$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft File: E9EED0187DAE9147812C7B516912D58FD976B964.mft (raw, json) Hash identifier: TpIcwlFcTsxGs2RSm5oIVUzzJCz7Oj+zsUQ/XAXxC2Q= Subject key identifier: BA:0D:40:33:8D:4B:D7:8D:F5:E1:C7:08:34:04:CD:6B:CD:C8:C4:17 Authority key identifier: E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64 Certificate issuer: /CN=E9EED0187DAE9147812C7B516912D58FD976B964 Certificate serial: 0696AE0FD8F65C552E6E9382DD29ECCBF224DCF8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 14:13:39 +0000 Manifest this update: Thu 12 Mar 2026 14:08:39 +0000 Manifest next update: Fri 13 Mar 2026 18:00:39 +0000 Files and hashes: 1: 3135372e31352e37342e302f32332d3236203d3e20313436373837.roa (hash: 2XzrUWYx7D4ETPvy+LhQ2cT4hHATIRgjJWZ0TgYr+PY=) 2: E9EED0187DAE9147812C7B516912D58FD976B964.crl (hash: mz3uIt7D0+W+openXt6pBSAM8fm/eZ6CPqDSCADEdFE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 08:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:96:ae:0f:d8:f6:5c:55:2e:6e:93:82:dd:29:ec:cb:f2:24:dc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9EED0187DAE9147812C7B516912D58FD976B964 Validity Not Before: Mar 12 14:08:39 2026 GMT Not After : Mar 13 18:00:39 2026 GMT Subject: CN=BA0D40338D4BD78DF5E1C7083404CD6BCDC8C417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:34:1f:9b:fb:21:18:56:2d:5f:ce:99:5a: 1b:7b:0d:b7:f1:b6:da:40:2a:c3:61:05:41:01:7a: e8:1a:d2:a9:a5:0f:f4:dd:9b:06:8e:bf:64:f8:04: 71:12:d8:a0:0c:23:f6:e4:48:f3:48:50:ff:51:a6: 67:52:2d:ee:d9:44:b0:5a:4f:32:a4:e9:18:93:e0: d9:6d:f3:e3:91:51:4d:97:cf:04:a9:b0:9d:c0:d3: 54:4e:03:2c:e2:34:45:08:2d:f9:32:2e:45:63:03: bf:f3:73:b6:56:85:52:5e:30:65:9f:26:c2:9c:e7: c3:97:6a:0b:84:f4:8c:69:86:1d:a3:9f:94:18:35: f7:fd:0c:1e:40:61:03:f7:db:0f:35:55:6c:f5:9c: 4b:7b:c4:fe:92:01:8a:56:f2:da:aa:44:21:30:a2: bc:9a:24:cd:78:db:d5:92:6c:d4:d7:12:75:2d:96: 49:4d:4e:e1:f1:98:81:43:97:44:83:69:17:45:a8: ab:7a:d8:48:16:d0:a0:0a:99:b8:d6:13:7e:7a:60: ea:aa:25:1c:c7:60:52:7d:08:68:86:9c:3d:09:70: 75:06:97:41:55:06:2c:35:15:57:68:eb:14:2b:5c: 32:47:37:7f:00:b6:9a:08:73:10:d3:14:cc:d8:d2: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:40:33:8D:4B:D7:8D:F5:E1:C7:08:34:04:CD:6B:CD:C8:C4:17 X509v3 Authority Key Identifier: keyid:E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:30:b8:b1:cc:d5:c0:60:25:6a:00:dc:2b:71:28:e2:70:87: 3e:c0:59:eb:d2:08:b2:d5:95:3a:21:3d:86:95:bf:17:2b:00: 19:e2:41:08:4d:91:52:fa:1b:8a:da:09:e1:a8:3b:be:9a:e6: 9f:98:19:22:be:e6:f4:f7:6c:ca:5a:6c:9d:b0:ba:d6:0d:7d: 9d:00:92:24:45:14:a1:95:a2:18:a3:cc:3c:6d:5c:d2:6f:75: ca:a7:4f:54:83:85:c5:48:1b:d4:7d:03:a2:17:4a:67:71:ce: 36:e5:2d:7d:5f:11:ae:cd:77:c7:32:90:c6:85:b8:2e:ce:22: 5e:c9:23:b5:c2:94:5f:a5:2b:9d:c2:47:ce:d8:e4:ce:78:67: 5c:7b:3d:fc:ec:a5:10:af:6f:02:a2:97:84:4b:af:71:38:8f: a9:44:7a:8a:17:26:28:da:2a:e2:45:ac:da:ec:13:38:a1:a3: 11:80:82:7e:60:7c:45:72:b6:c9:43:fa:67:e7:c3:07:10:7b: 66:86:f8:69:03:2b:62:0f:40:14:7e:c2:62:5a:37:ce:f5:b6: 7e:c6:53:67:c5:6a:5a:46:64:fa:f8:eb:c9:82:99:66:0a:05: 62:f9:33:4e:38:b5:3b:7a:91:dd:68:73:55:97:ee:5f:4f:46: a2:89:a8:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBpauD9j2XFUubpOC3Snsy/Ik3PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlFRUQwMTg3REFFOTE0NzgxMkM3QjUxNjkxMkQ1OEZE OTc2Qjk2NDAeFw0yNjAzMTIxNDA4MzlaFw0yNjAzMTMxODAwMzlaMDMxMTAvBgNV BAMTKEJBMEQ0MDMzOEQ0QkQ3OERGNUUxQzcwODM0MDRDRDZCQ0RDOEM0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpDQfm/shGFYtX86ZWht7Dbfx ttpAKsNhBUEBeuga0qmlD/TdmwaOv2T4BHES2KAMI/bkSPNIUP9RpmdSLe7ZRLBa TzKk6RiT4Nlt8+ORUU2XzwSpsJ3A01ROAyziNEUILfkyLkVjA7/zc7ZWhVJeMGWf JsKc58OXaguE9Ixphh2jn5QYNff9DB5AYQP32w81VWz1nEt7xP6SAYpW8tqqRCEw oryaJM1429WSbNTXEnUtlklNTuHxmIFDl0SDaRdFqKt62EgW0KAKmbjWE356YOqq JRzHYFJ9CGiGnD0JcHUGl0FVBiw1FVdo6xQrXDJHN38AtpoIcxDTFMzY0p8bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUug1AM41L14314ccINATNa83IxBcwHwYDVR0j BBgwFoAU6e7QGH2ukUeBLHtRaRLVj9l2uWQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8xL0U5RUVEMDE4N0RBRTkxNDc4MTJDN0I1MTY5MTJE NThGRDk3NkI5NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTlFRUQwMTg3REFFOTE0NzgxMkM3QjUxNjkxMkQ1OEZEOTc2Qjk2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMS9FOUVFRDAxODdEQUU5 MTQ3ODEyQzdCNTE2OTEyRDU4RkQ5NzZCOTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjC4sczVwGAl agDcK3Eo4nCHPsBZ69IIstWVOiE9hpW/FysAGeJBCE2RUvobitoJ4ag7vprmn5gZ Ir7m9PdsylpsnbC61g19nQCSJEUUoZWiGKPMPG1c0m91yqdPVIOFxUgb1H0DohdK Z3HONuUtfV8Rrs13xzKQxoW4Ls4iXskjtcKUX6UrncJHztjkznhnXHs9/OylEK9v AqKXhEuvcTiPqUR6ihcmKNoq4kWs2uwTOKGjEYCCfmB8RXK2yUP6Z+fDBxB7Zob4 aQMrYg9AFH7CYlo3zvW2fsZTZ8VqWkZk+vjryYKZZgoFYvkzTji1O3qR3WhzVZfu X09GoomoqA== -----END CERTIFICATE-----Generated at Thu Mar 12 18:21:02 2026 by rpki-client