$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: O70lltOdVixuiA+m+9T7kzC3UP6RQ0r8t44NC290j/w= Subject key identifier: C9:B0:27:50:46:FF:D4:41:58:94:63:B2:CC:62:8F:45:C2:60:EF:F2 Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 1E5BAD1F69DABEDAD5595309ADB9B4B7908F6D60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: 46 Signing time: Thu 12 Mar 2026 12:08:39 +0000 Manifest this update: Thu 12 Mar 2026 12:03:39 +0000 Manifest next update: Fri 13 Mar 2026 13:21:39 +0000 Files and hashes: 1: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: 1WAsbBfRBxNnweO8sgC3BRGR2KDAYtTHFjFBjDFHrs0=) 2: 3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa (hash: Bj7faP7dbLHP8DKHtGy7odbPHjPoUjxSJmi90LoGi/o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 08:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5b:ad:1f:69:da:be:da:d5:59:53:09:ad:b9:b4:b7:90:8f:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Mar 12 12:03:39 2026 GMT Not After : Mar 13 13:21:39 2026 GMT Subject: CN=C9B0275046FFD441589463B2CC628F45C260EFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:01:a5:82:01:7e:79:86:43:e2:07:63:e3: 3f:de:e9:54:0e:ab:bc:6b:39:5b:0a:27:8f:c5:b8: 61:2a:0c:3c:d0:c6:6b:47:c1:09:21:c5:b7:9a:15: a5:cc:22:bc:98:8d:ed:93:69:ff:46:41:5b:dc:32: c0:eb:43:8c:31:76:37:a2:0a:f7:72:f6:4c:a7:f9: 73:41:c4:dc:1f:96:67:79:14:49:42:a3:6a:d7:af: e6:b9:64:6f:b3:5d:c9:ca:a1:98:16:1a:25:79:7b: 54:1a:32:cd:8c:db:0b:9c:dd:7f:0e:91:ba:38:cc: 27:cb:13:7a:c1:a2:e0:b0:6f:38:86:61:5a:02:1a: c8:5d:30:3d:68:cc:bb:e8:38:82:fb:ab:06:4f:fa: 7f:35:d5:ca:44:2e:9f:46:a8:11:7b:6c:87:08:bb: 48:50:9e:0d:db:e2:a4:4d:63:90:6a:ee:72:01:3b: 16:86:44:60:91:cb:09:dc:11:b3:b0:eb:4b:fc:41: 94:cd:27:b8:fa:9f:cf:c2:e0:17:ef:d8:15:b9:ba: 88:d3:e0:61:24:a0:76:cd:7d:44:3d:25:13:30:6b: 47:d7:0c:98:fc:77:8a:7c:ac:52:a2:fe:69:58:54: 90:06:6d:34:3b:35:c7:51:59:70:5e:75:f5:60:08: 46:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B0:27:50:46:FF:D4:41:58:94:63:B2:CC:62:8F:45:C2:60:EF:F2 X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:45:31:26:7e:eb:23:0a:74:9c:5f:09:e5:4b:76:af:43:17: 82:23:dd:c5:a2:f4:2f:cc:b7:0b:b3:aa:f1:24:8a:cd:ff:cf: 7c:a5:2e:b3:b5:f9:dd:e3:59:24:07:76:8d:7d:62:ce:f0:d3: 49:f8:fe:02:89:d0:8f:ec:4c:27:cf:11:46:c4:63:b2:52:57: ab:b1:61:fb:20:05:77:70:2c:88:53:59:04:32:ab:72:74:c2: d9:08:f5:b7:22:20:41:67:f3:8e:a4:bc:76:a5:d2:2b:be:b2: f2:1b:a4:d8:46:21:6b:70:03:a8:6f:1a:bb:a5:eb:55:f4:8c: de:7e:18:37:a1:c2:e0:4e:a8:b5:7c:ae:a7:6a:51:66:f4:f7: 25:9b:4d:7c:db:58:1d:9f:df:b7:e2:78:12:e3:12:bb:e6:62: e1:08:73:49:cd:04:51:75:5f:f0:73:80:b9:7c:68:c4:38:45: 77:92:8e:68:54:da:ec:25:de:b2:b9:6c:d7:a6:0e:c2:ee:69: 86:bf:95:bf:f2:56:85:bd:0b:72:65:fb:12:8c:a4:9a:02:62: 63:97:6a:78:19:a7:84:f6:07:a2:5b:dc:cb:ae:14:b8:ff:55: 40:37:35:35:3b:c5:5b:a4:9a:29:e5:1b:f0:c3:f6:15:64:86: 05:56:66:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHlutH2navtrVWVMJrbm0t5CPbWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjAzMTIxMjAzMzlaFw0yNjAzMTMxMzIxMzlaMDMxMTAvBgNV BAMTKEM5QjAyNzUwNDZGRkQ0NDE1ODk0NjNCMkNDNjI4RjQ1QzI2MEVGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XgGlggF+eYZD4gdj4z/e6VQO q7xrOVsKJ4/FuGEqDDzQxmtHwQkhxbeaFaXMIryYje2Taf9GQVvcMsDrQ4wxdjei Cvdy9kyn+XNBxNwflmd5FElCo2rXr+a5ZG+zXcnKoZgWGiV5e1QaMs2M2wuc3X8O kbo4zCfLE3rBouCwbziGYVoCGshdMD1ozLvoOIL7qwZP+n811cpELp9GqBF7bIcI u0hQng3b4qRNY5Bq7nIBOxaGRGCRywncEbOw60v8QZTNJ7j6n8/C4Bfv2BW5uojT 4GEkoHbNfUQ9JRMwa0fXDJj8d4p8rFKi/mlYVJAGbTQ7NcdRWXBedfVgCEYvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUybAnUEb/1EFYlGOyzGKPRcJg7/IwHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkUxJn7rIwp0 nF8J5Ut2r0MXgiPdxaL0L8y3C7Oq8SSKzf/PfKUus7X53eNZJAd2jX1izvDTSfj+ AonQj+xMJ88RRsRjslJXq7Fh+yAFd3AsiFNZBDKrcnTC2Qj1tyIgQWfzjqS8dqXS K76y8huk2EYha3ADqG8au6XrVfSM3n4YN6HC4E6otXyup2pRZvT3JZtNfNtYHZ/f t+J4EuMSu+Zi4QhzSc0EUXVf8HOAuXxoxDhFd5KOaFTa7CXesrls16YOwu5phr+V v/JWhb0LcmX7EoykmgJiY5dqeBmnhPYHolvcy64UuP9VQDc1NTvFW6SaKeUb8MP2 FWSGBVZmMg== -----END CERTIFICATE-----Generated at Thu Mar 12 18:19:29 2026 by rpki-client