$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft File: A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json) Hash identifier: A6JTMam0nAbk61lf8uhFSSWgvryxHmjJHb/VQlI9BPI= Subject key identifier: EA:C6:24:23:52:38:8D:59:D0:05:1D:FD:3C:74:FE:85:41:30:00:67 Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Certificate serial: 442643282255923766CF4C6F76A8B67A665D4780 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft Manifest number: 48 Signing time: Thu 12 Mar 2026 16:58:39 +0000 Manifest this update: Thu 12 Mar 2026 16:53:39 +0000 Manifest next update: Fri 13 Mar 2026 20:21:39 +0000 Files and hashes: 1: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=) 2: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=) 3: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=) 4: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: dFkaEUaTll4En/xHh7JVwuguMvKWMnXjoMxGVixI3T8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 20:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:26:43:28:22:55:92:37:66:cf:4c:6f:76:a8:b6:7a:66:5d:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Validity Not Before: Mar 12 16:53:39 2026 GMT Not After : Mar 13 20:21:39 2026 GMT Subject: CN=EAC6242352388D59D0051DFD3C74FE8541300067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:49:1c:c9:9c:0a:fe:c1:ae:2b:af:fc:33: 1a:a4:c1:9b:4f:be:1a:6c:f9:59:81:95:76:40:be: 49:9a:0c:ac:65:12:6b:1f:f7:8d:b9:be:99:36:78: ce:7a:73:c5:ba:eb:3e:07:b6:1a:ef:ca:c8:81:ae: cc:3f:18:06:b4:87:a4:83:e5:20:17:ee:d4:6f:e6: 77:b6:a8:cc:8c:b1:84:27:4d:8a:4b:c8:41:52:22: 50:1a:51:29:08:32:21:85:e8:4e:1a:b7:92:82:40: 4b:7b:b9:b8:1b:c0:7b:03:48:35:25:5e:77:a7:1c: a3:32:b6:e5:3b:27:76:f4:4c:15:4b:6a:ed:69:9a: b5:9e:3f:b4:fb:1c:af:21:e5:36:b3:c1:30:4e:14: 13:0f:0b:87:42:8e:bb:bc:a4:1b:d6:17:82:51:03: 68:8a:4c:86:3e:a5:35:4a:79:4f:1e:42:a7:b9:86: 92:6e:94:ac:ab:45:19:0d:f3:e8:cd:5f:bc:77:62: 33:72:03:2d:2a:4b:f4:45:2b:47:41:93:66:f0:04: 4b:d3:bf:56:ac:8d:64:f3:37:a5:a3:56:b9:13:ef: 04:3a:d0:74:e1:fa:de:d2:12:49:b6:04:9e:7c:39: c5:bb:32:a5:48:14:b5:1e:4b:64:bb:fd:bf:e1:9c: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C6:24:23:52:38:8D:59:D0:05:1D:FD:3C:74:FE:85:41:30:00:67 X509v3 Authority Key Identifier: keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d2:1a:5d:46:7d:9d:6c:fa:ed:f6:e2:fc:4a:4a:0a:0d:17: 8a:d5:b1:50:e4:00:c6:1d:ea:d9:13:3a:e7:5f:67:bc:9d:51: 4d:e5:5f:80:f6:f7:bc:0d:2e:e8:bb:7a:0b:5c:5c:ad:87:43: 34:1b:dd:85:97:ae:1c:38:fe:35:5c:d7:2e:dc:d2:09:a7:c8: cb:47:ba:e7:b9:b7:d0:c1:aa:37:8a:45:cf:2a:21:42:70:4e: 55:23:72:7f:5a:72:c2:a1:c9:a4:fe:52:fb:8e:6b:d8:97:6e: 24:d2:dc:b2:b5:44:62:6d:a5:d2:7a:ec:39:07:30:c1:9d:d4: 28:e0:9a:d4:8a:6a:cb:c2:cb:17:a2:6c:3c:8c:2f:d7:2b:fc: 4e:69:f0:fe:ca:0d:5f:41:ec:31:e4:6c:0b:ff:e4:33:71:cc: 78:e6:4d:ba:8d:b9:31:c9:dd:e5:e6:14:63:72:f5:7a:db:79: bf:5f:04:53:a9:e8:06:7b:ac:b0:a3:05:0d:8a:c1:11:b9:bf: 5f:11:0d:c7:d3:9e:58:0e:7f:52:f9:84:db:1f:46:a5:e5:3f: 97:42:c5:95:ea:e2:23:18:3f:4e:93:b9:82:af:33:7c:65:bb: 73:b2:85:cd:84:8a:77:7e:c1:25:0d:5f:3e:5c:08:31:b4:1c: 29:fb:b8:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURCZDKCJVkjdmz0xvdqi2emZdR4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx MkRGRDIyOTAeFw0yNjAzMTIxNjUzMzlaFw0yNjAzMTMyMDIxMzlaMDMxMTAvBgNV BAMTKEVBQzYyNDIzNTIzODhENTlEMDA1MURGRDNDNzRGRTg1NDEzMDAwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSZUkcyZwK/sGuK6/8MxqkwZtP vhps+VmBlXZAvkmaDKxlEmsf9425vpk2eM56c8W66z4HthrvysiBrsw/GAa0h6SD 5SAX7tRv5ne2qMyMsYQnTYpLyEFSIlAaUSkIMiGF6E4at5KCQEt7ubgbwHsDSDUl XnenHKMytuU7J3b0TBVLau1pmrWeP7T7HK8h5TazwTBOFBMPC4dCjru8pBvWF4JR A2iKTIY+pTVKeU8eQqe5hpJulKyrRRkN8+jNX7x3YjNyAy0qS/RFK0dBk2bwBEvT v1asjWTzN6WjVrkT7wQ60HTh+t7SEkm2BJ58OcW7MqVIFLUeS2S7/b/hnBNrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6sYkI1I4jVnQBR39PHT+hUEwAGcwHwYDVR0j BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMS9BNUIyQjE0RDk3NTEz QjZDMEM4MkIxRTU0MDcwM0VCOTEyREZEMjI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9IaXUZ9nWz6 7fbi/EpKCg0XitWxUOQAxh3q2RM6519nvJ1RTeVfgPb3vA0u6Lt6C1xcrYdDNBvd hZeuHDj+NVzXLtzSCafIy0e657m30MGqN4pFzyohQnBOVSNyf1pywqHJpP5S+45r 2JduJNLcsrVEYm2l0nrsOQcwwZ3UKOCa1Ipqy8LLF6JsPIwv1yv8Tmnw/soNX0Hs MeRsC//kM3HMeOZNuo25Mcnd5eYUY3L1ett5v18EU6noBnussKMFDYrBEbm/XxEN x9OeWA5/UvmE2x9GpeU/l0LFleriIxg/TpO5gq8zfGW7c7KFzYSKd37BJQ1fPlwI MbQcKfu4nA== -----END CERTIFICATE-----Generated at Fri Mar 13 09:27:24 2026 by rpki-client