$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: 1bUUDTcN/py0/e0QFsR2IRRgYIZZSIMj/YFRs1p8uhM= Subject key identifier: 1F:CA:2F:7C:42:A2:D4:CB:43:F3:89:23:41:05:1D:3B:89:96:7B:66 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 3B98DC107ED51C986D0B9D8E92DA72566DDD4DC1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 13:58:17 +0000 Manifest this update: Mon 02 Mar 2026 13:53:17 +0000 Manifest next update: Tue 03 Mar 2026 16:45:17 +0000 Files and hashes: 1: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: c7JGCuIH2SD1HUSqsmSVpSHqRrkVImGxLUCkGInAz58=) 2: 323430333a343330303a3a2f33322d3438203d3e203137343239.roa (hash: BxtN59vqgBZxPoERk/JYSA/midP2NXeRF93I1z+oqtg=) 3: 34332e3234372e3233362e302f32322d3234203d3e203137343239.roa (hash: OkspnUQvKjtS72CeXZeKKyXqfiA+KxT6HHhEv5NC4NQ=) 4: 3130332e3233382e34382e302f32322d3234203d3e203137343239.roa (hash: rttDeHAFBcC/FYTbFPRn/BAotSmLlX3DE6v6zoY9hhg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:98:dc:10:7e:d5:1c:98:6d:0b:9d:8e:92:da:72:56:6d:dd:4d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Mar 2 13:53:17 2026 GMT Not After : Mar 3 16:45:17 2026 GMT Subject: CN=1FCA2F7C42A2D4CB43F3892341051D3B89967B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:7d:34:d6:57:f9:21:f4:ed:86:67:25:af: c9:8c:fd:72:fe:b3:07:d9:70:a0:27:89:06:b9:51: 16:55:1e:94:4a:9d:6d:db:7e:41:73:1a:14:30:0c: f3:b4:7e:5b:29:2c:e2:c2:b8:9e:1e:2e:27:3f:ae: 88:df:3b:a6:52:f3:40:f6:c0:53:b0:7f:69:7d:b5: e2:1b:fb:b1:59:2e:04:da:30:52:30:48:c9:34:04: 6b:d4:32:39:b9:23:c9:52:b9:3e:57:5a:33:89:36: 4e:f4:99:28:5f:4f:db:0d:60:9d:cc:e6:57:db:c2: 04:e9:02:f5:d7:73:d8:24:46:31:97:a8:a8:43:81: e8:27:da:4a:ae:a7:ef:8e:94:64:00:ce:9d:dd:7d: 92:fd:c3:6c:48:d4:e6:94:cf:eb:2c:89:6d:7e:cb: 9b:2e:a8:bb:aa:01:4b:f0:29:0c:12:42:46:81:b2: 27:74:4d:a1:9a:6e:b8:54:c0:d0:85:77:fd:0d:bf: 93:18:b2:b3:fe:b3:dc:bb:ba:92:b8:4f:c5:77:ae: 6a:86:64:be:46:a2:15:72:43:c4:99:03:e0:55:6a: 9f:63:e1:3d:25:da:97:2c:cc:cc:25:b4:b3:9b:18: f1:e8:d7:f4:c4:66:64:3c:88:b8:d0:62:21:af:80: 41:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CA:2F:7C:42:A2:D4:CB:43:F3:89:23:41:05:1D:3B:89:96:7B:66 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0e:c6:2f:94:72:1c:b8:4c:9a:84:fc:1d:00:8c:35:d4:5c: ff:d8:af:fc:3f:55:70:04:11:e3:93:e1:93:0d:05:25:13:7f: 5f:5f:ba:16:9a:13:45:ec:fd:bd:92:21:81:2f:4b:3d:33:05: 30:4b:44:d6:27:37:06:92:28:d1:a8:d1:70:ba:f8:b3:74:cf: 3c:ff:a9:98:b5:07:68:25:e0:c9:36:7b:23:53:94:d1:f8:3e: f9:90:40:3e:a6:20:59:ff:0e:13:ce:4d:2f:d9:ca:cc:11:e3: 59:0a:48:23:7d:59:b2:bc:05:be:3a:25:be:bf:4b:39:09:af: fa:9c:cb:56:98:2c:14:9d:aa:19:8f:0f:93:45:b1:54:6a:6d: 47:8c:0d:64:b1:3e:ec:fe:e6:7d:6c:e3:d9:43:dc:93:70:a6: 81:22:cc:e5:a1:49:24:af:7c:43:38:7d:33:e3:0a:1f:6c:f4: dc:7a:aa:3a:74:2c:c4:2a:18:ee:cb:ee:76:57:f2:a7:97:1c: a1:f6:65:10:7e:33:39:bd:a4:32:f8:26:a6:f4:06:97:37:f1: ff:e5:70:23:a3:44:17:69:a0:41:2c:83:f0:35:e1:2c:3a:b8: ce:33:e9:aa:dd:6d:cf:50:86:8e:36:1f:5f:ac:77:04:24:33: 91:90:1d:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO5jcEH7VHJhtC52OktpyVm3dTcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjAzMDIxMzUzMTdaFw0yNjAzMDMxNjQ1MTdaMDMxMTAvBgNV BAMTKDFGQ0EyRjdDNDJBMkQ0Q0I0M0YzODkyMzQxMDUxRDNCODk5NjdCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUT3001lf5IfTthmclr8mM/XL+ swfZcKAniQa5URZVHpRKnW3bfkFzGhQwDPO0flspLOLCuJ4eLic/rojfO6ZS80D2 wFOwf2l9teIb+7FZLgTaMFIwSMk0BGvUMjm5I8lSuT5XWjOJNk70mShfT9sNYJ3M 5lfbwgTpAvXXc9gkRjGXqKhDgegn2kqup++OlGQAzp3dfZL9w2xI1OaUz+ssiW1+ y5suqLuqAUvwKQwSQkaBsid0TaGabrhUwNCFd/0Nv5MYsrP+s9y7upK4T8V3rmqG ZL5GohVyQ8SZA+BVap9j4T0l2pcszMwltLObGPHo1/TEZmQ8iLjQYiGvgEEVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH8ovfEKi1MtD84kjQQUdO4mWe2YwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANw7GL5RyHLhM moT8HQCMNdRc/9iv/D9VcAQR45Phkw0FJRN/X1+6FpoTRez9vZIhgS9LPTMFMEtE 1ic3BpIo0ajRcLr4s3TPPP+pmLUHaCXgyTZ7I1OU0fg++ZBAPqYgWf8OE85NL9nK zBHjWQpII31ZsrwFvjolvr9LOQmv+pzLVpgsFJ2qGY8Pk0WxVGptR4wNZLE+7P7m fWzj2UPck3CmgSLM5aFJJK98Qzh9M+MKH2z03HqqOnQsxCoY7svudlfyp5ccofZl EH4zOb2kMvgmpvQGlzfx/+VwI6NEF2mgQSyD8DXhLDq4zjPpqt1tz1CGjjYfX6x3 BCQzkZAdWg== -----END CERTIFICATE-----Generated at Mon Mar 2 19:22:50 2026 by rpki-client