$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json) Hash identifier: M8wknNjvfzfmFg6Fxp/eiTOmP1CmnR+Pd1A8B1VlAV4= Subject key identifier: A4:DC:7F:F8:80:C1:29:1B:9B:7C:B9:13:16:EB:4B:2C:9E:37:16:91 Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 16A81915A6BB8E22F1A3A4FF4371B7C777EF393D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft Manifest number: 46 Signing time: Thu 12 Mar 2026 20:53:39 +0000 Manifest this update: Thu 12 Mar 2026 20:48:39 +0000 Manifest next update: Fri 13 Mar 2026 23:21:39 +0000 Files and hashes: 1: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=) 2: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: Lj0NnIzWDWlsSmQBhuPdK89fRMF/9SO2jiWLGUFeucM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 23:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a8:19:15:a6:bb:8e:22:f1:a3:a4:ff:43:71:b7:c7:77:ef:39:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Mar 12 20:48:39 2026 GMT Not After : Mar 13 23:21:39 2026 GMT Subject: CN=A4DC7FF880C1291B9B7CB91316EB4B2C9E371691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:68:90:c6:e2:5a:17:ab:99:1a:0a:d2:44: f8:b9:76:2f:bf:de:32:15:ef:e8:cc:62:a8:af:62: c8:98:cb:47:5d:e8:39:54:d0:e8:42:cd:2c:4b:27: ed:bf:dc:5e:3b:0a:a7:de:18:3a:f3:bb:40:40:55: ae:db:b1:ba:cb:2c:30:e0:5b:b7:f0:ef:b4:01:35: 2e:56:03:fc:ef:a3:91:64:8c:f5:ae:55:af:51:f5: 4e:bd:2c:b3:14:d1:ca:97:46:14:76:8d:a1:f2:3d: 01:bd:b8:9e:80:ac:d8:f7:ac:e8:f4:5a:56:8b:8b: 08:a4:67:25:e2:a3:ba:94:59:dc:e5:8c:0f:08:f4: d2:99:5f:2e:e6:b9:54:1a:d3:73:62:a3:da:c6:58: 5b:a0:8d:f0:15:10:4d:45:0f:bb:fb:cd:52:d5:90: 51:dc:8f:1d:42:24:cc:13:88:f1:55:b9:34:05:b9: 99:1a:03:d7:7f:37:50:6e:6c:f3:a9:ab:43:7d:7b: 43:1c:40:f9:f0:2f:e5:6a:4c:1c:3a:cc:cc:e8:22: c2:61:7a:f0:78:77:70:fc:e1:ec:42:3e:d6:99:dc: a2:ed:2a:d5:36:b1:39:8f:6b:82:24:7e:e4:80:1d: ca:d4:b3:7b:7a:f1:df:3e:ca:80:cf:87:4c:33:2a: f3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DC:7F:F8:80:C1:29:1B:9B:7C:B9:13:16:EB:4B:2C:9E:37:16:91 X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b7:62:40:1f:14:f7:46:e6:ce:8f:7e:ed:81:f5:e7:8b:a9: f6:ed:d1:51:c9:b1:05:28:42:d8:27:db:aa:ea:68:71:65:72: 46:e7:dc:0c:8d:0a:97:df:9f:2f:3e:d7:c5:3c:39:be:58:bb: b7:1b:d4:6e:c1:28:72:79:a5:55:b6:d9:43:ed:89:11:ca:6a: 89:23:c5:7f:58:0e:b3:25:87:ed:2e:81:12:a7:60:c1:46:e4: cb:59:a9:2e:94:ce:87:b7:9d:1b:5f:f0:07:ac:5b:5c:67:21: 28:30:7e:cd:6e:0e:72:d3:56:cd:99:e3:1d:c8:5e:76:aa:c4: 0a:49:fb:9a:a8:26:97:81:ad:81:27:8e:c3:3f:d6:58:bb:8d: e7:99:18:b6:79:d9:8f:33:34:ac:1a:dc:55:24:b6:f7:94:38: 1f:97:49:b0:f1:0b:ba:36:7b:66:a8:8c:1a:cb:a3:e3:03:33: 57:3c:d2:2d:94:b8:ed:4c:9a:df:0e:d1:a5:02:a6:98:80:c2: 0d:a0:77:27:ac:0f:bf:f2:0a:3b:79:fb:5a:1f:52:9e:6b:03: 6b:fc:23:81:4e:99:d5:28:3c:29:0c:d6:a1:4d:24:83:15:7a: d1:a0:57:82:69:0e:8d:12:31:51:23:c0:b9:7d:27:f5:4a:e9: f1:b9:f7:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFqgZFaa7jiLxo6T/Q3G3x3fvOT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjAzMTIyMDQ4MzlaFw0yNjAzMTMyMzIxMzlaMDMxMTAvBgNV BAMTKEE0REM3RkY4ODBDMTI5MUI5QjdDQjkxMzE2RUI0QjJDOUUzNzE2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLs2iQxuJaF6uZGgrSRPi5di+/ 3jIV7+jMYqivYsiYy0dd6DlU0OhCzSxLJ+2/3F47CqfeGDrzu0BAVa7bsbrLLDDg W7fw77QBNS5WA/zvo5FkjPWuVa9R9U69LLMU0cqXRhR2jaHyPQG9uJ6ArNj3rOj0 WlaLiwikZyXio7qUWdzljA8I9NKZXy7muVQa03Nio9rGWFugjfAVEE1FD7v7zVLV kFHcjx1CJMwTiPFVuTQFuZkaA9d/N1BubPOpq0N9e0McQPnwL+VqTBw6zMzoIsJh evB4d3D84exCPtaZ3KLtKtU2sTmPa4IkfuSAHcrUs3t68d8+yoDPh0wzKvPDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpNx/+IDBKRubfLkTFutLLJ43FpEwHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC80OTUwOTRDRThGNDND NUYxMkU3RDdERTA3QjlGNUUyNzQwMzgzRDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLdiQB8U90bm zo9+7YH154up9u3RUcmxBShC2CfbqupocWVyRufcDI0Kl9+fLz7XxTw5vli7txvU bsEocnmlVbbZQ+2JEcpqiSPFf1gOsyWH7S6BEqdgwUbky1mpLpTOh7edG1/wB6xb XGchKDB+zW4OctNWzZnjHchedqrECkn7mqgml4GtgSeOwz/WWLuN55kYtnnZjzM0 rBrcVSS295Q4H5dJsPELujZ7ZqiMGsuj4wMzVzzSLZS47Uya3w7RpQKmmIDCDaB3 J6wPv/IKO3n7Wh9SnmsDa/wjgU6Z1Sg8KQzWoU0kgxV60aBXgmkOjRIxUSPAuX0n 9Urp8bn3sw== -----END CERTIFICATE-----Generated at Fri Mar 13 03:49:22 2026 by rpki-client