$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: iW4Jel0WHYKqrDqPM185I8TGdfn/WOHXFhokDoRqQDc= Subject key identifier: 4A:95:41:AC:6E:68:F9:25:67:12:F4:BC:92:42:59:02:FE:22:84:D2 Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 1608628F3191D60442C1251D4777F17CF7B2F513 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 5D Signing time: Sun 29 Mar 2026 09:53:30 +0000 Manifest this update: Sun 29 Mar 2026 09:48:30 +0000 Manifest next update: Mon 30 Mar 2026 11:21:30 +0000 Files and hashes: 1: 323430313a353138303a3a2f33322d3332203d3e203539303030.roa (hash: TRLluA6jf4NdFyOWtNNpbTdRhqAOQP2P0L4Vhj+33WU=) 2: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: RqbNQNQrNAizygzPBh4yaaYEWMr+ZeP0ADOY0bSBxGU=) 3: 323430313a353138303a3a2f33322d3332203d3e203331323136.roa (hash: c2BFIJVN4JIT5LRTdXldbHvwV8Z329mItcC2iWdKyZo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 10:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:08:62:8f:31:91:d6:04:42:c1:25:1d:47:77:f1:7c:f7:b2:f5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Mar 29 09:48:30 2026 GMT Not After : Mar 30 11:21:30 2026 GMT Subject: CN=4A9541AC6E68F9256712F4BC92425902FE2284D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:9b:02:ad:38:39:87:47:f8:52:be:98:99: 66:fb:4a:72:53:fe:58:f8:1b:96:f0:ee:cc:2e:ab: f6:fb:aa:f7:1d:de:6d:fd:76:1e:9d:0d:30:81:aa: 1b:eb:ca:43:47:ba:5e:8e:bf:92:8c:af:8c:f1:65: 1b:2a:ec:55:58:87:83:a9:2f:8b:a4:39:e3:d7:29: d4:9c:34:50:70:11:ef:6e:e9:60:5b:5d:a8:89:73: c4:53:ca:45:3e:c5:90:25:35:de:06:bb:75:d5:56: f4:95:82:be:84:16:fb:7d:46:8f:44:cd:06:12:1a: 41:b9:18:71:b6:00:1c:e6:21:fa:1c:e8:4e:65:82: 81:eb:5e:77:c4:b9:4c:22:ff:4c:81:95:7d:54:4c: 3a:ae:0f:3e:9a:bb:63:7f:a1:7b:41:3f:9f:01:57: 60:fe:93:dd:05:19:bf:10:fb:73:85:0c:76:b1:ed: 4d:c4:fc:35:91:d2:10:05:f9:08:69:03:f2:a9:fb: a9:22:83:c7:63:d0:0e:ee:86:e0:02:c2:e6:db:0a: 60:e1:41:43:5b:95:72:a8:d3:b1:f3:a3:13:db:61: 60:d7:bf:a6:77:04:c6:be:e4:eb:3f:d2:93:ac:0f: 8b:21:ba:b0:c1:cf:0f:d1:a7:62:51:07:e1:f4:b4: 7c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:95:41:AC:6E:68:F9:25:67:12:F4:BC:92:42:59:02:FE:22:84:D2 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:22:c8:49:4a:b4:88:47:fa:d4:97:13:19:2e:0a:43:83:37: 2b:14:6d:bf:08:b3:e7:7c:3a:ad:d0:d6:48:df:c1:89:c5:ef: e6:33:0e:48:7f:e6:b5:76:b7:d6:b7:71:c9:7a:ec:4b:36:78: a9:50:53:df:aa:1c:6d:cb:56:1c:88:3b:8c:f6:a8:16:a9:c0: 8f:bb:b1:3f:c1:2c:17:a7:17:97:86:96:69:fd:24:86:f2:82: 1c:9a:15:20:c3:83:a9:97:2e:e7:bf:1a:c6:37:b5:26:e4:4d: 75:66:8d:cb:e6:d2:3e:69:45:c9:8e:4d:9b:ec:26:fb:ab:c2: f7:2e:c5:7b:07:6c:4c:98:33:17:42:e2:ca:e7:d0:de:b0:d1: 44:2c:f7:d9:40:0f:6c:57:3d:9d:88:8c:d4:85:5e:32:9a:14: bd:83:74:16:49:96:c8:f8:31:ea:a4:78:d7:f4:c6:67:14:f2: 9e:82:54:b0:36:06:4c:be:81:2b:8a:2f:25:8c:1c:ca:70:1d: 8a:d3:61:bf:4e:ca:81:7b:e2:7b:ec:65:c3:bb:a0:ce:bb:80: 31:2a:b1:0b:de:f5:b2:92:77:1a:49:18:d9:c8:1b:0b:68:33: fc:2c:cf:0e:27:0e:38:2c:78:b0:88:7c:06:04:13:01:72:8c: 2a:3c:99:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFghijzGR1gRCwSUdR3fxfPey9RMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjAzMjkwOTQ4MzBaFw0yNjAzMzAxMTIxMzBaMDMxMTAvBgNV BAMTKDRBOTU0MUFDNkU2OEY5MjU2NzEyRjRCQzkyNDI1OTAyRkUyMjg0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sZsCrTg5h0f4Ur6YmWb7SnJT /lj4G5bw7swuq/b7qvcd3m39dh6dDTCBqhvrykNHul6Ov5KMr4zxZRsq7FVYh4Op L4ukOePXKdScNFBwEe9u6WBbXaiJc8RTykU+xZAlNd4Gu3XVVvSVgr6EFvt9Ro9E zQYSGkG5GHG2ABzmIfoc6E5lgoHrXnfEuUwi/0yBlX1UTDquDz6au2N/oXtBP58B V2D+k90FGb8Q+3OFDHax7U3E/DWR0hAF+QhpA/Kp+6kig8dj0A7uhuACwubbCmDh QUNblXKo07HzoxPbYWDXv6Z3BMa+5Os/0pOsD4shurDBzw/Rp2JRB+H0tHwbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSpVBrG5o+SVnEvS8kkJZAv4ihNIwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiLISUq0iEf6 1JcTGS4KQ4M3KxRtvwiz53w6rdDWSN/BicXv5jMOSH/mtXa31rdxyXrsSzZ4qVBT 36ocbctWHIg7jPaoFqnAj7uxP8EsF6cXl4aWaf0khvKCHJoVIMODqZcu578axje1 JuRNdWaNy+bSPmlFyY5Nm+wm+6vC9y7FewdsTJgzF0LiyufQ3rDRRCz32UAPbFc9 nYiM1IVeMpoUvYN0FkmWyPgx6qR41/TGZxTynoJUsDYGTL6BK4ovJYwcynAditNh v07KgXvie+xlw7ugzruAMSqxC971spJ3GkkY2cgbC2gz/CzPDicOOCx4sIh8BgQT AXKMKjyZcQ== -----END CERTIFICATE-----Generated at Mon Mar 30 01:52:13 2026 by rpki-client