$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: VIOB84zorUYaPR8so4MdXQ9wmQlf7ZZeUg1thOPjFnU= Subject key identifier: C0:6C:80:95:49:7D:C3:ED:E6:9B:F0:92:FC:D8:D8:14:72:CC:91:AC Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 638F4DE1A3255256A0459E16FB383E4F4A33EBE4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 19:33:39 +0000 Manifest this update: Thu 12 Mar 2026 19:28:39 +0000 Manifest next update: Fri 13 Mar 2026 21:37:39 +0000 Files and hashes: 1: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 2: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 3: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: RWoyO4rNQPL8dz9/d4FnHzpXnIR4POx19OvrOR/kOd4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8f:4d:e1:a3:25:52:56:a0:45:9e:16:fb:38:3e:4f:4a:33:eb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Mar 12 19:28:39 2026 GMT Not After : Mar 13 21:37:39 2026 GMT Subject: CN=C06C8095497DC3EDE69BF092FCD8D81472CC91AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:d5:7e:08:7f:82:d1:92:56:69:a0:11:52: ed:7b:ce:23:67:7c:02:92:d2:2c:b6:8d:33:f9:0a: 5f:d0:4e:97:23:fd:6f:32:30:51:8f:ff:a6:f9:1d: ea:91:f5:ef:b9:14:49:6c:7c:45:49:bc:fb:84:62: 5a:97:5b:f4:a6:91:81:42:7d:e7:84:7a:b6:e0:c7: 99:45:d8:2e:d7:4b:98:c8:61:c4:6e:77:55:9a:22: 65:c1:36:5e:1b:a2:e4:b6:d5:a7:60:60:f7:58:1e: 70:db:ec:4d:3a:94:7c:b3:e7:da:eb:e8:cb:c8:46: 83:1c:8e:05:50:2e:67:2d:28:02:a3:9c:88:94:86: 0f:1b:90:f2:41:87:5c:1b:50:dc:a7:36:50:fe:35: e6:ff:63:93:be:3b:30:68:48:bd:0f:c4:8c:36:c7: 01:f6:87:ff:fc:04:e6:60:fa:7d:31:af:b1:60:dd: bc:bc:b5:54:1b:7f:7f:d3:b8:7f:04:9d:13:06:d4: c1:5a:f5:66:53:bf:60:26:47:93:c3:69:4a:09:d3: 93:69:96:c8:60:e1:c0:31:b1:14:d8:da:ad:2d:0f: 04:a6:9d:69:d9:5b:fb:bb:d4:28:83:fc:39:be:9e: e7:0c:0e:91:f0:31:80:a2:c7:03:38:a8:92:5b:8d: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6C:80:95:49:7D:C3:ED:E6:9B:F0:92:FC:D8:D8:14:72:CC:91:AC X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:72:6b:60:f2:a7:cc:14:54:4e:7c:97:a1:99:f1:03:b3:07: 27:91:df:d1:c5:d6:96:78:db:de:3e:74:37:e9:5c:50:05:b3: d3:0f:c3:11:4b:f6:95:65:ed:ae:d6:51:59:46:44:c4:a4:c6: 92:4b:8b:13:b8:79:66:9e:f2:5c:60:31:ae:f8:a1:a2:6e:0b: 51:9e:e3:06:28:7a:05:1d:c8:8b:a5:73:75:6b:26:fa:63:16: 96:3b:d8:10:49:28:16:10:23:87:f4:85:5c:b6:29:1b:b4:df: 11:f1:02:cf:9a:a9:d7:1d:a3:b4:80:6b:ee:3c:6f:5d:63:dd: 57:5a:c6:c6:97:d0:9b:d3:95:f8:31:d1:83:51:56:b6:84:2e: 70:4e:83:cb:66:cd:d3:f7:a8:dc:3b:36:86:66:57:fd:8d:d0: 9b:ef:b6:83:de:5e:df:ac:81:5e:7c:cb:28:a4:b0:d6:4c:79: 1a:2c:bc:81:ac:3f:39:ec:92:35:ed:6b:b0:48:2f:06:78:e5: 71:8c:e3:f4:17:d1:a6:2e:89:d4:f2:53:b1:3f:67:e1:69:c5: d3:9e:e2:94:5c:c0:bf:4e:13:19:fb:07:18:88:71:c2:9c:fa: 75:2a:9d:d0:98:42:86:ae:d2:06:43:f1:97:d9:5a:3d:4f:78: 52:b9:24:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY49N4aMlUlagRZ4W+zg+T0oz6+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjAzMTIxOTI4MzlaFw0yNjAzMTMyMTM3MzlaMDMxMTAvBgNV BAMTKEMwNkM4MDk1NDk3REMzRURFNjlCRjA5MkZDRDhEODE0NzJDQzkxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TNV+CH+C0ZJWaaARUu17ziNn fAKS0iy2jTP5Cl/QTpcj/W8yMFGP/6b5HeqR9e+5FElsfEVJvPuEYlqXW/SmkYFC feeEerbgx5lF2C7XS5jIYcRud1WaImXBNl4bouS21adgYPdYHnDb7E06lHyz59rr 6MvIRoMcjgVQLmctKAKjnIiUhg8bkPJBh1wbUNynNlD+Neb/Y5O+OzBoSL0PxIw2 xwH2h//8BOZg+n0xr7Fg3by8tVQbf3/TuH8EnRMG1MFa9WZTv2AmR5PDaUoJ05Np lshg4cAxsRTY2q0tDwSmnWnZW/u71CiD/Dm+nucMDpHwMYCixwM4qJJbjaxfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwGyAlUl9w+3mm/CS/NjYFHLMkawwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHJrYPKnzBRU TnyXoZnxA7MHJ5Hf0cXWlnjb3j50N+lcUAWz0w/DEUv2lWXtrtZRWUZExKTGkkuL E7h5Zp7yXGAxrvihom4LUZ7jBih6BR3Ii6VzdWsm+mMWljvYEEkoFhAjh/SFXLYp G7TfEfECz5qp1x2jtIBr7jxvXWPdV1rGxpfQm9OV+DHRg1FWtoQucE6Dy2bN0/eo 3Ds2hmZX/Y3Qm++2g95e36yBXnzLKKSw1kx5Giy8gaw/OeySNe1rsEgvBnjlcYzj 9BfRpi6J1PJTsT9n4WnF057ilFzAv04TGfsHGIhxwpz6dSqd0JhChq7SBkPxl9la PU94Urkksg== -----END CERTIFICATE-----Generated at Fri Mar 13 02:44:16 2026 by rpki-client