$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft File: C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft (raw, json) Hash identifier: 670BAFBQz4/2vZ9bJeG/nf+ZLtUOqoIHC4Ax0HI6jb8= Subject key identifier: 22:E7:DE:76:E3:B6:00:27:73:71:74:E5:E1:77:CB:1A:D4:85:79:9C Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD Certificate serial: 708E0610141C8919F292A40516DB98E4B45C52E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft Manifest number: 47 Signing time: Fri 13 Mar 2026 00:03:39 +0000 Manifest this update: Thu 12 Mar 2026 23:58:39 +0000 Manifest next update: Sat 14 Mar 2026 00:25:39 +0000 Files and hashes: 1: C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl (hash: vMiRoS8aaXxklxoIa36p1XT3DssnhZqEICICj2ElatE=) 2: 34332e3232372e3138382e302f32322d3234203d3e203337393633.roa (hash: GthCqUEvhOKCNWGGqKmg3IQs74n77l+6rL7RHOIf5Tc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 00:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8e:06:10:14:1c:89:19:f2:92:a4:05:16:db:98:e4:b4:5c:52:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD Validity Not Before: Mar 12 23:58:39 2026 GMT Not After : Mar 14 00:25:39 2026 GMT Subject: CN=22E7DE76E3B60027737174E5E177CB1AD485799C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:de:7a:28:4f:09:70:3f:5a:60:eb:60:94: 9f:4d:98:33:ac:9c:71:17:da:f6:7d:f0:6f:ab:f7: 8e:24:f1:a3:a0:04:76:73:ee:98:79:ba:09:a9:9c: 3c:16:ec:49:98:b1:3e:bb:3f:17:54:b3:25:2e:5b: e0:c0:7f:fb:5c:05:13:12:15:33:80:af:57:e5:34: 1d:0d:67:8d:21:b2:7e:68:02:17:64:35:e8:83:9b: c6:3c:2b:63:a4:99:71:40:75:3d:27:25:d2:65:10: 16:29:9f:a7:86:8d:8e:13:56:8a:bd:c2:94:58:e1: 4a:f4:25:e8:3f:7e:53:f8:db:cb:9f:d4:55:03:e8: b1:dc:8f:45:d4:5f:75:5e:b1:da:55:89:33:74:c3: 25:75:31:9a:0f:0a:2e:82:4a:4f:8b:0c:3f:19:19: eb:e3:f3:bd:0f:52:8a:51:1f:8f:3a:a7:62:da:d5: c6:cb:30:66:d7:ae:ad:40:db:8b:af:c9:ec:df:71: 88:22:e3:fc:2b:65:5d:3a:03:41:56:15:43:50:92: 4f:55:6b:46:52:9c:29:76:a2:76:f1:8f:8a:97:e8: 0c:ff:73:3a:74:17:6f:c5:14:fc:3e:50:83:91:f4: 36:f9:25:d7:8d:45:e3:7b:d9:26:7a:4d:81:d0:f1: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E7:DE:76:E3:B6:00:27:73:71:74:E5:E1:77:CB:1A:D4:85:79:9C X509v3 Authority Key Identifier: keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0b:6e:b0:e4:4a:06:dd:e1:1d:83:33:01:ea:fb:fd:e3:22: 35:7d:59:66:ae:4b:b6:04:44:d2:9c:15:27:34:44:e8:f7:04: 64:d3:27:03:d1:cf:d6:69:96:34:8d:a3:0d:38:50:6e:c5:e7: 31:e1:63:99:75:ec:f9:8a:14:c6:f8:d6:d1:eb:e1:80:f3:c2: d3:20:43:e1:ac:da:d4:74:be:e7:96:a2:36:c4:b6:b2:fc:07: 75:ca:69:cb:b7:3a:2e:8a:e5:ae:07:7d:c7:07:f1:4f:3e:32: 5b:43:82:5a:20:bd:4a:70:48:a2:36:3a:e0:d7:30:44:5e:7d: f8:98:57:ec:f9:a7:96:0b:2b:88:01:9f:41:63:bf:53:aa:d8: f5:fc:15:c3:98:c2:c4:b5:b7:42:b1:c6:57:d3:4f:db:fa:94: a9:cb:0c:0f:44:e7:93:84:b7:97:81:b3:df:db:d3:e4:e6:2e: 84:05:40:8d:80:ea:27:c8:bf:f4:7b:8c:44:0c:45:c7:b1:14: 4d:51:fc:35:0d:98:2c:25:43:20:ce:8a:65:9e:ef:ee:86:47: 18:5f:73:61:db:92:48:c9:02:48:8b:be:7c:56:60:dc:1e:08: 48:38:6d:ef:e1:43:d7:b9:af:55:23:67:17:f4:39:e7:96:80: 8a:02:97:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcI4GEBQciRnykqQFFtuY5LRcUugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkw NTIxRDVERDAeFw0yNjAzMTIyMzU4MzlaFw0yNjAzMTQwMDI1MzlaMDMxMTAvBgNV BAMTKDIyRTdERTc2RTNCNjAwMjc3MzcxNzRFNUUxNzdDQjFBRDQ4NTc5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWeN56KE8JcD9aYOtglJ9NmDOs nHEX2vZ98G+r944k8aOgBHZz7ph5ugmpnDwW7EmYsT67PxdUsyUuW+DAf/tcBRMS FTOAr1flNB0NZ40hsn5oAhdkNeiDm8Y8K2OkmXFAdT0nJdJlEBYpn6eGjY4TVoq9 wpRY4Ur0Jeg/flP428uf1FUD6LHcj0XUX3VesdpViTN0wyV1MZoPCi6CSk+LDD8Z Gevj870PUopRH486p2La1cbLMGbXrq1A24uvyezfcYgi4/wrZV06A0FWFUNQkk9V a0ZSnCl2onbxj4qX6Az/czp0F2/FFPw+UIOR9Db5JdeNReN72SZ6TYHQ8R3nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIufeduO2ACdzcXTl4XfLGtSFeZwwHwYDVR0j BBgwFoAUyCZnwry7U33rej5BVXeyaQUh1d0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTQ1OTcxNS8wL0M4MjY2N0MyQkNCQjUzN0RFQjdBM0U0MTU1NzdC MjY5MDUyMUQ1REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkwNTIxRDVERC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk0NTk3MTUvMC9DODI2NjdDMkJDQkI1 MzdERUI3QTNFNDE1NTc3QjI2OTA1MjFENURELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAtusORKBt3h HYMzAer7/eMiNX1ZZq5LtgRE0pwVJzRE6PcEZNMnA9HP1mmWNI2jDThQbsXnMeFj mXXs+YoUxvjW0evhgPPC0yBD4aza1HS+55aiNsS2svwHdcppy7c6Lorlrgd9xwfx Tz4yW0OCWiC9SnBIojY64NcwRF59+JhX7PmnlgsriAGfQWO/U6rY9fwVw5jCxLW3 QrHGV9NP2/qUqcsMD0Tnk4S3l4Gz39vT5OYuhAVAjYDqJ8i/9HuMRAxFx7EUTVH8 NQ2YLCVDIM6KZZ7v7oZHGF9zYduSSMkCSIu+fFZg3B4ISDht7+FD17mvVSNnF/Q5 55aAigKX3Q== -----END CERTIFICATE-----Generated at Fri Mar 13 09:27:43 2026 by rpki-client