$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json) Hash identifier: XYj3E3/fym6sngTFkzAUyqlJCGbGiExstkmAykitAjw= Subject key identifier: DC:DB:02:03:79:7B:88:59:78:9F:39:AF:63:94:3E:CE:1D:BF:77:A0 Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Certificate serial: 394BB3CDF9ADBE5C13A2A9D6C9FC4C12FA3C9D74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft Manifest number: 5E Signing time: Sun 29 Mar 2026 17:58:32 +0000 Manifest this update: Sun 29 Mar 2026 17:53:32 +0000 Manifest next update: Mon 30 Mar 2026 20:21:32 +0000 Files and hashes: 1: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=) 2: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=) 3: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=) 4: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=) 5: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=) 6: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: 5h7lQ8llT0IcdO1BqnSYdeSoIkznS7Y88aUQL1kZYys=) 7: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=) 8: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=) 9: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 11:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4b:b3:cd:f9:ad:be:5c:13:a2:a9:d6:c9:fc:4c:12:fa:3c:9d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Validity Not Before: Mar 29 17:53:32 2026 GMT Not After : Mar 30 20:21:32 2026 GMT Subject: CN=DCDB0203797B8859789F39AF63943ECE1DBF77A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e0:36:3c:a5:76:88:a1:e1:3b:c2:3a:ea:10: af:90:d2:9b:80:83:7e:b4:e0:6d:f1:a1:6a:f0:c3: 04:4f:c1:e8:cd:4e:ed:80:de:d1:0e:67:35:1f:2b: 85:01:0f:d9:ee:c6:1e:d8:e2:0f:20:a7:b4:6a:20: 44:33:da:22:13:0a:b7:d6:48:65:b8:c7:3c:41:67: a5:bc:a8:68:f5:8d:4f:c9:9f:12:f6:de:5a:2e:ad: 37:f9:0c:8f:a7:f7:e8:4f:7d:06:e5:1d:a7:ba:34: 9e:61:c3:9a:89:d9:df:2d:66:10:6b:8a:36:6c:23: 37:10:4c:34:ff:26:00:7f:00:78:80:b1:86:28:e7: 4f:d1:5c:49:29:0c:c5:c7:38:7b:87:85:99:88:52: 15:e4:08:24:ff:1d:ad:fc:4f:e9:68:97:f3:b0:56: da:22:ca:a5:5a:58:f0:c3:9c:63:23:e0:b7:2c:91: ef:20:f6:06:41:17:ed:fa:dd:3b:c8:fb:f2:b0:98: 2f:ba:1c:51:0c:92:3a:c1:5b:22:a8:16:b3:71:cf: 09:51:3b:60:2f:65:d1:66:cb:b9:1a:13:19:9b:ae: bb:d5:fb:3b:0a:ee:95:41:ac:cb:e4:5f:08:e4:61: fd:81:6f:6c:dd:59:11:fd:98:ad:52:19:49:03:6f: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:02:03:79:7B:88:59:78:9F:39:AF:63:94:3E:CE:1D:BF:77:A0 X509v3 Authority Key Identifier: keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:68:a4:fb:30:69:81:3e:85:c9:eb:4b:8d:d9:28:8a:c5:f9: 8b:22:3b:db:44:56:ba:8f:18:de:90:bb:0c:38:29:d3:47:df: 69:cb:4f:dc:3b:1d:85:83:47:3b:92:69:44:40:0f:a1:6f:d0: 38:d1:d4:b3:76:8f:06:f8:07:6d:35:65:51:27:59:04:8a:0e: fb:9c:3e:d4:de:fb:3e:08:f8:f1:d9:8d:96:56:8b:cf:86:9a: 8e:69:88:f7:f6:7f:8e:e8:82:47:a2:85:a6:8b:d7:e4:41:b6: bc:64:48:d9:5c:7d:c4:92:5c:96:58:bb:2a:83:0a:32:7d:3b: ae:75:96:36:ac:a3:56:21:c6:10:11:4d:b5:7c:9c:78:44:d0: f8:9e:79:b2:21:6b:2f:71:63:a6:af:5a:ff:88:06:3c:a6:2b: a2:ba:61:3c:57:ab:24:27:0a:91:b9:05:b6:25:6c:a2:74:73: 0b:a0:c2:2f:eb:1b:ff:a7:df:5e:0d:c0:9b:c6:47:e1:ca:1a: 18:e2:92:40:85:10:d7:a4:61:b9:94:eb:99:6e:ee:e6:b4:1d: 4f:98:01:47:3b:af:2f:17:9d:4c:83:60:57:e7:db:8a:5b:da: e7:ec:e5:90:c4:34:64:5d:63:3f:5a:c6:f5:a6:3f:c3:65:25: 94:ea:9d:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOUuzzfmtvlwToqnWyfxMEvo8nXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3 QzkwNTUxNjAeFw0yNjAzMjkxNzUzMzJaFw0yNjAzMzAyMDIxMzJaMDMxMTAvBgNV BAMTKERDREIwMjAzNzk3Qjg4NTk3ODlGMzlBRjYzOTQzRUNFMURCRjc3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI4DY8pXaIoeE7wjrqEK+Q0puA g3604G3xoWrwwwRPwejNTu2A3tEOZzUfK4UBD9nuxh7Y4g8gp7RqIEQz2iITCrfW SGW4xzxBZ6W8qGj1jU/JnxL23lourTf5DI+n9+hPfQblHae6NJ5hw5qJ2d8tZhBr ijZsIzcQTDT/JgB/AHiAsYYo50/RXEkpDMXHOHuHhZmIUhXkCCT/Ha38T+lol/Ow VtoiyqVaWPDDnGMj4Lcske8g9gZBF+363TvI+/KwmC+6HFEMkjrBWyKoFrNxzwlR O2AvZdFmy7kaExmbrrvV+zsK7pVBrMvkXwjkYf2Bb2zdWRH9mK1SGUkDb46RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3NsCA3l7iFl4nzmvY5Q+zh2/d6AwHwYDVR0j BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5NzI5OTQvMC83RkM1NDE4QjRBNTkw REYxNTM1NUUxNjdCN0FGQzBGRjdDOTA1NTE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2ik+zBpgT6F yetLjdkoisX5iyI720RWuo8Y3pC7DDgp00ffactP3DsdhYNHO5JpREAPoW/QONHU s3aPBvgHbTVlUSdZBIoO+5w+1N77Pgj48dmNllaLz4aajmmI9/Z/juiCR6KFpovX 5EG2vGRI2Vx9xJJclli7KoMKMn07rnWWNqyjViHGEBFNtXyceETQ+J55siFrL3Fj pq9a/4gGPKYrorphPFerJCcKkbkFtiVsonRzC6DCL+sb/6ffXg3Am8ZH4coaGOKS QIUQ16RhuZTrmW7u5rQdT5gBRzuvLxedTINgV+fbilva5+zlkMQ0ZF1jP1rG9aY/ w2UllOqdyQ== -----END CERTIFICATE-----Generated at Sun Mar 29 23:59:52 2026 by rpki-client