$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft File: 8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json) Hash identifier: 7ZmZTlCnzIF1YDDR5frft0LsuEnKlNyXmYIS1pFkiC8= Subject key identifier: 38:D0:BA:9C:7F:FF:87:14:48:CB:D0:93:67:9C:A2:F9:0D:40:B2:DF Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64 Certificate issuer: /CN=8B75163A575523EE408D2A2F59F8DD509D80F164 Certificate serial: 5B88372B32BFCF4EAD1221C6B82E145396EC216C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 18:33:39 +0000 Manifest this update: Thu 12 Mar 2026 18:28:39 +0000 Manifest next update: Fri 13 Mar 2026 22:20:39 +0000 Files and hashes: 1: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: 4ykSe6jQXaRve0jX27PbzA/azAm4/GqR0hn3CKM8uTo=) 2: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=) 3: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=) 4: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=) 5: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=) 6: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=) 7: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=) 8: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=) 9: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 22:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:88:37:2b:32:bf:cf:4e:ad:12:21:c6:b8:2e:14:53:96:ec:21:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164 Validity Not Before: Mar 12 18:28:39 2026 GMT Not After : Mar 13 22:20:39 2026 GMT Subject: CN=38D0BA9C7FFF871448CBD093679CA2F90D40B2DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:57:5a:31:af:f4:c2:a1:b0:4a:e1:d9:70: 8e:81:81:e3:a6:30:12:ab:ee:15:f7:08:ac:0f:aa: e2:7e:06:ba:37:13:ce:11:a6:3d:f5:98:57:b2:ad: d6:0c:ed:5e:c6:60:85:0e:cf:a2:af:12:bd:ac:47: 68:73:53:b5:b3:ea:f7:ce:4e:75:5e:34:0d:36:6f: cb:95:3b:b9:2e:29:fc:b0:b1:d6:7c:7c:66:88:bf: 28:0e:00:f2:10:a9:4c:1f:08:46:6c:80:f0:26:5e: 8f:49:b8:57:08:9f:8e:dc:12:fb:47:e8:6f:3c:74: 4d:4f:76:85:bf:75:2f:44:e5:c3:39:22:da:ad:92: 59:b3:72:74:e5:af:a7:c6:8f:41:f2:37:34:ee:96: a9:f3:f5:e5:39:8e:81:99:4c:6d:4a:37:93:35:51: 1b:e9:d5:af:7a:d0:59:1f:a1:13:42:8e:ef:19:bf: 94:fe:2a:8a:b7:e4:21:75:c2:f7:12:fc:c8:04:75: 73:f3:99:c3:f2:55:98:2d:6c:65:a6:3d:48:3a:fe: f3:b5:4d:44:56:35:30:f0:50:02:ae:03:f7:b5:c1: e6:7d:c0:18:a4:b0:d5:f8:04:a5:25:a2:d4:a4:89: c7:e8:43:30:2c:b6:2e:d2:fe:41:f5:29:c8:0c:ab: 4f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:BA:9C:7F:FF:87:14:48:CB:D0:93:67:9C:A2:F9:0D:40:B2:DF X509v3 Authority Key Identifier: keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:df:22:f3:70:17:a8:4b:ef:95:ac:d1:fd:12:cd:78:48:7a: 92:89:2f:5f:4e:4f:7e:7a:2f:33:ef:8e:f4:58:c1:f9:22:03: da:02:b0:6f:e0:0a:25:e3:bc:e9:21:bc:e8:43:c1:ae:89:76: 7a:54:ca:02:5a:d4:91:67:98:4d:d5:84:8c:e9:d6:5d:01:1d: 4f:eb:76:40:b0:5a:01:c2:fa:2a:cb:44:3d:89:b0:85:e9:3e: c1:fe:3d:ae:ff:a2:5a:90:9e:81:c0:74:66:88:9c:d0:da:13: 7a:e9:19:f1:da:9e:e9:07:00:30:32:4f:3c:c7:a8:af:cd:53: 42:3e:a6:cc:44:1c:23:db:95:57:c6:ce:a1:c4:e0:70:3c:97: de:ac:5a:58:a6:fe:51:7b:0e:11:ee:dc:a1:07:3f:9d:3c:2c: 31:e7:5c:94:7a:19:b3:a9:c6:ef:86:4f:a0:3b:aa:9a:03:32: aa:48:2c:ee:6e:4a:06:f8:4c:12:dc:9b:0b:37:e9:22:64:c5: b3:5a:2d:9b:74:71:94:f9:7c:7b:14:e0:62:9f:45:e3:99:96: f9:46:84:f4:05:58:51:cd:3e:11:1e:ed:62:9d:49:8b:94:6a: 03:e3:a2:33:8a:66:36:3c:0b:71:73:4b:f7:8d:4f:93:ed:5d: f6:41:07:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW4g3KzK/z06tEiHGuC4UU5bsIWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5 RDgwRjE2NDAeFw0yNjAzMTIxODI4MzlaFw0yNjAzMTMyMjIwMzlaMDMxMTAvBgNV BAMTKDM4RDBCQTlDN0ZGRjg3MTQ0OENCRDA5MzY3OUNBMkY5MEQ0MEIyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftFdaMa/0wqGwSuHZcI6BgeOm MBKr7hX3CKwPquJ+Bro3E84Rpj31mFeyrdYM7V7GYIUOz6KvEr2sR2hzU7Wz6vfO TnVeNA02b8uVO7kuKfywsdZ8fGaIvygOAPIQqUwfCEZsgPAmXo9JuFcIn47cEvtH 6G88dE1PdoW/dS9E5cM5ItqtklmzcnTlr6fGj0HyNzTulqnz9eU5joGZTG1KN5M1 URvp1a960FkfoRNCju8Zv5T+Koq35CF1wvcS/MgEdXPzmcPyVZgtbGWmPUg6/vO1 TURWNTDwUAKuA/e1weZ9wBiksNX4BKUlotSkicfoQzAsti7S/kH1KcgMq0/tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUONC6nH//hxRIy9CTZ5yi+Q1Ast8wHwYDVR0j BBgwFoAUi3UWOldVI+5AjSovWfjdUJ2A8WQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzU5NjkzMC8wLzhCNzUxNjNBNTc1NTIzRUU0MDhEMkEyRjU5RjhE RDUwOUQ4MEYxNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5RDgwRjE2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1OTY5MzAvMC84Qjc1MTYzQTU3NTUy M0VFNDA4RDJBMkY1OUY4REQ1MDlEODBGMTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALt8i83AXqEvv lazR/RLNeEh6kokvX05PfnovM++O9FjB+SID2gKwb+AKJeO86SG86EPBrol2elTK AlrUkWeYTdWEjOnWXQEdT+t2QLBaAcL6KstEPYmwhek+wf49rv+iWpCegcB0Zoic 0NoTeukZ8dqe6QcAMDJPPMeor81TQj6mzEQcI9uVV8bOocTgcDyX3qxaWKb+UXsO Ee7coQc/nTwsMedclHoZs6nG74ZPoDuqmgMyqkgs7m5KBvhMEtybCzfpImTFs1ot m3RxlPl8exTgYp9F45mW+UaE9AVYUc0+ER7tYp1Ji5RqA+OiM4pmNjwLcXNL941P k+1d9kEHkQ== -----END CERTIFICATE-----Generated at Fri Mar 13 03:48:23 2026 by rpki-client