:3c:df:c5:cd:21: 99:53:99:dd:c0:2f:0f:83:9a:c1:43:a3:73:38:f9:da:8e:82: 44:20:45:a5:10:79:49:e5:4c:95:0d:f6:4b:9e:f7:77:be:e4: 13:30:71:02:39:36:ee:80:d1:a8:13:e7:2b:fc:42:c4:de:fe: 1b:75:c1:ae:6b:37:1e:fd:43:d3:5f:e7:79:eb:4e:53:77:3c: f4:a9:90:64:7c:1c:2d:44:8c:f2:36:d7:77:25:31:65:fe:94: 31:7d:92:7d:57:8f:d1:56:77:62:e8:4b:cd:75:5f:1a:0a:cb: e7:89:49:65:b8:3d:29:0e:39:2f:cf:4d:4a:35:a1:b2:8c:7d: aa:42:88:e3:da:06:c3:48:b4:21:0e:2a:ca:f1:ce:b6:e1:ac: 6d:c2:f9:ae:8b:ac:46:c4:fa:4b:4a:36:4f:37:6a:01:36:d3: 91:dc:3c:18:20:be:bb:20:f3:52:1a:19:b5:b6:0d:ec:d2:2f: 14:2b:50:b0:ef:72:34:47:d6:1f:4b:81:4f:73:18:63:99:25: dc:29:01:3f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE9PzAHF1oY8y4YGc76qa9JkfYuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjAzMTIxOTE4MzlaFw0yNjAzMTMyMTA5MzlaMDMxMTAvBgNV BAMTKEEwODlCM0E5MjJBODJBNERCODMwNzJBRTNDQTRDMTg2NkY1OTJDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdF1SGSr60laEoSa+TPkQ0arbK T1H35vWE4I8Vd57abFthPDxQ7ItXkgO6jerLe5WNdpb0+quc/Ln7cf0UZEgO1VgY +vAFKe/AY7qNj22Gcf5/6gBKWTc/10BzSqZ1i24aq0cXRyoscOZatsE4kzyyQq56 RwArSQdM//HWLQSIf6L6AfF1f69GgNomkwLTQPuQJJTV8uEfMir+Zf8YWt7noeQS qefMAzygGFudUyCL1TYfzAqGi0zbmJRbPoI/TNW/ziIPM/VHbo6UT4R3pzF1uF5p sMMk9kxtfYgiligf9/RlQVf+K8Dw9NSudOMzO3HDBURMB8dYow2ZpZeJK0z1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoImzqSKoKk24MHKuPKTBhm9ZLPYwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEJ2rHPolJ1M c6oio69aMYNtoODo7q8HFAQUuK5lrdsaRi/bVDSzb4MX6yPouCZKPjzfxc0hmVOZ 3cAvD4OawUOjczj52o6CRCBFpRB5SeVMlQ32S573d77kEzBxAjk27oDRqBPnK/xC xN7+G3XBrms3Hv1D01/neetOU3c89KmQZHwcLUSM8jbXdyUxZf6UMX2SfVeP0VZ3 YuhLzXVfGgrL54lJZbg9KQ45L89NSjWhsox9qkKI49oGw0i0IQ4qyvHOtuGsbcL5 rousRsT6S0o2TzdqATbTkdw8GCC+uyDzUhoZtbYN7NIvFCtQsO9yNEfWH0uBT3MY Y5kl3CkBPw== -----END CERTIFICATE-----Generated at Thu Mar 12 23:56:22 2026 by rpki-client