$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: iQX4s1VdMyPS8EWBV607mvmFhc8qLTvub8AYBmllD/E= Subject key identifier: 8B:E0:69:F6:BB:E3:31:F8:BC:F2:04:BA:05:E6:E6:D0:07:3F:F1:C5 Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 39FD07BE7486FB47AE1F0B2823822C5A00061627 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 53 Signing time: Sat 21 Mar 2026 05:04:10 +0000 Manifest this update: Sat 21 Mar 2026 04:59:10 +0000 Manifest next update: Sun 22 Mar 2026 06:33:10 +0000 Files and hashes: 1: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 2: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 3: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 4: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: VgMB3i+g5gLADTdJ+0i4O4PFcdgXZKF5hYfOxFg6Fpo=) 5: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 6: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 7: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 06:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:fd:07:be:74:86:fb:47:ae:1f:0b:28:23:82:2c:5a:00:06:16:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: Mar 21 04:59:10 2026 GMT Not After : Mar 22 06:33:10 2026 GMT Subject: CN=8BE069F6BBE331F8BCF204BA05E6E6D0073FF1C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:86:25:92:4a:39:d7:44:6a:ad:aa:19:1a: a8:38:7f:67:1c:53:d4:a7:64:36:90:fb:3a:b2:40: 7d:d1:e9:e1:32:1e:49:96:d6:36:7e:15:eb:55:3c: a1:d7:7f:b5:3b:79:48:0f:cd:e4:f3:21:19:4e:8f: 98:8f:c6:54:1a:96:98:99:37:ad:ce:6d:f9:37:d8: 7d:b9:b5:13:f2:ad:56:32:9d:53:4a:c4:1a:ba:b2: a1:5b:60:17:6e:88:99:3d:2a:d1:a2:c2:d9:83:62: 4a:19:ca:88:5d:a0:f2:e6:b0:c0:75:30:69:54:59: 44:f3:98:59:79:a2:5d:13:77:13:42:34:0c:85:73: 92:94:09:22:a6:52:ff:9a:57:e5:d8:11:94:93:66: 30:35:73:07:7c:94:f7:92:ca:db:ef:ac:e7:72:31: 93:ea:3c:59:37:02:97:8b:1b:20:76:46:6f:20:c4: f3:e6:07:fe:5a:7c:c1:c1:91:03:01:4b:3f:a3:22: 75:0c:31:c2:27:0e:7b:dc:47:e3:d3:5e:53:b4:24: 78:ec:5c:f1:0c:7f:25:6d:6c:46:55:23:e2:a6:90: 0b:ab:05:50:98:91:ee:d5:52:a4:3d:e2:36:21:44: 11:2e:dd:89:c6:6c:6f:3b:62:79:6e:62:d0:07:1d: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:69:F6:BB:E3:31:F8:BC:F2:04:BA:05:E6:E6:D0:07:3F:F1:C5 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:aa:df:56:95:7b:f7:92:2a:c8:36:28:9b:0d:d8:9d:5a:ba: 31:bf:ab:98:28:d2:c4:b4:88:6a:f6:1d:d1:29:e0:27:95:5d: 5c:50:53:64:f5:b5:98:8d:e3:3f:ce:5a:36:58:e1:3f:ad:8e: 1c:bf:cf:79:26:21:c2:31:0b:ae:7e:55:b2:ec:df:07:81:b0: 3c:55:91:cf:8c:88:00:ae:72:20:86:7a:d9:3c:20:59:1d:af: f5:6e:e4:d7:26:a9:b4:a2:5b:de:98:6b:36:69:02:0b:0a:c7: 1b:34:22:d7:04:b0:11:5b:3f:7f:51:2f:51:d0:fd:b9:51:54: e9:5a:6a:9b:b1:a2:f8:2c:3b:09:84:68:a4:49:15:58:20:5b: a6:9f:f3:94:8f:9e:f8:77:71:91:47:ac:c8:c3:30:84:70:43: 3b:6d:51:76:0d:51:d0:05:5f:23:39:81:20:41:51:a4:55:2a: 08:7c:5d:58:ce:1d:5f:d2:ff:c4:39:7d:64:7f:47:49:63:e8: bc:02:f1:70:f0:16:87:33:f6:62:3b:bf:c5:12:74:20:a0:40: 92:18:69:8e:e5:f3:5d:c3:20:b2:09:bf:b8:c1:eb:13:2b:18: 7e:5d:d4:5d:f5:9a:51:93:85:d9:91:21:aa:68:50:7c:71:1f: 65:bc:d2:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOf0HvnSG+0euHwsoI4IsWgAGFicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjAzMjEwNDU5MTBaFw0yNjAzMjIwNjMzMTBaMDMxMTAvBgNV BAMTKDhCRTA2OUY2QkJFMzMxRjhCQ0YyMDRCQTA1RTZFNkQwMDczRkYxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLYYlkko510RqraoZGqg4f2cc U9SnZDaQ+zqyQH3R6eEyHkmW1jZ+FetVPKHXf7U7eUgPzeTzIRlOj5iPxlQalpiZ N63Obfk32H25tRPyrVYynVNKxBq6sqFbYBduiJk9KtGiwtmDYkoZyohdoPLmsMB1 MGlUWUTzmFl5ol0TdxNCNAyFc5KUCSKmUv+aV+XYEZSTZjA1cwd8lPeSytvvrOdy MZPqPFk3ApeLGyB2Rm8gxPPmB/5afMHBkQMBSz+jInUMMcInDnvcR+PTXlO0JHjs XPEMfyVtbEZVI+KmkAurBVCYke7VUqQ94jYhRBEu3YnGbG87YnluYtAHHfQnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi+Bp9rvjMfi88gS6Bebm0Ac/8cUwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6rfVpV795Iq yDYomw3YnVq6Mb+rmCjSxLSIavYd0SngJ5VdXFBTZPW1mI3jP85aNljhP62OHL/P eSYhwjELrn5VsuzfB4GwPFWRz4yIAK5yIIZ62TwgWR2v9W7k1yaptKJb3phrNmkC CwrHGzQi1wSwEVs/f1EvUdD9uVFU6Vpqm7Gi+Cw7CYRopEkVWCBbpp/zlI+e+Hdx kUesyMMwhHBDO21Rdg1R0AVfIzmBIEFRpFUqCHxdWM4dX9L/xDl9ZH9HSWPovALx cPAWhzP2Yju/xRJ0IKBAkhhpjuXzXcMgsgm/uMHrEysYfl3UXfWaUZOF2ZEhqmhQ fHEfZbzSBA== -----END CERTIFICATE-----Generated at Sat Mar 21 13:30:50 2026 by rpki-client