$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft File: F329F518724FAC695E33F5C78532CBF56BF4243D.mft (raw, json) Hash identifier: 3VIKoFB+Zib3eAXj4CFm1bED2yjPHAZsJbl9CqTvq3k= Subject key identifier: D2:B6:CC:45:7A:61:F0:96:E4:D4:10:F0:79:55:B1:01:46:87:3B:49 Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 353B4CCD078960BEA382EF2E870AB4C22573D23D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 11:18:17 +0000 Manifest this update: Mon 02 Mar 2026 11:13:17 +0000 Manifest next update: Tue 03 Mar 2026 14:49:17 +0000 Files and hashes: 1: 35392e3130372e36342e302f31382d3234203d3e20313334373733.roa (hash: 0zY22v6zj7Va/jjar+sQq7kCtTDD22I+jvz/eJrNkW8=) 2: F329F518724FAC695E33F5C78532CBF56BF4243D.crl (hash: BXZ5wIHAldi+v3Fhir468k3J9KR8HAweVFuhwPaDND8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3b:4c:cd:07:89:60:be:a3:82:ef:2e:87:0a:b4:c2:25:73:d2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Mar 2 11:13:17 2026 GMT Not After : Mar 3 14:49:17 2026 GMT Subject: CN=D2B6CC457A61F096E4D410F07955B10146873B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:0a:b7:25:82:a7:50:88:36:0c:62:ef:28: ad:e3:c7:b4:3b:7f:43:34:ba:5a:23:66:46:56:25: 64:75:3c:3b:2d:4b:ee:70:be:06:c6:9d:96:ee:d9: 18:79:80:c9:79:aa:8b:f6:77:b9:26:95:fe:60:a0: bd:d1:f1:5d:bf:8b:f6:38:5d:15:06:a9:a4:fb:55: 76:95:ab:b0:53:1c:fb:7b:02:40:08:22:40:d2:7c: 89:5b:b1:21:d8:04:9f:ea:fd:ed:95:23:34:2d:10: 4c:e2:2b:99:fc:30:7d:ba:e6:f7:03:2b:21:17:ee: fa:11:49:89:46:ab:1f:a2:1b:8f:cc:63:a2:be:94: f3:9d:ab:88:9e:7d:bb:55:45:37:4a:a1:09:f0:d9: 1f:4c:2b:07:ea:b7:35:67:da:7f:fa:49:12:77:cf: d2:d8:9b:2b:b7:80:45:1c:04:09:66:a4:67:e9:73: 6c:cf:d7:c4:21:ee:fc:1f:0c:1b:08:54:10:be:be: ac:44:9a:d7:6b:ab:d0:17:04:cd:f1:7e:01:52:87: 2d:80:0a:7b:0a:78:39:5f:ed:36:c9:7c:ac:ff:09: cd:9c:c4:17:fa:c6:19:23:25:2a:56:4b:66:27:7a: 45:41:d5:6a:8f:5a:b3:e8:d1:7e:b0:8d:7c:a6:19: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B6:CC:45:7A:61:F0:96:E4:D4:10:F0:79:55:B1:01:46:87:3B:49 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ff:dc:2e:8b:c2:8b:fe:a6:7f:a3:a1:cb:91:1e:cf:a5:79: fa:3d:0e:cf:20:db:9b:c3:1d:ee:2d:44:be:0c:4e:6a:51:ec: 2e:77:a4:aa:51:62:2e:9f:5d:ab:86:30:c9:fa:69:c0:ca:c1: e6:fd:cc:42:d6:92:bf:a3:38:2d:9c:aa:50:55:d3:62:06:ea: 7c:1b:99:56:4a:18:55:b7:a3:9e:e7:5c:2f:eb:ac:00:32:52: 66:46:d4:10:cc:70:94:44:1b:8f:85:2f:c3:b1:de:e8:bf:e5: dc:bd:c7:45:aa:3e:71:6e:ad:e0:c1:80:62:3c:2b:ef:f7:e4: 06:c6:6a:d3:59:4d:4b:7b:cf:29:ea:02:11:29:fa:5b:3f:8d: 4b:3a:8f:7b:2c:00:a0:7f:1e:52:cf:5f:9b:69:f2:52:1b:15: ec:9e:56:62:77:d5:e9:09:ac:66:ac:dd:0a:f6:ff:ff:9e:48: 44:84:92:ce:f1:9d:5a:9f:f2:0c:58:94:85:2f:78:1b:62:48: 5b:32:f7:27:5f:b3:a2:86:44:fc:a2:3b:e7:88:8c:63:8d:43: 54:2a:54:19:46:63:6c:7a:72:11:13:cb:fa:73:4c:a0:fc:a2: e2:b6:3e:3a:5b:c9:86:45:0e:8f:5c:f1:eb:97:e4:d6:f6:57: e8:91:a7:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNTtMzQeJYL6jgu8uhwq0wiVz0j0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjAzMDIxMTEzMTdaFw0yNjAzMDMxNDQ5MTdaMDMxMTAvBgNV BAMTKEQyQjZDQzQ1N0E2MUYwOTZFNEQ0MTBGMDc5NTVCMTAxNDY4NzNCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqwq3JYKnUIg2DGLvKK3jx7Q7 f0M0ulojZkZWJWR1PDstS+5wvgbGnZbu2Rh5gMl5qov2d7kmlf5goL3R8V2/i/Y4 XRUGqaT7VXaVq7BTHPt7AkAIIkDSfIlbsSHYBJ/q/e2VIzQtEEziK5n8MH265vcD KyEX7voRSYlGqx+iG4/MY6K+lPOdq4iefbtVRTdKoQnw2R9MKwfqtzVn2n/6SRJ3 z9LYmyu3gEUcBAlmpGfpc2zP18Qh7vwfDBsIVBC+vqxEmtdrq9AXBM3xfgFShy2A CnsKeDlf7TbJfKz/Cc2cxBf6xhkjJSpWS2YnekVB1WqPWrPo0X6wjXymGeGfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0rbMRXph8Jbk1BDweVWxAUaHO0kwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4MTI4NjcvMC9GMzI5RjUxODcyNEZB QzY5NUUzM0Y1Qzc4NTMyQ0JGNTZCRjQyNDNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtv/cLovCi/6m f6Ohy5Eez6V5+j0OzyDbm8Md7i1EvgxOalHsLnekqlFiLp9dq4YwyfppwMrB5v3M QtaSv6M4LZyqUFXTYgbqfBuZVkoYVbejnudcL+usADJSZkbUEMxwlEQbj4Uvw7He 6L/l3L3HRao+cW6t4MGAYjwr7/fkBsZq01lNS3vPKeoCESn6Wz+NSzqPeywAoH8e Us9fm2nyUhsV7J5WYnfV6QmsZqzdCvb//55IRISSzvGdWp/yDFiUhS94G2JIWzL3 J1+zooZE/KI754iMY41DVCpUGUZjbHpyERPL+nNMoPyi4rY+OlvJhkUOj1zx65fk 1vZX6JGnOw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:06:23 2026 by rpki-client