$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: EJIAUFfNvs1tvn+1kkgSRA6LmZT91lZzplh24j+195E= Subject key identifier: 21:C2:3F:84:BE:A8:D5:D0:30:3A:38:23:17:1B:A1:86:E6:11:CE:C3 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 5DB2619DC2A8B856B440AD20C44F413B5A7803C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 46 Signing time: Thu 12 Mar 2026 01:43:39 +0000 Manifest this update: Thu 12 Mar 2026 01:38:39 +0000 Manifest next update: Fri 13 Mar 2026 04:29:39 +0000 Files and hashes: 1: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: eRDW3QUkC38O3bj3SwJCnCPWJmZ24w+iS3i5A5XtsyY=) 2: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 3: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 4: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 04:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b2:61:9d:c2:a8:b8:56:b4:40:ad:20:c4:4f:41:3b:5a:78:03:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Mar 12 01:38:39 2026 GMT Not After : Mar 13 04:29:39 2026 GMT Subject: CN=21C23F84BEA8D5D0303A3823171BA186E611CEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:33:30:b1:27:b0:81:80:05:da:53:dc:92: c4:af:cf:31:f6:06:90:94:39:69:ea:8a:31:2e:39: 46:2b:46:bd:48:d3:81:2f:74:c3:cb:d3:96:31:b3: 8b:5c:cf:05:ae:8e:29:0a:17:fc:a5:44:cb:1f:e5: b1:af:a4:80:f2:23:32:0a:e8:7f:2f:3a:dc:19:91: e7:69:36:48:b5:85:11:5e:3c:8f:6c:6a:16:82:67: 7e:3c:ce:ed:96:aa:3a:a3:33:09:f6:f3:56:49:0f: b2:c6:1f:81:90:9a:ed:5b:ae:21:87:58:2a:a6:5b: ad:66:f8:63:e7:f8:0e:7b:08:9b:30:81:d2:10:9c: 33:19:1a:86:2c:65:dd:00:2e:be:23:59:dc:91:fa: 19:8b:b7:f9:85:b3:05:45:8a:7c:6c:55:18:e2:6b: da:99:6c:74:24:36:d4:72:99:3a:cd:e7:49:01:3c: 4e:44:b9:31:47:96:8c:d3:b4:4d:46:3b:3f:4d:d6: ef:13:d2:33:ab:39:9c:21:c3:d1:fb:59:3c:c2:c1: d6:b0:96:cf:0c:aa:c0:8a:53:85:aa:99:00:24:d1: 6b:df:0f:fa:23:f8:5b:66:ba:39:77:c4:fe:59:11: bb:ac:43:60:64:5c:71:e3:0e:ee:8c:1f:27:2f:46: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C2:3F:84:BE:A8:D5:D0:30:3A:38:23:17:1B:A1:86:E6:11:CE:C3 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7d:97:1e:a6:fb:2d:78:cd:03:e2:f2:a4:5a:d2:ac:f3:06: a7:8b:3e:cd:39:74:b3:d7:dc:33:bc:ce:20:92:aa:3e:b3:7e: 5d:e5:65:2a:3c:9c:cd:de:9c:bf:ad:b8:1c:ff:c1:36:6c:59: e5:ba:f4:b3:f1:2a:ad:4c:ae:1a:c0:2f:59:3a:32:80:ba:03: 05:35:01:26:e9:10:60:13:08:7a:a8:f2:76:11:fb:18:89:df: 5e:b4:5a:c3:a4:22:25:76:dc:01:35:7c:b9:e1:61:e3:4b:cb: 42:30:07:d5:a6:4a:61:59:90:4b:0c:84:63:51:29:f8:d3:bd: a3:4f:e8:64:60:89:ca:07:a3:2b:af:b7:5d:80:b9:58:e4:5e: e0:c7:89:9f:2a:85:54:2f:6a:d1:c8:ad:e2:56:f9:53:02:67: c9:20:3a:b0:3a:14:96:69:ff:c5:c0:75:9a:c9:cf:28:34:7f: ad:ad:98:fa:5f:44:8e:34:ff:89:b2:4c:86:95:91:e0:9a:0b: 99:f4:d5:bb:ef:e5:e2:6c:4a:66:f0:e6:ac:f5:51:17:dd:d9: 0b:01:e1:96:61:ae:e6:23:c6:4a:46:db:af:6f:20:db:d6:57: f5:0b:19:b6:00:e3:cc:78:12:1f:49:35:ab:2e:07:65:95:28: c9:1c:c4:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXbJhncKouFa0QK0gxE9BO1p4A8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjAzMTIwMTM4MzlaFw0yNjAzMTMwNDI5MzlaMDMxMTAvBgNV BAMTKDIxQzIzRjg0QkVBOEQ1RDAzMDNBMzgyMzE3MUJBMTg2RTYxMUNFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaPzMwsSewgYAF2lPcksSvzzH2 BpCUOWnqijEuOUYrRr1I04EvdMPL05Yxs4tczwWujikKF/ylRMsf5bGvpIDyIzIK 6H8vOtwZkedpNki1hRFePI9sahaCZ348zu2WqjqjMwn281ZJD7LGH4GQmu1briGH WCqmW61m+GPn+A57CJswgdIQnDMZGoYsZd0ALr4jWdyR+hmLt/mFswVFinxsVRji a9qZbHQkNtRymTrN50kBPE5EuTFHlozTtE1GOz9N1u8T0jOrOZwhw9H7WTzCwdaw ls8MqsCKU4WqmQAk0WvfD/oj+Ftmujl3xP5ZEbusQ2BkXHHjDu6MHycvRkYRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIcI/hL6o1dAwOjgjFxuhhuYRzsMwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn2XHqb7LXjN A+LypFrSrPMGp4s+zTl0s9fcM7zOIJKqPrN+XeVlKjyczd6cv624HP/BNmxZ5br0 s/EqrUyuGsAvWToygLoDBTUBJukQYBMIeqjydhH7GInfXrRaw6QiJXbcATV8ueFh 40vLQjAH1aZKYVmQSwyEY1Ep+NO9o0/oZGCJygejK6+3XYC5WORe4MeJnyqFVC9q 0cit4lb5UwJnySA6sDoUlmn/xcB1msnPKDR/ra2Y+l9EjjT/ibJMhpWR4JoLmfTV u+/l4mxKZvDmrPVRF93ZCwHhlmGu5iPGSkbbr28g29ZX9QsZtgDjzHgSH0k1qy4H ZZUoyRzE0w== -----END CERTIFICATE-----Generated at Thu Mar 12 18:21:04 2026 by rpki-client