$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json) Hash identifier: pdyqGHwsGpDZ1SeiP9hENAZuS5q8ofVqrFrslRU/TtU= Subject key identifier: 37:9C:24:EC:2F:F9:54:26:01:BD:4F:1D:70:77:CB:BD:1A:53:20:CB Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Certificate serial: 589E1349E6F3CE6268FDFB3EB5885AC8517F1A11 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft Manifest number: 3C Signing time: Wed 04 Mar 2026 03:48:20 +0000 Manifest this update: Wed 04 Mar 2026 03:43:20 +0000 Manifest next update: Thu 05 Mar 2026 06:31:20 +0000 Files and hashes: 1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: z6+8qiQEGKC2sDUhUs9JjyTif5/cMeJOHkj3NNAF908=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9e:13:49:e6:f3:ce:62:68:fd:fb:3e:b5:88:5a:c8:51:7f:1a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5 Validity Not Before: Mar 4 03:43:20 2026 GMT Not After : Mar 5 06:31:20 2026 GMT Subject: CN=379C24EC2FF9542601BD4F1D7077CBBD1A5320CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:05:33:96:1a:29:e6:5b:74:b0:25:bf:ee:d4: 69:57:7c:91:4f:56:23:12:a7:1e:1d:77:54:36:99: 99:8f:1e:cf:c9:36:fb:08:46:4f:fe:0a:61:e5:e3: e0:36:12:ad:05:5c:0e:3b:9b:a1:0a:02:22:71:85: e1:14:c5:3d:8c:2b:ca:f6:06:9d:36:94:82:66:f6: 6b:76:0c:61:36:29:89:45:d0:11:8e:5f:c5:96:d8: 86:82:f7:05:b6:e0:f3:43:09:72:1f:85:b5:e0:ef: ed:02:8a:3e:35:fc:8e:03:d3:1e:18:fc:17:86:d7: cb:a4:19:0f:f5:3c:08:1c:0e:47:30:45:fa:7c:51: e6:f2:60:37:b6:22:07:cb:8f:b6:91:b8:82:b1:13: 41:ad:27:8b:28:9e:6c:bb:91:12:39:81:b0:5a:5a: 5a:d9:03:ad:4f:48:34:3f:f9:f1:a1:78:9f:d1:e3: c3:09:48:a2:22:b6:7e:be:d6:03:79:cd:64:2f:de: 95:0e:74:fc:17:3f:86:ad:62:1e:fa:ef:c0:3e:8b: 2c:02:87:81:39:33:c8:72:86:6b:cc:9b:34:3c:18: 6a:0a:ed:f4:d3:95:12:e8:d4:b1:3b:c9:04:1d:8d: 7c:90:03:27:1c:c0:af:56:b3:19:11:6d:31:1a:2f: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9C:24:EC:2F:F9:54:26:01:BD:4F:1D:70:77:CB:BD:1A:53:20:CB X509v3 Authority Key Identifier: keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a3:bc:ff:15:cf:a6:2d:17:79:d8:02:5d:33:0d:a4:f4:03: 10:5a:fc:ea:90:18:7a:2b:bc:b8:ec:d3:1e:a9:dd:36:d3:41: aa:7c:26:d1:b1:ca:94:7f:5c:d6:a8:b0:5b:4e:e5:08:cb:56: e2:da:a8:eb:11:1a:69:3e:f5:5e:4e:86:84:94:b6:d6:ac:6b: 16:a5:2a:16:fc:89:3c:57:0e:95:92:06:9b:2f:bf:21:de:ae: 33:05:ef:cd:2f:18:12:99:0a:4f:eb:6e:ce:04:c2:7c:2c:b1: 56:59:96:5f:86:7f:e3:a6:08:2c:3d:1c:8b:60:99:29:a7:e3: d2:e8:c5:db:fa:e1:ce:25:48:92:8d:2e:3d:2e:14:d2:bc:e8: c9:a9:41:33:e1:cc:de:5a:d6:b0:e1:e8:dd:a1:bd:21:d8:fc: 1c:29:28:49:2d:df:c3:2e:c2:02:95:97:0f:75:7a:da:67:f1: 94:54:1f:66:42:50:e5:3c:14:7a:4b:e9:42:31:6e:94:66:60: 82:d1:71:1e:f3:f8:72:7f:b5:0b:9a:e3:c6:74:a3:8e:42:22: 1d:f8:d9:5d:cc:5b:1c:89:87:34:2b:05:90:0b:e8:6c:a0:6c: 92:ea:d3:17:b6:75:f0:51:2b:3c:2d:b9:bc:15:0a:04:cb:58: 4f:3a:08:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWJ4TSebzzmJo/fs+tYhayFF/GhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4 MEU5RThENTAeFw0yNjAzMDQwMzQzMjBaFw0yNjAzMDUwNjMxMjBaMDMxMTAvBgNV BAMTKDM3OUMyNEVDMkZGOTU0MjYwMUJENEYxRDcwNzdDQkJEMUE1MzIwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3BTOWGinmW3SwJb/u1GlXfJFP ViMSpx4dd1Q2mZmPHs/JNvsIRk/+CmHl4+A2Eq0FXA47m6EKAiJxheEUxT2MK8r2 Bp02lIJm9mt2DGE2KYlF0BGOX8WW2IaC9wW24PNDCXIfhbXg7+0Cij41/I4D0x4Y /BeG18ukGQ/1PAgcDkcwRfp8UebyYDe2IgfLj7aRuIKxE0GtJ4sonmy7kRI5gbBa WlrZA61PSDQ/+fGheJ/R48MJSKIitn6+1gN5zWQv3pUOdPwXP4atYh7678A+iywC h4E5M8hyhmvMmzQ8GGoK7fTTlRLo1LE7yQQdjXyQAyccwK9WsxkRbTEaLwmZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN5wk7C/5VCYBvU8dcHfLvRpTIMswHwYDVR0j BBgwFoAUTReeXLokVPeW/ygX/mLiC4Dp6NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8xLzREMTc5RTVDQkEyNDU0Rjc5NkZGMjgxN0ZFNjJF MjBCODBFOUU4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4MEU5RThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMS80RDE3OUU1Q0JBMjQ1 NEY3OTZGRjI4MTdGRTYyRTIwQjgwRTlFOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKO8/xXPpi0X edgCXTMNpPQDEFr86pAYeiu8uOzTHqndNtNBqnwm0bHKlH9c1qiwW07lCMtW4tqo 6xEaaT71Xk6GhJS21qxrFqUqFvyJPFcOlZIGmy+/Id6uMwXvzS8YEpkKT+tuzgTC fCyxVlmWX4Z/46YILD0ci2CZKafj0ujF2/rhziVIko0uPS4U0rzoyalBM+HM3lrW sOHo3aG9Idj8HCkoSS3fwy7CApWXD3V62mfxlFQfZkJQ5TwUekvpQjFulGZggtFx HvP4cn+1C5rjxnSjjkIiHfjZXcxbHImHNCsFkAvobKBskurTF7Z18FErPC25vBUK BMtYTzoITQ== -----END CERTIFICATE-----Generated at Wed Mar 4 13:10:33 2026 by rpki-client